Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa
File:                     ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa (raw, json)
Hash identifier:          BwG0ka7PQTwLGP4LRYFj/AyczOZIbSiTj2KBjyXfOxs=
Subject key identifier:   6F:9D:EE:91:34:B7:4B:AB:39:D1:1F:D2:0F:5C:70:FE:B7:35:30:42
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285848CC7B95697D9F781D8BB00800
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     11090
IP address blocks:        64.4.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:95:69:7d:9f:78:1d:8b:b0:08:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=1a25d09c-ff68-46d3-91e0-b6d6d291a491
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f9:35:64:07:78:94:4e:97:45:b8:a8:cb:cd:
                    7c:5e:23:d5:ee:dc:89:b2:be:9b:fb:85:26:f3:fb:
                    fb:e2:53:f2:c0:e6:38:d3:17:cb:00:84:55:75:06:
                    0b:c4:6d:c4:a6:f5:8f:76:9a:2f:b6:39:fc:8b:87:
                    66:7a:37:66:ce:0c:48:f5:86:5a:0f:69:ac:34:79:
                    77:e9:8d:93:cb:e5:37:28:47:d6:03:48:70:09:d6:
                    ee:ff:a6:1f:a7:5d:31:5c:8c:04:bb:ed:4a:44:ca:
                    21:85:55:a3:6a:7e:09:05:81:5c:14:68:6b:1b:d3:
                    00:78:2c:8d:33:e2:4f:c9:ba:17:b5:dc:75:c5:a9:
                    9d:59:d3:0d:45:00:3e:6e:1e:52:b8:3c:0c:5c:19:
                    2e:35:e4:5f:da:27:47:4c:86:13:5e:5f:a3:75:7f:
                    2f:01:5b:44:8a:1f:d0:a2:ad:05:6d:bc:53:fe:21:
                    31:c2:0a:fa:b8:0d:61:36:31:2d:0f:ff:aa:44:6d:
                    59:2c:3f:4f:d7:8f:58:43:53:29:f7:9c:1c:2d:84:
                    b5:5b:03:ac:45:5a:72:38:c3:8b:25:cb:6f:ce:65:
                    08:75:ae:db:9e:95:17:6c:72:e8:a6:7f:e2:55:89:
                    16:9b:e0:16:a8:77:3e:c8:64:11:09:21:ee:62:d6:
                    e6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:9D:EE:91:34:B7:4B:AB:39:D1:1F:D2:0F:5C:70:FE:B7:35:30:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/ed492572-dab3-3e50-b56f-7a41e0c2c5fb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:09:e9:05:d1:f6:7a:08:3f:fb:4c:0c:89:55:34:93:b2:e0:
         92:0e:23:b7:a0:2a:a7:db:f4:0a:86:e0:1f:b8:5f:05:36:9e:
         d7:ff:fc:43:26:0d:66:99:46:26:f9:ab:5e:6f:ff:85:16:45:
         75:0e:fb:c7:00:20:d6:83:0c:f4:24:0a:2b:f2:73:66:49:13:
         67:a3:41:8e:96:b1:29:ba:cc:88:0b:c6:af:c1:01:92:9e:c1:
         e3:b9:f4:f2:da:b1:02:6f:81:60:ec:e8:a5:47:07:2b:76:44:
         a2:3f:e4:21:ce:ae:7a:bc:91:12:c9:99:e6:46:5e:68:e1:42:
         89:b2:24:65:f2:e3:80:17:db:f8:cb:61:39:08:5e:f6:0a:63:
         f0:bc:0e:fe:1b:3e:81:2b:e8:77:ff:19:a6:e0:85:17:f4:06:
         a5:fb:c2:60:83:1f:9f:1c:8b:ea:1a:59:7b:6e:71:9e:af:99:
         9d:62:96:98:9f:c5:f1:e0:2b:df:82:2f:fb:c2:f4:a9:d6:95:
         e6:9a:de:63:ad:32:2b:67:e5:d1:2e:16:49:a4:a2:d0:0d:a3:
         0d:9d:58:23:f7:e2:68:94:1f:74:94:9e:d3:64:45:37:ca:81:
         4e:37:8b:a7:b1:ad:79:d5:2a:72:4f:e5:24:a1:e4:c1:83:86:
         21:d5:d0:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe5VpfZ94HYuwCAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
MWEyNWQwOWMtZmY2OC00NmQzLTkxZTAtYjZkNmQyOTFhNDkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPk1ZAd4lE6XRbioy818XiPV7tyJsr6b+4Um
8/v74lPywOY40xfLAIRVdQYLxG3EpvWPdpovtjn8i4dmejdmzgxI9YZaD2msNHl3
6Y2Ty+U3KEfWA0hwCdbu/6Yfp10xXIwEu+1KRMohhVWjan4JBYFcFGhrG9MAeCyN
M+JPyboXtdx1xamdWdMNRQA+bh5SuDwMXBkuNeRf2idHTIYTXl+jdX8vAVtEih/Q
oq0FbbxT/iExwgr6uA1hNjEtD/+qRG1ZLD9P149YQ1Mp95wcLYS1WwOsRVpyOMOL
JctvzmUIda7bnpUXbHLopn/iVYkWm+AWqHc+yGQRCSHuYtbm0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG+d7pE0t0urOdEf0g9ccP63NTBCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvZWQ0OTI1NzItZGFiMy0z
ZTUwLWI1NmYtN2E0MWUwYzJjNWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACwJ6QXR9noIP/tMDIlVNJOy4JIOI7egKqfb9AqG4B+4XwU2ntf//EMm
DWaZRib5q15v/4UWRXUO+8cAINaDDPQkCivyc2ZJE2ejQY6WsSm6zIgLxq/BAZKe
weO59PLasQJvgWDs6KVHByt2RKI/5CHOrnq8kRLJmeZGXmjhQomyJGXy44AX2/jL
YTkIXvYKY/C8Dv4bPoEr6Hf/GabghRf0BqX7wmCDH58ci+oaWXtucZ6vmZ1ilpif
xfHgK9+CL/vC9KnWleaa3mOtMitn5dEuFkmkotANow2dWCP34miUH3SUntNkRTfK
gU43i6exrXnVKnJP5SSh5MGDhiHV0DU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:32 2025 by rpki-client