Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
File:                     558204fb-872b-3cf3-bc34-97254c313c52.roa (raw, json)
Hash identifier:          vDnmvLd1NThLhk2BlPPpDZVgQ770D8t5tnKiQC1dATY=
Subject key identifier:   AB:C1:2B:A1:29:3A:EA:49:C2:0E:F3:AD:3C:56:81:5B:7E:33:14:F9
Certificate issuer:       /CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
Certificate serial:       010D0C9F43285848E166F7F8D8FBC240F2ED5580
Authority key identifier: 07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa
Signing time:             Fri 14 Feb 2025 13:51:14 +0000
ROA not before:           Fri 14 Feb 2025 13:51:14 +0000
ROA not after:            Thu 15 May 2025 12:51:14 +0000
asID:                     36295
IP address blocks:        162.254.8.0/22 maxlen: 24
                          192.153.46.0/24 maxlen: 24
                          192.245.118.0/24 maxlen: 24
                          208.93.220.0/22 maxlen: 24
                          209.141.24.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:66:f7:f8:d8:fb:c2:40:f2:ed:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47ab7477-38d9-400b-b1ce-4a8e5418b81d
        Validity
            Not Before: Feb 14 13:51:14 2025 GMT
            Not After : May 15 12:51:14 2025 GMT
        Subject: CN=e58f4092-e13f-4eff-af5c-c2e989ab7859
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:70:37:2f:83:9b:b9:77:aa:0b:49:ba:8b:3a:
                    7b:04:13:85:5b:6c:9f:d6:68:e7:62:08:5f:4f:3c:
                    64:6f:f5:6c:e1:e7:31:55:7b:ee:b6:f6:e6:a4:7c:
                    79:6d:f3:78:d2:7b:85:3d:b8:42:c6:5d:e5:84:b0:
                    47:c4:35:69:41:ce:91:dd:36:77:d7:67:11:f7:18:
                    1e:7b:a3:4d:2a:68:dc:b2:21:84:43:7b:d6:22:10:
                    73:7a:52:98:a1:44:d9:1f:1e:21:72:59:49:d3:93:
                    5d:0a:fa:28:8e:e6:67:02:ab:19:c0:dd:c3:05:2c:
                    82:2a:47:fa:1c:81:d5:7d:00:2d:79:40:b8:d2:58:
                    ce:4c:3c:72:b9:b4:4f:65:ad:57:41:ea:70:af:6e:
                    52:a1:ce:58:c6:ac:8a:7d:a4:4f:5c:8a:64:88:86:
                    19:0a:3d:a3:48:94:b0:c5:b0:e8:b2:bc:95:10:80:
                    0f:11:a5:a3:94:11:cb:24:dd:f3:43:27:85:4d:0f:
                    9e:f2:52:6d:e0:03:3a:3a:13:b6:f6:01:f8:77:f8:
                    4f:61:dd:4b:a4:e0:6d:4e:35:a3:1c:6a:ad:9a:08:
                    b1:06:b1:8c:cb:a8:43:02:67:30:e0:55:c2:d3:ce:
                    47:fd:7a:91:a2:b4:2d:be:88:5a:f0:df:ba:99:a9:
                    91:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:C1:2B:A1:29:3A:EA:49:C2:0E:F3:AD:3C:56:81:5B:7E:33:14:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/558204fb-872b-3cf3-bc34-97254c313c52.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d/47ab7477-38d9-400b-b1ce-4a8e5418b81d.crl

            X509v3 Authority Key Identifier:
                keyid:07:FD:B3:62:C5:68:00:2F:AB:06:5A:F8:E5:8D:41:2F:27:17:16:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/47ab7477-38d9-400b-b1ce-4a8e5418b81d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.254.8.0/22
                  192.153.46.0/24
                  192.245.118.0/24
                  208.93.220.0/22
                  209.141.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e7:e0:28:cb:74:ec:d5:dc:06:0c:34:8f:a5:d9:2e:4a:72:
         2c:6e:1d:06:00:fb:d0:f5:6d:3d:3e:f1:11:86:f7:3b:c9:ca:
         35:3e:5e:c0:71:d2:83:56:46:05:67:ab:9a:73:da:5a:2a:1a:
         33:09:b1:35:75:ea:3f:e2:59:7e:eb:75:a7:34:35:74:90:2f:
         22:b0:03:0f:6d:9e:09:fe:a5:62:dc:35:98:19:e9:77:d9:1e:
         d7:e0:7d:8c:56:fc:af:9a:e9:5d:84:d8:33:91:49:6d:85:2d:
         8a:09:ad:70:f4:1b:f1:10:dc:2d:61:e8:cf:96:3f:79:7d:27:
         07:4b:ec:d6:d3:88:32:8b:d2:56:ff:bb:c5:c1:43:d9:b1:77:
         aa:eb:56:90:9f:e7:19:04:c2:42:73:1c:d0:d0:5d:41:00:3a:
         e2:4a:53:7c:bd:cb:2d:f0:96:7e:57:1d:e8:e4:84:4d:06:83:
         8e:60:c7:32:42:bd:ca:56:9f:3a:e5:1f:92:22:89:64:44:38:
         f8:61:f2:95:74:69:fb:ef:42:7e:1f:53:16:e6:3b:3b:77:f7:
         58:22:88:b9:64:c4:31:02:52:c5:12:3e:53:f7:34:51:01:39:
         84:ce:5a:3a:24:c7:fe:e0:51:68:41:c0:c5:f4:02:e8:78:88:
         67:fb:67:60
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEjhZvf42PvCQPLtVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDdhYjc0NzctMzhkOS00MDBiLWIxY2UtNGE4ZTU0MThi
ODFkMB4XDTI1MDIxNDEzNTExNFoXDTI1MDUxNTEyNTExNFowLzEtMCsGA1UEAxMk
ZTU4ZjQwOTItZTEzZi00ZWZmLWFmNWMtYzJlOTg5YWI3ODU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApHA3L4ObuXeqC0m6izp7BBOFW2yf1mjnYghf
Tzxkb/Vs4ecxVXvutvbmpHx5bfN40nuFPbhCxl3lhLBHxDVpQc6R3TZ312cR9xge
e6NNKmjcsiGEQ3vWIhBzelKYoUTZHx4hcllJ05NdCvoojuZnAqsZwN3DBSyCKkf6
HIHVfQAteUC40ljOTDxyubRPZa1XQepwr25Soc5YxqyKfaRPXIpkiIYZCj2jSJSw
xbDosryVEIAPEaWjlBHLJN3zQyeFTQ+e8lJt4AM6OhO29gH4d/hPYd1LpOBtTjWj
HGqtmgixBrGMy6hDAmcw4FXC085H/XqRorQtvoha8N+6mamRVQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFKvBK6EpOupJwg7zrTxWgVt+MxT5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80N2Fi
NzQ3Ny0zOGQ5LTQwMGItYjFjZS00YThlNTQxOGI4MWQvNTU4MjA0ZmItODcyYi0z
Y2YzLWJjMzQtOTcyNTRjMzEzYzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNDdhYjc0NzctMzhkOS00MDBiLWIx
Y2UtNGE4ZTU0MThiODFkLzQ3YWI3NDc3LTM4ZDktNDAwYi1iMWNlLTRhOGU1NDE4
YjgxZC5jcmwwHwYDVR0jBBgwFoAUB/2zYsVoAC+rBlr45Y1BLycXFgQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80N2FiNzQ3Ny0zOGQ5LTQwMGItYjFjZS00YThl
NTQxOGI4MWQuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCov4IAwQA
wJkuAwQAwPV2AwQC0F3cAwQD0Y0YMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACjn4CjLdOzV3AYMNI+l2S5K
cixuHQYA+9D1bT0+8RGG9zvJyjU+XsBx0oNWRgVnq5pz2loqGjMJsTV16j/iWX7r
dac0NXSQLyKwAw9tngn+pWLcNZgZ6XfZHtfgfYxW/K+a6V2E2DORSW2FLYoJrXD0
G/EQ3C1h6M+WP3l9JwdL7NbTiDKL0lb/u8XBQ9mxd6rrVpCf5xkEwkJzHNDQXUEA
OuJKU3y9yy3wln5XHejkhE0Gg45gxzJCvcpWnzrlH5IiiWREOPhh8pV0afvvQn4f
UxbmOzt391giiLlkxDECUsUSPlP3NFEBOYTOWjokx/7gUWhBwMX0Auh4iGf7Z2A=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:18:11 2025 by rpki-client