Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa
File:                     e778c926-bae9-347d-82e9-114816be8614.roa (raw, json)
Hash identifier:          1cT66lRaB65owMA4bY9ucm9G74Oi6NtMxjqmcurnIxg=
Subject key identifier:   CE:5C:ED:1D:5B:91:ED:08:F7:E9:70:0B:2C:F0:23:CF:D0:5F:19:EA
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285848FD56C62ED3C6D78D4FA95F10
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     16696
IP address blocks:        137.83.48.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:c6:2e:d3:c6:d7:8d:4f:a9:5f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=d293a7a4-d78a-4872-8e14-cb143e956fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3a:7d:bb:18:fc:cf:85:16:db:82:fe:11:e1:
                    62:fd:e7:83:d1:b4:14:5a:66:7a:14:6d:01:60:8a:
                    c7:dd:b9:66:e3:46:c6:03:bb:07:6c:d9:8d:c0:83:
                    0a:76:a7:f6:0e:17:2e:da:be:91:ce:3a:68:a9:b8:
                    62:11:dc:19:56:69:d2:e0:f1:b9:1b:06:e0:6c:8e:
                    a0:c5:d3:d8:7a:d1:3a:33:1b:89:0c:57:9d:e2:cf:
                    83:7a:53:0f:51:62:ef:b2:e8:13:bf:6b:a4:d9:de:
                    05:02:d5:1b:92:5a:cd:ab:8e:69:29:be:e5:df:71:
                    65:77:9b:23:35:f6:27:d5:b8:b6:f3:4b:11:81:c7:
                    18:f5:0e:de:5e:3b:e8:fb:0f:e3:2f:39:84:ac:42:
                    be:98:ec:45:da:c0:9c:91:8d:f9:8f:4b:e1:9f:2d:
                    86:d1:dc:19:a9:ec:ad:47:e5:a1:7a:f1:65:a2:1d:
                    64:7c:72:10:f9:0c:fa:22:ea:d4:4d:fd:17:f5:77:
                    3b:f8:ec:46:46:45:ec:58:2b:10:fb:c2:5a:d1:47:
                    6f:74:e8:f7:46:b7:0a:39:0d:3b:e5:c3:49:6c:b8:
                    7b:ca:14:09:48:fb:ac:88:84:1f:9b:7b:4a:53:c0:
                    a4:8c:fb:46:3f:ab:f2:85:a2:9b:e1:9e:06:79:4d:
                    ca:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:ED:1D:5B:91:ED:08:F7:E9:70:0B:2C:F0:23:CF:D0:5F:19:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/e778c926-bae9-347d-82e9-114816be8614.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.83.48.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:3d:34:18:cf:2e:e8:37:3c:f8:d2:84:ce:f9:3a:61:5e:84:
         f3:43:22:2e:54:28:81:f5:2d:18:42:09:86:d0:de:81:72:44:
         39:28:5f:bf:82:1c:91:81:e9:6c:c7:ea:65:0d:af:c1:cd:5c:
         58:7b:94:ce:e4:40:f0:ff:f3:47:b7:e3:39:08:36:65:0d:70:
         d8:4c:b2:a7:53:77:ac:81:4b:d3:03:e2:a0:c6:d7:a3:6c:0e:
         0e:87:0b:34:d1:57:c8:07:4e:87:cb:e7:e7:44:c0:7c:89:5a:
         4b:72:0b:7f:49:16:98:48:2c:02:ae:2b:a3:1f:80:e2:31:61:
         86:77:7c:9e:60:49:6d:da:70:99:43:25:dd:78:fa:0b:ad:01:
         e3:c8:9e:55:21:bd:20:85:92:85:f7:61:f7:78:58:48:b4:b4:
         39:15:12:0f:8b:8d:e4:cb:59:62:1a:1c:74:f8:f0:90:bc:d7:
         16:8d:69:82:59:8b:49:4b:e1:6d:7f:e9:af:5a:5b:8a:18:ee:
         0f:f8:c2:a1:4f:b4:9d:a0:23:01:65:47:28:e9:a2:0f:2f:66:
         c9:fe:97:a7:1f:7d:cb:6d:7a:8a:fa:67:97:20:1c:e9:f0:4e:
         04:f6:80:41:57:83:e4:9b:8d:29:57:46:ad:c7:1d:b1:54:11:
         73:62:3b:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9VsYu08bXjU+pXxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDI5M2E3YTQtZDc4YS00ODcyLThlMTQtY2IxNDNlOTU2ZmExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAljp9uxj8z4UW24L+EeFi/eeD0bQUWmZ6FG0B
YIrH3blm40bGA7sHbNmNwIMKdqf2Dhcu2r6RzjpoqbhiEdwZVmnS4PG5GwbgbI6g
xdPYetE6MxuJDFed4s+DelMPUWLvsugTv2uk2d4FAtUbklrNq45pKb7l33Fld5sj
NfYn1bi280sRgccY9Q7eXjvo+w/jLzmErEK+mOxF2sCckY35j0vhny2G0dwZqeyt
R+WhevFloh1kfHIQ+Qz6IurUTf0X9Xc7+OxGRkXsWCsQ+8Ja0UdvdOj3RrcKOQ07
5cNJbLh7yhQJSPusiIQfm3tKU8CkjPtGP6vyhaKb4Z4GeU3K/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM5c7R1bke0I9+lwCyzwI8/QXxnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZTc3OGM5MjYtYmFlOS0z
NDdkLTgyZTktMTE0ODE2YmU4NjE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBiVMwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAQ9NBjPLug3PPjShM75OmFehPNDIi5UKIH1LRhCCYbQ3oFyRDkoX7+C
HJGB6WzH6mUNr8HNXFh7lM7kQPD/80e34zkINmUNcNhMsqdTd6yBS9MD4qDG16Ns
Dg6HCzTRV8gHTofL5+dEwHyJWktyC39JFphILAKuK6MfgOIxYYZ3fJ5gSW3acJlD
Jd14+gutAePInlUhvSCFkoX3Yfd4WEi0tDkVEg+LjeTLWWIaHHT48JC81xaNaYJZ
i0lL4W1/6a9aW4oY7g/4wqFPtJ2gIwFlRyjpog8vZsn+l6cffctteor6Z5cgHOnw
TgT2gEFXg+SbjSlXRq3HHbFUEXNiO98=
-----END CERTIFICATE-----
Generated at Wed Apr 9 11:41:08 2025 by rpki-client