Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
File:                     0f0d1703-db6a-3fa5-8591-22716446fe2b.roa (raw, json)
Hash identifier:          TqbcKn/DCfWo1SYS9AF+d5qInD3JUhK6wkK7kSOQc0c=
Subject key identifier:   F3:3A:6E:E7:EB:EF:1F:86:B4:86:DC:CD:AC:00:03:E2:1F:9C:96:88
Certificate issuer:       /CN=05ceb199-4ec7-4d16-9739-22face258c65
Certificate serial:       010D0C9F4328584957F4137A2FEA5241DC314390
Authority key identifier: 25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa
Signing time:             Sat 29 Mar 2025 01:00:39 +0000
ROA not before:           Sat 29 Mar 2025 01:00:39 +0000
ROA not after:            Fri 27 Jun 2025 01:00:39 +0000
asID:                     32073
IP address blocks:        205.222.9.0/24 maxlen: 24
                          205.222.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:57:f4:13:7a:2f:ea:52:41:dc:31:43:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05ceb199-4ec7-4d16-9739-22face258c65
        Validity
            Not Before: Mar 29 01:00:39 2025 GMT
            Not After : Jun 27 01:00:39 2025 GMT
        Subject: CN=75832a7f-db1e-4b21-8929-8f303c606eea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:22:c3:f1:ae:8f:9b:b8:6b:1f:e3:4c:39:6f:
                    73:cc:58:13:af:d0:5f:84:96:0f:bf:46:66:95:6c:
                    53:e3:5f:c1:32:91:49:75:43:d9:c9:71:33:1a:2d:
                    aa:61:62:c0:67:57:9c:3b:3a:14:ed:30:e7:64:17:
                    42:cc:b6:7c:a3:4e:74:f7:47:ed:92:b6:2f:26:b3:
                    20:5a:34:6d:0a:dd:94:13:5c:42:81:d7:a8:e7:98:
                    33:5d:31:b8:e9:53:36:fb:23:34:66:92:fe:43:65:
                    b5:15:a8:87:a0:ea:d0:c4:c6:6e:87:e6:f5:4c:9c:
                    b3:b4:2b:11:83:fd:c5:ad:e1:8f:a1:e8:d1:14:25:
                    a5:1c:65:ff:5e:63:84:3d:11:f8:b9:58:b4:f3:05:
                    80:bb:61:17:86:db:1c:d8:e3:d2:65:83:87:a2:d3:
                    be:48:ee:b0:f9:bb:a6:8b:f9:d8:23:83:7a:74:42:
                    d0:b6:5c:dd:8d:c7:ca:3c:d0:fc:cd:02:09:97:ad:
                    6c:f1:f8:29:24:56:b7:d3:77:e6:fb:ab:45:82:9d:
                    7d:a1:af:65:b0:6e:e2:39:e0:32:5c:9c:20:12:d3:
                    ec:b6:f9:b3:91:36:b3:ba:64:9b:0b:10:7c:2b:06:
                    11:a7:67:f8:71:9d:9f:4e:52:de:11:e2:93:4e:14:
                    65:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:3A:6E:E7:EB:EF:1F:86:B4:86:DC:CD:AC:00:03:E2:1F:9C:96:88
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/0f0d1703-db6a-3fa5-8591-22716446fe2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65/05ceb199-4ec7-4d16-9739-22face258c65.crl

            X509v3 Authority Key Identifier:
                keyid:25:A3:6A:9B:CE:3D:CB:6F:93:56:D2:97:42:07:51:16:5C:E9:9D:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/05ceb199-4ec7-4d16-9739-22face258c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.222.9.0/24
                  205.222.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ab:65:29:03:ed:9f:6b:44:c5:43:c5:bd:5b:47:db:9c:90:
         72:66:fe:18:b3:ef:5a:a5:5d:a9:70:0b:ca:34:13:c9:90:2f:
         25:6e:55:83:1f:82:67:4d:f3:fa:e6:6d:b6:3a:7f:e9:48:18:
         78:4f:b9:33:97:de:a0:84:ab:9a:fa:36:9a:72:dc:5a:26:ad:
         32:38:fc:d6:e2:c3:c7:e1:97:60:4a:e9:4d:91:1d:b4:86:4d:
         aa:8d:83:97:98:95:95:07:36:73:dc:f4:3c:4c:8f:7d:17:16:
         7d:81:9a:97:90:9c:a7:d2:b2:58:5e:35:23:ea:50:3e:57:c9:
         92:b5:9f:7b:52:d5:d2:c7:51:33:23:7f:ce:98:57:8d:5a:6f:
         8f:67:08:c7:d9:10:9f:83:fc:94:04:b4:f9:8c:6b:e6:d8:c5:
         79:dc:49:41:b2:b4:90:c8:69:ee:fa:64:b0:65:f3:75:bb:c4:
         2f:1f:8f:02:31:a5:b5:85:b7:73:85:17:e7:9d:ba:46:aa:88:
         1f:45:6b:63:d6:57:0d:93:68:c3:df:41:7d:d8:38:cf:28:2b:
         b0:2b:21:b5:4d:c1:0e:05:53:67:5d:c0:83:02:9a:ca:5a:cc:
         86:8c:83:e8:54:66:0a:d5:de:b7:1f:73:9b:4d:64:e6:b2:b1:
         b9:82:57:eb
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElX9BN6L+pSQdwxQ5AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVjZWIxOTktNGVjNy00ZDE2LTk3MzktMjJmYWNlMjU4
YzY1MB4XDTI1MDMyOTAxMDAzOVoXDTI1MDYyNzAxMDAzOVowLzEtMCsGA1UEAxMk
NzU4MzJhN2YtZGIxZS00YjIxLTg5MjktOGYzMDNjNjA2ZWVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuCLD8a6Pm7hrH+NMOW9zzFgTr9BfhJYPv0Zm
lWxT41/BMpFJdUPZyXEzGi2qYWLAZ1ecOzoU7TDnZBdCzLZ8o05090ftkrYvJrMg
WjRtCt2UE1xCgdeo55gzXTG46VM2+yM0ZpL+Q2W1FaiHoOrQxMZuh+b1TJyztCsR
g/3FreGPoejRFCWlHGX/XmOEPRH4uVi08wWAu2EXhtsc2OPSZYOHotO+SO6w+bum
i/nYI4N6dELQtlzdjcfKPND8zQIJl61s8fgpJFa303fm+6tFgp19oa9lsG7iOeAy
XJwgEtPstvmzkTazumSbCxB8KwYRp2f4cZ2fTlLeEeKTThRljQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPM6bufr7x+GtIbczawAA+IfnJaIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8wNWNl
YjE5OS00ZWM3LTRkMTYtOTczOS0yMmZhY2UyNThjNjUvMGYwZDE3MDMtZGI2YS0z
ZmE1LTg1OTEtMjI3MTY0NDZmZTJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMDVjZWIxOTktNGVjNy00ZDE2LTk3
MzktMjJmYWNlMjU4YzY1LzA1Y2ViMTk5LTRlYzctNGQxNi05NzM5LTIyZmFjZTI1
OGM2NS5jcmwwHwYDVR0jBBgwFoAUJaNqm849y2+TVtKXQgdRFlzpneQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8wNWNlYjE5OS00ZWM3LTRkMTYtOTczOS0yMmZh
Y2UyNThjNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzd4JAwQA
zd71MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIqrZSkD7Z9rRMVDxb1bR9uckHJm/hiz71qlXalwC8o0E8mQ
LyVuVYMfgmdN8/rmbbY6f+lIGHhPuTOX3qCEq5r6Nppy3FomrTI4/Nbiw8fhl2BK
6U2RHbSGTaqNg5eYlZUHNnPc9DxMj30XFn2BmpeQnKfSslheNSPqUD5XyZK1n3tS
1dLHUTMjf86YV41ab49nCMfZEJ+D/JQEtPmMa+bYxXncSUGytJDIae76ZLBl83W7
xC8fjwIxpbWFt3OFF+edukaqiB9Fa2PWVw2TaMPfQX3YOM8oK7ArIbVNwQ4FU2dd
wIMCmspazIaMg+hUZgrV3rcfc5tNZOaysbmCV+s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 06:34:02 2025 by rpki-client