Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
File:                     3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa (raw, json)
Hash identifier:          lknN8mioz6y5k6VyLpK+JKRl1dKsfJncH7XHS7uOGew=
Subject key identifier:   3C:5F:0D:E2:89:52:A4:CB:67:D4:26:86:12:28:E9:96:80:79:BE:85
Certificate issuer:       /CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
Certificate serial:       010D0C9F432858489340A3A7488032E7443B1B20
Authority key identifier: 6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     19755
IP address blocks:        199.73.124.0/24 maxlen: 24
                          199.73.125.0/24 maxlen: 24
                          199.73.126.0/24 maxlen: 24
                          199.73.127.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a3:a7:48:80:32:e7:44:3b:1b:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6b8a7f7f-f857-4ca7-814b-452e6da3c835
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=1c0ca96f-5b27-4deb-b041-75495c34ba43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:85:6a:77:0a:8f:40:6e:3c:45:32:5d:32:90:
                    9f:a2:b6:93:18:fc:a6:9a:e3:a2:69:0d:90:3b:5b:
                    2f:f5:cb:88:c3:3e:e9:86:08:f2:6e:31:04:67:7e:
                    32:55:10:b0:b2:56:67:05:14:1c:08:53:0c:33:78:
                    55:7f:66:f6:7b:3a:61:df:37:8c:0c:f7:68:6c:af:
                    7c:43:bc:44:39:98:ee:6e:6a:3c:5a:10:64:7a:8c:
                    b9:70:75:9c:c6:bd:ce:31:18:75:9e:ef:cb:44:43:
                    20:c7:49:c2:b8:90:14:ba:42:ce:78:c1:f5:d5:92:
                    a7:90:18:c6:ba:d5:85:04:72:a5:0c:f9:eb:6e:91:
                    b1:5e:7e:bf:4b:b8:84:2e:cf:89:2c:67:b5:3a:15:
                    14:8d:a3:3f:10:23:55:5d:70:38:2d:ad:2b:20:a9:
                    7a:6e:ff:13:5a:ba:13:5c:4d:7f:55:7c:6f:02:ec:
                    ec:5a:91:86:32:86:aa:ba:9f:27:d9:fc:ae:be:3c:
                    1a:78:c0:78:d3:db:7a:c2:0e:54:6a:4a:e1:eb:8d:
                    8f:27:bc:16:4c:9b:f0:dc:28:e9:80:46:d8:f9:f3:
                    ca:81:f4:84:5e:c8:74:0a:67:ce:9a:9d:6b:09:46:
                    3b:44:de:c0:8c:6c:3c:8e:b4:d3:9e:32:0a:49:e0:
                    f7:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:5F:0D:E2:89:52:A4:CB:67:D4:26:86:12:28:E9:96:80:79:BE:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/3edc617e-d4ef-36f4-bf5f-b1b19be514b2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835/6b8a7f7f-f857-4ca7-814b-452e6da3c835.crl

            X509v3 Authority Key Identifier:
                keyid:6B:85:C0:FF:65:B6:47:21:7A:90:D2:4C:37:9F:2B:17:B7:1D:13:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/6b8a7f7f-f857-4ca7-814b-452e6da3c835.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.73.124.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:2d:65:ff:de:5b:8a:02:17:7f:23:94:45:aa:f1:b4:f2:8d:
         99:86:21:50:b2:8d:76:2d:d9:60:5a:1f:dd:76:80:cb:3c:ff:
         93:bb:4a:f9:0f:0e:05:7d:61:09:2c:45:99:3f:69:9a:41:f8:
         41:ea:31:fc:ab:bb:f5:03:88:b7:8a:57:c8:20:24:6e:78:7c:
         cd:99:72:23:2a:7d:f7:fb:e9:af:81:89:75:ce:87:3b:35:10:
         7f:96:18:ac:54:0f:2b:10:ee:b1:14:95:d4:75:97:6b:1a:bc:
         eb:af:9d:b1:f1:88:83:90:d7:dc:19:85:bd:5b:d2:08:21:2f:
         fa:5a:b5:df:d6:81:1c:7c:14:b7:51:f3:a8:ce:80:8a:a4:0d:
         bc:e8:70:bb:8e:47:f9:6b:23:da:fa:a6:0d:de:ba:ab:9a:57:
         93:03:2a:2e:37:62:67:6c:36:14:90:53:e7:ad:18:d1:24:5e:
         b1:3b:06:cc:0e:d0:f9:57:bf:c9:85:1c:7d:f6:f4:f2:ca:4f:
         ef:50:a9:39:1a:79:50:cf:20:54:b3:ae:81:97:56:92:c1:5d:
         c7:35:ed:1a:cb:59:3c:52:73:95:07:e8:db:89:2e:81:c0:73:
         84:b9:75:3b:3c:a3:d3:39:41:6c:11:6b:76:c5:0d:b1:75:8c:
         33:a5:06:61
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKOnSIAy50Q7GyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmI4YTdmN2YtZjg1Ny00Y2E3LTgxNGItNDUyZTZkYTNj
ODM1MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
MWMwY2E5NmYtNWIyNy00ZGViLWIwNDEtNzU0OTVjMzRiYTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu4VqdwqPQG48RTJdMpCforaTGPymmuOiaQ2Q
O1sv9cuIwz7phgjybjEEZ34yVRCwslZnBRQcCFMMM3hVf2b2ezph3zeMDPdobK98
Q7xEOZjubmo8WhBkeoy5cHWcxr3OMRh1nu/LREMgx0nCuJAUukLOeMH11ZKnkBjG
utWFBHKlDPnrbpGxXn6/S7iELs+JLGe1OhUUjaM/ECNVXXA4La0rIKl6bv8TWroT
XE1/VXxvAuzsWpGGMoaqup8n2fyuvjwaeMB409t6wg5Uakrh642PJ7wWTJvw3Cjp
gEbY+fPKgfSEXsh0CmfOmp1rCUY7RN7AjGw8jrTTnjIKSeD3bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDxfDeKJUqTLZ9QmhhIo6ZaAeb6FMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82Yjhh
N2Y3Zi1mODU3LTRjYTctODE0Yi00NTJlNmRhM2M4MzUvM2VkYzYxN2UtZDRlZi0z
NmY0LWJmNWYtYjFiMTliZTUxNGIyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNmI4YTdmN2YtZjg1Ny00Y2E3LTgx
NGItNDUyZTZkYTNjODM1LzZiOGE3ZjdmLWY4NTctNGNhNy04MTRiLTQ1MmU2ZGEz
YzgzNS5jcmwwHwYDVR0jBBgwFoAUa4XA/2W2RyF6kNJMN58rF7cdE4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82YjhhN2Y3Zi1mODU3LTRjYTctODE0Yi00NTJl
NmRhM2M4MzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx0l8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8tZf/eW4oCF38jlEWq8bTyjZmGIVCyjXYt2WBaH912gMs8/5O7SvkP
DgV9YQksRZk/aZpB+EHqMfyru/UDiLeKV8ggJG54fM2ZciMqfff76a+BiXXOhzs1
EH+WGKxUDysQ7rEUldR1l2savOuvnbHxiIOQ19wZhb1b0gghL/patd/WgRx8FLdR
86jOgIqkDbzocLuOR/lrI9r6pg3euquaV5MDKi43YmdsNhSQU+etGNEkXrE7BswO
0PlXv8mFHH329PLKT+9QqTkaeVDPIFSzroGXVpLBXcc17RrLWTxSc5UH6NuJLoHA
c4S5dTs8o9M5QWwRa3bFDbF1jDOlBmE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:28 2025 by rpki-client