Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
File:                     385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa (raw, json)
Hash identifier:          oHGzleORCADT9lsPYr8o+0Xxsz9xVE0tB0EADNuoDUg=
Subject key identifier:   B3:40:FA:26:77:82:D4:65:26:7E:49:D3:F4:68:12:57:65:00:05:54
Certificate issuer:       /CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
Certificate serial:       010D0C9F4328584975445B0622E724B562D69190
Authority key identifier: 39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa
Signing time:             Tue 08 Apr 2025 13:00:59 +0000
ROA not before:           Tue 08 Apr 2025 13:00:59 +0000
ROA not after:            Mon 07 Jul 2025 13:00:59 +0000
asID:                     396226
IP address blocks:        66.146.226.0/23 maxlen: 24
                          148.59.145.0/24 maxlen: 24
                          173.231.64.0/23 maxlen: 24
                          173.231.68.0/22 maxlen: 24
                          199.193.59.0/24 maxlen: 24
                          200.50.128.0/21 maxlen: 24
                          209.142.72.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:75:44:5b:06:22:e7:24:b5:62:d6:91:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a24ab18f-7bd4-439d-a6af-f2605cf8130e
        Validity
            Not Before: Apr  8 13:00:59 2025 GMT
            Not After : Jul  7 13:00:59 2025 GMT
        Subject: CN=93da8595-856b-4aab-9c3d-ac8d932c5a3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:85:7a:dd:0f:33:d1:5b:a7:1e:f8:d8:ee:b6:
                    f4:e8:24:6f:cd:d4:2c:73:16:48:93:41:7c:33:38:
                    02:18:c2:87:21:3c:c7:ef:7f:7d:9d:1f:1b:45:44:
                    0b:c8:a3:68:87:5d:a3:bd:db:26:a3:d5:2b:d7:d2:
                    6c:1b:76:82:4d:d9:ed:c9:48:86:12:d5:ab:b5:61:
                    38:28:21:53:e8:b9:60:77:b5:8d:6b:d5:e8:13:80:
                    2e:de:e0:36:ec:0b:05:c6:dc:26:26:ac:98:b8:1b:
                    a3:00:be:f6:d1:24:2e:68:c9:0e:0e:89:b6:a4:9a:
                    e5:62:1f:82:f3:12:6b:48:32:26:e9:4c:bc:30:c9:
                    ea:bd:44:d2:ab:5b:50:28:e8:d5:92:54:c3:23:93:
                    58:a1:4a:ef:ad:cb:fd:7a:79:1b:b6:6d:39:dd:88:
                    f2:e8:4f:26:ab:cd:a2:3d:8e:90:f9:dd:b8:ad:e7:
                    40:ba:77:28:a9:87:de:f0:a1:02:26:5a:50:25:71:
                    e8:8d:6a:39:61:00:d2:95:a8:f8:45:b1:75:5d:b9:
                    8f:3a:cf:51:cb:03:3c:00:36:4e:75:9f:eb:cc:eb:
                    0e:0f:18:e2:cd:76:71:02:f4:7e:fa:2d:c4:61:aa:
                    06:21:93:a4:50:e2:88:a9:69:dc:c5:96:84:04:cb:
                    72:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:40:FA:26:77:82:D4:65:26:7E:49:D3:F4:68:12:57:65:00:05:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/385d9e3e-e5e1-352e-8d3e-747a4e1a6f2d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e/a24ab18f-7bd4-439d-a6af-f2605cf8130e.crl

            X509v3 Authority Key Identifier:
                keyid:39:1B:BF:E7:09:A9:F5:C4:B0:EB:5F:F3:8F:5D:DC:74:FB:F6:55:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a24ab18f-7bd4-439d-a6af-f2605cf8130e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.146.226.0/23
                  148.59.145.0/24
                  173.231.64.0/23
                  173.231.68.0/22
                  199.193.59.0/24
                  200.50.128.0/21
                  209.142.72.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:e6:95:21:bd:ca:c8:a0:5f:3c:1b:db:69:7e:e3:26:a3:94:
         10:29:f4:b8:a2:0a:6f:bd:65:c7:ff:96:68:75:a7:3b:e3:b8:
         4e:30:eb:26:03:db:58:22:11:12:00:bc:52:c3:d2:b6:a4:86:
         5e:f4:1a:8e:69:bd:2b:fc:ec:87:cd:a2:29:a2:65:44:6b:c5:
         ba:a6:8f:eb:35:a6:5e:ce:bb:1d:3f:15:8e:28:4f:ca:f5:5b:
         9e:3d:bf:95:d0:38:23:58:5a:ed:cc:a6:a1:d9:6f:c6:26:ed:
         4a:76:7d:67:b4:4c:7f:30:b1:8b:08:60:30:40:e5:b9:89:84:
         d5:c2:2d:61:66:4c:ed:35:94:7a:b6:b6:cb:bb:6f:bd:fb:4a:
         3a:01:87:11:b5:d4:e0:b0:63:f1:49:90:69:01:ba:a0:c0:ff:
         22:fb:1e:1f:22:15:31:7f:08:fe:0a:dd:f4:5a:2a:77:3a:5d:
         0e:2a:49:07:fb:19:2f:00:80:1f:32:3d:78:33:ba:c5:c1:9a:
         f1:b5:65:41:dc:57:21:0f:e0:e7:70:1e:5a:d0:d0:bc:16:0a:
         22:e6:02:ae:49:74:21:04:9b:de:96:0a:33:bf:57:af:16:a8:
         80:d1:98:27:78:32:b0:97:9d:45:f2:77:3b:0d:4f:d4:ce:71:
         db:46:97:26
-----BEGIN CERTIFICATE-----
MIIGZzCCBU+gAwIBAgIUAQ0Mn0MoWEl1RFsGIucktWLWkZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI0YWIxOGYtN2JkNC00MzlkLWE2YWYtZjI2MDVjZjgx
MzBlMB4XDTI1MDQwODEzMDA1OVoXDTI1MDcwNzEzMDA1OVowLzEtMCsGA1UEAxMk
OTNkYTg1OTUtODU2Yi00YWFiLTljM2QtYWM4ZDkzMmM1YTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYV63Q8z0VunHvjY7rb06CRvzdQscxZIk0F8
MzgCGMKHITzH7399nR8bRUQLyKNoh12jvdsmo9Ur19JsG3aCTdntyUiGEtWrtWE4
KCFT6Llgd7WNa9XoE4Au3uA27AsFxtwmJqyYuBujAL720SQuaMkODom2pJrlYh+C
8xJrSDIm6Uy8MMnqvUTSq1tQKOjVklTDI5NYoUrvrcv9enkbtm053Yjy6E8mq82i
PY6Q+d24redAuncoqYfe8KECJlpQJXHojWo5YQDSlaj4RbF1XbmPOs9RywM8ADZO
dZ/rzOsODxjizXZxAvR++i3EYaoGIZOkUOKIqWncxZaEBMty9QIDAQABo4IDeTCC
A3UwHQYDVR0OBBYEFLNA+iZ3gtRlJn5J0/RoEldlAAVUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hMjRh
YjE4Zi03YmQ0LTQzOWQtYTZhZi1mMjYwNWNmODEzMGUvMzg1ZDllM2UtZTVlMS0z
NTJlLThkM2UtNzQ3YTRlMWE2ZjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTI0YWIxOGYtN2JkNC00MzlkLWE2
YWYtZjI2MDVjZjgxMzBlL2EyNGFiMThmLTdiZDQtNDM5ZC1hNmFmLWYyNjA1Y2Y4
MTMwZS5jcmwwHwYDVR0jBBgwFoAUORu/5wmp9cSw61/zj13cdPv2VbgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hMjRhYjE4Zi03YmQ0LTQzOWQtYTZhZi1mMjYw
NWNmODEzMGUuY2VyMEMGCCsGAQUFBwEHAQH/BDQwMjAwBAIAATAqAwQBQpLiAwQA
lDuRAwQBredAAwQCredEAwQAx8E7AwQDyDKAAwQC0Y5IMFQGA1UdIAEB/wRKMEgw
RgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQv
cmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABbmlSG9
ysigXzwb22l+4yajlBAp9LiiCm+9Zcf/lmh1pzvjuE4w6yYD21giERIAvFLD0rak
hl70Go5pvSv87IfNoimiZURrxbqmj+s1pl7Oux0/FY4oT8r1W549v5XQOCNYWu3M
pqHZb8Ym7Up2fWe0TH8wsYsIYDBA5bmJhNXCLWFmTO01lHq2tsu7b737SjoBhxG1
1OCwY/FJkGkBuqDA/yL7Hh8iFTF/CP4K3fRaKnc6XQ4qSQf7GS8AgB8yPXgzusXB
mvG1ZUHcVyEP4OdwHlrQ0LwWCiLmAq5JdCEEm96WCjO/V68WqIDRmCd4MrCXnUXy
dzsNT9TOcdtGlyY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:50:46 2025 by rpki-client