Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa
File:                     7c3bc679-7f26-38de-b562-b430ec117b80.roa (raw, json)
Hash identifier:          78WpYP+O6eBERJaWWlkvXoywyVSwETg2fTxq4sKnSaU=
Subject key identifier:   05:47:DA:65:BA:CE:82:01:6E:39:4C:82:66:85:89:41:B7:D5:58:3D
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849605415FB26434C8357380100
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa
Signing time:             Tue 01 Apr 2025 01:00:47 +0000
ROA not before:           Tue 01 Apr 2025 01:00:47 +0000
ROA not after:            Mon 30 Jun 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        75.98.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:60:54:15:fb:26:43:4c:83:57:38:01:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  1 01:00:47 2025 GMT
            Not After : Jun 30 01:00:47 2025 GMT
        Subject: CN=12f203d9-593c-4dfb-8ff8-9265cbc77967
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:07:8f:d6:19:75:83:09:65:52:c6:51:cf:71:
                    a7:2a:48:8f:f1:57:b0:44:24:48:5f:d2:68:f2:51:
                    8d:04:91:da:28:41:9a:f2:71:0a:33:3b:d6:30:cc:
                    5d:36:66:fa:b3:80:05:8b:63:1c:11:75:ab:2b:0a:
                    89:65:32:81:3c:80:fd:ef:33:a6:9c:5b:eb:49:4e:
                    de:0e:84:9b:e5:c0:b0:fd:9d:4e:7e:f5:9d:07:19:
                    a9:8d:eb:37:eb:b9:f4:a4:5c:03:58:74:be:a0:81:
                    78:ee:5a:fc:bc:90:e7:b4:e1:f9:f7:67:6c:6f:f3:
                    f3:14:77:4e:52:c9:f7:4e:e3:20:12:e6:b5:18:0f:
                    6a:c2:8f:aa:57:4a:35:0f:db:30:5a:b6:c9:77:11:
                    85:7a:13:04:40:0d:d3:c2:43:9c:6c:f4:eb:e4:45:
                    f5:30:fe:e5:b4:2c:31:94:bf:6d:bf:90:a9:81:48:
                    6c:b6:a0:17:b9:53:57:ac:83:29:86:5c:65:98:73:
                    db:e8:40:c1:8a:3e:ee:e2:cf:e8:30:0f:f8:04:f2:
                    f0:2f:f8:15:fd:06:e3:94:60:72:0d:41:2f:8d:3f:
                    d4:24:88:1f:6e:fc:ba:69:a0:d8:ba:df:a1:2d:6a:
                    cc:60:25:e8:33:39:53:33:c9:7b:46:78:e1:65:b8:
                    84:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:47:DA:65:BA:CE:82:01:6E:39:4C:82:66:85:89:41:B7:D5:58:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7c3bc679-7f26-38de-b562-b430ec117b80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.98.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:54:b5:f5:9c:f4:74:01:5b:c3:a6:f1:6f:1a:a9:64:da:c7:
         27:44:8e:84:93:39:9c:39:2e:6f:83:3a:07:fc:dc:15:85:04:
         07:9e:d9:75:09:f8:c4:2c:52:a0:6e:bd:8a:8e:f9:12:70:84:
         ad:db:82:b0:ac:f2:2c:bb:46:74:a0:6e:5d:bf:30:4b:f0:c9:
         ee:52:0c:9d:bc:4b:cd:d8:b6:a3:3b:7b:81:46:20:e2:8b:a4:
         da:bf:c7:57:ea:08:b4:8f:93:db:b6:2c:2d:0d:53:dc:f7:fd:
         7e:17:82:bf:a5:46:a6:05:3e:7e:cd:b2:11:35:62:ee:0a:0f:
         45:40:44:2c:92:fa:9e:75:58:23:1a:f0:49:9c:09:8b:95:63:
         65:cf:af:ec:fc:13:5d:db:6b:38:de:02:63:85:21:3a:b0:b1:
         01:8e:e3:e8:2c:6b:c7:73:a6:b6:e7:e2:d0:42:6a:e4:7c:c2:
         21:42:5d:ef:33:e0:eb:88:ff:99:bf:9c:2a:91:4d:16:bf:fe:
         ec:a9:6e:3a:6a:5f:1d:5c:0a:da:24:81:d0:74:f1:3a:bc:b9:
         41:40:c7:12:51:59:d6:f3:28:0f:5a:ad:27:2c:c4:10:02:42:
         2e:be:82:48:1a:b2:ed:19:ff:94:66:45:62:41:73:c0:55:d0:
         c7:06:e6:50
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElgVBX7JkNMg1c4AQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQwMTAxMDA0N1oXDTI1MDYzMDAxMDA0N1owLzEtMCsGA1UEAxMk
MTJmMjAzZDktNTkzYy00ZGZiLThmZjgtOTI2NWNiYzc3OTY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhAeP1hl1gwllUsZRz3GnKkiP8VewRCRIX9Jo
8lGNBJHaKEGa8nEKMzvWMMxdNmb6s4AFi2McEXWrKwqJZTKBPID97zOmnFvrSU7e
DoSb5cCw/Z1OfvWdBxmpjes367n0pFwDWHS+oIF47lr8vJDntOH592dsb/PzFHdO
Usn3TuMgEua1GA9qwo+qV0o1D9swWrbJdxGFehMEQA3TwkOcbPTr5EX1MP7ltCwx
lL9tv5CpgUhstqAXuVNXrIMphlxlmHPb6EDBij7u4s/oMA/4BPLwL/gV/QbjlGBy
DUEvjT/UJIgfbvy6aaDYut+hLWrMYCXoMzlTM8l7RnjhZbiEUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVH2mW6zoIBbjlMgmaFiUG31Vg9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvN2MzYmM2NzktN2YyNi0z
OGRlLWI1NjItYjQzMGVjMTE3YjgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES2KAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHtUtfWc9HQBW8Om8W8aqWTaxydEjoSTOZw5Lm+DOgf83BWFBAee2XUJ
+MQsUqBuvYqO+RJwhK3bgrCs8iy7RnSgbl2/MEvwye5SDJ28S83YtqM7e4FGIOKL
pNq/x1fqCLSPk9u2LC0NU9z3/X4Xgr+lRqYFPn7NshE1Yu4KD0VARCyS+p51WCMa
8EmcCYuVY2XPr+z8E13bazjeAmOFITqwsQGO4+gsa8dzprbn4tBCauR8wiFCXe8z
4OuI/5m/nCqRTRa//uypbjpqXx1cCtokgdB08Tq8uUFAxxJRWdbzKA9arScsxBAC
Qi6+gkgasu0Z/5RmRWJBc8BV0McG5lA=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:29:36 2025 by rpki-client