Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74d40962-69ef-32fe-8d6d-053acda8b93d.roa
File:                     74d40962-69ef-32fe-8d6d-053acda8b93d.roa (raw, json)
Hash identifier:          Q6ZLwKyJRDsqN7WJNNcqcIFEyejzSlHaLupOJymCQx4=
Subject key identifier:   13:1B:C2:26:38:A3:40:07:22:2F:6E:24:96:63:BE:6E:05:BF:16:93
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285849071BEB457A3B7BB9A5ED61C0
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74d40962-69ef-32fe-8d6d-053acda8b93d.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     19955
IP address blocks:        209.82.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:eb:45:7a:3b:7b:b9:a5:ed:61:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=d6b6be3f-e891-4998-9c93-402f2b8cb568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:fd:31:b6:53:5c:be:a1:b6:14:c2:6b:e2:d6:
                    85:65:d9:cd:d5:ab:ee:85:31:6c:59:cb:79:98:16:
                    0f:0a:bf:a6:0c:9c:d2:6c:9e:da:c4:79:79:ed:5b:
                    de:f4:08:97:8a:bd:f8:84:2a:b3:4d:43:ec:3e:a8:
                    81:68:f1:79:9b:36:c5:1a:47:e7:1a:01:6c:3b:da:
                    75:df:d7:47:07:e2:5f:45:8d:7c:79:60:77:3f:00:
                    08:58:e6:05:10:fc:fb:fa:70:47:df:22:a4:1a:d6:
                    32:ee:99:7d:2f:1c:61:8b:ac:50:d1:98:dd:a6:2d:
                    50:42:d9:1d:c5:bc:66:18:a6:dc:69:a4:2a:e8:d9:
                    65:2c:5c:df:79:20:0f:bf:e8:68:60:c2:58:1c:58:
                    54:fb:ba:44:d1:f4:54:b2:a1:da:ba:b1:7b:7f:e1:
                    fd:fb:9a:33:07:11:54:8c:ce:f9:8f:8e:48:d2:f7:
                    23:80:13:ce:fe:08:21:60:79:67:95:11:1a:49:8c:
                    ef:12:69:1b:7f:af:7f:93:30:e7:87:1a:b4:60:3a:
                    ff:87:0b:6d:a7:3b:cf:e3:1e:6a:3a:e1:84:46:7e:
                    de:3b:0b:52:8c:a4:19:80:44:44:45:f1:c0:d9:2e:
                    16:af:fd:05:22:76:fc:2c:eb:4e:39:f9:c7:d2:c8:
                    65:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:1B:C2:26:38:A3:40:07:22:2F:6E:24:96:63:BE:6E:05:BF:16:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/74d40962-69ef-32fe-8d6d-053acda8b93d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.82.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:3c:e6:a3:54:5e:e8:7b:b0:60:ae:e5:38:d2:41:9e:a0:0b:
         1b:ee:c1:9c:eb:86:c3:9b:3a:0e:6a:b8:99:07:e3:a7:a9:86:
         31:e4:f6:5a:c4:05:b1:1f:9f:72:77:99:e0:2c:72:74:80:a6:
         33:f2:c2:99:9b:dd:b1:5f:00:7e:f2:33:5c:47:08:5c:47:29:
         d4:2c:a8:16:2b:67:a5:8b:3f:0c:ee:53:0d:ea:3c:4a:8d:11:
         c1:af:82:15:e3:12:45:67:77:5f:ac:30:b6:05:b9:dd:35:60:
         b9:42:f9:ff:2e:23:ff:0b:8c:cb:e3:dd:61:6f:65:2b:87:61:
         38:c4:7e:b4:ed:ea:7c:4c:58:34:ba:41:d3:68:62:6b:c4:d1:
         f5:8b:e0:9b:cb:20:c1:90:d6:dc:9c:0e:c3:6b:d3:9a:43:7d:
         6a:84:c8:d2:46:58:0f:54:c9:0e:80:65:bd:5d:b0:19:9a:3c:
         6b:26:38:6f:fb:76:e9:75:dd:11:d0:5d:93:bb:1c:12:8e:4f:
         0d:10:52:69:5f:4a:cf:60:9b:cf:6c:65:9f:ea:f4:82:11:10:
         5e:72:f2:2e:83:03:65:9c:95:51:7b:55:8f:07:22:66:b0:ce:
         34:d3:43:fd:4f:ab:4a:af:f0:14:90:9a:df:d3:c5:20:c3:03:
         c3:17:9c:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+tFejt7uaXtYcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
ZDZiNmJlM2YtZTg5MS00OTk4LTljOTMtNDAyZjJiOGNiNTY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf0xtlNcvqG2FMJr4taFZdnN1avuhTFsWct5
mBYPCr+mDJzSbJ7axHl57Vve9AiXir34hCqzTUPsPqiBaPF5mzbFGkfnGgFsO9p1
39dHB+JfRY18eWB3PwAIWOYFEPz7+nBH3yKkGtYy7pl9Lxxhi6xQ0Zjdpi1QQtkd
xbxmGKbcaaQq6NllLFzfeSAPv+hoYMJYHFhU+7pE0fRUsqHaurF7f+H9+5ozBxFU
jM75j45I0vcjgBPO/gghYHlnlREaSYzvEmkbf69/kzDnhxq0YDr/hwttpzvP4x5q
OuGERn7eOwtSjKQZgERERfHA2S4Wr/0FInb8LOtOOfnH0shlkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBMbwiY4o0AHIi9uJJZjvm4FvxaTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvNzRkNDA5NjItNjllZi0z
MmZlLThkNmQtMDUzYWNkYThiOTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0VKmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAw85qNUXuh7sGCu5TjSQZ6gCxvuwZzrhsObOg5quJkH46ephjHk9lrE
BbEfn3J3meAscnSApjPywpmb3bFfAH7yM1xHCFxHKdQsqBYrZ6WLPwzuUw3qPEqN
EcGvghXjEkVnd1+sMLYFud01YLlC+f8uI/8LjMvj3WFvZSuHYTjEfrTt6nxMWDS6
QdNoYmvE0fWL4JvLIMGQ1tycDsNr05pDfWqEyNJGWA9UyQ6AZb1dsBmaPGsmOG/7
dul13RHQXZO7HBKOTw0QUmlfSs9gm89sZZ/q9IIREF5y8i6DA2WclVF7VY8HImaw
zjTTQ/1Pq0qv8BSQmt/TxSDDA8MXnAw=
-----END CERTIFICATE-----
Generated at Sun Apr 6 07:09:57 2025 by rpki-client