Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa
File:                     39a6d799-e684-39bc-a3f7-41653d2b5285.roa (raw, json)
Hash identifier:          Ba421uHTkV1EFUNtnCtvrCn3/StriEN9jvsYcHpZMN4=
Subject key identifier:   41:62:9D:6C:63:84:0A:FB:AB:E2:28:4E:47:14:58:2A:69:D2:7D:10
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F43285848F926B095DF219ED6DAF3EAC0
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     30383
IP address blocks:        198.208.164.0/24 maxlen: 24
                          198.208.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:b0:95:df:21:9e:d6:da:f3:ea:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=91b45dc7-6363-46e8-b74f-a46e18bd8bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:c9:2a:39:2f:13:00:f8:e2:3b:38:79:b8:d7:
                    37:6f:8c:04:ba:a2:d8:2b:f9:f1:90:5e:6c:65:98:
                    82:3d:32:52:16:24:af:1d:be:7a:a7:f8:26:80:d6:
                    d7:22:1a:ff:f5:d3:fd:47:6d:14:0d:8a:0a:fe:0e:
                    ec:3e:53:aa:6f:f2:99:ca:33:62:80:68:2b:2e:84:
                    bf:d1:58:2f:d3:58:1a:7a:4c:d5:1d:e6:f7:c4:c3:
                    1d:d1:9b:b9:cd:01:97:71:58:96:59:87:4f:54:2a:
                    25:6b:3f:72:83:ba:a7:70:72:b6:d3:ad:9a:8b:74:
                    d4:ff:a1:60:54:b2:1b:f1:ef:7b:d1:b3:fe:e7:24:
                    01:f3:f3:52:52:ab:0e:b0:c7:bd:a9:ef:3b:3f:f1:
                    b2:fe:9b:41:93:b6:c1:e6:48:d1:80:99:5a:4c:4a:
                    26:8b:c8:64:d1:13:66:19:20:b0:ec:6d:03:8f:6b:
                    36:2d:72:a0:4d:af:fe:9b:ad:4a:83:8d:07:c2:3f:
                    bd:a1:8a:08:ca:e9:53:87:71:1f:d9:79:d2:45:53:
                    34:a6:94:a7:22:0f:51:83:07:30:8d:d6:36:08:58:
                    ee:30:44:c2:ef:62:5f:18:85:48:70:5e:b7:8f:e5:
                    54:55:c9:d6:d7:63:67:95:4b:6d:78:fa:26:64:43:
                    95:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:62:9D:6C:63:84:0A:FB:AB:E2:28:4E:47:14:58:2A:69:D2:7D:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/39a6d799-e684-39bc-a3f7-41653d2b5285.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.164.0/24
                  198.208.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:88:ef:ea:a3:8d:60:f7:ea:94:7d:91:dc:85:66:00:bf:41:
         70:fc:8e:75:f2:d5:45:06:e6:11:14:e4:cb:72:bc:b0:3c:12:
         3d:06:93:4e:bd:d5:af:5e:30:44:09:98:1b:53:92:50:39:6a:
         b0:47:ec:6c:9d:34:53:fb:6d:77:29:f9:43:b7:34:1b:d3:73:
         9c:67:4e:85:14:c0:e5:4d:e8:52:87:e0:3e:40:14:71:47:94:
         52:ba:de:7d:71:dc:27:9c:5a:fd:3f:79:c3:60:4b:9c:60:b5:
         c2:da:34:36:cf:b9:a4:77:d7:80:a4:ff:d2:29:5f:f8:65:b3:
         4f:32:50:77:e8:0c:ee:73:b2:4b:2a:dd:99:ea:f7:3f:e8:96:
         3f:6f:e6:48:4d:dc:aa:09:95:5a:9c:c4:eb:8c:70:dc:9f:72:
         4a:38:8b:f4:d9:ab:07:f9:89:4c:68:e5:65:93:a1:57:64:44:
         47:bf:70:05:12:10:da:e9:f6:11:11:01:86:db:f1:77:78:65:
         b0:02:6c:03:41:c4:79:bc:73:c0:2e:fb:5a:7e:a6:93:a1:78:
         77:2a:77:82:64:44:ae:b8:01:d3:2e:b5:a0:d3:9b:9b:87:60:
         7e:71:02:6f:25:cb:bb:d1:c8:ff:f7:53:66:08:07:ae:f8:b6:
         9d:fa:94:bf
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEj5JrCV3yGe1trz6sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
OTFiNDVkYzctNjM2My00NmU4LWI3NGYtYTQ2ZTE4YmQ4YmY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4MkqOS8TAPjiOzh5uNc3b4wEuqLYK/nxkF5s
ZZiCPTJSFiSvHb56p/gmgNbXIhr/9dP9R20UDYoK/g7sPlOqb/KZyjNigGgrLoS/
0Vgv01gaekzVHeb3xMMd0Zu5zQGXcViWWYdPVColaz9yg7qncHK2062ai3TU/6Fg
VLIb8e970bP+5yQB8/NSUqsOsMe9qe87P/Gy/ptBk7bB5kjRgJlaTEomi8hk0RNm
GSCw7G0Dj2s2LXKgTa/+m61Kg40Hwj+9oYoIyulTh3Ef2XnSRVM0ppSnIg9Rgwcw
jdY2CFjuMETC72JfGIVIcF63j+VUVcnW12NnlUttePomZEOVCQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEFinWxjhAr7q+IoTkcUWCpp0n0QMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvMzlhNmQ3OTktZTY4NC0z
OWJjLWEzZjctNDE2NTNkMmI1Mjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAxtCkAwQA
xtCuMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABCI7+qjjWD36pR9kdyFZgC/QXD8jnXy1UUG5hEU5MtyvLA8
Ej0Gk0691a9eMEQJmBtTklA5arBH7GydNFP7bXcp+UO3NBvTc5xnToUUwOVN6FKH
4D5AFHFHlFK63n1x3CecWv0/ecNgS5xgtcLaNDbPuaR314Ck/9IpX/hls08yUHfo
DO5zsksq3Znq9z/olj9v5khN3KoJlVqcxOuMcNyfcko4i/TZqwf5iUxo5WWToVdk
REe/cAUSENrp9hERAYbb8Xd4ZbACbANBxHm8c8Au+1p+ppOheHcqd4JkRK64AdMu
taDTm5uHYH5xAm8ly7vRyP/3U2YIB674tp36lL8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:40:11 2025 by rpki-client