Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
File:                     feab4e24-c427-3262-ae07-c36619833029.roa (raw, json)
Hash identifier:          J9FW3KlNe+nraj2Te7faZ0zLPkzjm5G7w//x1Gi5Vdc=
Subject key identifier:   CB:25:F2:F3:F6:DC:B4:75:D0:04:DB:90:05:D2:59:20:92:90:D0:6E
Certificate issuer:       /CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
Certificate serial:       010D0C9F4328584964843B3BD41FA55AD5EB0CE0
Authority key identifier: 38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa
Signing time:             Wed 02 Apr 2025 13:01:01 +0000
ROA not before:           Wed 02 Apr 2025 13:01:01 +0000
ROA not after:            Tue 01 Jul 2025 13:01:01 +0000
asID:                     46841
IP address blocks:        162.218.240.0/21 maxlen: 24
                          162.251.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:64:84:3b:3b:d4:1f:a5:5a:d5:eb:0c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d1407f9-328d-4c44-abc9-11e6d18e8a53
        Validity
            Not Before: Apr  2 13:01:01 2025 GMT
            Not After : Jul  1 13:01:01 2025 GMT
        Subject: CN=5c2dca29-d414-43ce-b17c-c3fde3908468
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:01:1b:e7:e8:38:cf:a6:51:95:f9:6f:9f:04:
                    68:12:a9:f9:dc:fb:24:1f:f9:32:2c:21:60:9c:32:
                    65:9b:eb:04:9f:b1:1e:cd:f7:e1:3e:cb:4c:ec:b7:
                    e2:69:ea:1f:aa:dd:43:81:86:2a:fe:8c:8e:68:54:
                    3c:71:6b:55:27:76:1b:23:36:77:04:e0:d5:ef:33:
                    72:cd:44:64:e8:12:20:02:44:b7:bd:90:03:7a:aa:
                    0a:88:9d:44:62:fe:8b:a3:33:7f:01:a6:78:c1:2d:
                    3c:36:fd:8b:ce:b3:d9:09:c0:d5:ea:67:6e:93:6a:
                    19:a2:b7:0d:2c:19:10:3c:c1:a0:4c:c9:fc:a5:c5:
                    6f:fb:c6:0e:1d:5d:9a:b8:19:9d:49:f3:6c:ee:8f:
                    24:eb:79:3b:4d:b0:da:3c:95:37:43:24:b8:e1:b0:
                    00:05:97:ee:3f:d4:0a:7c:95:9b:9b:9c:2e:95:95:
                    d8:0d:4d:db:ea:29:4a:09:d0:22:57:49:56:f4:4e:
                    41:05:fe:56:b1:ed:04:ff:0a:f3:2c:cd:e3:a3:1d:
                    7b:c3:67:a7:44:a4:4f:3c:92:a6:af:db:5b:51:f4:
                    ef:6e:b0:df:a0:5a:b7:7c:dd:b6:97:05:49:e9:ad:
                    6d:c5:b9:2a:b5:66:7b:a7:a2:94:c5:fb:a6:7d:c9:
                    15:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:25:F2:F3:F6:DC:B4:75:D0:04:DB:90:05:D2:59:20:92:90:D0:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/feab4e24-c427-3262-ae07-c36619833029.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53/2d1407f9-328d-4c44-abc9-11e6d18e8a53.crl

            X509v3 Authority Key Identifier:
                keyid:38:E6:77:0A:A2:B2:5E:8E:09:E7:DE:3C:D4:26:FA:7C:C2:1B:D5:EF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/2d1407f9-328d-4c44-abc9-11e6d18e8a53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.218.240.0/21
                  162.251.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:94:83:bc:01:dd:f0:2c:e8:11:5c:71:c0:0d:8c:d2:ef:9a:
         aa:7c:c9:df:ea:24:c5:df:0f:dc:e4:fd:6c:99:8c:f9:6a:93:
         ba:e1:2c:0a:53:6d:9a:0f:02:c6:c1:81:e7:e6:75:f6:8d:dd:
         27:b9:c5:a2:70:bf:81:95:0b:68:d5:5d:59:ba:41:24:7f:29:
         11:48:bd:88:74:e7:9d:01:5a:24:48:da:6a:39:1c:e7:42:5d:
         00:c8:9c:42:c5:80:2a:db:a8:63:1b:79:ee:2e:0b:80:c7:06:
         36:83:d4:4b:eb:32:2a:1b:12:ad:9e:35:09:fd:0a:d4:b3:61:
         ed:2b:f9:88:e6:1e:e6:48:43:98:56:00:5a:dc:60:f8:56:97:
         34:c6:24:38:9d:a2:d5:45:f2:42:13:53:83:45:b2:be:47:5d:
         ac:01:c2:42:f2:6f:2e:4c:dc:f4:9b:ef:91:8a:13:57:4e:fe:
         23:36:3d:df:b9:57:7e:be:a1:e2:34:cd:fe:c4:80:f5:e1:ea:
         25:f4:0d:5e:6d:37:10:a3:aa:0a:16:e8:e1:96:ee:01:ed:cb:
         44:ad:d3:73:f2:e4:d4:94:0e:69:83:d0:c7:89:3a:93:e5:07:
         49:6f:a9:b8:cc:09:90:fe:0c:37:42:8a:d7:e8:3b:11:2d:53:
         87:8f:99:2a
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElkhDs71B+lWtXrDOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQxNDA3ZjktMzI4ZC00YzQ0LWFiYzktMTFlNmQxOGU4
YTUzMB4XDTI1MDQwMjEzMDEwMVoXDTI1MDcwMTEzMDEwMVowLzEtMCsGA1UEAxMk
NWMyZGNhMjktZDQxNC00M2NlLWIxN2MtYzNmZGUzOTA4NDY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvgEb5+g4z6ZRlflvnwRoEqn53PskH/kyLCFg
nDJlm+sEn7EezffhPstM7Lfiaeofqt1DgYYq/oyOaFQ8cWtVJ3YbIzZ3BODV7zNy
zURk6BIgAkS3vZADeqoKiJ1EYv6LozN/AaZ4wS08Nv2LzrPZCcDV6mduk2oZorcN
LBkQPMGgTMn8pcVv+8YOHV2auBmdSfNs7o8k63k7TbDaPJU3QyS44bAABZfuP9QK
fJWbm5wulZXYDU3b6ilKCdAiV0lW9E5BBf5Wse0E/wrzLM3jox17w2enRKRPPJKm
r9tbUfTvbrDfoFq3fN22lwVJ6a1txbkqtWZ7p6KUxfumfckV4wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFMsl8vP23LR10ATbkAXSWSCSkNBuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0
MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2ZDE4ZThhNTMvZmVhYjRlMjQtYzQyNy0z
MjYyLWFlMDctYzM2NjE5ODMzMDI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvMmQxNDA3ZjktMzI4ZC00YzQ0LWFi
YzktMTFlNmQxOGU4YTUzLzJkMTQwN2Y5LTMyOGQtNGM0NC1hYmM5LTExZTZkMThl
OGE1My5jcmwwHwYDVR0jBBgwFoAUOOZ3CqKyXo4J59481Cb6fMIb1e8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy8yZDE0MDdmOS0zMjhkLTRjNDQtYWJjOS0xMWU2
ZDE4ZThhNTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDotrwAwQD
ovsAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF6Ug7wB3fAs6BFcccANjNLvmqp8yd/qJMXfD9zk/WyZjPlq
k7rhLApTbZoPAsbBgefmdfaN3Se5xaJwv4GVC2jVXVm6QSR/KRFIvYh0550BWiRI
2mo5HOdCXQDInELFgCrbqGMbee4uC4DHBjaD1EvrMiobEq2eNQn9CtSzYe0r+Yjm
HuZIQ5hWAFrcYPhWlzTGJDidotVF8kITU4NFsr5HXawBwkLyby5M3PSb75GKE1dO
/iM2Pd+5V36+oeI0zf7EgPXh6iX0DV5tNxCjqgoW6OGW7gHty0St03Py5NSUDmmD
0MeJOpPlB0lvqbjMCZD+DDdCitfoOxEtU4ePmSo=
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:44:28 2025 by rpki-client