Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa
File:                     9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa (raw, json)
Hash identifier:          jL3D7LfksPt86047YE5EiBc+DgR76F2NXOXbsbVAnas=
Subject key identifier:   C8:14:EB:8F:C2:E0:E8:9B:D5:D5:E3:9F:9C:E2:C5:21:97:EB:49:1E
Certificate issuer:       /CN=b3f53674-93ef-439e-9019-e6308b1c1738
Certificate serial:       010D0C9F432858491A267F0426B91BC6E1D11500
Authority key identifier: 16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa
Signing time:             Thu 06 Mar 2025 21:42:24 +0000
ROA not before:           Thu 06 Mar 2025 21:42:24 +0000
ROA not after:            Wed 04 Jun 2025 20:42:24 +0000
asID:                     397156
IP address blocks:        141.193.239.0/24 maxlen: 24
                          148.59.73.0/24 maxlen: 24
                          216.116.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:26:7f:04:26:b9:1b:c6:e1:d1:15:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b3f53674-93ef-439e-9019-e6308b1c1738
        Validity
            Not Before: Mar  6 21:42:24 2025 GMT
            Not After : Jun  4 20:42:24 2025 GMT
        Subject: CN=d262d074-df51-4eed-b380-eb5381db72b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:5a:1b:2f:92:d6:00:8e:2b:0d:6d:fd:38:79:
                    b4:77:3e:84:a3:a2:85:8c:88:42:64:77:98:66:57:
                    19:23:93:49:cb:6c:09:f9:6a:ed:00:ad:09:75:84:
                    4f:ec:51:ee:e5:e9:7d:dd:37:4d:a3:64:cc:11:99:
                    f2:c1:01:d3:51:c9:5b:3b:6f:20:0d:df:2b:a4:41:
                    c3:48:8e:11:b8:02:ec:f8:b9:c8:e4:4a:27:dd:af:
                    4a:df:68:db:38:6a:65:e3:67:58:66:d8:a1:36:c2:
                    6a:75:1f:1f:ff:81:e4:44:fd:80:14:6d:4d:85:9d:
                    81:9c:02:8d:6e:d0:e4:c4:1b:5d:17:23:e1:d3:f3:
                    44:dd:17:76:19:ae:2d:aa:cd:31:f6:8f:39:52:21:
                    e8:9a:9c:eb:1d:de:34:8b:14:b6:b5:90:53:46:58:
                    d6:b2:3e:d7:2b:98:ad:f9:dd:5c:ba:49:a2:7a:5d:
                    cd:90:d5:fc:77:3d:f0:8a:fb:bd:5f:a8:61:68:80:
                    92:18:15:15:f3:dd:d4:8d:23:2a:bd:d0:86:e0:8d:
                    70:c9:ae:3b:2d:44:7d:33:4d:a8:83:18:b9:0c:ad:
                    2c:5a:0b:df:f4:1a:f9:b3:31:8e:64:c7:86:f7:fd:
                    73:f6:ba:b9:96:11:2a:be:5a:85:87:cc:35:fe:f0:
                    5b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:14:EB:8F:C2:E0:E8:9B:D5:D5:E3:9F:9C:E2:C5:21:97:EB:49:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/9de18f6f-cddd-3888-aa3f-6e0e7c2f3ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738/b3f53674-93ef-439e-9019-e6308b1c1738.crl

            X509v3 Authority Key Identifier:
                keyid:16:42:9D:F8:DF:B9:96:4E:A5:A4:14:E6:B6:42:71:AE:9B:FF:2C:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/b3f53674-93ef-439e-9019-e6308b1c1738.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.239.0/24
                  148.59.73.0/24
                  216.116.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:7d:78:d0:75:4f:1e:2e:85:30:ba:cb:dd:ca:d6:07:78:24:
         29:d5:c1:0f:19:b1:c1:0a:06:c3:1b:a3:ab:6a:31:f7:5f:10:
         20:d9:f7:55:d4:4f:1f:3c:3a:57:34:4f:e3:6c:5a:35:34:ce:
         3f:1c:d9:11:fa:e2:a3:cd:b5:84:ce:24:15:64:fc:84:de:22:
         5f:d0:5f:d8:5a:ad:ff:31:3a:47:94:41:53:8b:f5:0b:45:da:
         cb:f4:87:1f:2a:41:5a:fa:e2:ab:0a:54:ca:a2:5e:e2:57:1f:
         5b:ad:47:9f:d9:00:e8:3c:ab:45:c3:b7:4a:b0:45:44:07:7a:
         77:ef:ff:13:f1:54:92:7f:86:f2:17:bd:7e:7d:2f:cb:2e:3f:
         58:b1:33:9b:3e:57:f2:ec:6d:8a:52:ab:d8:7e:0f:d6:01:7c:
         d2:05:e2:6a:0b:e8:47:6c:19:d4:1b:5d:5d:98:9c:0e:4f:d3:
         91:df:52:0e:72:7d:3a:63:b7:4e:e0:66:56:7f:38:39:51:a8:
         36:ce:1c:57:50:a1:45:80:29:40:84:99:10:cd:41:23:74:26:
         91:37:d5:13:6c:0e:42:e3:5d:68:e9:19:f3:3e:7a:13:73:bb:
         6c:70:9d:77:ae:1e:12:78:70:f6:3b:82:99:ba:18:f8:b0:b7:
         b8:1b:e3:f8
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkaJn8EJrkbxuHRFQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjNmNTM2NzQtOTNlZi00MzllLTkwMTktZTYzMDhiMWMx
NzM4MB4XDTI1MDMwNjIxNDIyNFoXDTI1MDYwNDIwNDIyNFowLzEtMCsGA1UEAxMk
ZDI2MmQwNzQtZGY1MS00ZWVkLWIzODAtZWI1MzgxZGI3MmIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA01obL5LWAI4rDW39OHm0dz6Eo6KFjIhCZHeY
ZlcZI5NJy2wJ+WrtAK0JdYRP7FHu5el93TdNo2TMEZnywQHTUclbO28gDd8rpEHD
SI4RuALs+LnI5Eon3a9K32jbOGpl42dYZtihNsJqdR8f/4HkRP2AFG1NhZ2BnAKN
btDkxBtdFyPh0/NE3Rd2Ga4tqs0x9o85UiHompzrHd40ixS2tZBTRljWsj7XK5it
+d1cukmiel3NkNX8dz3wivu9X6hhaICSGBUV893UjSMqvdCG4I1wya47LUR9M02o
gxi5DK0sWgvf9Br5szGOZMeG9/1z9rq5lhEqvlqFh8w1/vBbQwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFMgU64/C4Oib1dXjn5zixSGX60keMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1
MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMwOGIxYzE3MzgvOWRlMThmNmYtY2RkZC0z
ODg4LWFhM2YtNmUwZTdjMmYzY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYjNmNTM2NzQtOTNlZi00MzllLTkw
MTktZTYzMDhiMWMxNzM4L2IzZjUzNjc0LTkzZWYtNDM5ZS05MDE5LWU2MzA4YjFj
MTczOC5jcmwwHwYDVR0jBBgwFoAUFkKd+N+5lk6lpBTmtkJxrpv/LMYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9iM2Y1MzY3NC05M2VmLTQzOWUtOTAxOS1lNjMw
OGIxYzE3MzguY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAjcHvAwQA
lDtJAwQA2HSGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAFB9eNB1Tx4uhTC6y93K1gd4JCnVwQ8ZscEKBsMb
o6tqMfdfECDZ91XUTx88Olc0T+NsWjU0zj8c2RH64qPNtYTOJBVk/ITeIl/QX9ha
rf8xOkeUQVOL9QtF2sv0hx8qQVr64qsKVMqiXuJXH1utR5/ZAOg8q0XDt0qwRUQH
enfv/xPxVJJ/hvIXvX59L8suP1ixM5s+V/LsbYpSq9h+D9YBfNIF4moL6EdsGdQb
XV2YnA5P05HfUg5yfTpjt07gZlZ/ODlRqDbOHFdQoUWAKUCEmRDNQSN0JpE31RNs
DkLjXWjpGfM+ehNzu2xwnXeuHhJ4cPY7gpm6GPiwt7gb4/g=
-----END CERTIFICATE-----
Generated at Fri Apr 11 22:58:10 2025 by rpki-client