Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa
File:                     84d52afe-f163-3077-92c1-35bcf498c90c.roa (raw, json)
Hash identifier:          Gu79W+TsYSz6wIST2lbNm3rLPHXk9B4oktNb0xT8HdA=
Subject key identifier:   13:E2:FB:6D:B6:E3:0F:43:C4:3B:DB:CD:9C:25:1C:62:C0:C1:1B:6F
Certificate issuer:       /CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
Certificate serial:       010D0C9F43285848DEA119C084C03B93F14ABFC0
Authority key identifier: BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     16841
IP address blocks:        199.48.96.0/22 maxlen: 24
                          199.66.224.0/22 maxlen: 24
                          199.167.236.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:19:c0:84:c0:3b:93:f1:4a:bf:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7befaca5-f1e5-400b-a1f2-8c6e82630b73
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=1b69e9de-3b50-42fa-b5f2-f5d4c7a3c161
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:96:22:28:74:de:b3:82:60:b4:02:aa:04:ff:
                    23:5e:97:28:84:d7:dc:b4:93:46:c3:cb:1a:e2:ea:
                    aa:09:d3:78:d2:c5:ef:b0:03:56:ce:3c:bc:63:7a:
                    af:6f:8d:25:0b:20:75:ba:b3:ee:26:2b:2e:58:31:
                    b5:ec:40:06:a3:a5:a3:a3:20:b6:98:d9:01:c5:8e:
                    cc:ad:97:bc:46:60:51:ec:64:b6:6c:15:f0:54:8c:
                    f6:b7:33:35:47:ea:83:96:de:10:04:3f:1c:98:7f:
                    d1:70:c7:b1:da:c1:19:e3:61:46:73:70:22:b3:2c:
                    c8:7c:1b:fd:f9:4c:ff:75:f3:e3:65:b6:f6:98:7f:
                    d5:a8:90:28:6a:fe:79:15:69:13:ab:a3:3a:09:86:
                    2d:21:13:0c:ae:ca:a1:1c:ec:be:d3:24:0c:d9:08:
                    50:31:b2:ed:0a:a7:0d:ab:f6:ec:9a:0d:e9:c8:86:
                    68:46:c7:0f:90:2b:7e:af:28:48:11:4c:22:96:60:
                    d7:b4:59:9b:19:ed:2d:e5:62:b7:29:02:3d:a7:c4:
                    c7:a5:f6:cb:42:45:57:ff:fe:60:38:c4:94:00:f2:
                    35:b7:60:c6:2a:52:b5:bf:48:8a:91:4e:6f:87:3b:
                    dc:1a:6d:fd:39:13:00:76:f3:87:a1:2a:d1:f0:00:
                    ed:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:E2:FB:6D:B6:E3:0F:43:C4:3B:DB:CD:9C:25:1C:62:C0:C1:1B:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/84d52afe-f163-3077-92c1-35bcf498c90c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73/7befaca5-f1e5-400b-a1f2-8c6e82630b73.crl

            X509v3 Authority Key Identifier:
                keyid:BC:C0:00:DC:08:E4:B5:6A:AF:BF:66:58:A6:09:24:72:7B:37:08:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/7befaca5-f1e5-400b-a1f2-8c6e82630b73.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.48.96.0/22
                  199.66.224.0/22
                  199.167.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:2c:bb:e0:d3:c0:dd:65:20:91:e5:af:19:ee:45:6b:b7:a6:
         7b:03:05:e3:f9:a3:3d:00:6a:53:06:0d:50:35:f8:61:d7:d1:
         87:08:f1:58:06:d0:6c:5c:2e:79:42:68:61:7b:0d:e8:7b:27:
         83:f9:81:73:9d:69:3a:d1:27:17:c0:49:b1:02:99:1e:05:ee:
         d6:7c:53:3f:7c:87:1a:26:02:56:af:be:35:4a:22:5e:80:68:
         3e:e5:56:e0:3d:21:37:98:a8:20:e3:59:74:6b:37:28:aa:1e:
         04:42:59:e0:63:88:b4:12:f6:96:e9:e8:82:da:7e:e7:2b:f0:
         3e:36:5c:b3:81:57:9f:c8:06:87:72:1c:3c:5d:30:e2:b8:65:
         b3:b7:56:bd:78:d8:5c:29:dd:d3:e2:e9:0e:e6:e1:d8:e5:3b:
         47:a6:86:fe:40:0b:4e:d7:72:41:fc:4e:e0:ff:6d:50:55:ee:
         ad:ed:77:77:9a:fe:13:16:c8:4b:04:b6:6b:30:39:86:69:95:
         cb:3e:86:d9:0b:62:55:6b:4d:9c:9d:3c:20:34:9a:3f:e5:d4:
         8d:0d:21:92:49:ec:4a:f2:d1:cd:7e:0a:39:16:b4:c3:3b:51:
         c7:87:fb:af:0b:61:b8:07:b9:90:15:ae:bb:9c:df:3c:ac:3b:
         27:53:e9:7c
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjeoRnAhMA7k/FKv8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JlZmFjYTUtZjFlNS00MDBiLWExZjItOGM2ZTgyNjMw
YjczMB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
MWI2OWU5ZGUtM2I1MC00MmZhLWI1ZjItZjVkNGM3YTNjMTYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgpYiKHTes4JgtAKqBP8jXpcohNfctJNGw8sa
4uqqCdN40sXvsANWzjy8Y3qvb40lCyB1urPuJisuWDG17EAGo6WjoyC2mNkBxY7M
rZe8RmBR7GS2bBXwVIz2tzM1R+qDlt4QBD8cmH/RcMex2sEZ42FGc3AisyzIfBv9
+Uz/dfPjZbb2mH/VqJAoav55FWkTq6M6CYYtIRMMrsqhHOy+0yQM2QhQMbLtCqcN
q/bsmg3pyIZoRscPkCt+ryhIEUwilmDXtFmbGe0t5WK3KQI9p8THpfbLQkVX//5g
OMSUAPI1t2DGKlK1v0iKkU5vhzvcGm39ORMAdvOHoSrR8ADt8QIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFBPi+2224w9DxDvbzZwlHGLAwRtvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi83YmVm
YWNhNS1mMWU1LTQwMGItYTFmMi04YzZlODI2MzBiNzMvODRkNTJhZmUtZjE2My0z
MDc3LTkyYzEtMzViY2Y0OThjOTBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvN2JlZmFjYTUtZjFlNS00MDBiLWEx
ZjItOGM2ZTgyNjMwYjczLzdiZWZhY2E1LWYxZTUtNDAwYi1hMWYyLThjNmU4MjYz
MGI3My5jcmwwHwYDVR0jBBgwFoAUvMAA3AjktWqvv2ZYpgkkcns3CPwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi83YmVmYWNhNS1mMWU1LTQwMGItYTFmMi04YzZl
ODI2MzBiNzMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCxzBgAwQC
x0LgAwQCx6fsMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAIosu+DTwN1lIJHlrxnuRWu3pnsDBeP5oz0AalMG
DVA1+GHX0YcI8VgG0GxcLnlCaGF7Deh7J4P5gXOdaTrRJxfASbECmR4F7tZ8Uz98
hxomAlavvjVKIl6AaD7lVuA9ITeYqCDjWXRrNyiqHgRCWeBjiLQS9pbp6ILafucr
8D42XLOBV5/IBodyHDxdMOK4ZbO3Vr142Fwp3dPi6Q7m4djlO0emhv5AC07XckH8
TuD/bVBV7q3td3ea/hMWyEsEtmswOYZplcs+htkLYlVrTZydPCA0mj/l1I0NIZJJ
7Ery0c1+CjkWtMM7UceH+68LYbgHuZAVrruc3zysOydT6Xw=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:28:16 2025 by rpki-client