Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa
File:                     3ffa981a-91a8-3617-9331-ea8500d52ebc.roa (raw, json)
Hash identifier:          fITyVGwu/gaffC0Li/tE5rl7MpJbITxw9Hhr2b96Jo0=
Subject key identifier:   EA:F1:81:B6:68:28:09:B3:D8:26:4A:CB:D0:9C:E9:B8:B0:05:E4:39
Certificate issuer:       /CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
Certificate serial:       010D0C9F432858491AA6BADD51E013116CF8DD00
Authority key identifier: C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     23158
IP address blocks:        67.216.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ba:dd:51:e0:13:11:6c:f8:dd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=400c5da8-08ab-40ed-9e23-dff413fb2d52
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=5a582c01-477d-4069-afdc-482a30f7dc97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:e1:ca:fd:aa:9d:88:87:e3:04:eb:c1:74:c5:
                    58:3f:93:01:a9:71:83:fe:0c:a4:13:db:83:46:2d:
                    b6:c9:90:03:b1:bc:27:ea:39:fe:c1:71:69:2a:e4:
                    3b:07:c3:2d:f8:f4:41:0e:be:ce:3e:5f:08:e9:3c:
                    e9:27:77:60:48:b6:7b:f5:1f:2b:d1:c2:31:d6:15:
                    8d:c1:dc:42:9e:01:1d:ea:2c:fa:ce:ff:9d:48:ee:
                    12:e1:3a:33:e3:1a:61:c6:2c:20:e2:f9:bf:ed:e3:
                    f5:28:f0:28:92:bd:71:7c:ab:d5:be:70:9f:82:01:
                    d0:b2:08:47:22:07:09:cf:56:03:27:c5:20:38:5e:
                    22:c1:43:ed:1e:80:67:2f:3b:02:5d:fb:50:1b:11:
                    73:25:2d:2c:ce:25:5f:e7:c5:d1:64:e4:6e:26:b8:
                    98:9b:65:f0:58:80:5b:77:3c:86:56:36:b9:c0:3d:
                    94:87:e8:17:53:98:5b:76:bf:30:26:fe:76:c2:82:
                    75:67:9a:fa:27:b0:83:6c:12:b3:05:e9:e4:b8:5d:
                    a0:63:a2:37:41:19:4c:a0:ab:8a:86:73:6a:aa:b3:
                    c7:60:c9:b8:4f:7d:25:6e:62:fe:ad:fb:ef:9e:da:
                    26:b7:b3:9f:11:55:fa:2b:2f:44:67:cc:3f:60:1d:
                    87:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F1:81:B6:68:28:09:B3:D8:26:4A:CB:D0:9C:E9:B8:B0:05:E4:39
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/3ffa981a-91a8-3617-9331-ea8500d52ebc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52/400c5da8-08ab-40ed-9e23-dff413fb2d52.crl

            X509v3 Authority Key Identifier:
                keyid:C1:64:92:0E:E9:7C:FC:C2:87:A4:0A:82:1D:BF:EA:21:97:33:7F:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/400c5da8-08ab-40ed-9e23-dff413fb2d52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.216.96.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:db:f6:ae:78:cf:52:76:5d:9c:cd:c4:62:2d:93:17:8a:63:
         31:b0:0b:a0:0d:e2:87:d0:22:36:06:3d:2a:85:b6:5c:f5:81:
         bf:ca:dd:99:94:4b:53:4e:ba:19:76:06:bf:35:63:7f:d5:d6:
         9e:88:4b:70:a3:a9:53:3c:05:1f:11:0f:b8:11:b9:00:50:a9:
         34:27:c9:83:7d:96:f3:9b:b3:16:75:c7:1e:7f:eb:39:17:b1:
         59:67:a1:ff:cf:8e:27:72:b8:fd:bd:de:9c:e4:45:ff:63:46:
         9b:18:1d:b0:5c:e2:22:f5:c5:55:eb:f4:93:b2:4c:7e:de:ad:
         5b:ff:72:c6:2b:62:18:d3:81:d6:2c:e7:2e:5d:bd:ad:45:3b:
         9a:73:a6:f2:7b:93:20:83:23:b6:5d:3f:e6:07:40:50:57:11:
         10:e1:3d:eb:69:12:08:92:aa:72:9c:cc:79:56:31:5b:ef:ba:
         c2:25:8b:4b:b4:e4:2e:81:9c:4b:cf:97:c3:20:43:a9:53:f2:
         22:90:66:d8:78:1f:5f:83:ca:13:d0:cd:0a:89:68:a0:8d:a8:
         00:fa:c6:9b:69:cd:1b:59:29:f7:ea:0f:40:06:46:1e:2b:38:
         bf:a4:48:c0:8c:e4:4c:82:83:72:cf:46:73:ab:cb:17:ed:ed:
         f4:e9:3e:07
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprrdUeATEWz43QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAwYzVkYTgtMDhhYi00MGVkLTllMjMtZGZmNDEzZmIy
ZDUyMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
NWE1ODJjMDEtNDc3ZC00MDY5LWFmZGMtNDgyYTMwZjdkYzk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0+HK/aqdiIfjBOvBdMVYP5MBqXGD/gykE9uD
Ri22yZADsbwn6jn+wXFpKuQ7B8Mt+PRBDr7OPl8I6TzpJ3dgSLZ79R8r0cIx1hWN
wdxCngEd6iz6zv+dSO4S4Toz4xphxiwg4vm/7eP1KPAokr1xfKvVvnCfggHQsghH
IgcJz1YDJ8UgOF4iwUPtHoBnLzsCXftQGxFzJS0sziVf58XRZORuJriYm2XwWIBb
dzyGVja5wD2Uh+gXU5hbdr8wJv52woJ1Z5r6J7CDbBKzBenkuF2gY6I3QRlMoKuK
hnNqqrPHYMm4T30lbmL+rfvvntomt7OfEVX6Ky9EZ8w/YB2HfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOrxgbZoKAmz2CZKy9Cc6biwBeQ5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC80MDBj
NWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0MTNmYjJkNTIvM2ZmYTk4MWEtOTFhOC0z
NjE3LTkzMzEtZWE4NTAwZDUyZWJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNDAwYzVkYTgtMDhhYi00MGVkLTll
MjMtZGZmNDEzZmIyZDUyLzQwMGM1ZGE4LTA4YWItNDBlZC05ZTIzLWRmZjQxM2Zi
MmQ1Mi5jcmwwHwYDVR0jBBgwFoAUwWSSDul8/MKHpAqCHb/qIZczf9kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC80MDBjNWRhOC0wOGFiLTQwZWQtOWUyMy1kZmY0
MTNmYjJkNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9hgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTb9q54z1J2XZzNxGItkxeKYzGwC6AN4ofQIjYGPSqFtlz1gb/K3ZmU
S1NOuhl2Br81Y3/V1p6IS3CjqVM8BR8RD7gRuQBQqTQnyYN9lvObsxZ1xx5/6zkX
sVlnof/PjidyuP293pzkRf9jRpsYHbBc4iL1xVXr9JOyTH7erVv/csYrYhjTgdYs
5y5dva1FO5pzpvJ7kyCDI7ZdP+YHQFBXERDhPetpEgiSqnKczHlWMVvvusIli0u0
5C6BnEvPl8MgQ6lT8iKQZth4H1+DyhPQzQqJaKCNqAD6xptpzRtZKffqD0AGRh4r
OL+kSMCM5EyCg3LPRnOryxft7fTpPgc=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:42:22 2025 by rpki-client