Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
File:                     9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa (raw, json)
Hash identifier:          B8b1mykGWO3qvvsS9w0WG0LuQLG6I1CpO/ptHlZpUYE=
Subject key identifier:   B5:88:9F:5F:67:C9:27:A8:D5:E0:75:5D:E8:68:4C:4F:83:A1:75:37
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584891DB2D131F345908C7E61BC0
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa
Signing time:             Fri 17 Jan 2025 02:00:40 +0000
ROA not before:           Fri 17 Jan 2025 02:00:40 +0000
ROA not after:            Thu 17 Apr 2025 01:00:40 +0000
asID:                     21515
IP address blocks:        137.119.26.0/23 maxlen: 23
                          137.119.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:91:db:2d:13:1f:34:59:08:c7:e6:1b:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jan 17 02:00:40 2025 GMT
            Not After : Apr 17 01:00:40 2025 GMT
        Subject: CN=3240a287-dae2-4bf2-bf59-4b6fcafc3aff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c2:b6:31:73:c3:0b:64:d0:ac:7c:b7:43:33:
                    6f:10:25:65:e3:a8:d7:b4:72:ab:e7:99:c1:bf:ee:
                    23:7f:4f:e0:8d:8d:ad:f9:ab:25:c6:1c:3c:00:33:
                    b1:d6:ee:e5:04:8e:fd:4a:37:ce:d4:3b:1f:a2:75:
                    7a:55:1d:77:d8:c0:ad:b3:04:74:65:2e:60:3e:b0:
                    99:a8:95:d8:e9:c5:61:80:fd:f4:98:3d:95:f0:d2:
                    dd:31:ef:54:ed:07:67:d6:da:bf:60:65:c2:6b:aa:
                    de:f5:5c:19:ce:00:a2:f3:2e:c0:51:cb:f8:2c:90:
                    31:7e:5f:27:0f:5b:b4:87:da:6c:52:1d:6a:4f:a0:
                    f8:04:ff:d7:1c:63:9c:bc:e9:45:35:54:11:7d:67:
                    12:34:67:6c:93:05:7a:cb:35:22:04:fa:31:83:b0:
                    8e:4d:b9:06:f7:f5:0f:5f:c0:a2:8a:48:00:6c:5a:
                    f8:19:a0:01:40:11:10:61:58:7f:88:04:6d:8e:b6:
                    a3:4c:b5:d4:a5:3d:91:f8:62:e9:5a:f6:7e:a4:f0:
                    44:b9:b0:8f:81:fc:63:bf:b1:d9:4f:0b:c5:73:83:
                    34:f2:f5:d0:d8:42:a4:76:94:c6:8a:7c:df:ed:89:
                    71:91:41:ea:59:c2:29:8c:4a:f5:98:32:66:8e:df:
                    e6:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:88:9F:5F:67:C9:27:A8:D5:E0:75:5D:E8:68:4C:4F:83:A1:75:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/9094937d-8b89-3d2b-910c-4dae9a9d0aea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.119.26.0/23
                  137.119.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:e9:97:45:14:f0:89:9c:59:5a:12:07:3a:b5:27:62:af:11:
         fc:6b:39:23:5b:7a:78:b8:e9:64:c0:8c:32:ce:d4:83:b5:f7:
         b2:64:19:9c:0e:5b:21:ec:d0:de:0e:8e:44:79:94:9c:02:14:
         ba:b5:83:46:a4:e0:bd:22:dc:25:98:64:33:a4:68:b7:b9:a4:
         08:50:16:e9:41:32:10:15:25:a9:cb:89:57:e3:81:bf:15:bf:
         09:cf:42:0e:c3:d9:6a:ae:08:a6:5a:e2:02:de:f7:7f:f4:e0:
         ac:03:e6:34:4e:bc:fc:a4:f6:6d:9e:24:a2:ea:4b:d9:b1:76:
         20:d7:21:21:34:4c:16:bd:dc:a3:ed:85:a2:41:ac:fa:17:05:
         07:c2:3c:06:da:e4:cb:2a:56:d0:22:62:db:61:f7:2d:6a:cf:
         7d:ad:9a:48:7a:c5:74:3f:7a:fd:1f:26:0d:89:5b:3f:ee:1d:
         aa:b0:36:cf:3b:98:ca:84:d6:f5:f1:a0:93:94:9c:dc:5a:02:
         18:9f:03:5f:8b:c4:ab:0e:28:b4:72:2c:ac:20:fe:ed:aa:87:
         af:70:80:59:9d:12:61:e2:38:06:83:76:e1:40:6c:16:5b:03:
         b8:65:ae:ba:44:f0:52:8c:40:72:4a:15:c0:17:cf:cd:6f:cc:
         a6:45:6c:cf
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiR2y0THzRZCMfmG8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDExNzAyMDA0MFoXDTI1MDQxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MzI0MGEyODctZGFlMi00YmYyLWJmNTktNGI2ZmNhZmMzYWZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhsK2MXPDC2TQrHy3QzNvECVl46jXtHKr55nB
v+4jf0/gjY2t+aslxhw8ADOx1u7lBI79SjfO1DsfonV6VR132MCtswR0ZS5gPrCZ
qJXY6cVhgP30mD2V8NLdMe9U7Qdn1tq/YGXCa6re9VwZzgCi8y7AUcv4LJAxfl8n
D1u0h9psUh1qT6D4BP/XHGOcvOlFNVQRfWcSNGdskwV6yzUiBPoxg7COTbkG9/UP
X8CiikgAbFr4GaABQBEQYVh/iARtjrajTLXUpT2R+GLpWvZ+pPBEubCPgfxjv7HZ
TwvFc4M08vXQ2EKkdpTGinzf7YlxkUHqWcIpjEr1mDJmjt/mAwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFLWIn19nySeo1eB1XehoTE+DoXU3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvOTA5NDkzN2QtOGI4OS0z
ZDJiLTkxMGMtNGRhZTlhOWQwYWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBiXcaAwQE
iXdAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEfpl0UU8ImcWVoSBzq1J2KvEfxrOSNbeni46WTAjDLO1IO1
97JkGZwOWyHs0N4OjkR5lJwCFLq1g0ak4L0i3CWYZDOkaLe5pAhQFulBMhAVJanL
iVfjgb8VvwnPQg7D2WquCKZa4gLe93/04KwD5jROvPyk9m2eJKLqS9mxdiDXISE0
TBa93KPthaJBrPoXBQfCPAba5MsqVtAiYtth9y1qz32tmkh6xXQ/ev0fJg2JWz/u
HaqwNs87mMqE1vXxoJOUnNxaAhifA1+LxKsOKLRyLKwg/u2qh69wgFmdEmHiOAaD
duFAbBZbA7hlrrpE8FKMQHJKFcAXz81vzKZFbM8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 23:25:29 2025 by rpki-client