Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa
File:                     f7906cbe-ded6-3772-a921-8820a9982260.roa (raw, json)
Hash identifier:          oM1rlfLnSpuF9BAyN18nPyUIrE8Q98VZ/wl+ypl52JA=
Subject key identifier:   F7:8E:9B:61:57:5D:6E:0D:6D:A9:19:DD:C4:E7:4C:77:47:06:B6:31
Certificate issuer:       /CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
Certificate serial:       010D0C9F43285849287E6E6DE0E7363A18EDF0D4
Authority key identifier: A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     399244
IP address blocks:        76.164.196.0/24 maxlen: 24
                          76.164.197.0/24 maxlen: 24
                          76.164.198.0/24 maxlen: 24
                          76.164.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:6e:6d:e0:e7:36:3a:18:ed:f0:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e02d82fe-95a7-4e09-9a2a-be1e154ba38d
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=c377872a-782c-434d-9ef7-ea637855df8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f4:7b:4e:a4:2f:69:2c:f8:74:35:ae:fc:6b:
                    e7:c6:64:f1:86:c0:30:66:dd:43:e3:66:80:d0:d6:
                    25:54:8c:d5:4f:da:67:fc:c7:47:96:4f:89:83:4d:
                    a2:61:09:08:b8:5b:b9:25:f0:d2:fd:87:75:26:d3:
                    f8:f8:7d:b7:b3:2c:4b:86:84:75:45:29:21:9b:e2:
                    2a:3d:9b:91:39:79:4a:fe:fe:a5:02:4e:f8:2e:59:
                    55:9d:ff:4b:79:84:f9:e5:e9:c3:9d:f3:ac:05:e5:
                    e3:ef:37:fa:d4:ac:0a:65:25:fe:cb:21:34:1c:6d:
                    21:18:be:cc:2b:b9:c7:a7:9f:f5:b7:52:69:fd:57:
                    30:06:02:f6:7f:b0:63:b6:80:6d:eb:63:40:5e:86:
                    b4:b9:24:12:4e:6b:49:f9:93:cd:2d:c1:6f:10:a4:
                    7f:fe:87:c2:b9:bb:5c:cc:2d:3c:91:25:85:13:38:
                    f6:7a:c9:57:22:ad:36:87:1a:f8:81:1b:03:3d:2e:
                    6a:b8:7d:83:6a:05:97:8d:c8:21:cb:8a:ea:c1:c1:
                    ee:5b:8a:0b:59:8c:d6:80:29:4a:7d:ee:e7:a2:b4:
                    98:ae:0c:16:99:65:a1:84:a0:db:2e:c0:14:69:eb:
                    24:98:19:e7:4a:99:b6:29:88:fd:fe:0e:85:8b:b9:
                    1d:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:8E:9B:61:57:5D:6E:0D:6D:A9:19:DD:C4:E7:4C:77:47:06:B6:31
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/f7906cbe-ded6-3772-a921-8820a9982260.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.crl

            X509v3 Authority Key Identifier:
                keyid:A4:C5:B7:53:0A:F7:6C:A4:E1:F7:C3:04:23:AB:D8:5B:05:70:84:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/e02d82fe-95a7-4e09-9a2a-be1e154ba38d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:f4:85:b1:bd:8e:c7:54:b3:3c:e1:fe:56:e7:78:81:11:c3:
         15:3e:08:02:b3:da:8f:dc:97:0f:66:4d:9b:d3:4a:36:f5:c0:
         31:f4:6e:fe:60:af:5f:dc:b4:28:9a:1a:60:db:14:33:78:36:
         a9:d5:54:5c:ea:33:26:0c:22:27:d1:80:27:07:16:25:a9:7a:
         90:f1:dc:35:e5:60:62:90:3f:c1:f0:89:1a:ac:dd:ab:d1:1c:
         a6:c1:de:6f:db:18:e7:8d:52:c2:86:54:e6:7b:ed:32:9d:7c:
         de:ff:7d:36:fe:82:c9:b9:43:34:d3:ca:93:43:88:de:82:af:
         17:e3:94:4e:94:18:48:9c:ac:80:97:dd:75:62:39:24:b7:fb:
         a9:7b:33:3a:40:b0:4f:20:4d:fd:02:c8:81:0d:3c:82:78:63:
         6a:d4:e8:da:42:ae:cc:19:c9:0b:d3:58:c0:62:15:75:23:41:
         8d:02:b3:26:26:ed:8a:9c:ab:86:40:d2:4e:75:5a:f2:62:a5:
         51:85:83:10:7f:6d:cb:ef:d9:8d:a9:0f:52:dc:d6:bf:2c:44:
         db:27:4d:f5:6b:81:1a:c2:26:10:b4:c4:8a:0a:e6:3d:d8:f5:
         8f:22:f2:95:24:df:bd:8d:a6:82:56:15:9d:3a:5c:38:0b:be:
         c5:8a:a4:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkofm5t4Oc2Ohjt8NQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTAyZDgyZmUtOTVhNy00ZTA5LTlhMmEtYmUxZTE1NGJh
MzhkMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
YzM3Nzg3MmEtNzgyYy00MzRkLTllZjctZWE2Mzc4NTVkZjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvR7TqQvaSz4dDWu/GvnxmTxhsAwZt1D42aA
0NYlVIzVT9pn/MdHlk+Jg02iYQkIuFu5JfDS/Yd1JtP4+H23syxLhoR1RSkhm+Iq
PZuROXlK/v6lAk74LllVnf9LeYT55enDnfOsBeXj7zf61KwKZSX+yyE0HG0hGL7M
K7nHp5/1t1Jp/VcwBgL2f7BjtoBt62NAXoa0uSQSTmtJ+ZPNLcFvEKR//ofCubtc
zC08kSWFEzj2eslXIq02hxr4gRsDPS5quH2DagWXjcghy4rqwcHuW4oLWYzWgClK
fe7norSYrgwWmWWhhKDbLsAUaeskmBnnSpm2KYj9/g6Fi7kdcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPeOm2FXXW4NbakZ3cTnTHdHBrYxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJk
ODJmZS05NWE3LTRlMDktOWEyYS1iZTFlMTU0YmEzOGQvZjc5MDZjYmUtZGVkNi0z
NzcyLWE5MjEtODgyMGE5OTgyMjYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZTAyZDgyZmUtOTVhNy00ZTA5LTlh
MmEtYmUxZTE1NGJhMzhkL2UwMmQ4MmZlLTk1YTctNGUwOS05YTJhLWJlMWUxNTRi
YTM4ZC5jcmwwHwYDVR0jBBgwFoAUpMW3Uwr3bKTh98MEI6vYWwVwhGwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9lMDJkODJmZS05NWE3LTRlMDktOWEyYS1iZTFl
MTU0YmEzOGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTKTEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA70hbG9jsdUszzh/lbneIERwxU+CAKz2o/clw9mTZvTSjb1wDH0bv5g
r1/ctCiaGmDbFDN4NqnVVFzqMyYMIifRgCcHFiWpepDx3DXlYGKQP8HwiRqs3avR
HKbB3m/bGOeNUsKGVOZ77TKdfN7/fTb+gsm5QzTTypNDiN6CrxfjlE6UGEicrICX
3XViOSS3+6l7MzpAsE8gTf0CyIENPIJ4Y2rU6NpCrswZyQvTWMBiFXUjQY0CsyYm
7Yqcq4ZA0k51WvJipVGFgxB/bcvv2Y2pD1Lc1r8sRNsnTfVrgRrCJhC0xIoK5j3Y
9Y8i8pUk372NpoJWFZ06XDgLvsWKpGQ=
-----END CERTIFICATE-----
Generated at Sun Apr 6 11:47:04 2025 by rpki-client