Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa
File:                     b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa (raw, json)
Hash identifier:          g7QNzqPF58Kyu5Y7bDA1OvPEuK7nf/29aMtebXSQlAQ=
Subject key identifier:   C6:C9:CB:5A:DF:BA:13:44:AF:CC:28:0D:16:E4:4D:11:68:0F:8A:76
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F4328584961B997F2B58A87BAFAAF02C0
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa
Signing time:             Tue 01 Apr 2025 13:01:00 +0000
ROA not before:           Tue 01 Apr 2025 13:01:00 +0000
ROA not after:            Mon 30 Jun 2025 13:01:00 +0000
asID:                     10430
IP address blocks:        169.204.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:61:b9:97:f2:b5:8a:87:ba:fa:af:02:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Apr  1 13:01:00 2025 GMT
            Not After : Jun 30 13:01:00 2025 GMT
        Subject: CN=7ab30212-7fec-4467-8137-0a11e8fbbade
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:0d:0b:e9:c1:9c:66:5d:9d:a9:5d:dd:e3:9f:
                    6b:a7:15:2a:f5:48:7e:df:37:44:0f:89:87:35:9a:
                    23:76:6a:ef:40:ea:df:b5:db:e7:82:38:53:9d:60:
                    53:b1:94:65:b1:7f:37:6f:7b:a0:1b:af:27:b2:aa:
                    b9:a1:07:a1:5c:cf:86:9b:94:bc:a2:c4:33:6a:3a:
                    34:bf:bf:62:17:40:9b:5d:92:49:04:7b:0a:41:3e:
                    38:a3:ec:37:53:31:5d:18:ae:6a:6f:46:1d:79:fe:
                    ac:f2:2b:a5:b2:94:e4:7e:3e:9c:71:bf:a3:15:81:
                    c4:50:87:97:ac:e4:57:3b:83:ff:9d:1f:5d:68:f3:
                    bc:4f:12:3f:5b:88:3b:7d:4c:ef:25:85:97:50:a0:
                    d9:63:27:c9:a3:fa:b8:5d:14:97:85:98:08:69:b8:
                    44:38:9f:82:c1:40:76:aa:82:c3:b6:ed:7d:73:7d:
                    ac:84:28:43:f6:3b:14:0b:ff:70:6e:4c:85:bf:4b:
                    cb:6c:1a:7e:d2:f6:99:b0:58:68:fe:00:e4:50:fe:
                    69:a7:08:31:54:7c:46:9a:2c:72:b7:5f:b4:cb:81:
                    c9:e7:a9:c5:dd:78:5d:72:d8:5a:01:a2:f7:ac:6e:
                    47:3b:0a:a2:f8:b1:e9:59:8a:8e:50:ef:b4:ff:c8:
                    f5:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C9:CB:5A:DF:BA:13:44:AF:CC:28:0D:16:E4:4D:11:68:0F:8A:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/b35dea5c-b17d-3e4a-83fd-ffe633b2f337.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.204.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:47:97:ba:7c:a4:07:ec:c2:87:3c:59:ca:40:8a:2a:30:c5:
         44:bd:be:97:08:6a:ec:d1:bc:2f:53:d9:a7:cf:94:21:59:2d:
         b7:71:50:ca:f1:35:8c:68:f7:f4:94:3a:04:79:b5:9a:a6:64:
         44:b2:7b:28:bb:4b:8c:50:3e:7a:ea:52:25:d6:fd:99:a6:42:
         f8:5f:b6:e3:cb:a1:d8:bc:d0:3c:59:be:be:cf:6a:e9:ff:c6:
         5f:90:f5:ef:4d:cd:e9:0b:b1:a9:a2:0e:61:8f:c9:1a:f3:38:
         05:f2:fc:d4:b0:23:32:61:3b:57:eb:96:e9:e6:1a:92:1a:c5:
         40:11:5f:85:3b:f8:fd:86:f2:da:be:3c:d2:a0:53:af:e0:08:
         82:90:6d:03:d6:a5:2c:0e:8d:1c:20:8b:b9:8e:0d:e4:7f:7c:
         b0:24:92:ef:33:1e:88:7d:1b:8d:04:ad:3f:45:b2:7b:94:3a:
         55:59:04:7a:17:57:cf:d0:4c:75:67:c8:86:70:a5:10:61:6e:
         17:39:13:6e:19:40:86:2a:28:5e:8e:3c:35:b6:aa:66:ee:96:
         6c:0c:4c:5b:ae:2a:7b:0f:cf:19:37:22:bd:b8:73:cf:8f:9a:
         54:fe:f4:da:11:35:6d:83:a4:47:9e:13:da:ee:db:48:9b:8e:
         b1:fe:87:57
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWElhuZfytYqHuvqvAsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI1MDQwMTEzMDEwMFoXDTI1MDYzMDEzMDEwMFowLzEtMCsGA1UEAxMk
N2FiMzAyMTItN2ZlYy00NDY3LTgxMzctMGExMWU4ZmJiYWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1A0L6cGcZl2dqV3d459rpxUq9Uh+3zdED4mH
NZojdmrvQOrftdvngjhTnWBTsZRlsX83b3ugG68nsqq5oQehXM+Gm5S8osQzajo0
v79iF0CbXZJJBHsKQT44o+w3UzFdGK5qb0Ydef6s8iulspTkfj6ccb+jFYHEUIeX
rORXO4P/nR9daPO8TxI/W4g7fUzvJYWXUKDZYyfJo/q4XRSXhZgIabhEOJ+CwUB2
qoLDtu19c32shChD9jsUC/9wbkyFv0vLbBp+0vaZsFho/gDkUP5ppwgxVHxGmixy
t1+0y4HJ56nF3XhdcthaAaL3rG5HOwqi+LHpWYqOUO+0/8j1KwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMbJy1rfuhNEr8woDRbkTRFoD4p2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvYjM1ZGVhNWMtYjE3ZC0z
ZTRhLTgzZmQtZmZlNjMzYjJmMzM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAqcwwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEASEeXunykB+zChzxZykCKKjDFRL2+lwhq7NG8L1PZp8+UIVktt3FQyvE1
jGj39JQ6BHm1mqZkRLJ7KLtLjFA+eupSJdb9maZC+F+248uh2LzQPFm+vs9q6f/G
X5D1703N6QuxqaIOYY/JGvM4BfL81LAjMmE7V+uW6eYakhrFQBFfhTv4/Yby2r48
0qBTr+AIgpBtA9alLA6NHCCLuY4N5H98sCSS7zMeiH0bjQStP0Wye5Q6VVkEehdX
z9BMdWfIhnClEGFuFzkTbhlAhiooXo48NbaqZu6WbAxMW64qew/PGTcivbhzz4+a
VP702hE1bYOkR54T2u7bSJuOsf6HVw==
-----END CERTIFICATE-----
Generated at Sat Apr 12 05:38:17 2025 by rpki-client