Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
File:                     b8b1380b-8b04-35d1-aadf-93dea95122c5.roa (raw, json)
Hash identifier:          uuuLH4Q4JltXbh5NoFM5GQYntFZwEB8PGqqChIa/qZU=
Subject key identifier:   F9:D6:AA:B0:66:04:AB:0C:DD:D7:29:C5:3B:CA:A2:C2:9C:80:C3:A7
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285848B6261DCFA7671A7BDEB2BE80
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     11090
IP address blocks:        64.127.193.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:1d:cf:a7:67:1a:7b:de:b2:be:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=2f94a25c-ede1-4775-b4dd-c43dc3f45fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c1:6e:47:57:aa:14:36:7a:6c:f7:ff:01:44:
                    62:2a:a0:9c:b2:26:d2:7d:a2:f2:f7:18:2e:6d:5e:
                    d1:b0:fc:c6:6d:8b:11:62:e6:52:3d:ab:c3:4b:b5:
                    67:79:e0:cd:38:e6:53:30:66:6c:b5:a5:e2:cc:7c:
                    9c:1a:a0:6a:3d:00:81:a6:3b:11:68:d8:3d:19:31:
                    9e:6d:55:a2:4a:6a:c8:89:af:74:fa:62:69:2c:b1:
                    54:b3:9d:6b:d9:1e:a4:ee:55:e2:c2:e9:ba:25:8d:
                    f6:91:22:78:f6:98:c8:88:e2:64:fe:6f:a9:00:36:
                    95:69:8c:2d:3b:70:44:28:3a:72:da:ba:bc:46:75:
                    46:42:b1:ca:ec:d0:28:7c:78:f9:70:a5:36:6a:13:
                    86:50:21:9b:03:4f:1b:42:86:08:50:7e:0c:13:fb:
                    c6:41:17:58:86:33:d1:73:23:38:59:31:a6:14:35:
                    64:6d:69:12:dd:96:aa:21:5b:69:f0:ee:77:c8:68:
                    fa:5c:ce:25:18:31:13:3a:69:05:8d:78:b1:7b:2b:
                    9b:5d:c7:22:5b:f5:b0:57:d4:0f:89:37:84:02:3e:
                    d4:fe:46:95:80:8a:b5:91:9e:83:c2:44:fc:cf:6a:
                    4a:15:1f:d7:4a:84:88:41:0f:47:29:42:d0:0c:af:
                    43:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:D6:AA:B0:66:04:AB:0C:DD:D7:29:C5:3B:CA:A2:C2:9C:80:C3:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/b8b1380b-8b04-35d1-aadf-93dea95122c5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.127.193.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a9:36:44:52:90:df:d6:34:e9:91:a0:f3:ec:fc:bb:a3:16:
         44:b0:a2:9e:87:3f:1f:47:08:5b:19:ae:88:4d:35:db:08:2a:
         e4:d1:2a:d3:80:17:5f:e7:6a:b7:ca:19:5e:6a:29:9d:0c:20:
         b2:ad:72:fc:29:af:55:86:93:13:70:19:13:4a:6f:c6:d4:c3:
         d0:78:88:19:ba:04:8d:8f:7b:d9:1b:07:a4:c6:d8:6f:23:cc:
         e4:ea:ca:c7:85:89:15:e0:9f:ec:28:69:64:e4:c7:4d:d3:ee:
         6f:ae:37:a0:4d:37:80:75:54:84:75:dc:65:91:2a:c9:c9:7c:
         b7:3b:55:af:f3:fc:fd:03:dd:20:7c:e8:72:d6:93:23:08:9f:
         47:a6:9f:1a:b9:e7:bb:3a:cd:2f:67:57:38:50:68:ff:32:0c:
         62:b9:ac:03:46:b2:21:40:6b:56:cb:14:7a:41:85:e6:25:f1:
         ed:49:65:98:04:ad:dd:97:a8:8a:59:74:3a:87:0b:b6:61:6e:
         3b:f6:87:34:39:43:3c:c6:29:e1:45:e4:12:a6:2e:d9:ce:bc:
         d3:8b:09:5d:de:2b:63:c2:bc:64:96:fb:68:13:2d:d9:ca:51:
         43:94:9f:a4:61:56:d1:ab:59:3f:00:e4:35:1f:eb:2f:1d:92:
         67:af:d5:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2Jh3Pp2cae96yvoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk
MmY5NGEyNWMtZWRlMS00Nzc1LWI0ZGQtYzQzZGMzZjQ1ZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArsFuR1eqFDZ6bPf/AURiKqCcsibSfaLy9xgu
bV7RsPzGbYsRYuZSPavDS7VneeDNOOZTMGZstaXizHycGqBqPQCBpjsRaNg9GTGe
bVWiSmrIia90+mJpLLFUs51r2R6k7lXiwum6JY32kSJ49pjIiOJk/m+pADaVaYwt
O3BEKDpy2rq8RnVGQrHK7NAofHj5cKU2ahOGUCGbA08bQoYIUH4ME/vGQRdYhjPR
cyM4WTGmFDVkbWkS3ZaqIVtp8O53yGj6XM4lGDETOmkFjXixeyubXcciW/WwV9QP
iTeEAj7U/kaVgIq1kZ6DwkT8z2pKFR/XSoSIQQ9HKULQDK9DkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnWqrBmBKsM3dcpxTvKosKcgMOnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvYjhiMTM4MGItOGIwNC0z
NWQxLWFhZGYtOTNkZWE5NTEyMmM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQH/BMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSpNkRSkN/WNOmRoPPs/LujFkSwop6HPx9HCFsZrohNNdsIKuTRKtOA
F1/narfKGV5qKZ0MILKtcvwpr1WGkxNwGRNKb8bUw9B4iBm6BI2Pe9kbB6TG2G8j
zOTqyseFiRXgn+woaWTkx03T7m+uN6BNN4B1VIR13GWRKsnJfLc7Va/z/P0D3SB8
6HLWkyMIn0emnxq557s6zS9nVzhQaP8yDGK5rANGsiFAa1bLFHpBheYl8e1JZZgE
rd2XqIpZdDqHC7Zhbjv2hzQ5QzzGKeFF5BKmLtnOvNOLCV3eK2PCvGSW+2gTLdnK
UUOUn6RhVtGrWT8A5DUf6y8dkmev1Z8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:03:40 2025 by rpki-client