Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0881a156-4676-335b-9bbe-09e13fdaa7e9.roa
File:                     0881a156-4676-335b-9bbe-09e13fdaa7e9.roa (raw, json)
Hash identifier:          H9+rOGM2m0I56Z8Omw/fHwpgMAl2Rhm61NJwKnVNqds=
Subject key identifier:   FB:86:78:98:85:80:93:84:A7:10:03:AE:A6:13:55:01:64:9C:76:99
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584971142B87D567E2800404F340
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0881a156-4676-335b-9bbe-09e13fdaa7e9.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     395075
IP address blocks:        207.96.156.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:2b:87:d5:67:e2:80:04:04:f3:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=e7b930d3-762b-4ce5-9b41-1dce633cc2d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:b9:1b:2b:e0:3e:f7:de:8c:82:49:5a:a0:c9:
                    51:2e:d6:03:d3:72:dc:58:4a:db:11:fa:30:7b:9a:
                    98:ef:5b:14:65:23:2f:c1:db:47:8f:c9:cf:01:af:
                    7e:bb:16:44:4f:f0:e3:a4:5d:79:41:2a:11:2c:08:
                    19:ba:3e:fa:f0:0a:f8:ad:58:c7:41:07:f9:68:25:
                    2d:db:62:62:4c:a9:d8:62:d4:08:39:ac:0d:44:0a:
                    cc:f0:c2:0a:17:83:5a:25:2e:bd:f2:24:0d:c3:75:
                    78:82:d9:ae:2a:8c:01:9c:f7:7c:86:a4:34:ff:a2:
                    bf:6f:f3:79:ae:19:42:13:b9:ca:8a:34:51:a4:cd:
                    45:8c:3b:88:1e:0a:0d:ba:9d:79:6c:8b:66:36:7a:
                    80:8b:eb:12:42:c1:5e:b0:ff:b8:7a:ff:21:5d:83:
                    35:6a:f6:18:d2:6f:5c:03:b1:80:2e:3c:33:4e:f3:
                    0e:01:5a:0c:cb:4b:bc:6f:64:b4:e7:a9:2d:25:25:
                    d4:b9:dd:75:e9:75:2d:ae:02:5b:23:70:50:99:26:
                    be:52:bf:ac:37:d9:fc:8c:d6:f9:16:f3:9c:1e:ce:
                    e6:6b:e1:0e:01:bd:c2:a1:16:20:b1:ae:c0:20:a5:
                    7a:32:26:2f:43:51:e0:41:f3:b9:8e:9c:87:14:19:
                    8c:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:86:78:98:85:80:93:84:A7:10:03:AE:A6:13:55:01:64:9C:76:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0881a156-4676-335b-9bbe-09e13fdaa7e9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.96.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:ef:d1:bb:f7:7e:c1:12:2d:07:27:26:79:02:cb:3e:dd:23:
         e0:79:cd:30:38:e5:dd:ce:19:9d:f9:e5:3d:57:dd:d1:1e:1e:
         a4:a4:fd:17:01:bf:a7:7b:0d:5c:e8:0b:23:ee:04:4d:1c:b2:
         da:24:9a:34:09:35:58:ff:fb:6f:b4:87:9b:36:25:9c:40:15:
         bc:83:37:f6:91:95:4f:42:8f:64:62:2f:4f:0a:e3:41:e4:24:
         12:5d:1c:07:e0:c2:3e:36:c1:42:c1:e6:a2:2f:3b:e8:2e:3b:
         a7:4f:e0:07:fb:bd:72:19:85:a0:5b:0d:c5:95:fd:58:16:71:
         87:e8:c1:a4:e6:cd:9e:9f:d5:48:f0:13:a8:4f:47:d7:bd:09:
         ae:1a:87:93:32:c0:3e:9d:09:3a:dc:f7:44:1a:32:ec:47:ef:
         92:9a:b7:59:ce:c5:b9:16:0f:d0:61:2b:3d:ad:f1:12:ce:05:
         7f:27:a2:a7:a7:20:f8:93:d5:4f:8f:08:5b:88:a6:82:d6:2e:
         8f:47:fd:49:d0:38:69:b0:39:e2:9e:64:5e:91:8e:4f:c0:dd:
         47:ba:6f:5d:8c:b4:bb:fd:40:d6:db:7b:69:ae:87:7f:8f:ba:
         cc:58:1e:82:bb:0a:73:02:7e:cd:f1:8d:61:fd:d0:dd:94:b6:
         f6:ce:7e:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFCuH1WfigAQE80AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
ZTdiOTMwZDMtNzYyYi00Y2U1LTliNDEtMWRjZTYzM2NjMmQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobkbK+A+996MgklaoMlRLtYD03LcWErbEfow
e5qY71sUZSMvwdtHj8nPAa9+uxZET/DjpF15QSoRLAgZuj768Ar4rVjHQQf5aCUt
22JiTKnYYtQIOawNRArM8MIKF4NaJS698iQNw3V4gtmuKowBnPd8hqQ0/6K/b/N5
rhlCE7nKijRRpM1FjDuIHgoNup15bItmNnqAi+sSQsFesP+4ev8hXYM1avYY0m9c
A7GALjwzTvMOAVoMy0u8b2S056ktJSXUud116XUtrgJbI3BQmSa+Ur+sN9n8jNb5
FvOcHs7ma+EOAb3CoRYgsa7AIKV6MiYvQ1HgQfO5jpyHFBmMkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPuGeJiFgJOEpxADrqYTVQFknHaZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMDg4MWExNTYtNDY3Ni0z
MzViLTliYmUtMDllMTNmZGFhN2U5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz2CcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEjv0bv3fsESLQcnJnkCyz7dI+B5zTA45d3OGZ355T1X3dEeHqSk/RcB
v6d7DVzoCyPuBE0cstokmjQJNVj/+2+0h5s2JZxAFbyDN/aRlU9Cj2RiL08K40Hk
JBJdHAfgwj42wULB5qIvO+guO6dP4Af7vXIZhaBbDcWV/VgWcYfowaTmzZ6f1Ujw
E6hPR9e9Ca4ah5MywD6dCTrc90QaMuxH75Kat1nOxbkWD9BhKz2t8RLOBX8noqen
IPiT1U+PCFuIpoLWLo9H/UnQOGmwOeKeZF6Rjk/A3Ue6b12MtLv9QNbbe2muh3+P
usxYHoK7CnMCfs3xjWH90N2UtvbOfr4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:06:27 2025 by rpki-client