Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/e2f46dbf-f9be-3636-8faf-9d2e84aa488c.roa
File:                     e2f46dbf-f9be-3636-8faf-9d2e84aa488c.roa (raw, json)
Hash identifier:          TmtvHkWLDHuGGZwjJbdclJl4B5ykCHzrDIxSch7qtZ4=
Subject key identifier:   DE:66:8C:D3:39:D7:F9:CA:57:00:D3:5C:FA:AD:48:83:8D:95:C3:1A
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285848A29B51D1F4DCCB048D3CE540
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/e2f46dbf-f9be-3636-8faf-9d2e84aa488c.roa
Signing time:             Thu 23 Jan 2025 02:00:40 +0000
ROA not before:           Thu 23 Jan 2025 02:00:40 +0000
ROA not after:            Wed 23 Apr 2025 01:00:40 +0000
asID:                     13768
IP address blocks:        65.39.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:9b:51:d1:f4:dc:cb:04:8d:3c:e5:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Jan 23 02:00:40 2025 GMT
            Not After : Apr 23 01:00:40 2025 GMT
        Subject: CN=7de0b074-5390-4a6e-86de-f348c9a18c2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a7:db:53:8a:79:eb:cd:0f:51:4c:e9:56:9b:
                    01:c8:55:1f:05:2e:21:1d:d1:77:0c:8d:cb:4f:a3:
                    11:ac:4a:e5:d6:ba:a2:f1:c4:9d:ab:55:81:0e:b7:
                    95:6c:78:ca:89:b3:80:fe:5e:f2:7c:b5:ae:b1:25:
                    7a:81:bb:6f:0a:91:48:de:37:12:a9:44:29:4a:8c:
                    38:32:b9:9f:22:62:5c:f0:55:41:8e:cc:75:de:8e:
                    b2:66:7f:34:60:78:19:d0:8e:6e:0b:4a:52:76:ea:
                    13:c0:8b:d5:82:73:6f:63:8b:19:bf:36:cc:b2:7e:
                    22:6e:c2:da:b7:ed:d6:e3:5a:05:96:d9:0e:f2:4d:
                    d3:f6:89:e3:41:94:f0:ba:83:17:a1:11:60:83:82:
                    97:0b:58:ac:02:11:4b:74:b7:34:43:a0:a7:b7:8a:
                    c6:65:68:d2:ba:3d:3c:2a:e7:4b:6c:17:44:20:af:
                    27:00:1c:a9:fe:ae:50:9a:e4:b3:b8:d5:be:f5:7d:
                    03:28:37:68:70:86:d5:95:99:61:c5:b0:a7:91:97:
                    d8:ed:aa:ca:35:65:f1:7c:24:7a:fc:1e:16:8e:f4:
                    44:bb:9e:05:6b:77:c6:54:9e:ed:b1:55:1c:ef:f5:
                    43:f5:50:78:0e:64:33:c6:4a:7d:59:20:f6:23:22:
                    fc:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:66:8C:D3:39:D7:F9:CA:57:00:D3:5C:FA:AD:48:83:8D:95:C3:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/e2f46dbf-f9be-3636-8faf-9d2e84aa488c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.39.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         70:06:da:58:1c:8d:2a:37:2a:1a:6c:37:d9:d4:26:26:85:e4:
         de:49:45:4d:e6:e7:0b:03:a7:df:74:d5:8a:15:b9:34:c8:f0:
         0a:3b:f0:1f:73:4e:c8:b5:0b:e8:6b:df:6e:2b:e4:3f:4c:a6:
         37:e7:de:40:6a:d5:15:89:3d:fc:b4:bd:cc:90:21:6e:7e:af:
         87:72:8b:3d:5d:fd:d9:44:24:be:cd:df:b4:26:00:89:7e:9c:
         fd:38:31:c6:50:d3:b6:e4:80:86:6f:dd:e8:fd:a0:3c:9d:af:
         20:09:a5:cc:13:13:9e:c9:a5:45:a7:a0:66:4e:6b:58:36:b7:
         5b:11:37:db:37:82:90:be:54:bf:e0:ef:ad:05:4b:d8:89:29:
         bf:f5:56:d3:9a:67:7c:63:32:27:2b:92:7c:67:34:41:b3:74:
         97:27:19:27:b1:a9:55:ec:60:ee:ea:23:34:9e:f3:2b:2c:38:
         96:6c:0b:d2:de:df:aa:94:b5:fa:7a:18:66:ec:27:e5:05:ba:
         fa:ef:fc:b2:62:7e:3c:50:9a:3d:eb:ed:6c:c2:ca:49:4e:f8:
         dc:2f:62:2e:c5:9b:06:39:6b:cf:14:85:bb:b5:c9:9b:82:de:
         c8:4f:88:6a:72:ff:63:58:81:8d:ac:53:ae:d5:cc:dd:f1:98:
         06:3e:38:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiim1HR9NzLBI085UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDEyMzAyMDA0MFoXDTI1MDQyMzAxMDA0MFowLzEtMCsGA1UEAxMk
N2RlMGIwNzQtNTM5MC00YTZlLTg2ZGUtZjM0OGM5YTE4YzJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKfbU4p5680PUUzpVpsByFUfBS4hHdF3DI3L
T6MRrErl1rqi8cSdq1WBDreVbHjKibOA/l7yfLWusSV6gbtvCpFI3jcSqUQpSow4
MrmfImJc8FVBjsx13o6yZn80YHgZ0I5uC0pSduoTwIvVgnNvY4sZvzbMsn4ibsLa
t+3W41oFltkO8k3T9onjQZTwuoMXoRFgg4KXC1isAhFLdLc0Q6Cnt4rGZWjSuj08
KudLbBdEIK8nAByp/q5QmuSzuNW+9X0DKDdocIbVlZlhxbCnkZfY7arKNWXxfCR6
/B4WjvREu54Fa3fGVJ7tsVUc7/VD9VB4DmQzxkp9WSD2IyL8XQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN5mjNM51/nKVwDTXPqtSIONlcMaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvZTJmNDZkYmYtZjliZS0z
NjM2LThmYWYtOWQyZTg0YWE0ODhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQSfGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHAG2lgcjSo3KhpsN9nUJiaF5N5JRU3m5wsDp9901YoVuTTI8Ao78B9z
Tsi1C+hr324r5D9Mpjfn3kBq1RWJPfy0vcyQIW5+r4dyiz1d/dlEJL7N37QmAIl+
nP04McZQ07bkgIZv3ej9oDydryAJpcwTE57JpUWnoGZOa1g2t1sRN9s3gpC+VL/g
760FS9iJKb/1VtOaZ3xjMicrknxnNEGzdJcnGSexqVXsYO7qIzSe8yssOJZsC9Le
36qUtfp6GGbsJ+UFuvrv/LJifjxQmj3r7WzCyklO+NwvYi7FmwY5a88Uhbu1yZuC
3shPiGpy/2NYgY2sU67VzN3xmAY+OPI=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:17:37 2025 by rpki-client