Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab79cca-1dd9-3a92-bddb-bd8f11d5261b.roa
File:                     1ab79cca-1dd9-3a92-bddb-bd8f11d5261b.roa (raw, json)
Hash identifier:          hd2I0xTkUcQ30BcCaPTrsQFB8pHqsE7UvJgcr0lIcP4=
Subject key identifier:   E1:EF:69:9A:E5:F5:11:DD:E9:FD:18:78:08:F8:71:BB:D3:15:32:3E
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DB9A7363B8D1E90FB2E80
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab79cca-1dd9-3a92-bddb-bd8f11d5261b.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     13367
IP address blocks:        66.41.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:b9:a7:36:3b:8d:1e:90:fb:2e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=87c32ec1-f3a3-4af2-b2e4-1a24a54e8836
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:0f:e6:9b:70:03:74:d0:ec:cc:2e:b5:9a:
                    7d:f9:ad:d8:67:ae:af:24:b7:a1:1c:9a:56:b1:88:
                    e9:fa:a0:68:79:81:fc:54:0b:3c:99:4c:5a:79:f7:
                    be:79:ed:dd:6c:9b:05:fd:ac:e9:79:e2:52:ea:53:
                    4b:0a:eb:3e:e5:11:99:af:a7:f0:9c:b4:fd:69:a5:
                    cb:cd:c7:c9:97:79:19:cb:f8:8d:13:a3:5b:c4:68:
                    50:69:19:a3:f4:34:1e:67:78:fa:46:ab:50:8d:5b:
                    d1:9a:e8:85:50:7d:4b:28:fe:5c:34:84:7c:c3:f7:
                    32:5b:ac:ba:21:5d:2e:be:bd:8f:ee:23:a5:df:66:
                    d7:c1:38:5d:32:d4:f6:40:af:56:dd:0e:ff:28:d7:
                    7c:f3:a1:4d:4f:4e:98:d5:46:65:ce:a1:eb:ee:6e:
                    8e:c2:1d:c5:61:43:1d:f8:9b:b5:5d:d0:ed:9b:25:
                    22:b2:bc:d2:cb:f7:05:49:0a:25:71:36:eb:f6:ef:
                    52:83:6a:9c:3f:29:7f:00:dd:01:64:6e:f6:0f:e9:
                    c9:d0:ca:fe:48:5a:c9:76:fb:75:34:bb:ec:e3:3a:
                    5b:6d:f2:6a:8b:ac:5a:35:fb:fc:8c:9a:9e:4d:a7:
                    c6:4a:25:d2:b7:29:5f:4e:b4:9a:cc:20:74:a7:b5:
                    8d:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:EF:69:9A:E5:F5:11:DD:E9:FD:18:78:08:F8:71:BB:D3:15:32:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/1ab79cca-1dd9-3a92-bddb-bd8f11d5261b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.41.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:84:3a:c5:9f:02:63:5e:07:3f:93:69:e5:f2:98:f4:b9:21:
         83:48:e5:c3:15:55:d8:89:a0:69:02:8c:cb:33:b7:06:00:a6:
         43:69:bf:bf:12:b6:c4:ed:2b:4e:ad:da:48:cc:d6:4f:09:63:
         2d:ed:8a:3c:73:75:55:1f:2b:c1:31:2a:9d:7d:1d:a7:1d:d1:
         7f:a3:8c:c0:11:56:c0:ec:16:5b:0f:c8:a4:a7:84:7a:31:99:
         94:7c:e5:d7:60:24:07:54:f4:d2:77:dd:7c:54:39:d6:b8:eb:
         c6:61:66:56:1a:6d:b4:c9:e1:2a:3d:64:29:01:f1:ae:f9:03:
         16:45:08:b0:cc:be:f2:a2:5c:00:0a:e8:8d:6e:89:60:66:c8:
         a9:e7:b1:fe:f3:69:0d:40:45:74:ce:62:3f:15:e2:95:6a:6d:
         17:cd:d7:28:15:fa:5c:69:d3:2d:49:2a:99:c1:f1:f8:89:0d:
         58:7f:e1:1e:c6:ae:1e:a1:20:29:92:64:17:b4:0e:2f:2c:54:
         79:29:c1:e2:cc:a5:de:71:b0:8e:03:25:8e:6f:1c:a4:6a:e6:
         7b:94:d1:bf:2c:2e:c7:25:63:d1:26:db:dd:27:71:59:39:9d:
         77:04:1d:17:eb:93:3c:b7:38:bf:3b:1c:c4:2c:f1:91:25:82:
         1d:3a:f5:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebbmnNjuNHpD7LoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
ODdjMzJlYzEtZjNhMy00YWYyLWIyZTQtMWEyNGE1NGU4ODM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPwP5ptwA3TQ7MwutZp9+a3YZ66vJLehHJpW
sYjp+qBoeYH8VAs8mUxaefe+ee3dbJsF/azpeeJS6lNLCus+5RGZr6fwnLT9aaXL
zcfJl3kZy/iNE6NbxGhQaRmj9DQeZ3j6RqtQjVvRmuiFUH1LKP5cNIR8w/cyW6y6
IV0uvr2P7iOl32bXwThdMtT2QK9W3Q7/KNd886FNT06Y1UZlzqHr7m6Owh3FYUMd
+Ju1XdDtmyUisrzSy/cFSQolcTbr9u9Sg2qcPyl/AN0BZG72D+nJ0Mr+SFrJdvt1
NLvs4zpbbfJqi6xaNfv8jJqeTafGSiXStylfTrSazCB0p7WN9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHvaZrl9RHd6f0YeAj4cbvTFTI+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMWFiNzljY2EtMWRkOS0z
YTkyLWJkZGItYmQ4ZjExZDUyNjFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQilUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABKEOsWfAmNeBz+TaeXymPS5IYNI5cMVVdiJoGkCjMsztwYApkNpv78S
tsTtK06t2kjM1k8JYy3tijxzdVUfK8ExKp19Hacd0X+jjMARVsDsFlsPyKSnhHox
mZR85ddgJAdU9NJ33XxUOda468ZhZlYabbTJ4So9ZCkB8a75AxZFCLDMvvKiXAAK
6I1uiWBmyKnnsf7zaQ1ARXTOYj8V4pVqbRfN1ygV+lxp0y1JKpnB8fiJDVh/4R7G
rh6hICmSZBe0Di8sVHkpweLMpd5xsI4DJY5vHKRq5nuU0b8sLsclY9Em290ncVk5
nXcEHRfrkzy3OL87HMQs8ZElgh069eE=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:07:45 2025 by rpki-client