Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
File:                     603d6a12-edba-37c4-bd67-825034ce3d96.roa (raw, json)
Hash identifier:          MYaKZPqB+/j13fzeUqZN4p0ULkXbuVArflUO4jDtJWo=
Subject key identifier:   97:C2:BD:76:1E:B9:49:48:74:5D:7F:62:EF:1E:B2:6C:04:B3:F2:11
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F432858487596550300345C106937C300
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa
Signing time:             Mon 06 Jan 2025 22:59:22 +0000
ROA not before:           Mon 06 Jan 2025 22:59:22 +0000
ROA not after:            Sun 06 Apr 2025 21:59:22 +0000
asID:                     7018
IP address blocks:        64.84.104.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:96:55:03:00:34:5c:10:69:37:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jan  6 22:59:22 2025 GMT
            Not After : Apr  6 21:59:22 2025 GMT
        Subject: CN=c5a0fdfa-9d30-4f10-bd37-6a91a693728d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:1b:39:0e:ae:69:ec:6b:83:29:1a:58:7e:0c:
                    3d:e5:b4:01:a3:66:d5:0e:15:46:9e:dc:2c:b6:f1:
                    7e:72:4c:f2:66:3b:d7:df:dd:2a:36:0a:f8:a5:2e:
                    27:c3:98:87:7f:29:ba:56:89:43:d6:24:22:d3:29:
                    30:ef:a7:63:85:95:4e:fc:79:9e:99:ce:b0:7b:12:
                    53:7e:59:09:13:c8:ec:14:87:9e:97:2a:2e:80:14:
                    83:93:25:fc:a4:1c:be:2e:fb:66:b3:2d:e8:1b:76:
                    f5:0e:a8:66:d4:17:a2:4a:6f:5a:28:88:19:de:10:
                    33:b9:dc:92:ee:3a:c3:7c:52:52:22:36:18:4e:64:
                    07:14:87:b9:ff:6d:95:90:5f:77:75:81:e0:e6:49:
                    67:9d:4a:56:96:87:d5:ef:c0:ba:ca:ce:e2:91:41:
                    94:5e:58:06:2d:95:e6:9e:33:6c:ec:8a:85:a4:a0:
                    77:2d:bf:14:92:25:80:fb:1f:48:5e:a5:c9:f0:9c:
                    20:25:0c:20:f9:93:61:43:d4:55:fa:a3:0f:de:0a:
                    be:c3:c2:33:d9:7b:bf:e5:55:dd:c9:5b:f8:fd:1b:
                    df:3c:5f:35:0d:91:ef:c7:c4:b3:62:59:6b:a8:47:
                    13:1d:c3:72:06:bd:0f:cc:b4:cd:1f:45:aa:13:fd:
                    51:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:C2:BD:76:1E:B9:49:48:74:5D:7F:62:EF:1E:B2:6C:04:B3:F2:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/603d6a12-edba-37c4-bd67-825034ce3d96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.104.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:1c:bb:ac:d0:15:4d:da:69:1c:b6:2a:c7:87:bf:eb:64:34:
         a9:46:e1:b3:39:05:3c:44:44:8f:22:84:6f:17:41:2d:02:a8:
         48:26:5c:79:f7:50:18:7b:79:b6:73:fa:74:58:3f:02:30:c7:
         1c:87:cf:d3:ab:6b:42:93:c3:e5:5e:55:04:54:bc:cb:92:2e:
         0c:8b:94:0d:f2:70:4b:d5:ad:81:1e:b2:56:db:54:41:79:d8:
         97:07:21:03:af:14:a9:46:63:a9:62:49:8b:a9:29:6d:35:63:
         e3:21:af:4d:d5:68:a0:d1:86:7c:d4:2a:53:18:2f:36:cf:85:
         ca:45:f3:c8:bf:4c:31:1b:80:84:71:fc:f9:43:31:9d:49:9c:
         3c:cf:14:66:75:a0:70:4f:79:94:fa:8a:c4:9e:47:f4:4f:f8:
         15:38:c7:23:ad:d4:c4:1e:11:18:f3:ed:f9:e1:58:29:47:10:
         47:10:ea:18:46:31:4f:b4:75:9b:5d:90:9a:e9:80:70:f0:c4:
         b5:92:a9:62:e8:54:4d:91:8d:d4:97:10:c0:e3:de:8e:c1:51:
         59:3a:0a:97:23:0a:76:ab:ca:73:de:7e:e3:f0:42:1a:90:c8:
         cc:d7:b1:9f:fd:95:bd:70:05:49:45:9d:6e:25:20:bb:ea:b7:
         6c:7b:1a:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh1llUDADRcEGk3wwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk
YmJmMB4XDTI1MDEwNjIyNTkyMloXDTI1MDQwNjIxNTkyMlowLzEtMCsGA1UEAxMk
YzVhMGZkZmEtOWQzMC00ZjEwLWJkMzctNmE5MWE2OTM3MjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Rs5Dq5p7GuDKRpYfgw95bQBo2bVDhVGntws
tvF+ckzyZjvX390qNgr4pS4nw5iHfym6VolD1iQi0ykw76djhZVO/Hmemc6wexJT
flkJE8jsFIeelyougBSDkyX8pBy+Lvtmsy3oG3b1Dqhm1BeiSm9aKIgZ3hAzudyS
7jrDfFJSIjYYTmQHFIe5/22VkF93dYHg5klnnUpWlofV78C6ys7ikUGUXlgGLZXm
njNs7IqFpKB3Lb8UkiWA+x9IXqXJ8JwgJQwg+ZNhQ9RV+qMP3gq+w8Iz2Xu/5VXd
yVv4/RvfPF81DZHvx8SzYllrqEcTHcNyBr0PzLTNH0WqE/1RQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJfCvXYeuUlIdF1/Yu8esmwEs/IRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm
NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvNjAzZDZhMTItZWRiYS0z
N2M0LWJkNjctODI1MDM0Y2UzZDk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx
MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx
ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2
M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFRoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUcu6zQFU3aaRy2KseHv+tkNKlG4bM5BTxERI8ihG8XQS0CqEgmXHn3
UBh7ebZz+nRYPwIwxxyHz9Ora0KTw+VeVQRUvMuSLgyLlA3ycEvVrYEeslbbVEF5
2JcHIQOvFKlGY6liSYupKW01Y+Mhr03VaKDRhnzUKlMYLzbPhcpF88i/TDEbgIRx
/PlDMZ1JnDzPFGZ1oHBPeZT6isSeR/RP+BU4xyOt1MQeERjz7fnhWClHEEcQ6hhG
MU+0dZtdkJrpgHDwxLWSqWLoVE2RjdSXEMDj3o7BUVk6CpcjCnarynPefuPwQhqQ
yMzXsZ/9lb1wBUlFnW4lILvqt2x7Guo=
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:10:01 2025 by rpki-client