Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7d83e21-d66a-3354-a6b0-c964e071cbee.roa
File:                     b7d83e21-d66a-3354-a6b0-c964e071cbee.roa (raw, json)
Hash identifier:          zm7bgx4CBDEdTEUcXrY+O0dMI/H9G5eDzRQzJ+D/QhM=
Subject key identifier:   29:92:33:92:82:0B:27:E7:2E:7B:C6:C1:3F:4A:F8:61:AD:8C:31:32
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BCC5378922E8D3ECC9180
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7d83e21-d66a-3354-a6b0-c964e071cbee.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        207.191.154.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:cc:53:78:92:2e:8d:3e:cc:91:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=11c091fc-640c-4ae3-959f-1e42c2751b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8e:99:c6:31:7b:a1:b3:1c:75:cc:86:43:b4:
                    5e:17:91:a8:33:96:57:aa:48:fc:48:b1:13:55:dd:
                    67:45:22:70:25:d8:bb:6c:3c:cc:5a:35:97:d7:29:
                    9d:b5:2a:3d:d2:07:60:be:17:af:8f:d2:b7:e1:24:
                    2f:13:c4:3b:63:6f:53:e1:e9:83:83:57:00:a8:7b:
                    d3:b5:57:62:8a:f0:fa:fc:c5:46:cd:bf:52:cb:b8:
                    0d:01:ec:7b:b6:96:b4:4e:ef:06:ca:47:d0:51:21:
                    87:2e:cd:b9:78:30:19:24:20:01:aa:c1:03:de:9d:
                    84:ed:1d:93:8b:c9:43:63:25:bb:1e:9b:ab:71:bd:
                    ad:9d:42:a4:9d:1e:aa:46:69:13:c4:f7:ac:c4:47:
                    8b:b5:e2:f0:f5:b2:5a:ac:be:b0:cf:79:33:53:c0:
                    55:f5:42:2f:b6:64:64:71:11:8e:6e:89:aa:24:2d:
                    20:ce:78:c3:61:16:df:3f:ee:7e:1c:d3:58:9d:51:
                    14:45:94:fe:86:08:c5:45:c2:f9:3a:d6:4e:23:19:
                    6b:c9:3b:35:e1:21:56:1c:62:6c:dd:68:55:97:33:
                    0b:71:d7:1e:a9:f5:60:9f:4e:d9:bc:34:fc:e2:94:
                    3a:20:30:0d:96:35:5f:ed:a3:82:9a:92:c2:1b:00:
                    42:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:92:33:92:82:0B:27:E7:2E:7B:C6:C1:3F:4A:F8:61:AD:8C:31:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/b7d83e21-d66a-3354-a6b0-c964e071cbee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.191.154.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         80:21:10:ad:d9:89:78:d1:f2:87:93:75:c1:d1:5e:8c:d3:33:
         b3:67:2c:25:e4:ab:9c:62:ac:c1:0a:3f:4c:d3:02:f5:77:06:
         3f:5a:b6:f6:f2:b7:f8:de:46:2c:7d:75:02:f5:f8:00:00:ad:
         e0:3b:85:0b:4a:2b:de:ad:67:61:f9:31:cb:c2:27:99:85:04:
         a9:ef:20:33:4a:41:79:46:7e:e5:bc:04:92:cc:67:ef:19:6f:
         93:e1:89:51:ea:5b:c7:2f:36:97:a7:3c:e1:9a:21:60:61:e1:
         7c:d6:63:dd:9b:d6:d8:12:67:ed:84:4f:2f:93:b6:39:88:53:
         3f:e7:5b:bc:84:d1:38:42:1c:7b:e3:15:a2:41:fe:e2:4b:6c:
         fd:0b:13:22:aa:59:c2:35:41:4e:9d:c8:73:bf:85:b6:42:95:
         d4:1c:e2:51:57:ba:6b:a1:4a:1a:33:b8:3c:da:4b:26:6d:4a:
         35:99:30:f7:30:ad:9d:d9:07:62:7d:dd:57:c8:aa:b8:ff:fc:
         0d:66:92:82:43:72:26:b6:e7:32:90:bd:f7:3e:b0:4e:26:1d:
         5c:1e:db:d8:ab:5c:fe:a9:18:51:48:cf:f5:0d:34:a9:f2:11:
         46:99:e2:48:e3:27:13:25:51:03:f9:35:44:80:6f:4c:1f:52:
         c0:aa:6c:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W8xTeJIujT7MkYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
MTFjMDkxZmMtNjQwYy00YWUzLTk1OWYtMWU0MmMyNzUxYjZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwY6ZxjF7obMcdcyGQ7ReF5GoM5ZXqkj8SLET
Vd1nRSJwJdi7bDzMWjWX1ymdtSo90gdgvhevj9K34SQvE8Q7Y29T4emDg1cAqHvT
tVdiivD6/MVGzb9Sy7gNAex7tpa0Tu8GykfQUSGHLs25eDAZJCABqsED3p2E7R2T
i8lDYyW7Hpurcb2tnUKknR6qRmkTxPesxEeLteLw9bJarL6wz3kzU8BV9UIvtmRk
cRGObomqJC0gznjDYRbfP+5+HNNYnVEURZT+hgjFRcL5OtZOIxlryTs14SFWHGJs
3WhVlzMLcdceqfVgn07ZvDT84pQ6IDANljVf7aOCmpLCGwBCGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCmSM5KCCyfnLnvGwT9K+GGtjDEyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYjdkODNlMjEtZDY2YS0z
MzU0LWE2YjAtYzk2NGUwNzFjYmVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz7+aMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIAhEK3ZiXjR8oeTdcHRXozTM7NnLCXkq5xirMEKP0zTAvV3Bj9atvby
t/jeRix9dQL1+AAAreA7hQtKK96tZ2H5McvCJ5mFBKnvIDNKQXlGfuW8BJLMZ+8Z
b5PhiVHqW8cvNpenPOGaIWBh4XzWY92b1tgSZ+2ETy+TtjmIUz/nW7yE0ThCHHvj
FaJB/uJLbP0LEyKqWcI1QU6dyHO/hbZCldQc4lFXumuhShozuDzaSyZtSjWZMPcw
rZ3ZB2J93VfIqrj//A1mkoJDcia25zKQvfc+sE4mHVwe29irXP6pGFFIz/UNNKny
EUaZ4kjjJxMlUQP5NUSAb0wfUsCqbFM=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:44:40 2025 by rpki-client