Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa
File:                     2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa (raw, json)
Hash identifier:          yrgRXPKb6XTeODU6HfkS/NrTpkghC3KZP39VxXWnB3c=
Subject key identifier:   16:66:32:8A:45:4F:47:F2:0F:E0:18:CC:6D:A7:B9:AA:31:A3:C6:BD
Certificate issuer:       /CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
Certificate serial:       010D0C9F4328584A295565236EC25FE794406A80
Authority key identifier: 7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa
Signing time:             Thu 12 Jun 2025 01:00:51 +0000
ROA not before:           Thu 12 Jun 2025 01:00:51 +0000
ROA not after:            Wed 10 Sep 2025 01:00:51 +0000
asID:                     397412
IP address blocks:        64.110.128.0/21 maxlen: 24
                          98.96.0.0/17 maxlen: 24
                          136.244.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:55:65:23:6e:c2:5f:e7:94:40:6a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=792c5c41-497a-4325-83ea-87d8b3dfdae9
        Validity
            Not Before: Jun 12 01:00:51 2025 GMT
            Not After : Sep 10 01:00:51 2025 GMT
        Subject: CN=800e3ef3-bccd-4631-900a-96dd71c4fbda
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:5f:72:a8:99:30:bc:cf:ab:af:8e:80:7a:
                    16:34:4c:b1:d7:cb:73:d4:21:93:b8:6e:49:bf:fd:
                    5e:4b:99:7d:24:72:86:52:2f:ac:b0:e3:da:03:15:
                    26:e4:ae:9d:1b:c0:df:84:33:11:ac:f4:31:3a:89:
                    b2:21:71:24:bc:30:6e:ad:59:44:af:fc:ff:32:56:
                    2a:d5:e1:1d:3e:0b:b1:2e:34:dd:42:57:c1:09:8c:
                    78:2f:cd:05:f8:7a:03:8d:4c:06:08:e1:9d:2b:b3:
                    99:dc:da:34:de:f8:55:dd:51:71:85:d5:0e:e1:ce:
                    54:f0:56:fb:51:cd:3e:ad:21:82:ae:ef:43:f7:cf:
                    2a:d6:cd:00:2d:c4:38:aa:c5:1d:4b:87:cb:c6:75:
                    01:6e:39:e5:7e:41:7f:1a:c2:32:1e:a6:34:83:f4:
                    70:33:f0:bc:17:e0:e7:9a:ed:2a:34:68:68:31:60:
                    d2:0b:39:76:61:9d:32:7a:ca:3f:8d:3d:3c:dc:e8:
                    07:80:99:b6:16:3d:da:47:c4:34:09:c4:a3:a7:d7:
                    b2:43:80:29:2c:ab:77:06:74:81:12:95:6a:cc:c4:
                    8c:d1:95:23:a7:cd:ba:b4:6c:9b:05:8b:5c:97:68:
                    29:91:0e:97:4e:3d:26:9c:9a:76:3b:08:ae:35:16:
                    a4:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:66:32:8A:45:4F:47:F2:0F:E0:18:CC:6D:A7:B9:AA:31:A3:C6:BD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/2959c158-c9c7-348c-9d36-bb2b80c9b33a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9/792c5c41-497a-4325-83ea-87d8b3dfdae9.crl

            X509v3 Authority Key Identifier:
                keyid:7D:74:25:41:9A:38:20:93:7F:60:CF:32:9F:5B:D6:B8:E5:B6:31:99

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/792c5c41-497a-4325-83ea-87d8b3dfdae9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.110.128.0/21
                  98.96.0.0/17
                  136.244.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:38:0b:73:32:15:6c:6d:d8:41:3a:b2:b6:ca:5c:f6:ac:2e:
         67:59:7b:e3:35:bb:8a:79:2e:ef:84:f6:7b:e2:6b:9a:9d:b3:
         1b:f6:7c:df:0f:16:08:4a:af:ef:f0:17:a3:1e:b5:9f:5a:27:
         3b:75:ff:73:f1:f9:df:4f:ab:05:bc:a5:b9:c3:ee:e5:b2:da:
         d4:2f:43:da:af:12:d1:f2:66:db:2e:b1:35:87:b8:6a:67:89:
         66:f3:97:8b:e0:e2:51:c4:54:b6:13:f4:4a:5e:94:db:46:52:
         01:ec:7a:46:44:bd:c8:9d:3f:0c:ad:d4:f8:30:eb:b4:c1:76:
         3f:95:36:78:55:17:36:56:2a:1b:2d:9c:54:bd:c6:2e:73:e0:
         77:86:76:66:e5:ff:47:84:c8:a5:b8:16:ec:8b:49:de:6a:e9:
         4d:33:9e:d6:91:e1:25:3d:e1:46:e0:94:38:36:95:69:34:13:
         15:64:17:34:ac:d9:53:9d:40:8c:6d:8d:02:93:a7:db:08:5d:
         1d:3f:0c:c4:e7:e6:bd:6c:d7:bd:c7:ed:91:e3:b7:be:68:9b:
         00:1d:3a:60:f0:63:98:d1:1e:b4:16:f2:c9:99:33:4a:58:88:
         66:d5:a1:1c:dc:78:b1:85:58:6c:ed:ca:b5:37:32:48:72:02:
         af:96:cb:c0
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEopVWUjbsJf55RAaoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzkyYzVjNDEtNDk3YS00MzI1LTgzZWEtODdkOGIzZGZk
YWU5MB4XDTI1MDYxMjAxMDA1MVoXDTI1MDkxMDAxMDA1MVowLzEtMCsGA1UEAxMk
ODAwZTNlZjMtYmNjZC00NjMxLTkwMGEtOTZkZDcxYzRmYmRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp1tfcqiZMLzPq6+OgHoWNEyx18tz1CGTuG5J
v/1eS5l9JHKGUi+ssOPaAxUm5K6dG8DfhDMRrPQxOomyIXEkvDBurVlEr/z/MlYq
1eEdPguxLjTdQlfBCYx4L80F+HoDjUwGCOGdK7OZ3No03vhV3VFxhdUO4c5U8Fb7
Uc0+rSGCru9D988q1s0ALcQ4qsUdS4fLxnUBbjnlfkF/GsIyHqY0g/RwM/C8F+Dn
mu0qNGhoMWDSCzl2YZ0yeso/jT083OgHgJm2Fj3aR8Q0CcSjp9eyQ4ApLKt3BnSB
EpVqzMSM0ZUjp826tGybBYtcl2gpkQ6XTj0mnJp2OwiuNRakqQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBZmMopFT0fyD+AYzG2nuaoxo8a9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJj
NWM0MS00OTdhLTQzMjUtODNlYS04N2Q4YjNkZmRhZTkvMjk1OWMxNTgtYzljNy0z
NDhjLTlkMzYtYmIyYjgwYzliMzNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNzkyYzVjNDEtNDk3YS00MzI1LTgz
ZWEtODdkOGIzZGZkYWU5Lzc5MmM1YzQxLTQ5N2EtNDMyNS04M2VhLTg3ZDhiM2Rm
ZGFlOS5jcmwwHwYDVR0jBBgwFoAUfXQlQZo4IJN/YM8yn1vWuOW2MZkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83OTJjNWM0MS00OTdhLTQzMjUtODNlYS04N2Q4
YjNkZmRhZTkuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDQG6AAwQH
YmAAAwQGiPQAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAEU4C3MyFWxt2EE6srbKXPasLmdZe+M1u4p5Lu+E
9nvia5qdsxv2fN8PFghKr+/wF6MetZ9aJzt1/3Px+d9PqwW8pbnD7uWy2tQvQ9qv
EtHyZtsusTWHuGpniWbzl4vg4lHEVLYT9EpelNtGUgHsekZEvcidPwyt1Pgw67TB
dj+VNnhVFzZWKhstnFS9xi5z4HeGdmbl/0eEyKW4FuyLSd5q6U0zntaR4SU94Ubg
lDg2lWk0ExVkFzSs2VOdQIxtjQKTp9sIXR0/DMTn5r1s173H7ZHjt75omwAdOmDw
Y5jRHrQW8smZM0pYiGbVoRzceLGFWGztyrU3MkhyAq+Wy8A=
-----END CERTIFICATE-----
Generated at Thu Jul 10 12:24:05 2025 by rpki-client