Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
File:                     090eba3d-725e-3b20-8875-24c2d606b0e1.roa (raw, json)
Hash identifier:          E1oqoZZ6U4yYIk3qI1Xpxyq8DkcnufgjeDuG0ZmzXp8=
Subject key identifier:   C8:CE:4E:83:A7:E1:5F:D8:DD:C6:89:40:16:E6:39:22:08:44:66:74
Certificate issuer:       /CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
Certificate serial:       010D0C9F43285849350EAB1F4BAAB5DAD6D53700
Authority key identifier: 57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     18434
IP address blocks:        69.36.18.0/24 maxlen: 24
                          147.249.12.0/24 maxlen: 24
                          147.249.13.0/24 maxlen: 24
                          147.249.14.0/24 maxlen: 24
                          147.249.15.0/24 maxlen: 24
                          156.55.42.0/24 maxlen: 24
                          156.55.138.0/24 maxlen: 24
                          156.55.164.0/24 maxlen: 24
                          156.55.165.0/24 maxlen: 24
                          156.55.166.0/24 maxlen: 24
                          156.55.167.0/24 maxlen: 24
                          156.55.172.0/24 maxlen: 24
                          156.55.176.0/24 maxlen: 24
                          156.55.177.0/24 maxlen: 24
                          156.55.202.0/24 maxlen: 24
                          156.55.203.0/24 maxlen: 24
                          199.200.24.0/24 maxlen: 24
                          199.200.25.0/24 maxlen: 24
                          199.200.26.0/24 maxlen: 24
                          199.200.27.0/24 maxlen: 24
                          216.189.244.0/24 maxlen: 24
                          216.189.254.0/24 maxlen: 24
                          216.189.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:ab:1f:4b:aa:b5:da:d6:d5:37:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d3a5699-3eb8-4ecb-80a5-e8761a19b971
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=769f2970-84ad-448a-b81a-b750862b1020
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:f3:ff:c4:49:e4:d9:c0:9b:99:da:0d:2d:4c:
                    fc:4f:e7:f9:80:fb:c7:5e:80:a1:16:29:82:5f:97:
                    43:d7:f9:f0:63:1b:ab:7c:ec:55:b7:34:6e:bf:4b:
                    ba:6f:d9:dc:37:ce:56:81:1c:bc:f2:80:7a:1d:00:
                    f2:30:e4:cc:0a:70:9e:30:71:de:15:a3:6a:89:94:
                    ce:f0:a6:41:78:9d:c8:6a:f8:be:a7:44:be:37:3e:
                    d5:81:2a:a9:29:1a:d5:1e:f2:c9:79:6a:04:2e:a5:
                    29:9d:3d:63:e2:81:15:d2:1e:0a:48:ed:c7:7e:b6:
                    b6:bb:00:1f:ba:3f:36:17:8c:c0:fc:3a:17:a7:ea:
                    23:f0:15:79:7a:63:27:cd:9b:c5:4f:f5:43:48:ff:
                    27:8f:fc:e8:2c:e5:c1:53:c2:19:1a:3d:8a:91:d9:
                    48:2f:5f:21:d2:7d:5b:dd:c3:d3:7c:0d:2c:ec:be:
                    e8:9f:48:e0:a4:89:c5:d7:5f:e9:4a:f8:2e:a5:d6:
                    aa:2c:46:3e:66:98:e0:c0:aa:5f:6a:e6:58:77:0d:
                    f4:6f:6d:e0:7a:21:06:33:c3:2f:dd:90:3c:04:50:
                    f2:9b:ee:63:54:66:b5:71:cc:b9:72:4a:32:1b:8f:
                    70:09:57:fe:a8:70:ab:cc:e8:e0:f6:65:32:f2:d0:
                    72:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:CE:4E:83:A7:E1:5F:D8:DD:C6:89:40:16:E6:39:22:08:44:66:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/090eba3d-725e-3b20-8875-24c2d606b0e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.crl

            X509v3 Authority Key Identifier:
                keyid:57:1A:A5:27:EC:17:91:77:8C:71:79:03:73:62:71:C5:53:17:64:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/0d3a5699-3eb8-4ecb-80a5-e8761a19b971.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.36.18.0/24
                  147.249.12.0/22
                  156.55.42.0/24
                  156.55.138.0/24
                  156.55.164.0/22
                  156.55.172.0/24
                  156.55.176.0/23
                  156.55.202.0/23
                  199.200.24.0/22
                  216.189.244.0/24
                  216.189.254.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:78:f0:26:45:03:99:39:31:6c:a8:f4:a2:43:d0:e8:09:eb:
         90:aa:3e:c0:13:ea:04:2e:9a:03:a8:53:79:f6:1b:26:0b:30:
         ff:bb:11:75:a8:1d:31:aa:2d:1e:bb:72:0e:45:9c:d0:06:ec:
         ec:74:19:07:2f:35:b5:1c:d0:6b:ed:5d:8e:8f:d2:ad:1b:19:
         a7:36:bb:93:3a:f9:f6:21:35:c9:a0:6c:ce:10:eb:e8:88:24:
         5e:69:55:cb:66:38:8c:c6:fa:d6:82:a7:cf:42:dc:da:2c:0a:
         43:70:df:1c:de:57:1b:a5:af:df:eb:f9:39:ea:eb:74:dd:4d:
         0e:94:cb:f6:fc:ae:ce:90:69:ff:61:b7:5b:90:ef:3f:b4:7f:
         34:d6:1d:ef:30:a1:5e:be:ad:bd:40:f1:de:25:8f:50:e7:24:
         86:34:09:00:de:07:0c:71:59:da:77:62:c9:ad:48:4f:df:f8:
         e5:28:b3:8d:32:44:38:27:00:b1:46:48:3e:f9:79:cc:b4:00:
         e3:43:6e:17:95:b7:05:63:de:06:7b:90:05:df:b9:6a:90:79:
         91:8b:3b:c9:19:89:e4:98:43:a5:a4:9f:6a:b0:70:ef:f6:9e:
         65:fe:ac:68:35:a1:95:22:d8:60:d0:bc:4d:f8:94:9b:19:0c:
         b2:ca:fb:c8
-----BEGIN CERTIFICATE-----
MIIGfzCCBWegAwIBAgIUAQ0Mn0MoWEk1DqsfS6q12tbVNwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQzYTU2OTktM2ViOC00ZWNiLTgwYTUtZTg3NjFhMTli
OTcxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
NzY5ZjI5NzAtODRhZC00NDhhLWI4MWEtYjc1MDg2MmIxMDIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlvP/xEnk2cCbmdoNLUz8T+f5gPvHXoChFimC
X5dD1/nwYxurfOxVtzRuv0u6b9ncN85WgRy88oB6HQDyMOTMCnCeMHHeFaNqiZTO
8KZBeJ3Iavi+p0S+Nz7VgSqpKRrVHvLJeWoELqUpnT1j4oEV0h4KSO3Hfra2uwAf
uj82F4zA/DoXp+oj8BV5emMnzZvFT/VDSP8nj/zoLOXBU8IZGj2KkdlIL18h0n1b
3cPTfA0s7L7on0jgpInF11/pSvgupdaqLEY+ZpjgwKpfauZYdw30b23geiEGM8Mv
3ZA8BFDym+5jVGa1ccy5ckoyG49wCVf+qHCrzOjg9mUy8tByewIDAQABo4IDkTCC
A40wHQYDVR0OBBYEFMjOToOn4V/Y3caJQBbmOSIIRGZ0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNh
NTY5OS0zZWI4LTRlY2ItODBhNS1lODc2MWExOWI5NzEvMDkwZWJhM2QtNzI1ZS0z
YjIwLTg4NzUtMjRjMmQ2MDZiMGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMGQzYTU2OTktM2ViOC00ZWNiLTgw
YTUtZTg3NjFhMTliOTcxLzBkM2E1Njk5LTNlYjgtNGVjYi04MGE1LWU4NzYxYTE5
Yjk3MS5jcmwwHwYDVR0jBBgwFoAUVxqlJ+wXkXeMcXkDc2JxxVMXZGYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8wZDNhNTY5OS0zZWI4LTRlY2ItODBhNS1lODc2
MWExOWI5NzEuY2VyMFsGCCsGAQUFBwEHAQH/BEwwSjBIBAIAATBCAwQARSQSAwQC
k/kMAwQAnDcqAwQAnDeKAwQCnDekAwQAnDesAwQBnDewAwQBnDfKAwQCx8gYAwQA
2L30AwQB2L3+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAN48CZFA5k5MWyo9KJD0OgJ65CqPsAT6gQumgOo
U3n2GyYLMP+7EXWoHTGqLR67cg5FnNAG7Ox0GQcvNbUc0GvtXY6P0q0bGac2u5M6
+fYhNcmgbM4Q6+iIJF5pVctmOIzG+taCp89C3NosCkNw3xzeVxulr9/r+Tnq63Td
TQ6Uy/b8rs6Qaf9ht1uQ7z+0fzTWHe8woV6+rb1A8d4lj1DnJIY0CQDeBwxxWdp3
YsmtSE/f+OUos40yRDgnALFGSD75ecy0AONDbheVtwVj3gZ7kAXfuWqQeZGLO8kZ
ieSYQ6Wkn2qwcO/2nmX+rGg1oZUi2GDQvE34lJsZDLLK+8g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:26:25 2025 by rpki-client