Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa
File:                     f040ad8b-1963-36d6-b7c3-c1993858c124.roa (raw, json)
Hash identifier:          x9MInWzRv7pmN6wHzX+7m5Gax+InM5W+fO1MCzFwrvA=
Subject key identifier:   77:37:B0:33:CE:01:86:BA:7D:E9:8B:58:06:5F:80:DD:6C:E3:89:F1
Certificate issuer:       /CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
Certificate serial:       010D0C9F43285848CC7B8E48CE41504670EB9B00
Authority key identifier: 09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     396982
IP address blocks:        50.6.138.0/23 maxlen: 23
                          69.49.227.0/24 maxlen: 24
                          69.49.232.0/23 maxlen: 23
                          69.49.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:8e:48:ce:41:50:46:70:eb:9b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f3775f-7a6b-4b92-b5df-82d81562b08e
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=9a9b90e0-b47f-4f0a-890f-82ab70db2cdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:c0:aa:48:23:48:29:94:08:17:11:b3:5f:a3:
                    ec:4e:2f:c5:e0:37:e9:4e:6d:6c:00:ee:ae:09:74:
                    89:74:68:6a:fd:43:33:39:b5:aa:16:b9:cf:f2:7c:
                    c9:bd:14:67:7e:4d:11:e3:19:00:ec:53:35:94:74:
                    65:10:18:29:b7:c0:b8:bd:b7:27:f7:88:00:cf:81:
                    6f:e9:37:fd:28:b9:e4:e7:b8:9a:fc:57:20:4e:31:
                    74:e9:2a:df:5d:2c:51:a6:2e:71:ea:f9:98:52:e3:
                    18:b8:37:58:27:70:5c:47:28:50:29:c8:8c:d1:1a:
                    bb:04:b9:0e:0b:8d:cb:8e:bf:0a:30:4b:6b:18:46:
                    e2:ef:bf:f6:dc:53:87:56:01:7d:28:dd:18:dd:2c:
                    30:a8:f5:6f:be:5f:dc:ba:38:50:e1:47:08:fd:ab:
                    be:86:c8:51:f0:93:f6:dd:59:d4:32:3f:e2:93:1e:
                    5c:45:33:8e:2f:25:ec:98:33:34:0e:93:72:78:26:
                    3e:45:ac:39:d4:32:da:6c:32:f9:cb:9d:3f:d9:ef:
                    8f:d3:a7:8b:89:a3:66:6b:ba:61:89:4d:38:82:69:
                    ce:7a:90:36:90:ae:0b:39:cd:75:d3:33:ba:d2:d4:
                    6b:75:9d:63:a4:6b:5f:a9:f3:7e:e8:f1:79:54:77:
                    ca:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:37:B0:33:CE:01:86:BA:7D:E9:8B:58:06:5F:80:DD:6C:E3:89:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/f040ad8b-1963-36d6-b7c3-c1993858c124.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e/e0f3775f-7a6b-4b92-b5df-82d81562b08e.crl

            X509v3 Authority Key Identifier:
                keyid:09:4B:57:92:E3:15:87:9E:56:A8:65:09:B9:67:DD:30:71:7A:17:59

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e0f3775f-7a6b-4b92-b5df-82d81562b08e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.6.138.0/23
                  69.49.227.0/24
                  69.49.232.0/23
                  69.49.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         11:9d:53:c5:8b:60:5c:b5:ca:e6:1d:3e:c4:11:3e:af:c3:4b:
         58:9a:8b:cd:ac:a0:c5:98:3c:29:b3:cc:ef:33:0b:8f:06:49:
         74:76:f0:02:fc:90:77:6c:80:3e:b3:a0:a3:c7:92:ad:c3:09:
         b2:f4:8b:bd:da:cf:5c:7e:da:02:c7:4a:9d:f6:8e:6c:c4:7b:
         54:6b:2a:1f:1b:01:80:b7:f9:f0:3b:d0:41:d5:25:bf:bb:33:
         28:9d:2d:2c:fa:16:ee:9b:3e:11:3d:9a:64:3b:4f:b0:25:e6:
         e4:1d:45:d2:a1:7b:c3:03:c8:cd:a2:d9:83:df:26:c2:c6:a8:
         fa:ea:b2:42:bc:1c:4c:7f:d7:77:a3:11:cd:d6:09:9d:c7:d5:
         70:92:35:d7:9b:ea:fb:cf:3e:3c:2b:99:d9:b0:c9:ca:2e:ae:
         3c:f5:97:01:05:b2:76:43:a2:90:06:82:34:94:36:5c:1c:6c:
         ad:8b:48:22:c3:58:6f:ef:a2:b2:0c:99:ce:25:ad:63:44:d0:
         49:e9:c3:e5:77:42:6f:84:14:c7:45:58:7f:12:aa:4d:e0:0c:
         c8:b6:d0:f8:21:7f:a0:3f:b9:2d:8e:10:83:66:e6:63:2b:15:
         57:5a:00:4f:b7:ba:12:c5:24:c0:ce:f4:46:a5:d4:42:4f:81:
         fb:60:83:f6
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEjMe45IzkFQRnDrmwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMzc3NWYtN2E2Yi00YjkyLWI1ZGYtODJkODE1NjJi
MDhlMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
OWE5YjkwZTAtYjQ3Zi00ZjBhLTg5MGYtODJhYjcwZGIyY2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk8CqSCNIKZQIFxGzX6PsTi/F4DfpTm1sAO6u
CXSJdGhq/UMzObWqFrnP8nzJvRRnfk0R4xkA7FM1lHRlEBgpt8C4vbcn94gAz4Fv
6Tf9KLnk57ia/FcgTjF06SrfXSxRpi5x6vmYUuMYuDdYJ3BcRyhQKciM0Rq7BLkO
C43Ljr8KMEtrGEbi77/23FOHVgF9KN0Y3SwwqPVvvl/cujhQ4UcI/au+hshR8JP2
3VnUMj/ikx5cRTOOLyXsmDM0DpNyeCY+Raw51DLabDL5y50/2e+P06eLiaNma7ph
iU04gmnOepA2kK4LOc110zO60tRrdZ1jpGtfqfN+6PF5VHfKnQIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFHc3sDPOAYa6femLWAZfgN1s44nxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYz
Nzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4MTU2MmIwOGUvZjA0MGFkOGItMTk2My0z
NmQ2LWI3YzMtYzE5OTM4NThjMTI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTBmMzc3NWYtN2E2Yi00YjkyLWI1
ZGYtODJkODE1NjJiMDhlL2UwZjM3NzVmLTdhNmItNGI5Mi1iNWRmLTgyZDgxNTYy
YjA4ZS5jcmwwHwYDVR0jBBgwFoAUCUtXkuMVh55WqGUJuWfdMHF6F1kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMGYzNzc1Zi03YTZiLTRiOTItYjVkZi04MmQ4
MTU2MmIwOGUuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBMgaKAwQA
RTHjAwQBRTHoAwQARTHxMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABGdU8WLYFy1yuYdPsQRPq/DS1iai82s
oMWYPCmzzO8zC48GSXR28AL8kHdsgD6zoKPHkq3DCbL0i73az1x+2gLHSp32jmzE
e1RrKh8bAYC3+fA70EHVJb+7MyidLSz6Fu6bPhE9mmQ7T7Al5uQdRdKhe8MDyM2i
2YPfJsLGqPrqskK8HEx/13ejEc3WCZ3H1XCSNdeb6vvPPjwrmdmwycourjz1lwEF
snZDopAGgjSUNlwcbK2LSCLDWG/vorIMmc4lrWNE0Enpw+V3Qm+EFMdFWH8Sqk3g
DMi20Pghf6A/uS2OEINm5mMrFVdaAE+3uhLFJMDO9Eal1EJPgftgg/Y=
-----END CERTIFICATE-----
Generated at Wed Apr 9 18:07:00 2025 by rpki-client