Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
File:                     9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa (raw, json)
Hash identifier:          dx9HGP+8/CIvG/WfY70GMWcIY11yJwxGUBU0S3uRBEI=
Subject key identifier:   6F:0A:31:70:E2:31:EC:9B:4E:E0:E3:06:35:EB:E3:1B:3D:15:03:13
Certificate issuer:       /CN=f9832b96-bd4c-421c-9299-d5f2c689d463
Certificate serial:       010D0C9F43285849203C117747DB83855D3DF100
Authority key identifier: 20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa
Signing time:             Sun 09 Mar 2025 02:00:39 +0000
ROA not before:           Sun 09 Mar 2025 02:00:39 +0000
ROA not after:            Sat 07 Jun 2025 01:00:39 +0000
asID:                     21565
IP address blocks:        64.138.192.0/18 maxlen: 24
                          64.150.128.0/19 maxlen: 24
                          66.153.128.0/17 maxlen: 24
                          66.220.64.0/20 maxlen: 24
                          67.212.32.0/19 maxlen: 24
                          107.190.144.0/20 maxlen: 24
                          108.175.176.0/20 maxlen: 24
                          152.44.112.0/20 maxlen: 24
                          159.117.160.0/19 maxlen: 24
                          162.221.104.0/21 maxlen: 24
                          162.252.0.0/21 maxlen: 24
                          198.29.48.0/20 maxlen: 24
                          198.52.224.0/20 maxlen: 24
                          198.232.104.0/21 maxlen: 24
                          206.195.64.0/19 maxlen: 24
                          216.16.160.0/19 maxlen: 24
                          216.223.192.0/19 maxlen: 24
                          2606:8400::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:20:3c:11:77:47:db:83:85:5d:3d:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f9832b96-bd4c-421c-9299-d5f2c689d463
        Validity
            Not Before: Mar  9 02:00:39 2025 GMT
            Not After : Jun  7 01:00:39 2025 GMT
        Subject: CN=f1382d18-73a9-45ee-89db-6944e8019e3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:43:5f:66:83:0a:14:4f:0a:94:b0:19:a2:00:
                    8a:a1:af:2d:fa:4d:73:f6:32:88:c0:74:ce:fd:3b:
                    7f:74:45:df:16:0b:73:88:ff:84:02:97:74:5b:a6:
                    1f:ad:14:2a:a1:74:37:fe:19:36:55:0d:f8:13:21:
                    fd:31:13:85:be:6b:e8:eb:2f:7f:65:78:cc:e0:cd:
                    e8:11:01:af:0c:ea:b8:f0:55:f3:89:a7:b9:17:45:
                    cd:31:ed:42:02:56:86:de:bc:90:cd:12:8f:e3:67:
                    b6:2e:7d:73:ba:17:5c:0f:e3:8b:aa:76:c1:80:b6:
                    90:8c:40:a7:b0:03:7d:80:3a:7d:d7:0f:d8:b2:73:
                    73:34:29:f0:29:08:38:3f:c4:ef:ae:93:02:c2:33:
                    af:cd:1d:e8:f7:a3:2e:15:37:84:78:f1:1d:a8:e5:
                    3d:d6:44:6f:89:cc:45:bf:09:ee:dd:e7:45:d4:5f:
                    75:d4:2e:1a:87:70:95:6b:2a:b3:3d:a4:4d:bc:e9:
                    f8:66:cf:24:ea:26:7f:9b:4b:25:d5:65:a1:2f:58:
                    ef:9e:6b:0c:5a:ce:90:04:7e:61:40:b6:dc:d7:e4:
                    a6:c0:8a:4a:8a:54:2c:fe:65:20:06:d2:80:c6:1f:
                    d7:32:fc:fb:9c:9a:f7:06:31:d5:8b:92:cc:4d:30:
                    84:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:0A:31:70:E2:31:EC:9B:4E:E0:E3:06:35:EB:E3:1B:3D:15:03:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/9c6fb6db-9ad0-332e-bb05-8c8dbaae9e4e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463/f9832b96-bd4c-421c-9299-d5f2c689d463.crl

            X509v3 Authority Key Identifier:
                keyid:20:9C:BB:41:66:DA:B5:0B:B5:94:F9:34:2E:BD:4C:6D:D0:53:11:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/f9832b96-bd4c-421c-9299-d5f2c689d463.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.138.192.0/18
                  64.150.128.0/19
                  66.153.128.0/17
                  66.220.64.0/20
                  67.212.32.0/19
                  107.190.144.0/20
                  108.175.176.0/20
                  152.44.112.0/20
                  159.117.160.0/19
                  162.221.104.0/21
                  162.252.0.0/21
                  198.29.48.0/20
                  198.52.224.0/20
                  198.232.104.0/21
                  206.195.64.0/19
                  216.16.160.0/19
                  216.223.192.0/19
                IPv6:
                  2606:8400::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c7:51:c3:88:e9:0e:a4:00:40:25:aa:4c:38:fe:d6:d2:f8:0d:
         66:0a:66:86:d6:cb:8f:a6:27:f0:f7:cb:7f:72:56:ea:be:ee:
         8c:9f:88:0f:ba:e4:4a:d2:01:6b:86:2e:8c:a5:59:b4:90:13:
         69:92:3f:99:78:c3:d7:7d:b1:c1:ce:2f:c9:f3:8a:e5:ae:40:
         5d:2d:e5:82:be:7d:e2:c9:47:2e:68:22:b0:40:2a:13:50:4f:
         af:92:82:ad:56:66:02:30:33:46:2f:3f:b9:71:d5:b8:ad:9f:
         ac:08:14:b7:92:94:1f:f4:e0:3c:14:8f:0e:f5:66:44:46:e4:
         68:8f:89:d8:49:d8:43:9a:b1:da:e3:4b:9f:08:a8:6a:91:ea:
         dd:10:b5:30:80:33:de:82:cf:ba:20:4f:39:39:73:69:4d:0b:
         12:e3:6e:df:67:e7:47:51:31:90:e8:3c:36:c7:a5:ea:77:e1:
         7b:89:f3:c2:08:09:79:2d:fa:39:9f:d1:db:a4:68:9f:60:a5:
         b7:67:85:c3:8e:8f:e7:0f:ee:c2:d1:94:33:16:36:84:a6:36:
         81:15:8a:ca:b8:31:42:ef:7a:b5:b9:84:40:b0:40:bf:40:43:
         56:5a:bd:02:19:b3:53:da:ed:fa:af:e3:70:3d:f5:e2:12:b9:
         bc:0b:e5:20
-----BEGIN CERTIFICATE-----
MIIGszCCBZugAwIBAgIUAQ0Mn0MoWEkgPBF3R9uDhV098QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk4MzJiOTYtYmQ0Yy00MjFjLTkyOTktZDVmMmM2ODlk
NDYzMB4XDTI1MDMwOTAyMDAzOVoXDTI1MDYwNzAxMDAzOVowLzEtMCsGA1UEAxMk
ZjEzODJkMTgtNzNhOS00NWVlLTg5ZGItNjk0NGU4MDE5ZTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokNfZoMKFE8KlLAZogCKoa8t+k1z9jKIwHTO
/Tt/dEXfFgtziP+EApd0W6YfrRQqoXQ3/hk2VQ34EyH9MROFvmvo6y9/ZXjM4M3o
EQGvDOq48FXziae5F0XNMe1CAlaG3ryQzRKP42e2Ln1zuhdcD+OLqnbBgLaQjECn
sAN9gDp91w/YsnNzNCnwKQg4P8TvrpMCwjOvzR3o96MuFTeEePEdqOU91kRvicxF
vwnu3edF1F911C4ah3CVayqzPaRNvOn4Zs8k6iZ/m0sl1WWhL1jvnmsMWs6QBH5h
QLbc1+SmwIpKilQs/mUgBtKAxh/XMvz7nJr3BjHVi5LMTTCEBwIDAQABo4IDxTCC
A8EwHQYDVR0OBBYEFG8KMXDiMeybTuDjBjXr4xs9FQMTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mOTgz
MmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYyYzY4OWQ0NjMvOWM2ZmI2ZGItOWFkMC0z
MzJlLWJiMDUtOGM4ZGJhYWU5ZTRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZjk4MzJiOTYtYmQ0Yy00MjFjLTky
OTktZDVmMmM2ODlkNDYzL2Y5ODMyYjk2LWJkNGMtNDIxYy05Mjk5LWQ1ZjJjNjg5
ZDQ2My5jcmwwHwYDVR0jBBgwFoAUIJy7QWbatQu1lPk0Lr1MbdBTEVQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mOTgzMmI5Ni1iZDRjLTQyMWMtOTI5OS1kNWYy
YzY4OWQ0NjMuY2VyMIGOBggrBgEFBQcBBwEB/wR/MH0wbAQCAAEwZgMEBkCKwAME
BUCWgAMEB0KZgAMEBELcQAMEBUPUIAMEBGu+kAMEBGyvsAMEBJgscAMEBZ91oAME
A6LdaAMEA6L8AAMEBMYdMAMEBMY04AMEA8boaAMEBc7DQAMEBdgQoAMEBdjfwDAN
BAIAAjAHAwUAJgaEADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQDHUcOI6Q6kAEAlqkw4/tbS+A1mCmaG1suP
pifw98t/clbqvu6Mn4gPuuRK0gFrhi6MpVm0kBNpkj+ZeMPXfbHBzi/J84rlrkBd
LeWCvn3iyUcuaCKwQCoTUE+vkoKtVmYCMDNGLz+5cdW4rZ+sCBS3kpQf9OA8FI8O
9WZERuRoj4nYSdhDmrHa40ufCKhqkerdELUwgDPegs+6IE85OXNpTQsS427fZ+dH
UTGQ6Dw2x6Xqd+F7ifPCCAl5Lfo5n9HbpGifYKW3Z4XDjo/nD+7C0ZQzFjaEpjaB
FYrKuDFC73q1uYRAsEC/QENWWr0CGbNT2u36r+NwPfXiErm8C+Ug
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:47:03 2025 by rpki-client