Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2530db58-078a-3d88-9e06-6159c8b08db5.roa
File:                     2530db58-078a-3d88-9e06-6159c8b08db5.roa (raw, json)
Hash identifier:          9GZkuyuuYkv5NV1kPHTWUgXE9m1xQcc3Jjp0jImsz4w=
Subject key identifier:   A9:F0:66:AE:4F:C4:60:3F:EC:91:34:4B:EC:F2:69:20:5D:82:64:63
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285848D7A64388B6418D58B1A781C0
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2530db58-078a-3d88-9e06-6159c8b08db5.roa
Signing time:             Tue 11 Feb 2025 02:00:39 +0000
ROA not before:           Tue 11 Feb 2025 02:00:39 +0000
ROA not after:            Mon 12 May 2025 01:00:39 +0000
asID:                     376
IP address blocks:        206.167.158.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d7:a6:43:88:b6:41:8d:58:b1:a7:81:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Feb 11 02:00:39 2025 GMT
            Not After : May 12 01:00:39 2025 GMT
        Subject: CN=ee1c09ac-5cbb-4225-8d01-1112c47876c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:7d:2d:77:80:ca:25:b6:16:fb:85:e0:8b:21:
                    c4:a4:ca:b7:61:b8:a8:8d:40:ad:88:e9:e4:28:3d:
                    b8:b3:cc:a1:e3:f1:95:d6:14:c2:82:61:f7:fe:db:
                    3f:93:a8:d0:dd:51:4d:60:f0:0f:ce:7f:cd:d1:2a:
                    f8:5c:b1:07:d3:36:d2:f1:61:04:3e:12:83:33:ce:
                    12:a5:11:fb:dc:d3:f6:11:9c:2c:0b:b2:12:ec:7a:
                    52:01:25:bb:b9:93:2f:fb:0e:f7:3e:6f:99:d2:6b:
                    42:a0:c2:1e:1b:d6:bf:a1:e8:e5:eb:d2:8c:67:b9:
                    61:24:09:76:2c:c7:d8:dc:00:00:0d:37:f7:7d:53:
                    a5:f7:bb:4d:b2:63:84:27:8a:0a:58:aa:1d:53:63:
                    7b:85:70:2e:86:3a:f6:8d:0b:77:79:2f:e6:e4:0e:
                    e6:09:4e:a4:d6:2c:22:2e:78:31:1a:ce:83:5e:1b:
                    18:ca:d1:0b:83:5f:61:f4:49:45:fb:e8:4c:b0:6f:
                    9f:cc:43:b1:d8:0c:08:bb:22:a0:82:56:5c:3c:c2:
                    27:21:ae:a7:0d:b2:a1:b0:4a:98:30:5f:cf:bd:91:
                    91:55:64:a5:78:a3:e8:da:4f:c5:39:f6:0f:36:4a:
                    dc:09:67:22:f8:38:a0:64:37:6e:0e:66:21:81:72:
                    7a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F0:66:AE:4F:C4:60:3F:EC:91:34:4B:EC:F2:69:20:5D:82:64:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2530db58-078a-3d88-9e06-6159c8b08db5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.158.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:3e:ab:45:a2:87:22:37:13:2c:3b:38:d2:db:d8:d6:0b:7f:
         1d:19:db:af:be:1c:db:d6:39:e3:e4:c0:d2:1d:dd:40:3d:f9:
         7c:b7:14:fd:0a:61:87:e4:ab:6b:1c:a4:48:bc:0e:5f:da:8b:
         e7:9d:03:0d:03:da:78:fa:5a:61:48:4a:08:8c:67:67:0e:2a:
         4f:e8:44:11:41:f2:2d:7f:99:f4:cf:9c:0f:c1:2c:c9:22:27:
         f0:91:fd:d7:e1:4d:d3:41:5c:22:05:18:4e:ab:62:70:78:67:
         c4:4c:bf:b3:16:32:4d:4c:cf:20:f6:bd:e0:cc:d7:55:13:4d:
         62:fe:92:7a:62:20:68:06:cd:3b:aa:75:d5:1e:3b:06:2e:d4:
         fa:d8:37:1e:60:ba:91:c6:3c:8f:a4:c2:38:70:69:ae:cd:5a:
         b4:07:95:64:e3:e3:2c:f4:13:0b:be:7c:bd:05:97:dc:ae:69:
         f2:2b:0b:d8:f9:97:6d:e4:c1:37:21:36:c1:ef:57:5b:65:8a:
         8b:6a:3a:bc:94:77:19:65:a4:8e:ac:57:35:6b:93:e6:74:8d:
         dc:66:70:b4:36:3d:0e:f2:5f:a7:f9:f3:34:9a:b2:33:35:dc:
         13:5c:f5:61:9f:1a:44:08:88:df:a0:78:6f:62:a5:62:e5:27:
         63:4a:fa:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjXpkOItkGNWLGngcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDIxMTAyMDAzOVoXDTI1MDUxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZWUxYzA5YWMtNWNiYi00MjI1LThkMDEtMTExMmM0Nzg3NmMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp30td4DKJbYW+4XgiyHEpMq3YbiojUCtiOnk
KD24s8yh4/GV1hTCgmH3/ts/k6jQ3VFNYPAPzn/N0Sr4XLEH0zbS8WEEPhKDM84S
pRH73NP2EZwsC7IS7HpSASW7uZMv+w73Pm+Z0mtCoMIeG9a/oejl69KMZ7lhJAl2
LMfY3AAADTf3fVOl97tNsmOEJ4oKWKodU2N7hXAuhjr2jQt3eS/m5A7mCU6k1iwi
LngxGs6DXhsYytELg19h9ElF++hMsG+fzEOx2AwIuyKgglZcPMInIa6nDbKhsEqY
MF/PvZGRVWSleKPo2k/FOfYPNkrcCWci+DigZDduDmYhgXJ6nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKnwZq5PxGA/7JE0S+zyaSBdgmRjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMjUzMGRiNTgtMDc4YS0z
ZDg4LTllMDYtNjE1OWM4YjA4ZGI1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqeeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABg+q0WihyI3Eyw7ONLb2NYLfx0Z26++HNvWOePkwNId3UA9+Xy3FP0K
YYfkq2scpEi8Dl/ai+edAw0D2nj6WmFISgiMZ2cOKk/oRBFB8i1/mfTPnA/BLMki
J/CR/dfhTdNBXCIFGE6rYnB4Z8RMv7MWMk1MzyD2veDM11UTTWL+knpiIGgGzTuq
ddUeOwYu1PrYNx5gupHGPI+kwjhwaa7NWrQHlWTj4yz0Ewu+fL0Fl9yuafIrC9j5
l23kwTchNsHvV1tliotqOryUdxllpI6sVzVrk+Z0jdxmcLQ2PQ7yX6f58zSasjM1
3BNc9WGfGkQIiN+geG9ipWLlJ2NK+sw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 08:30:27 2025 by rpki-client