Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
File:                     2f809b7b-f911-3964-a13f-d283caa3fbbc.roa (raw, json)
Hash identifier:          +gKYRYZAQxdiykMc9SLpBj8f/5gU547QWONyInxiHD4=
Subject key identifier:   05:0B:C2:15:94:99:D9:BF:AB:A0:58:7D:C3:C3:C2:F2:79:7E:9B:00
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F4328584961B9916B6D2280533244BB00
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     32133
IP address blocks:        64.98.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:91:6b:6d:22:80:53:32:44:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=3e0f698e-a155-46e6-aaeb-284b4580da3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:dc:c1:c8:db:43:b4:1f:84:80:6e:48:c6:9f:
                    b6:e5:ef:bc:be:12:de:4c:be:75:26:5d:de:bb:90:
                    0f:40:5c:31:50:f5:f0:89:ac:c4:dc:5a:04:cf:70:
                    75:95:e5:f5:66:1f:05:a5:c8:c2:8f:58:23:0c:ea:
                    5f:45:32:b3:4d:31:de:fa:0e:a1:16:ce:bd:85:85:
                    8c:c3:a3:05:c0:dc:6c:d9:20:f7:72:9d:c1:fe:ff:
                    97:58:ed:7e:94:a5:f9:d5:44:ab:4c:05:c4:ab:d7:
                    27:c7:39:89:69:9b:0c:4b:73:61:ef:b7:a5:43:7a:
                    67:9d:2b:8b:c2:3a:c5:65:97:c9:02:a9:2e:ff:5a:
                    9a:76:83:b0:d7:e8:e1:f4:9c:2e:32:b3:7f:4c:e4:
                    0a:1e:45:28:30:8f:3d:55:b8:ba:8a:08:45:5c:48:
                    ef:c2:30:6b:74:d0:40:4c:04:f0:8c:1d:c9:90:ae:
                    98:a7:b3:08:13:30:be:4a:b5:37:45:4a:92:58:b3:
                    79:6f:40:00:79:3f:d1:90:0a:25:6a:df:9f:ba:db:
                    a5:dd:4b:43:09:40:33:8d:97:91:01:cb:4f:96:f2:
                    31:8b:35:9c:d2:83:ce:2d:a5:e9:9d:dc:98:c8:ee:
                    fa:17:2c:71:d4:44:9e:d5:d1:cf:e1:56:26:6a:70:
                    46:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:0B:C2:15:94:99:D9:BF:AB:A0:58:7D:C3:C3:C2:F2:79:7E:9B:00
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/2f809b7b-f911-3964-a13f-d283caa3fbbc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:29:40:7c:cc:bb:58:9c:89:22:2d:c2:c3:70:69:9d:e6:d1:
         a4:0b:10:b3:98:12:62:d7:24:00:e9:cf:79:67:5e:48:f7:25:
         48:f2:c8:9a:24:33:74:19:48:0f:e3:08:62:34:cd:5e:31:84:
         33:6e:17:8d:00:23:d7:11:54:83:5c:09:69:a9:d6:c2:46:f3:
         72:d5:13:7f:1a:ff:6f:66:0f:23:b5:25:78:26:ad:bd:81:82:
         ab:6b:04:de:ca:e6:f1:e7:42:da:63:ee:ac:fa:23:03:96:e8:
         35:72:e4:c4:a3:ba:ac:c7:98:84:5b:2f:6d:7b:90:80:11:1e:
         4b:8b:62:30:a0:48:56:85:8f:2a:91:c7:e9:b8:56:5c:5b:de:
         66:65:3f:fd:38:fa:35:05:1e:8a:06:23:58:f0:1e:d3:ae:ff:
         93:86:b1:14:06:41:42:fb:fc:48:15:70:30:c4:24:79:1a:82:
         5b:ff:c4:aa:61:0b:18:ff:a1:8c:af:63:b0:17:2d:90:4d:a8:
         ae:71:a2:b6:51:0c:a7:0b:b2:53:f8:2d:bd:59:c8:97:f1:84:
         2b:96:9c:53:c3:51:4a:c7:59:a7:0b:b5:b9:c1:48:e4:78:f9:
         72:21:e9:f8:d7:c7:4f:f3:78:7c:4b:0b:e9:c8:81:74:8c:81:
         8b:d5:e1:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElhuZFrbSKAUzJEuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
M2UwZjY5OGUtYTE1NS00NmU2LWFhZWItMjg0YjQ1ODBkYTNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNzByNtDtB+EgG5Ixp+25e+8vhLeTL51Jl3e
u5APQFwxUPXwiazE3FoEz3B1leX1Zh8FpcjCj1gjDOpfRTKzTTHe+g6hFs69hYWM
w6MFwNxs2SD3cp3B/v+XWO1+lKX51USrTAXEq9cnxzmJaZsMS3Nh77elQ3pnnSuL
wjrFZZfJAqku/1qadoOw1+jh9JwuMrN/TOQKHkUoMI89Vbi6ighFXEjvwjBrdNBA
TATwjB3JkK6Yp7MIEzC+SrU3RUqSWLN5b0AAeT/RkAolat+futul3UtDCUAzjZeR
ActPlvIxizWc0oPOLaXpndyYyO76Fyxx1ESe1dHP4VYmanBGoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAULwhWUmdm/q6BYfcPDwvJ5fpsAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMmY4MDliN2ItZjkxMS0z
OTY0LWExM2YtZDI4M2NhYTNmYmJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQGLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8pQHzMu1iciSItwsNwaZ3m0aQLELOYEmLXJADpz3lnXkj3JUjyyJok
M3QZSA/jCGI0zV4xhDNuF40AI9cRVINcCWmp1sJG83LVE38a/29mDyO1JXgmrb2B
gqtrBN7K5vHnQtpj7qz6IwOW6DVy5MSjuqzHmIRbL217kIARHkuLYjCgSFaFjyqR
x+m4Vlxb3mZlP/04+jUFHooGI1jwHtOu/5OGsRQGQUL7/EgVcDDEJHkaglv/xKph
Cxj/oYyvY7AXLZBNqK5xorZRDKcLslP4Lb1ZyJfxhCuWnFPDUUrHWacLtbnBSOR4
+XIh6fjXx0/zeHxLC+nIgXSMgYvV4dU=
-----END CERTIFICATE-----
Generated at Sat Apr 12 17:11:25 2025 by rpki-client