Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca36dbe7-05c3-3c86-b0c3-9dd54ed36475.roa
File:                     ca36dbe7-05c3-3c86-b0c3-9dd54ed36475.roa (raw, json)
Hash identifier:          UksHgOGj5qDUJtlDLv5VjyYPaSCrNBfo1TgAIFUvWb4=
Subject key identifier:   0B:E0:5B:EB:B8:F9:BA:15:29:22:68:49:9E:96:36:07:C2:69:DB:ED
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848FD56BEBDE6D7A19341301080
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca36dbe7-05c3-3c86-b0c3-9dd54ed36475.roa
Signing time:             Mon 24 Feb 2025 14:00:52 +0000
ROA not before:           Mon 24 Feb 2025 14:00:52 +0000
ROA not after:            Sun 25 May 2025 13:00:52 +0000
asID:                     6461
IP address blocks:        64.124.192.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:fd:56:be:bd:e6:d7:a1:93:41:30:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 24 14:00:52 2025 GMT
            Not After : May 25 13:00:52 2025 GMT
        Subject: CN=dae5783a-12c4-46eb-a932-8b6a7ba03bd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:77:79:66:b4:89:e0:df:ac:87:59:cd:6d:c3:
                    b3:43:d7:99:4c:5a:fe:28:3d:67:3b:5e:99:8c:8f:
                    6a:d2:0f:0f:c8:ef:a5:b2:1f:25:61:e1:51:92:a7:
                    07:ac:d1:e1:a7:d3:e3:69:79:84:60:69:df:9a:0d:
                    87:b8:80:24:b0:ed:ae:03:2d:56:45:ea:ca:61:dd:
                    68:1e:30:68:0b:d1:f6:4b:ae:cb:35:cf:d1:14:85:
                    81:70:bd:7b:bd:41:49:b1:f7:0d:70:2d:fb:de:58:
                    38:2f:63:69:f5:2e:c3:c0:56:85:c2:58:7f:58:69:
                    dd:4a:c2:10:26:fe:1b:6d:f2:f7:44:1b:e5:83:5f:
                    20:93:c0:e7:91:ae:80:ce:a5:3d:75:b9:a2:56:52:
                    68:89:b0:2a:cd:82:cb:25:2a:95:40:d4:62:27:25:
                    fc:18:8b:53:d1:d6:76:8f:7a:b7:70:da:7f:91:b1:
                    5d:b7:1c:63:99:82:8a:ee:ff:92:53:94:81:1a:12:
                    a5:12:d8:15:12:93:ab:43:e8:07:36:e9:61:61:7d:
                    55:74:86:3f:08:e1:22:c8:d9:cc:f2:eb:97:e0:ff:
                    44:22:e9:bb:8e:8d:c5:34:9b:4d:4c:d2:4f:a1:0e:
                    00:c8:fe:cb:d7:ad:da:d9:13:62:a1:58:34:dd:0c:
                    43:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:E0:5B:EB:B8:F9:BA:15:29:22:68:49:9E:96:36:07:C2:69:DB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ca36dbe7-05c3-3c86-b0c3-9dd54ed36475.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:84:4b:81:0e:6b:fc:3a:8c:18:b0:d9:70:55:4e:fa:19:dc:
         c6:67:56:b9:63:34:b7:3c:3a:d5:3a:90:59:b7:da:5d:de:b1:
         5d:e1:c9:50:76:6f:77:f6:d8:8c:13:e1:2b:de:a4:8d:61:78:
         12:4a:72:3a:92:da:23:63:e3:65:01:0a:53:e2:51:5c:ac:31:
         76:bb:28:3a:4b:09:ce:de:6e:6e:f5:85:dd:d5:4d:83:9c:1d:
         96:3a:6b:38:28:b7:d4:5f:86:d0:24:4d:ef:f9:9a:9e:ac:f0:
         9d:8d:db:2b:dc:3a:03:fe:a7:6b:71:0b:f0:0d:2f:6e:2c:5f:
         8a:4e:07:48:37:82:bf:d6:46:99:0f:da:fe:f1:6e:09:4c:90:
         cd:a0:d0:ba:1f:9b:f9:05:d8:2a:2e:9e:9f:c4:88:97:b2:89:
         fc:07:4c:f2:da:f7:38:eb:eb:c5:ef:55:0c:da:d6:8f:00:85:
         02:ad:4b:cd:fe:aa:c0:ae:72:c2:04:1c:5b:f1:f9:4e:ac:95:
         4a:c9:d9:2a:28:67:9f:2c:ce:a6:8f:eb:f1:b4:c8:e8:69:dd:
         cc:e8:09:15:12:da:20:1b:41:f8:29:00:84:e3:18:20:26:16:
         26:b3:db:cf:30:6c:5a:8b:fa:7a:da:32:cd:32:b6:41:eb:25:
         4e:1c:b0:13
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj9Vr695tehk0EwEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyNDE0MDA1MloXDTI1MDUyNTEzMDA1MlowLzEtMCsGA1UEAxMk
ZGFlNTc4M2EtMTJjNC00NmViLWE5MzItOGI2YTdiYTAzYmQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoHd5ZrSJ4N+sh1nNbcOzQ9eZTFr+KD1nO16Z
jI9q0g8PyO+lsh8lYeFRkqcHrNHhp9PjaXmEYGnfmg2HuIAksO2uAy1WRerKYd1o
HjBoC9H2S67LNc/RFIWBcL17vUFJsfcNcC373lg4L2Np9S7DwFaFwlh/WGndSsIQ
Jv4bbfL3RBvlg18gk8Dnka6AzqU9dbmiVlJoibAqzYLLJSqVQNRiJyX8GItT0dZ2
j3q3cNp/kbFdtxxjmYKK7v+SU5SBGhKlEtgVEpOrQ+gHNulhYX1VdIY/COEiyNnM
8uuX4P9EIum7jo3FNJtNTNJPoQ4AyP7L163a2RNioVg03QxDPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAvgW+u4+boVKSJoSZ6WNgfCadvtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvY2EzNmRiZTctMDVjMy0z
Yzg2LWIwYzMtOWRkNTRlZDM2NDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGQHzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA+ES4EOa/w6jBiw2XBVTvoZ3MZnVrljNLc8OtU6kFm32l3esV3hyVB2
b3f22IwT4SvepI1heBJKcjqS2iNj42UBClPiUVysMXa7KDpLCc7ebm71hd3VTYOc
HZY6azgot9RfhtAkTe/5mp6s8J2N2yvcOgP+p2txC/ANL24sX4pOB0g3gr/WRpkP
2v7xbglMkM2g0Lofm/kF2Counp/EiJeyifwHTPLa9zjr68XvVQza1o8AhQKtS83+
qsCucsIEHFvx+U6slUrJ2SooZ58szqaP6/G0yOhp3czoCRUS2iAbQfgpAITjGCAm
Fiaz288wbFqL+nraMs0ytkHrJU4csBM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:40:11 2025 by rpki-client