Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
File:                     424b1e54-2d09-3644-a069-61f76e443c39.roa (raw, json)
Hash identifier:          sHEOIxjZnBCdeZf0NM6Tq8qJlpb4znupzXR8si5CrLM=
Subject key identifier:   B4:9F:D0:22:2B:BC:B7:8F:4B:51:B7:4B:C7:09:E4:A6:7B:08:1D:1C
Certificate issuer:       /CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
Certificate serial:       010D0C9F43285849CE9A50AA7C53895F32CFB0C0
Authority key identifier: 90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        192.146.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:50:aa:7c:53:89:5f:32:cf:b0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d251b68-9cb8-49ab-91e3-66420fc719b5
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=8adadc32-0935-4974-b338-c4466e292a1f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:16:7f:6a:6d:f0:bf:09:31:88:72:a3:76:19:
                    ae:93:11:84:77:df:9f:6c:56:c0:66:ee:a0:10:c6:
                    58:1e:a4:da:6e:64:77:eb:a6:53:8d:e4:e3:fa:06:
                    b0:44:5e:fc:b6:34:c7:25:d3:89:f7:67:95:c2:5c:
                    61:00:54:a0:e0:4c:c6:eb:92:eb:59:aa:c7:05:bd:
                    c4:f1:fb:9a:b5:27:6f:d9:f4:24:ba:9c:0c:97:32:
                    18:eb:95:c1:ef:e8:f5:bc:8f:48:88:92:d4:d1:0b:
                    98:46:ff:c9:fb:b7:dd:34:c8:37:81:42:58:67:28:
                    cb:9a:fc:27:4e:8c:0b:52:b9:e3:0f:76:22:f9:66:
                    e7:36:5a:ba:d6:20:05:aa:8b:5a:e8:1f:df:c2:fa:
                    e2:3e:dc:5c:da:72:4e:d7:fa:99:50:58:0e:f6:5a:
                    f0:9b:d1:34:ef:9d:c9:e3:53:5d:c5:16:31:6f:34:
                    49:7a:33:25:16:a0:09:d3:f0:6c:0e:f9:9a:2b:60:
                    51:53:81:d0:b1:7e:54:0c:f6:55:52:9d:63:47:de:
                    53:aa:3a:2a:c0:33:2d:4d:15:a8:5a:67:a3:34:88:
                    18:92:10:b4:78:3d:c0:3b:cc:87:27:fc:c8:50:54:
                    03:09:f3:f6:22:fa:a6:3b:c7:c0:5e:28:ff:9e:48:
                    fd:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:9F:D0:22:2B:BC:B7:8F:4B:51:B7:4B:C7:09:E4:A6:7B:08:1D:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/424b1e54-2d09-3644-a069-61f76e443c39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5/1d251b68-9cb8-49ab-91e3-66420fc719b5.crl

            X509v3 Authority Key Identifier:
                keyid:90:B0:03:FA:5A:A8:85:49:1A:BB:1E:8F:56:2A:9C:FB:67:F1:C8:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1d251b68-9cb8-49ab-91e3-66420fc719b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.146.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:19:c6:88:42:49:ca:9e:23:a8:79:ca:10:78:12:24:c4:
         8e:d0:61:35:82:f3:b2:43:90:45:6d:3f:07:96:ae:e3:8e:c6:
         2f:9c:f7:24:cf:03:c5:40:a7:73:46:6f:3e:a5:1f:2d:4d:eb:
         f2:71:2d:30:9d:fa:41:28:3d:8c:7b:4a:17:76:10:9e:38:a1:
         1e:6d:b8:08:b1:61:f9:2b:b0:f1:86:08:84:9c:d2:f0:07:1e:
         2c:19:a6:61:b4:e1:b6:9b:b0:50:c8:c3:fb:bb:e0:24:58:d5:
         d8:33:c2:35:fa:0f:59:75:17:4c:95:d3:6c:36:2d:1c:ad:e9:
         ed:27:c8:0d:2b:77:a7:86:db:7e:8e:7f:cf:ac:33:28:95:a5:
         72:1b:53:03:b1:2c:5a:90:c4:6a:07:6e:01:9f:ab:92:18:36:
         fa:b7:f8:d8:28:04:4b:f2:cf:9f:58:00:d5:e8:84:6b:f3:f9:
         ff:cb:f2:7b:ec:b8:ee:c0:2c:2f:4a:c8:bb:71:1e:e2:69:55:
         03:a7:77:52:cd:5e:cb:a4:e4:5e:5a:a1:12:26:f6:ec:71:2d:
         a2:a4:a8:6e:7d:e1:99:15:02:ea:c3:c2:f6:05:cc:e4:f0:a1:
         b3:b2:18:da:c9:9a:e6:83:c0:ad:68:fb:65:4d:ca:d4:8d:b3:
         6e:6d:76:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlCqfFOJXzLPsMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQyNTFiNjgtOWNiOC00OWFiLTkxZTMtNjY0MjBmYzcx
OWI1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
OGFkYWRjMzItMDkzNS00OTc0LWIzMzgtYzQ0NjZlMjkyYTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoxZ/am3wvwkxiHKjdhmukxGEd9+fbFbAZu6g
EMZYHqTabmR366ZTjeTj+gawRF78tjTHJdOJ92eVwlxhAFSg4EzG65LrWarHBb3E
8fuatSdv2fQkupwMlzIY65XB7+j1vI9IiJLU0QuYRv/J+7fdNMg3gUJYZyjLmvwn
TowLUrnjD3Yi+WbnNlq61iAFqota6B/fwvriPtxc2nJO1/qZUFgO9lrwm9E0753J
41NdxRYxbzRJejMlFqAJ0/BsDvmaK2BRU4HQsX5UDPZVUp1jR95TqjoqwDMtTRWo
WmejNIgYkhC0eD3AO8yHJ/zIUFQDCfP2IvqmO8fAXij/nkj9qwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLSf0CIrvLePS1G3S8cJ5KZ7CB0cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xZDI1
MWI2OC05Y2I4LTQ5YWItOTFlMy02NjQyMGZjNzE5YjUvNDI0YjFlNTQtMmQwOS0z
NjQ0LWEwNjktNjFmNzZlNDQzYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWQyNTFiNjgtOWNiOC00OWFiLTkx
ZTMtNjY0MjBmYzcxOWI1LzFkMjUxYjY4LTljYjgtNDlhYi05MWUzLTY2NDIwZmM3
MTliNS5jcmwwHwYDVR0jBBgwFoAUkLAD+lqohUkaux6PViqc+2fxyKgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xZDI1MWI2OC05Y2I4LTQ5YWItOTFlMy02NjQy
MGZjNzE5YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJJ2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEnyGcaIQknKniOoecoQeBIkxI7QYTWC87JDkEVtPweWruOOxi+c9yTP
A8VAp3NGbz6lHy1N6/JxLTCd+kEoPYx7Shd2EJ44oR5tuAixYfkrsPGGCISc0vAH
HiwZpmG04babsFDIw/u74CRY1dgzwjX6D1l1F0yV02w2LRyt6e0nyA0rd6eG236O
f8+sMyiVpXIbUwOxLFqQxGoHbgGfq5IYNvq3+NgoBEvyz59YANXohGvz+f/L8nvs
uO7ALC9KyLtxHuJpVQOnd1LNXsuk5F5aoRIm9uxxLaKkqG594ZkVAurDwvYFzOTw
obOyGNrJmuaDwK1o+2VNytSNs25tdis=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:23:07 2025 by rpki-client