Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa
File:                     4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa (raw, json)
Hash identifier:          7GBjRtlJ6hXRpm+AmsOKPkYFy4M3o+5DxiYb/w6IrdQ=
Subject key identifier:   B6:A9:FF:FC:91:0C:4F:99:B1:D6:50:5B:46:C2:6D:D1:A4:1F:46:68
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A98DDBF873AD559D1C8140
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        65.39.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:8d:db:f8:73:ad:55:9d:1c:81:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=766cfd38-9e84-44e9-9dc8-dc6ffc9f1ef1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:99:74:4c:4d:2a:5b:e6:aa:2a:45:ed:a8:c9:
                    6d:a3:48:a2:b4:26:1f:4c:35:75:15:bb:7c:8a:d8:
                    d6:34:fe:37:f9:e2:fa:6f:81:a3:6f:be:3c:1b:36:
                    31:de:e4:cf:57:0d:94:6d:4e:71:71:74:a5:7e:91:
                    a8:b2:4d:70:23:93:59:a7:7d:ef:4f:80:7e:4e:e1:
                    5a:40:01:e3:e0:2b:b8:e2:b0:13:32:a1:bc:e3:eb:
                    b3:08:2d:6f:21:53:5d:b4:3d:34:f9:b4:95:1b:e3:
                    24:6b:9a:f7:ff:a7:9c:12:9a:49:47:33:ee:9a:13:
                    ce:c6:07:c6:17:c3:27:03:6d:93:46:89:fd:37:37:
                    01:44:46:4f:d2:78:27:92:3e:1d:30:71:bb:59:b6:
                    2f:de:f1:e2:cf:ba:8e:a9:5c:5d:ec:55:cd:4f:38:
                    3e:71:bc:d4:e5:3e:bb:68:c9:41:1e:f0:6e:e2:1e:
                    9f:ba:f0:32:3c:61:88:e0:aa:c9:5b:c5:fc:62:07:
                    01:01:66:0c:40:18:a6:b9:47:79:78:56:67:83:27:
                    55:2a:9c:56:6a:a0:24:10:f0:22:7e:dd:1e:45:40:
                    54:64:20:42:e2:b7:77:01:10:52:5c:1a:9e:31:4f:
                    b8:98:12:3f:c6:6d:f3:fc:d1:1f:5e:a2:5c:47:e4:
                    64:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A9:FF:FC:91:0C:4F:99:B1:D6:50:5B:46:C2:6D:D1:A4:1F:46:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/4b153d19-2b52-37cc-b423-ca5afc1e8f9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:e8:01:ea:b7:56:e2:bd:bd:72:a7:8e:42:c0:23:6c:9d:98:
         e7:5e:fe:29:c3:cc:b0:04:a0:c6:86:8d:2d:c8:7f:2b:ce:64:
         2a:58:41:fd:1b:82:da:d2:34:22:44:25:f1:ea:56:57:e5:7b:
         51:f5:e3:00:4b:c8:a0:fa:54:ef:fc:08:ca:d4:4d:36:1e:59:
         d3:ba:e4:07:df:c1:58:42:07:f6:0c:b5:ab:ef:8c:03:6a:ef:
         42:93:4d:3c:37:5f:55:71:07:7b:a6:12:11:ee:8c:5e:94:01:
         d6:8e:01:c8:b9:27:e5:74:35:48:e9:df:8b:b9:73:5f:20:45:
         91:46:e7:4a:83:2c:a2:bc:7d:d6:3f:4c:9a:7b:5a:86:cf:47:
         3b:25:c4:79:e9:a1:5f:d3:68:7f:87:11:28:b6:e6:95:a2:19:
         d9:6f:c3:83:66:c6:e6:b0:b3:49:95:fa:1b:71:13:42:9d:7d:
         33:77:1e:1a:74:47:40:79:34:ee:80:8b:ba:76:b9:a9:31:36:
         21:39:47:b6:57:df:55:2a:92:a6:31:8a:54:a3:66:60:dc:f7:
         43:ba:ba:8b:7e:6c:3d:ae:9e:27:04:1d:66:3f:6f:58:19:07:
         9f:5c:46:7c:3e:12:21:1c:04:67:6e:c1:28:86:47:ec:91:fd:
         8a:15:22:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qY3b+HOtVZ0cgUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
NzY2Y2ZkMzgtOWU4NC00NGU5LTlkYzgtZGM2ZmZjOWYxZWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkZl0TE0qW+aqKkXtqMlto0iitCYfTDV1Fbt8
itjWNP43+eL6b4Gjb748GzYx3uTPVw2UbU5xcXSlfpGosk1wI5NZp33vT4B+TuFa
QAHj4Cu44rATMqG84+uzCC1vIVNdtD00+bSVG+Mka5r3/6ecEppJRzPumhPOxgfG
F8MnA22TRon9NzcBREZP0ngnkj4dMHG7WbYv3vHiz7qOqVxd7FXNTzg+cbzU5T67
aMlBHvBu4h6fuvAyPGGI4KrJW8X8YgcBAWYMQBimuUd5eFZngydVKpxWaqAkEPAi
ft0eRUBUZCBC4rd3ARBSXBqeMU+4mBI/xm3z/NEfXqJcR+RkrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLap//yRDE+ZsdZQW0bCbdGkH0ZoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNGIxNTNkMTktMmI1Mi0z
N2NjLWI0MjMtY2E1YWZjMWU4ZjliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQSf6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHvoAeq3VuK9vXKnjkLAI2ydmOde/inDzLAEoMaGjS3IfyvOZCpYQf0b
gtrSNCJEJfHqVlfle1H14wBLyKD6VO/8CMrUTTYeWdO65AffwVhCB/YMtavvjANq
70KTTTw3X1VxB3umEhHujF6UAdaOAci5J+V0NUjp34u5c18gRZFG50qDLKK8fdY/
TJp7WobPRzslxHnpoV/TaH+HESi25pWiGdlvw4Nmxuaws0mV+htxE0KdfTN3Hhp0
R0B5NO6Ai7p2uakxNiE5R7ZX31UqkqYxilSjZmDc90O6uot+bD2unicEHWY/b1gZ
B59cRnw+EiEcBGduwSiGR+yR/YoVIkM=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:01:26 2025 by rpki-client