Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7a44c302-3552-34e8-93f5-b56f6318ca1a.roa
File:                     7a44c302-3552-34e8-93f5-b56f6318ca1a.roa (raw, json)
Hash identifier:          F9Dtwkf7rUB1L/iaejOKONeNvDvI3GzegRqKuX5cyXI=
Subject key identifier:   99:B2:9F:4F:7B:7B:73:44:51:75:8C:78:60:00:CE:93:B4:41:4A:29
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584976A993AE3975E66582B15D80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7a44c302-3552-34e8-93f5-b56f6318ca1a.roa
Signing time:             Wed 09 Apr 2025 01:00:47 +0000
ROA not before:           Wed 09 Apr 2025 01:00:47 +0000
ROA not after:            Tue 08 Jul 2025 01:00:47 +0000
asID:                     13768
IP address blocks:        64.226.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 19 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:76:a9:93:ae:39:75:e6:65:82:b1:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Apr  9 01:00:47 2025 GMT
            Not After : Jul  8 01:00:47 2025 GMT
        Subject: CN=e5c3d603-4667-4cc5-9fb1-2b1917b0343c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f1:86:16:1c:9d:5f:e7:cc:4f:19:86:61:cd:
                    1a:80:8c:3e:53:ca:6a:86:5e:55:39:6b:51:94:7d:
                    cb:dd:fe:09:d8:92:30:26:2b:8b:d4:76:23:36:e6:
                    0c:98:eb:d8:e3:9e:be:a7:21:a6:9c:84:27:37:a3:
                    1e:40:dc:b6:b0:b1:f6:26:30:d6:5a:71:38:8d:fe:
                    8e:dc:b7:d4:a5:17:1b:8f:37:6e:d3:46:f0:ea:0a:
                    78:b4:39:69:bc:fb:a6:7b:8c:91:e4:e0:03:1c:3c:
                    17:dd:50:a5:8f:5d:8c:8b:ed:f6:2d:14:ec:c0:62:
                    b0:9d:c8:f9:35:46:38:38:d1:7b:20:34:c4:e0:e9:
                    9a:5b:cf:ee:98:9e:82:02:45:77:5f:0e:f2:44:1c:
                    c3:36:e1:26:78:bb:1b:00:85:9b:9d:69:96:52:21:
                    1b:d8:56:af:65:01:7a:fc:7a:51:6d:76:63:12:e2:
                    1d:2f:20:76:d8:39:fe:48:89:75:ee:46:41:21:60:
                    aa:98:26:93:4d:3b:93:41:ea:1e:bb:da:14:51:52:
                    d0:80:1d:13:f5:bf:b0:e0:de:b3:96:6e:09:8f:5d:
                    bf:1b:dd:97:56:f9:49:63:9f:cd:18:92:46:f7:2e:
                    23:9f:fb:5f:f2:1a:2c:d8:e7:b7:cc:da:89:a1:ba:
                    fd:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:B2:9F:4F:7B:7B:73:44:51:75:8C:78:60:00:CE:93:B4:41:4A:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/7a44c302-3552-34e8-93f5-b56f6318ca1a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.226.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:0f:25:e1:ca:65:cc:ee:7c:d8:57:d3:33:a0:13:d6:4a:c1:
         68:b4:dd:c8:c2:2b:18:b5:94:46:f8:05:a3:90:f6:5d:79:d7:
         54:8a:95:11:7c:b2:a1:6d:c8:22:ad:f5:3a:a2:ff:4f:c8:15:
         d7:8e:66:1d:72:0b:88:e6:b4:76:75:c8:f7:38:8c:17:fb:41:
         3f:1c:29:9b:78:f3:8d:a2:9e:75:d3:eb:35:89:a9:18:2c:47:
         04:04:c2:53:37:fb:5d:cd:ef:f5:d7:3b:2f:6d:78:e3:5b:63:
         00:dd:07:fc:78:51:09:2d:b6:35:d7:f0:7c:e9:1e:4c:88:cb:
         55:91:5e:40:a2:04:3b:c5:1e:ca:dd:f9:6c:97:32:f0:3b:12:
         54:ad:0d:49:fa:e6:26:8d:70:62:80:b6:18:66:68:30:71:05:
         89:a3:09:bc:d2:04:fa:37:db:fa:d4:46:10:e5:e9:00:8b:3f:
         ea:cb:b0:46:3f:e6:e7:52:9f:c9:c0:a5:e8:d5:12:da:d2:f1:
         81:17:01:04:79:60:8a:19:86:ca:f3:da:ff:e9:4e:12:0e:eb:
         19:f1:bd:c3:85:6a:ed:a3:3a:9e:42:5b:07:fb:d6:21:71:8c:
         89:68:da:9a:2c:92:cc:1b:c4:d0:16:90:56:e2:61:97:bb:e8:
         27:3d:d2:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl2qZOuOXXmZYKxXYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDQwOTAxMDA0N1oXDTI1MDcwODAxMDA0N1owLzEtMCsGA1UEAxMk
ZTVjM2Q2MDMtNDY2Ny00Y2M1LTlmYjEtMmIxOTE3YjAzNDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgPGGFhydX+fMTxmGYc0agIw+U8pqhl5VOWtR
lH3L3f4J2JIwJiuL1HYjNuYMmOvY456+pyGmnIQnN6MeQNy2sLH2JjDWWnE4jf6O
3LfUpRcbjzdu00bw6gp4tDlpvPume4yR5OADHDwX3VClj12Mi+32LRTswGKwncj5
NUY4ONF7IDTE4OmaW8/umJ6CAkV3Xw7yRBzDNuEmeLsbAIWbnWmWUiEb2FavZQF6
/HpRbXZjEuIdLyB22Dn+SIl17kZBIWCqmCaTTTuTQeoeu9oUUVLQgB0T9b+w4N6z
lm4Jj12/G92XVvlJY5/NGJJG9y4jn/tf8hos2Oe3zNqJobr9KwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJmyn097e3NEUXWMeGAAzpO0QUopMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvN2E0NGMzMDItMzU1Mi0z
NGU4LTkzZjUtYjU2ZjYzMThjYTFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQOLHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFsPJeHKZczufNhX0zOgE9ZKwWi03cjCKxi1lEb4BaOQ9l1511SKlRF8
sqFtyCKt9Tqi/0/IFdeOZh1yC4jmtHZ1yPc4jBf7QT8cKZt4842innXT6zWJqRgs
RwQEwlM3+13N7/XXOy9teONbYwDdB/x4UQkttjXX8HzpHkyIy1WRXkCiBDvFHsrd
+WyXMvA7ElStDUn65iaNcGKAthhmaDBxBYmjCbzSBPo32/rURhDl6QCLP+rLsEY/
5udSn8nApejVEtrS8YEXAQR5YIoZhsrz2v/pThIO6xnxvcOFau2jOp5CWwf71iFx
jIlo2poskswbxNAWkFbiYZe76Cc90t0=
-----END CERTIFICATE-----
Generated at Fri Apr 18 02:00:37 2025 by rpki-client