Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa
File:                     6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa (raw, json)
Hash identifier:          qLqoSKHlJi6jr1ZSaset3cl8DcfDso2XygMcqwzOtdk=
Subject key identifier:   1A:BF:4E:83:E1:26:37:38:03:67:F5:FA:68:34:F7:57:1C:F8:0D:C8
Certificate issuer:       /CN=f49fab42-831a-40b8-9fab-60e159c0409a
Certificate serial:       010D0C9F43285849A1BBAD392B4F23D96C9604A0
Authority key identifier: A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa
Signing time:             Thu 24 Apr 2025 11:17:07 +0000
ROA not before:           Thu 24 Apr 2025 11:17:07 +0000
ROA not after:            Wed 23 Jul 2025 11:17:07 +0000
asID:                     12041
IP address blocks:        199.182.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:bb:ad:39:2b:4f:23:d9:6c:96:04:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f49fab42-831a-40b8-9fab-60e159c0409a
        Validity
            Not Before: Apr 24 11:17:07 2025 GMT
            Not After : Jul 23 11:17:07 2025 GMT
        Subject: CN=6ba0ac47-664c-483f-95bb-ba9d265a2e5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:5b:f0:ca:52:96:0c:4d:0d:10:4f:99:74:72:
                    6b:1a:c0:0f:22:87:dd:c6:7f:e4:2c:ff:62:f0:87:
                    f9:a2:d1:7b:23:ef:66:57:32:2e:a5:e2:b0:8c:f5:
                    be:98:cc:c1:cf:66:f9:1b:21:6f:6b:f1:1d:ee:b4:
                    b8:5e:44:7c:dc:5e:85:09:0f:14:6e:62:95:5a:82:
                    af:39:99:83:b2:ca:46:eb:07:71:90:c2:3e:cb:a4:
                    a6:19:de:3e:21:6d:57:cb:c2:96:cc:50:06:59:6c:
                    be:2b:c3:a2:b0:a8:7e:82:cb:4e:79:36:6c:53:cd:
                    93:7a:42:b6:5b:34:5c:86:35:c8:60:a1:d4:18:37:
                    db:13:0a:14:99:d5:32:27:8c:fb:b9:36:fd:9d:d3:
                    01:e0:94:25:f2:84:d7:8a:55:87:d6:bb:03:7c:71:
                    f3:5f:e2:f3:c0:95:c6:40:f3:92:2e:0e:ca:32:06:
                    8a:91:3e:31:a6:56:81:8f:ba:57:e0:b9:ec:8f:31:
                    bc:91:d6:fe:b3:f2:f4:ad:b8:7b:6e:1f:ec:4c:9a:
                    ee:6e:c3:7a:18:7b:51:60:c1:b8:5e:3d:5a:ce:f8:
                    97:79:f9:e0:e2:0a:6b:ba:55:73:eb:3c:30:9f:87:
                    63:b3:ef:ae:4e:4a:2c:8c:95:9b:f3:d3:6a:1f:c2:
                    51:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:4E:83:E1:26:37:38:03:67:F5:FA:68:34:F7:57:1C:F8:0D:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/6a24d7f0-c7fa-3f97-9fc4-b9ca3905a36e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a/f49fab42-831a-40b8-9fab-60e159c0409a.crl

            X509v3 Authority Key Identifier:
                keyid:A0:55:C7:8F:E0:85:7D:B8:95:44:FE:6E:4A:33:BF:3A:B1:68:26:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f49fab42-831a-40b8-9fab-60e159c0409a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.182.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:77:fa:0f:09:a2:76:75:18:0b:0c:d8:46:c3:38:df:e5:83:
         81:04:c6:60:18:84:d7:61:62:6f:bf:08:47:0b:d3:ce:30:3c:
         77:44:3e:b1:40:5f:98:d3:89:33:fe:4f:a1:fe:92:b5:a2:a3:
         91:45:27:e1:ca:6c:e7:e0:55:f8:cd:57:7c:2f:45:95:0c:3d:
         da:52:11:32:b8:a2:cf:e6:e5:da:3f:89:63:74:c6:3e:bb:2f:
         b6:14:22:af:99:a9:ea:13:e5:c6:3e:43:53:ea:7e:6d:99:b1:
         d7:31:cc:2a:ff:30:59:19:4a:1a:e7:15:21:6b:3b:49:1d:af:
         dd:83:bf:58:89:f8:c1:1f:7c:60:9b:96:4c:83:37:08:4e:d2:
         08:fa:b4:9f:f2:f1:37:a1:9d:eb:85:97:91:8d:a1:df:f1:97:
         2a:61:2a:8f:a2:58:de:73:ee:d5:63:dc:a9:96:61:8b:04:d5:
         15:ea:37:7d:aa:d1:d9:f8:24:24:36:41:a7:49:ff:93:fd:83:
         c7:09:5e:1a:e5:d8:e0:62:6c:06:1f:a0:0e:ae:51:2f:f5:fc:
         20:9f:99:52:d3:c0:b3:1f:f4:97:12:32:e3:1d:95:74:f6:2e:
         9a:b2:cd:28:43:c4:16:27:18:44:78:91:9a:19:a6:ac:a5:dc:
         b3:a9:6f:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmhu605K08j2WyWBKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjQ5ZmFiNDItODMxYS00MGI4LTlmYWItNjBlMTU5YzA0
MDlhMB4XDTI1MDQyNDExMTcwN1oXDTI1MDcyMzExMTcwN1owLzEtMCsGA1UEAxMk
NmJhMGFjNDctNjY0Yy00ODNmLTk1YmItYmE5ZDI2NWEyZTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAslvwylKWDE0NEE+ZdHJrGsAPIofdxn/kLP9i
8If5otF7I+9mVzIupeKwjPW+mMzBz2b5GyFva/Ed7rS4XkR83F6FCQ8UbmKVWoKv
OZmDsspG6wdxkMI+y6SmGd4+IW1Xy8KWzFAGWWy+K8OisKh+gstOeTZsU82TekK2
WzRchjXIYKHUGDfbEwoUmdUyJ4z7uTb9ndMB4JQl8oTXilWH1rsDfHHzX+LzwJXG
QPOSLg7KMgaKkT4xplaBj7pX4LnsjzG8kdb+s/L0rbh7bh/sTJrubsN6GHtRYMG4
Xj1azviXefng4gprulVz6zwwn4djs++uTkosjJWb89NqH8JRAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBq/ToPhJjc4A2f1+mg091cc+A3IMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mNDlm
YWI0Mi04MzFhLTQwYjgtOWZhYi02MGUxNTljMDQwOWEvNmEyNGQ3ZjAtYzdmYS0z
Zjk3LTlmYzQtYjljYTM5MDVhMzZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjQ5ZmFiNDItODMxYS00MGI4LTlm
YWItNjBlMTU5YzA0MDlhL2Y0OWZhYjQyLTgzMWEtNDBiOC05ZmFiLTYwZTE1OWMw
NDA5YS5jcmwwHwYDVR0jBBgwFoAUoFXHj+CFfbiVRP5uSjO/OrFoJhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mNDlmYWI0Mi04MzFhLTQwYjgtOWZhYi02MGUx
NTljMDQwOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7YEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALl3+g8JonZ1GAsM2EbDON/lg4EExmAYhNdhYm+/CEcL084wPHdEPrFA
X5jTiTP+T6H+krWio5FFJ+HKbOfgVfjNV3wvRZUMPdpSETK4os/m5do/iWN0xj67
L7YUIq+ZqeoT5cY+Q1Pqfm2ZsdcxzCr/MFkZShrnFSFrO0kdr92Dv1iJ+MEffGCb
lkyDNwhO0gj6tJ/y8TehneuFl5GNod/xlyphKo+iWN5z7tVj3KmWYYsE1RXqN32q
0dn4JCQ2QadJ/5P9g8cJXhrl2OBibAYfoA6uUS/1/CCfmVLTwLMf9JcSMuMdlXT2
LpqyzShDxBYnGER4kZoZpqyl3LOpb4c=
-----END CERTIFICATE-----
Generated at Tue Apr 29 22:21:07 2025 by rpki-client