Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
File:                     9cc6b592-366f-3a26-87a5-415ed1867edd.roa (raw, json)
Hash identifier:          eM9GAz1G57WMKCVkt1CdbSErHHkwFty3CQzoEerGGz4=
Subject key identifier:   83:88:78:C4:F7:53:C7:DC:6D:9B:52:28:D1:AA:1D:83:55:FA:1A:1C
Certificate issuer:       /CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
Certificate serial:       010D0C9F43285849287E5247384E3A1EBF65AC80
Authority key identifier: E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa
Signing time:             Wed 12 Mar 2025 01:00:39 +0000
ROA not before:           Wed 12 Mar 2025 01:00:39 +0000
ROA not after:            Tue 10 Jun 2025 01:00:39 +0000
asID:                     36352
IP address blocks:        72.249.94.0/24 maxlen: 24
                          72.249.124.0/24 maxlen: 24
                          206.123.95.0/24 maxlen: 24
                          207.210.239.0/24 maxlen: 24
                          207.210.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:28:7e:52:47:38:4e:3a:1e:bf:65:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1dd8be8a-bead-4d5b-a818-4d1482f479ff
        Validity
            Not Before: Mar 12 01:00:39 2025 GMT
            Not After : Jun 10 01:00:39 2025 GMT
        Subject: CN=3643c14f-a8e7-4888-a34d-c841fb0d4e98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:40:2e:04:0f:00:74:81:70:4c:8f:93:7c:24:
                    f4:60:e0:1c:55:f3:11:d5:78:fd:f4:f0:67:55:36:
                    7e:b5:db:3c:c9:7d:4e:bb:f1:9a:78:b1:8b:a9:4c:
                    f9:f7:2f:d6:90:7c:87:44:68:97:13:ff:ec:33:56:
                    ad:7a:47:5e:b4:5d:0b:0e:47:14:14:20:de:b4:a7:
                    d1:7b:0f:cb:b4:06:df:e6:fd:f3:3f:8c:a8:97:1a:
                    29:8c:88:e1:f2:59:11:eb:b9:ad:be:5d:9d:61:39:
                    44:cd:08:fd:29:22:3e:eb:46:56:80:d5:b5:70:30:
                    25:bc:b3:b2:9e:a6:a7:03:6c:dd:14:be:b5:1c:8c:
                    1c:16:20:ac:b1:2f:7c:2a:ad:64:17:f7:f7:39:32:
                    75:b4:4b:15:b5:4d:1a:6a:c4:05:59:72:d1:0b:46:
                    1f:67:58:71:4c:fc:b5:74:ba:6d:34:c1:16:9b:ad:
                    f4:04:e3:be:b0:90:55:ac:af:f8:96:0d:98:0b:19:
                    d2:00:51:ab:76:01:b7:1e:12:5b:7b:a0:e2:c6:25:
                    68:c4:69:78:7c:3c:9b:a8:1a:65:13:c6:dc:df:18:
                    93:f6:69:33:62:7c:55:7c:1d:8d:95:3c:98:5b:c3:
                    ef:fe:e4:13:77:61:54:6d:29:af:45:f0:81:93:a7:
                    1c:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:88:78:C4:F7:53:C7:DC:6D:9B:52:28:D1:AA:1D:83:55:FA:1A:1C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/9cc6b592-366f-3a26-87a5-415ed1867edd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff/1dd8be8a-bead-4d5b-a818-4d1482f479ff.crl

            X509v3 Authority Key Identifier:
                keyid:E3:28:40:84:94:46:48:1D:6F:B2:BD:50:2C:4E:64:AF:32:56:B3:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/1dd8be8a-bead-4d5b-a818-4d1482f479ff.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.94.0/24
                  72.249.124.0/24
                  206.123.95.0/24
                  207.210.239.0/24
                  207.210.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:49:eb:23:2b:ce:b1:f6:dd:d3:ff:60:24:9b:0c:0c:b4:a9:
         b2:e0:8a:05:94:4d:4d:ee:28:70:23:33:65:8c:fe:ce:9f:90:
         1a:a8:d3:e0:c6:51:40:16:76:77:2b:e4:5b:7b:b4:82:4a:d8:
         49:10:d0:f2:7c:86:f6:6d:01:26:ef:bd:1e:61:ee:f2:2a:f3:
         52:90:8a:c5:f6:69:0c:2f:9c:46:f4:00:b9:3b:06:87:82:7f:
         2f:9a:70:e6:45:17:d7:86:6a:ce:85:b1:6d:de:d1:6f:dc:5e:
         3a:c5:3c:ff:e3:bb:fd:aa:dc:52:69:29:f6:c2:0a:10:a8:bc:
         f7:95:7d:58:b3:07:28:c3:ef:4a:36:df:10:98:0d:ed:5f:54:
         55:6b:5c:67:cd:29:ef:59:a2:6f:62:52:50:ee:3e:ac:34:a2:
         8a:ac:11:bc:fe:bb:dc:7b:b4:07:b7:49:32:18:28:a4:25:c8:
         54:31:ab:39:0b:a6:c4:fb:71:5e:94:1c:ca:d9:bc:09:39:31:
         9c:77:e0:60:94:68:aa:c9:06:cf:10:e5:13:4c:02:c9:9b:57:
         1a:5c:5a:51:81:29:b2:e6:8a:88:f5:0a:6c:12:05:86:74:c2:
         57:97:1d:b5:47:cb:68:0e:16:74:d0:10:e3:aa:85:25:28:a5:
         74:bf:2a:40
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEkoflJHOE46Hr9lrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWRkOGJlOGEtYmVhZC00ZDViLWE4MTgtNGQxNDgyZjQ3
OWZmMB4XDTI1MDMxMjAxMDAzOVoXDTI1MDYxMDAxMDAzOVowLzEtMCsGA1UEAxMk
MzY0M2MxNGYtYThlNy00ODg4LWEzNGQtYzg0MWZiMGQ0ZTk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhkAuBA8AdIFwTI+TfCT0YOAcVfMR1Xj99PBn
VTZ+tds8yX1Ou/GaeLGLqUz59y/WkHyHRGiXE//sM1atekdetF0LDkcUFCDetKfR
ew/LtAbf5v3zP4yolxopjIjh8lkR67mtvl2dYTlEzQj9KSI+60ZWgNW1cDAlvLOy
nqanA2zdFL61HIwcFiCssS98Kq1kF/f3OTJ1tEsVtU0aasQFWXLRC0YfZ1hxTPy1
dLptNMEWm630BOO+sJBVrK/4lg2YCxnSAFGrdgG3HhJbe6DixiVoxGl4fDybqBpl
E8bc3xiT9mkzYnxVfB2NlTyYW8Pv/uQTd2FUbSmvRfCBk6cceQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFIOIeMT3U8fcbZtSKNGqHYNV+hocMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4
YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0ODJmNDc5ZmYvOWNjNmI1OTItMzY2Zi0z
YTI2LTg3YTUtNDE1ZWQxODY3ZWRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMWRkOGJlOGEtYmVhZC00ZDViLWE4
MTgtNGQxNDgyZjQ3OWZmLzFkZDhiZThhLWJlYWQtNGQ1Yi1hODE4LTRkMTQ4MmY0
NzlmZi5jcmwwHwYDVR0jBBgwFoAU4yhAhJRGSB1vsr1QLE5krzJWszcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xZGQ4YmU4YS1iZWFkLTRkNWItYTgxOC00ZDE0
ODJmNDc5ZmYuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQASPleAwQA
SPl8AwQAzntfAwQAz9LvAwQAz9L+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA9J6yMrzrH23dP/YCSbDAy0
qbLgigWUTU3uKHAjM2WM/s6fkBqo0+DGUUAWdncr5Ft7tIJK2EkQ0PJ8hvZtASbv
vR5h7vIq81KQisX2aQwvnEb0ALk7BoeCfy+acOZFF9eGas6FsW3e0W/cXjrFPP/j
u/2q3FJpKfbCChCovPeVfVizByjD70o23xCYDe1fVFVrXGfNKe9Zom9iUlDuPqw0
ooqsEbz+u9x7tAe3STIYKKQlyFQxqzkLpsT7cV6UHMrZvAk5MZx34GCUaKrJBs8Q
5RNMAsmbVxpcWlGBKbLmioj1CmwSBYZ0wleXHbVHy2gOFnTQEOOqhSUopXS/KkA=
-----END CERTIFICATE-----
Generated at Sat Apr 5 09:50:07 2025 by rpki-client