Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/818696ea-5943-394f-a6c0-6453ca784723.roa
File:                     818696ea-5943-394f-a6c0-6453ca784723.roa (raw, json)
Hash identifier:          0xBm5xsuO+u2xB3aBK/hx3abxm88gRt6DXyFubjCQFc=
Subject key identifier:   D4:25:09:96:0C:25:7D:3A:7D:A1:2D:07:A5:F0:1D:D8:DA:9F:AE:0F
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F432858496A19AA929D6E62D9F3662750
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/818696ea-5943-394f-a6c0-6453ca784723.roa
Signing time:             Fri 04 Apr 2025 13:00:59 +0000
ROA not before:           Fri 04 Apr 2025 13:00:59 +0000
ROA not after:            Thu 03 Jul 2025 13:00:59 +0000
asID:                     109
IP address blocks:        72.163.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6a:19:aa:92:9d:6e:62:d9:f3:66:27:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Apr  4 13:00:59 2025 GMT
            Not After : Jul  3 13:00:59 2025 GMT
        Subject: CN=6381b78f-420a-4216-b93e-a681a03dd680
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:a0:ee:86:37:16:8a:d0:95:9c:50:43:d2:48:
                    9a:bd:e7:ff:af:98:ca:61:b1:53:85:a4:62:bc:df:
                    c6:90:12:e4:25:0f:62:cf:4a:2b:b0:02:66:d4:57:
                    8d:06:75:70:4a:79:3e:27:76:cc:1f:1b:73:ad:a8:
                    15:3b:aa:be:7e:3b:5c:f5:92:58:35:3e:90:3f:7d:
                    e7:dc:a6:8d:52:6f:da:3b:d5:c2:84:f2:7c:4e:3b:
                    d9:39:4a:47:82:e4:52:f9:f3:67:ef:aa:50:bd:c2:
                    82:86:b8:d2:81:fc:dc:b1:27:f5:7c:70:1a:71:1a:
                    7d:41:70:a6:09:51:e5:dc:4c:73:22:cb:82:d1:b1:
                    11:9b:92:85:13:4f:7c:87:02:66:4b:72:ba:2a:2c:
                    17:68:ed:7c:c2:1f:d9:cc:fd:cb:85:13:54:29:6e:
                    03:b7:f4:28:41:0a:c6:34:26:b9:96:d3:75:9a:ad:
                    0a:95:99:1c:32:af:db:ba:85:10:33:fc:67:7a:17:
                    ff:ba:e6:d8:5a:de:c3:b2:6e:7a:a4:88:28:54:c2:
                    1a:d2:01:24:ad:17:fd:5c:91:cd:d8:90:b2:36:7b:
                    a9:e8:71:68:5e:5b:d4:72:bf:66:7d:29:51:8f:d0:
                    4c:a1:1b:97:c1:12:9a:9c:d8:8b:cd:88:b3:fa:2c:
                    75:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:25:09:96:0C:25:7D:3A:7D:A1:2D:07:A5:F0:1D:D8:DA:9F:AE:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/818696ea-5943-394f-a6c0-6453ca784723.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.163.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:67:1d:ce:56:eb:d9:86:d0:a8:ec:5c:5e:19:84:b1:86:
         4a:db:30:4b:15:0b:7e:6f:89:db:4c:09:bd:46:48:e6:ad:9a:
         48:92:ec:59:5d:98:3a:0e:55:3d:07:57:61:b6:9c:f0:6d:61:
         6a:f6:02:b4:58:b9:88:9b:6a:70:a7:23:f5:cc:34:f0:2a:62:
         88:d3:51:e3:aa:db:ed:f0:2e:36:0a:5c:b1:98:26:17:f6:64:
         93:a9:ca:69:30:4f:52:01:a3:e7:22:c3:1d:60:34:d2:0c:79:
         da:98:28:04:14:0c:59:64:0a:21:6f:d5:0c:c7:14:9e:18:f4:
         17:7f:9e:06:b3:e2:cf:74:0f:c3:83:6b:a3:49:2b:aa:71:4b:
         2a:0e:12:f3:92:1c:3c:c1:9d:8c:fa:a4:12:c2:80:b1:fb:f3:
         b8:c8:29:98:24:c3:9b:6a:77:30:a1:58:46:de:c6:8b:2f:f1:
         04:77:7e:36:60:40:50:8d:cc:ef:ce:b1:5e:f5:c4:6f:be:5d:
         14:4b:fd:4e:8f:dc:88:cc:d6:9e:d2:3f:1d:fe:a1:5f:e2:d2:
         25:49:c9:a6:1f:ab:92:8d:0e:bb:c1:66:50:59:a6:5c:8c:94:
         1c:59:10:72:89:c2:2c:86:e3:92:bd:e1:31:ab:e6:07:be:ad:
         50:04:8e:cf
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElqGaqSnW5i2fNmJ1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI1MDQwNDEzMDA1OVoXDTI1MDcwMzEzMDA1OVowLzEtMCsGA1UEAxMk
NjM4MWI3OGYtNDIwYS00MjE2LWI5M2UtYTY4MWEwM2RkNjgwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwqDuhjcWitCVnFBD0kiavef/r5jKYbFThaRi
vN/GkBLkJQ9iz0orsAJm1FeNBnVwSnk+J3bMHxtzragVO6q+fjtc9ZJYNT6QP33n
3KaNUm/aO9XChPJ8TjvZOUpHguRS+fNn76pQvcKChrjSgfzcsSf1fHAacRp9QXCm
CVHl3ExzIsuC0bERm5KFE098hwJmS3K6KiwXaO18wh/ZzP3LhRNUKW4Dt/QoQQrG
NCa5ltN1mq0KlZkcMq/buoUQM/xnehf/uubYWt7Dsm56pIgoVMIa0gEkrRf9XJHN
2JCyNnup6HFoXlvUcr9mfSlRj9BMoRuXwRKanNiLzYiz+ix1uwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNQlCZYMJX06faEtB6XwHdjan64PMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvODE4Njk2ZWEtNTk0My0z
OTRmLWE2YzAtNjQ1M2NhNzg0NzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMASKMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAehhnHc5W69mG0KjsXF4ZhLGGStswSxULfm+J20wJvUZI5q2aSJLsWV2Y
Og5VPQdXYbac8G1havYCtFi5iJtqcKcj9cw08CpiiNNR46rb7fAuNgpcsZgmF/Zk
k6nKaTBPUgGj5yLDHWA00gx52pgoBBQMWWQKIW/VDMcUnhj0F3+eBrPiz3QPw4Nr
o0krqnFLKg4S85IcPMGdjPqkEsKAsfvzuMgpmCTDm2p3MKFYRt7Giy/xBHd+NmBA
UI3M786xXvXEb75dFEv9To/ciMzWntI/Hf6hX+LSJUnJph+rko0Ou8FmUFmmXIyU
HFkQconCLIbjkr3hMavmB76tUASOzw==
-----END CERTIFICATE-----
Generated at Mon Apr 7 12:11:22 2025 by rpki-client