Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa
File:                     651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa (raw, json)
Hash identifier:          P8si/wjMl9wL31BNe7IY6LlnyxPjMfT7Nf78RECjRw8=
Subject key identifier:   3E:AA:45:79:0A:D2:7C:D0:94:62:37:9C:53:D1:CA:87:82:31:6C:79
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F432858495C243F15389F9E3645D95C80
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa
Signing time:             Sun 30 Mar 2025 13:01:02 +0000
ROA not before:           Sun 30 Mar 2025 13:01:02 +0000
ROA not after:            Sat 28 Jun 2025 13:01:02 +0000
asID:                     19905
IP address blocks:        64.124.221.0/24 maxlen: 24
                          128.177.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5c:24:3f:15:38:9f:9e:36:45:d9:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Mar 30 13:01:02 2025 GMT
            Not After : Jun 28 13:01:02 2025 GMT
        Subject: CN=2d092a70-6e87-435e-b62e-089a69bd43f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:12:c3:be:e0:eb:55:2f:e5:e9:33:c3:78:
                    a2:80:f7:b9:32:62:28:b4:6d:83:47:13:3a:d6:ff:
                    e7:b1:4c:f1:fb:34:67:c6:29:0c:26:f9:33:ea:5d:
                    c0:1a:42:b4:38:05:e7:37:d8:5c:39:73:d0:2c:28:
                    70:e7:ca:ae:da:ec:03:5e:48:37:b3:be:b7:75:6e:
                    d5:cd:44:00:02:a6:28:3f:b3:6d:73:60:34:7a:11:
                    87:97:53:8e:ee:af:d9:d0:2e:6e:5f:c5:fe:ff:7a:
                    de:9b:3c:4c:8e:a8:e3:12:f4:b7:55:20:e6:fc:e4:
                    42:0c:91:ea:da:b1:1f:4c:7b:3c:79:94:ed:11:4b:
                    24:89:38:3d:5f:46:76:b2:3f:bc:56:cc:aa:ea:0d:
                    33:25:e9:58:36:df:4b:c1:a2:4f:13:57:17:a5:70:
                    4b:9d:66:16:00:6d:51:10:b7:59:10:12:3a:59:aa:
                    f3:02:41:d9:83:78:1a:bf:65:bd:02:c6:cf:dd:02:
                    28:33:b4:f7:6a:b5:dd:f7:4d:cc:d1:d8:76:a2:3e:
                    71:91:8f:5d:50:c7:6f:21:42:5f:b0:df:07:e1:6a:
                    85:40:fb:47:cd:19:87:f3:63:bf:b8:65:87:e8:ce:
                    82:2b:01:d7:89:37:89:47:72:41:65:3e:f1:d6:d7:
                    3e:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:AA:45:79:0A:D2:7C:D0:94:62:37:9C:53:D1:CA:87:82:31:6C:79
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/651ed39a-8940-3eb2-ae9a-5fa94b3bfb69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.221.0/24
                  128.177.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b3:d8:4d:78:8f:7e:8f:03:20:47:d2:e0:88:37:a3:3d:c5:50:
         e2:f9:27:d3:21:f7:76:cf:11:78:f0:fc:62:d4:6a:f2:81:80:
         91:b7:a4:20:d9:00:7f:60:6a:c8:37:cd:8a:dd:52:60:45:c5:
         03:64:6a:49:d9:7e:1f:92:dc:34:80:5f:06:53:d5:e0:02:96:
         69:47:e5:fc:22:3f:e1:23:d2:8d:2b:e7:bf:1e:f1:d6:67:85:
         27:5a:01:a9:b3:d7:a3:7e:ce:80:28:70:72:f1:ca:9e:74:b2:
         90:f0:d4:f4:b9:1f:6f:c4:40:cc:56:14:95:24:c8:4c:74:fe:
         2c:cf:f8:8e:fb:19:8d:39:db:48:e6:1a:94:75:b7:24:70:00:
         06:bd:61:5c:93:7e:5e:b9:d9:3a:b0:8f:7d:75:47:27:e3:58:
         0b:b0:07:cb:72:59:3e:ec:2c:50:48:46:99:72:cb:1d:12:7f:
         7f:03:aa:5d:14:a7:52:b8:9a:f6:ab:bc:f7:bf:a9:d2:69:98:
         e1:6c:4f:9c:7a:18:e7:86:4f:87:d9:e5:38:aa:4f:b9:07:1a:
         33:c4:b4:b2:ec:5b:04:89:9b:6e:b6:d7:97:8f:db:1d:64:5a:
         ba:14:e1:52:b9:cd:6d:a7:8a:2a:70:87:43:6c:de:60:94:96:
         1e:61:f3:5b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWElcJD8VOJ+eNkXZXIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDMzMDEzMDEwMloXDTI1MDYyODEzMDEwMlowLzEtMCsGA1UEAxMk
MmQwOTJhNzAtNmU4Ny00MzVlLWI2MmUtMDg5YTY5YmQ0M2YwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOwSw77g61Uv5ekzw3iigPe5MmIotG2DRxM6
1v/nsUzx+zRnxikMJvkz6l3AGkK0OAXnN9hcOXPQLChw58qu2uwDXkg3s763dW7V
zUQAAqYoP7Ntc2A0ehGHl1OO7q/Z0C5uX8X+/3remzxMjqjjEvS3VSDm/ORCDJHq
2rEfTHs8eZTtEUskiTg9X0Z2sj+8Vsyq6g0zJelYNt9LwaJPE1cXpXBLnWYWAG1R
ELdZEBI6WarzAkHZg3gav2W9AsbP3QIoM7T3arXd903M0dh2oj5xkY9dUMdvIUJf
sN8H4WqFQPtHzRmH82O/uGWH6M6CKwHXiTeJR3JBZT7x1tc+AwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFD6qRXkK0nzQlGI3nFPRyoeCMWx5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNjUxZWQzOWEtODk0MC0z
ZWIyLWFlOWEtNWZhOTRiM2JmYjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAQHzdAwQA
gLGgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALPYTXiPfo8DIEfS4Ig3oz3FUOL5J9Mh93bPEXjw/GLUavKB
gJG3pCDZAH9gasg3zYrdUmBFxQNkaknZfh+S3DSAXwZT1eAClmlH5fwiP+Ej0o0r
578e8dZnhSdaAamz16N+zoAocHLxyp50spDw1PS5H2/EQMxWFJUkyEx0/izP+I77
GY0520jmGpR1tyRwAAa9YVyTfl652Tqwj311RyfjWAuwB8tyWT7sLFBIRplyyx0S
f38Dql0Up1K4mvarvPe/qdJpmOFsT5x6GOeGT4fZ5TiqT7kHGjPEtLLsWwSJm262
15eP2x1kWroU4VK5zW2niipwh0Ns3mCUlh5h81s=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:15:26 2025 by rpki-client