Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
File:                     6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa (raw, json)
Hash identifier:          2glLxCZP5u1K3XrIVSAx5BAouSUgC0ZQQ2mQehtVw6o=
Subject key identifier:   C4:C7:BB:5D:46:80:4F:AE:A6:8B:6F:77:12:56:7D:11:7F:56:64:AA
Certificate issuer:       /CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
Certificate serial:       010D0C9F4328584A10353946F4EAC9B4A2C73C80
Authority key identifier: AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     16509
IP address blocks:        192.175.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:39:46:f4:ea:c9:b4:a2:c7:3c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0faccb4-40a9-4168-aa3d-59d190eb5a04
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=3a3ff1cf-c810-4a23-b33d-053dfdef279c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:32:05:7d:61:66:8d:59:f9:ad:cc:b6:b6:52:
                    8e:82:ed:80:94:a1:dd:94:cb:3a:d0:9f:61:51:9e:
                    60:a5:ac:05:57:67:88:e5:cf:8d:54:37:26:e0:97:
                    f5:1e:c2:51:0f:ec:28:82:9a:65:18:cb:d7:19:e6:
                    12:3e:e6:bc:57:45:bf:e0:c8:5f:61:3c:19:a5:21:
                    57:5c:1f:f3:d2:7f:23:e6:6c:40:93:6f:a8:f1:93:
                    31:2a:58:e4:f9:69:d9:7a:76:51:07:23:3a:82:34:
                    37:1d:1d:bc:8a:de:d9:1f:d6:8a:ef:bf:0c:64:ff:
                    57:a2:4b:f7:1c:a6:e0:d6:13:18:d4:41:87:99:8f:
                    8d:cc:8b:1d:2c:93:50:e5:6a:33:8b:ad:52:32:e2:
                    c7:7c:24:3c:c0:e2:10:17:0e:e6:58:11:36:31:20:
                    2b:d3:ca:60:5f:67:a6:a3:83:0f:73:c9:1a:88:b7:
                    ee:2d:16:04:6a:2d:f8:fc:9e:45:3a:03:75:ca:56:
                    32:6f:12:a8:e1:ce:85:e4:c4:2e:75:99:9a:38:a6:
                    87:25:1e:1e:d6:54:77:53:19:6e:44:ae:dd:07:21:
                    a4:f3:85:81:8f:c1:d8:36:fc:92:f3:70:42:7b:86:
                    bf:21:fd:79:51:ff:c8:85:4c:d3:2c:55:7e:aa:62:
                    3c:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C7:BB:5D:46:80:4F:AE:A6:8B:6F:77:12:56:7D:11:7F:56:64:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/6e2e6adc-c979-3e9a-b5f5-58c9a3c58497.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04/f0faccb4-40a9-4168-aa3d-59d190eb5a04.crl

            X509v3 Authority Key Identifier:
                keyid:AD:90:14:CD:64:56:65:C0:E1:77:35:72:B6:DA:98:7D:39:55:24:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f0faccb4-40a9-4168-aa3d-59d190eb5a04.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.175.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:bc:d0:30:bb:57:1e:15:30:66:d2:02:65:24:a7:b6:5c:b9:
         db:6f:26:76:b3:d3:2f:bc:26:cb:2a:fc:6c:16:d7:36:1b:31:
         69:4a:07:64:71:da:cd:47:a8:db:a8:2d:23:85:4b:65:00:bf:
         0f:ac:da:df:f9:19:28:9b:ad:18:a7:a3:45:20:ef:45:39:ed:
         1c:82:dc:ec:82:d2:7e:2e:d6:10:ca:70:76:e8:de:13:26:c4:
         8f:56:31:b8:96:df:23:35:34:d9:9a:10:0f:af:ae:8b:f7:9b:
         24:22:34:11:2e:eb:31:78:b1:a1:9f:40:8b:47:39:2a:84:89:
         e0:54:ff:14:8b:17:6e:cd:e7:c5:26:3a:e2:aa:18:26:73:0a:
         d3:58:1f:40:5a:0f:fd:5a:1e:95:01:14:c2:4c:31:55:f8:10:
         e4:46:da:2b:53:94:47:18:48:98:01:97:22:a2:e4:a5:97:d7:
         d3:25:3b:a0:6b:dc:d7:1e:c2:a0:8a:10:57:18:d3:db:44:ff:
         11:62:26:9d:c1:d5:16:84:8d:b4:65:ee:ac:4f:ae:ff:18:d7:
         a0:1b:86:d1:dc:5f:de:e6:d6:40:ee:97:6e:d3:34:c0:11:25:
         92:31:16:3c:69:61:e6:20:fb:b1:77:b1:f4:5b:8b:6c:c1:0f:
         0b:5e:28:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNTlG9OrJtKLHPIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjBmYWNjYjQtNDBhOS00MTY4LWFhM2QtNTlkMTkwZWI1
YTA0MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
M2EzZmYxY2YtYzgxMC00YTIzLWIzM2QtMDUzZGZkZWYyNzljMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlTIFfWFmjVn5rcy2tlKOgu2AlKHdlMs60J9h
UZ5gpawFV2eI5c+NVDcm4Jf1HsJRD+wogpplGMvXGeYSPua8V0W/4MhfYTwZpSFX
XB/z0n8j5mxAk2+o8ZMxKljk+WnZenZRByM6gjQ3HR28it7ZH9aK778MZP9Xokv3
HKbg1hMY1EGHmY+NzIsdLJNQ5Wozi61SMuLHfCQ8wOIQFw7mWBE2MSAr08pgX2em
o4MPc8kaiLfuLRYEai34/J5FOgN1ylYybxKo4c6F5MQudZmaOKaHJR4e1lR3Uxlu
RK7dByGk84WBj8HYNvyS83BCe4a/If15Uf/IhUzTLFV+qmI8nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTHu11GgE+upotvdxJWfRF/VmSqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZh
Y2NiNC00MGE5LTQxNjgtYWEzZC01OWQxOTBlYjVhMDQvNmUyZTZhZGMtYzk3OS0z
ZTlhLWI1ZjUtNThjOWEzYzU4NDk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjBmYWNjYjQtNDBhOS00MTY4LWFh
M2QtNTlkMTkwZWI1YTA0L2YwZmFjY2I0LTQwYTktNDE2OC1hYTNkLTU5ZDE5MGVi
NWEwNC5jcmwwHwYDVR0jBBgwFoAUrZAUzWRWZcDhdzVyttqYfTlVJJYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mMGZhY2NiNC00MGE5LTQxNjgtYWEzZC01OWQx
OTBlYjVhMDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwK8DMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+80DC7Vx4VMGbSAmUkp7ZcudtvJnaz0y+8Jssq/GwW1zYbMWlKB2Rx
2s1HqNuoLSOFS2UAvw+s2t/5GSibrRino0Ug70U57RyC3OyC0n4u1hDKcHbo3hMm
xI9WMbiW3yM1NNmaEA+vrov3myQiNBEu6zF4saGfQItHOSqEieBU/xSLF27N58Um
OuKqGCZzCtNYH0BaD/1aHpUBFMJMMVX4EORG2itTlEcYSJgBlyKi5KWX19MlO6Br
3NcewqCKEFcY09tE/xFiJp3B1RaEjbRl7qxPrv8Y16AbhtHcX97m1kDul27TNMAR
JZIxFjxpYeYg+7F3sfRbi2zBDwteKMI=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:01:03 2025 by rpki-client