Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/66006c22-6483-3861-81a1-04859f383587.roa
File:                     66006c22-6483-3861-81a1-04859f383587.roa (raw, json)
Hash identifier:          tkv+mh1VBtpXK/+2+RCs6Doj1CjBKL2eLdrCwez3Ay4=
Subject key identifier:   8C:20:1E:A2:E8:E2:39:96:18:64:E5:2F:B2:40:D6:D8:73:48:FF:16
Certificate issuer:       /CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
Certificate serial:       010D0C9F432858496FAF0AB8F418E0B3376F2B00
Authority key identifier: 80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/66006c22-6483-3861-81a1-04859f383587.roa
Signing time:             Sun 06 Apr 2025 13:01:01 +0000
ROA not before:           Sun 06 Apr 2025 13:01:01 +0000
ROA not after:            Sat 05 Jul 2025 13:01:01 +0000
asID:                     21859
IP address blocks:        98.96.221.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6f:af:0a:b8:f4:18:e0:b3:37:6f:2b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d72252c-e024-42c5-9c57-89fc4f1af3a5
        Validity
            Not Before: Apr  6 13:01:01 2025 GMT
            Not After : Jul  5 13:01:01 2025 GMT
        Subject: CN=eb5a2813-558f-42c0-9197-f80380412e7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:76:af:83:12:d0:8d:a0:89:b1:ed:00:0c:b9:
                    ba:c0:63:db:0a:10:36:92:c9:9e:ba:f0:7a:86:11:
                    ab:bf:88:46:d4:3a:1e:85:5e:73:5d:87:e2:6b:03:
                    4e:10:51:7c:b0:93:0c:41:e5:d5:54:37:b4:1f:6c:
                    ea:17:bb:5f:2e:63:7f:9e:3c:4a:3e:34:37:5b:01:
                    2b:21:72:24:56:71:53:82:b3:03:e9:61:0d:a9:a8:
                    a7:a0:bc:be:38:0e:8c:e8:6f:11:e8:b2:3a:78:fa:
                    11:1c:94:a2:c0:ed:5d:79:1f:1a:02:ab:36:85:00:
                    cf:5c:6a:95:9d:f4:5d:de:e2:6d:14:35:54:7f:dc:
                    9f:39:bc:e9:f1:ab:4f:64:97:4c:49:e1:2b:08:66:
                    dc:1d:09:8f:0f:24:00:cf:64:50:ee:f9:32:a2:dc:
                    9e:a0:45:59:fc:2e:6d:da:12:8d:a6:9e:82:29:84:
                    5f:1f:30:58:fd:b0:bb:96:d7:a6:1d:f7:44:07:36:
                    1f:7d:e2:d2:3a:b6:25:81:dd:f9:54:d2:a1:8c:1f:
                    73:c2:92:4a:1d:ac:2e:88:db:fb:fe:5e:7e:7a:1a:
                    39:7d:96:a9:17:ec:25:46:91:ad:4a:8d:fb:30:fe:
                    85:1a:7a:18:ea:1c:df:f7:8e:bd:3f:c9:fd:d6:f0:
                    0e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:20:1E:A2:E8:E2:39:96:18:64:E5:2F:B2:40:D6:D8:73:48:FF:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/66006c22-6483-3861-81a1-04859f383587.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5/0d72252c-e024-42c5-9c57-89fc4f1af3a5.crl

            X509v3 Authority Key Identifier:
                keyid:80:39:08:C7:59:10:3E:DA:E3:ED:F7:61:01:0A:44:7E:2D:82:C9:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d72252c-e024-42c5-9c57-89fc4f1af3a5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.96.221.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:75:91:de:9e:f0:58:f8:c4:02:c2:b9:53:df:49:fc:a6:
         ac:30:a7:d0:a2:bc:92:a3:8b:1a:90:b0:d2:78:dd:6b:1a:88:
         8b:f3:f7:98:8d:cb:a5:64:47:26:12:3a:0a:6f:af:36:6b:ce:
         45:e1:40:fe:c5:a2:54:09:c0:a9:8a:e0:e7:04:02:63:ea:a3:
         d3:f8:f6:14:c5:a8:ed:48:0e:a6:ec:27:e2:22:17:3e:9f:e4:
         3a:ec:43:9f:41:6e:8b:af:ed:27:f3:1b:16:68:ea:30:64:07:
         41:07:2a:0a:f2:e8:06:e4:3a:f6:96:5f:00:51:33:c8:99:42:
         aa:6b:72:f6:c6:6d:71:d3:54:ef:3e:86:c3:9b:2d:7d:76:dd:
         cd:05:f6:06:5a:1c:2e:12:78:34:44:0f:c8:42:95:a8:c8:fd:
         92:23:ce:ba:66:53:c0:67:6a:98:3b:cc:92:68:06:88:19:5c:
         14:f7:bc:9e:df:e2:77:6d:fa:88:f7:b7:c3:d1:fe:6b:12:e2:
         2e:b6:02:08:4a:44:5f:5a:a5:89:39:d7:a8:19:26:4e:0c:06:
         06:10:c7:3c:a9:77:70:e9:17:3a:4a:ab:22:82:5c:b7:e2:17:
         84:cb:b0:cf:98:c5:ac:a3:9f:5f:9f:9e:6d:30:12:ce:08:7f:
         4a:86:37:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElvrwq49BjgszdvKwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQ3MjI1MmMtZTAyNC00MmM1LTljNTctODlmYzRmMWFm
M2E1MB4XDTI1MDQwNjEzMDEwMVoXDTI1MDcwNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZWI1YTI4MTMtNTU4Zi00MmMwLTkxOTctZjgwMzgwNDEyZTdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnXavgxLQjaCJse0ADLm6wGPbChA2ksmeuvB6
hhGrv4hG1DoehV5zXYfiawNOEFF8sJMMQeXVVDe0H2zqF7tfLmN/njxKPjQ3WwEr
IXIkVnFTgrMD6WENqainoLy+OA6M6G8R6LI6ePoRHJSiwO1deR8aAqs2hQDPXGqV
nfRd3uJtFDVUf9yfObzp8atPZJdMSeErCGbcHQmPDyQAz2RQ7vkyotyeoEVZ/C5t
2hKNpp6CKYRfHzBY/bC7ltemHfdEBzYffeLSOrYlgd35VNKhjB9zwpJKHawuiNv7
/l5+eho5fZapF+wlRpGtSo37MP6FGnoY6hzf9469P8n91vAOqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIwgHqLo4jmWGGTlL7JA1thzSP8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcy
MjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZjNGYxYWYzYTUvNjYwMDZjMjItNjQ4My0z
ODYxLTgxYTEtMDQ4NTlmMzgzNTg3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQ3MjI1MmMtZTAyNC00MmM1LTlj
NTctODlmYzRmMWFmM2E1LzBkNzIyNTJjLWUwMjQtNDJjNS05YzU3LTg5ZmM0ZjFh
ZjNhNS5jcmwwHwYDVR0jBBgwFoAUgDkIx1kQPtrj7fdhAQpEfi2CyX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDcyMjUyYy1lMDI0LTQyYzUtOWM1Ny04OWZj
NGYxYWYzYTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAYmDdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAoHdZHenvBY+MQCwrlT30n8pqwwp9CivJKjixqQsNJ43WsaiIvz95iN
y6VkRyYSOgpvrzZrzkXhQP7FolQJwKmK4OcEAmPqo9P49hTFqO1IDqbsJ+IiFz6f
5DrsQ59Bbouv7SfzGxZo6jBkB0EHKgry6AbkOvaWXwBRM8iZQqprcvbGbXHTVO8+
hsObLX123c0F9gZaHC4SeDRED8hClajI/ZIjzrpmU8Bnapg7zJJoBogZXBT3vJ7f
4ndt+oj3t8PR/msS4i62AghKRF9apYk516gZJk4MBgYQxzypd3DpFzpKqyKCXLfi
F4TLsM+Yxayjn1+fnm0wEs4If0qGNys=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:27:09 2025 by rpki-client