Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa
File:                     3db1756e-b083-3647-8d44-e89753a2ba41.roa (raw, json)
Hash identifier:          YOY8lb3bDEwfed/8AxZ8J46USXuWyWOsKP57m+KdDkk=
Subject key identifier:   86:00:F4:DB:54:C2:AE:DA:43:4E:D8:6E:BF:FC:DA:F9:7E:2F:DA:10
Certificate issuer:       /CN=269d2481-9b5f-41f2-a09c-92994a3ae335
Certificate serial:       010D0C9F432858489FD094E48DCEF1AFCF79E900
Authority key identifier: 6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     23470
IP address blocks:        173.249.166.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:94:e4:8d:ce:f1:af:cf:79:e9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=269d2481-9b5f-41f2-a09c-92994a3ae335
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=9e0dd73f-5f0b-4646-b517-1dcfc2ff292f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d0:ce:79:19:e5:7a:9d:88:7d:18:e6:b9:55:
                    e1:80:19:05:40:d9:31:70:8f:0c:83:0c:cc:9e:5b:
                    d8:1a:fc:0b:e3:27:19:dc:06:25:45:76:a0:99:85:
                    c2:f5:db:0a:bc:85:70:af:e1:de:a3:c7:47:4d:33:
                    51:b0:ba:df:0f:30:20:26:c9:4e:22:43:40:6b:36:
                    ba:fd:94:15:69:83:6f:7f:96:b6:c8:83:16:94:d0:
                    01:b6:66:6c:0c:ba:18:7b:4b:c4:93:2c:3d:aa:36:
                    9f:6c:dc:e7:7d:86:63:74:f4:83:85:f3:d3:d3:0e:
                    69:ba:18:96:69:ac:8d:84:71:cf:f4:df:51:81:e4:
                    62:44:36:22:ef:d8:db:60:d3:07:dc:33:f3:73:52:
                    19:5d:58:3e:d6:3d:71:5e:6b:3a:5a:17:41:f4:f3:
                    57:c2:69:52:c2:b5:77:b8:26:24:1d:d9:98:a5:e1:
                    93:cb:ab:64:6c:c4:23:c3:15:b0:68:0d:92:3e:15:
                    95:e5:b6:21:f1:9d:28:62:25:11:f7:36:36:c5:27:
                    da:fc:74:fd:0f:23:21:28:e7:93:92:95:69:14:d1:
                    b7:dd:65:e6:26:74:14:94:a8:32:fc:af:73:a8:a4:
                    c9:6f:ce:7b:d9:09:12:7c:24:24:c6:08:d3:2e:8f:
                    31:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:00:F4:DB:54:C2:AE:DA:43:4E:D8:6E:BF:FC:DA:F9:7E:2F:DA:10
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/3db1756e-b083-3647-8d44-e89753a2ba41.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335/269d2481-9b5f-41f2-a09c-92994a3ae335.crl

            X509v3 Authority Key Identifier:
                keyid:6F:D8:81:3C:73:19:9C:F6:AD:A5:DB:82:9A:A0:53:16:FF:23:ED:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/269d2481-9b5f-41f2-a09c-92994a3ae335.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.249.166.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:c4:b9:79:93:50:3f:74:75:b6:cb:19:07:c3:9a:1d:03:77:
         0e:61:dc:a2:0f:56:a4:75:b4:0f:6a:29:ef:73:c3:eb:7a:e0:
         e0:f1:64:8d:54:c4:4e:e5:8b:03:ec:2d:00:3b:57:5e:66:58:
         24:f9:da:02:70:d0:20:ac:51:a9:80:9d:93:89:91:0f:4f:36:
         47:5e:c6:4a:a3:de:5c:93:7c:c2:36:78:ce:9b:92:b0:e8:59:
         11:15:6f:f3:a6:c4:67:9c:9c:b9:db:59:43:fc:09:cd:9b:4f:
         b3:58:87:59:97:a0:a2:35:f5:50:f3:07:d6:86:d7:ab:40:ed:
         2e:23:9b:b4:e2:df:d8:39:01:25:f0:49:0b:42:07:67:87:ac:
         d9:8b:2e:88:c5:34:dc:7a:26:1f:fd:30:7c:64:f8:c5:b7:60:
         df:50:b3:8d:c0:2f:3c:b0:78:f2:1d:b4:17:96:ef:7f:91:9e:
         77:41:6a:b7:fc:39:3e:6e:71:e2:66:95:04:b5:61:ff:8a:e2:
         fa:6f:97:cf:3c:13:b2:39:3f:52:ca:c9:08:9e:f8:e3:5e:08:
         ef:f4:a9:67:77:cb:10:d9:51:4f:f7:d2:3a:bc:8a:03:f8:eb:
         68:e5:be:4d:0b:a8:bc:f3:b7:36:93:29:84:33:88:e9:57:9d:
         1e:28:ad:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JTkjc7xr8956QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjY5ZDI0ODEtOWI1Zi00MWYyLWEwOWMtOTI5OTRhM2Fl
MzM1MB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
OWUwZGQ3M2YtNWYwYi00NjQ2LWI1MTctMWRjZmMyZmYyOTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldDOeRnlep2IfRjmuVXhgBkFQNkxcI8MgwzM
nlvYGvwL4ycZ3AYlRXagmYXC9dsKvIVwr+Heo8dHTTNRsLrfDzAgJslOIkNAaza6
/ZQVaYNvf5a2yIMWlNABtmZsDLoYe0vEkyw9qjafbNznfYZjdPSDhfPT0w5puhiW
aayNhHHP9N9RgeRiRDYi79jbYNMH3DPzc1IZXVg+1j1xXms6WhdB9PNXwmlSwrV3
uCYkHdmYpeGTy6tkbMQjwxWwaA2SPhWV5bYh8Z0oYiUR9zY2xSfa/HT9DyMhKOeT
kpVpFNG33WXmJnQUlKgy/K9zqKTJb8572QkSfCQkxgjTLo8xqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIYA9NtUwq7aQ07Ybr/82vl+L9oQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlk
MjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5NGEzYWUzMzUvM2RiMTc1NmUtYjA4My0z
NjQ3LThkNDQtZTg5NzUzYTJiYTQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjY5ZDI0ODEtOWI1Zi00MWYyLWEw
OWMtOTI5OTRhM2FlMzM1LzI2OWQyNDgxLTliNWYtNDFmMi1hMDljLTkyOTk0YTNh
ZTMzNS5jcmwwHwYDVR0jBBgwFoAUb9iBPHMZnPatpduCmqBTFv8j7VQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yNjlkMjQ4MS05YjVmLTQxZjItYTA5Yy05Mjk5
NGEzYWUzMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArfmmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAnEuXmTUD90dbbLGQfDmh0Ddw5h3KIPVqR1tA9qKe9zw+t64ODxZI1U
xE7liwPsLQA7V15mWCT52gJw0CCsUamAnZOJkQ9PNkdexkqj3lyTfMI2eM6bkrDo
WREVb/OmxGecnLnbWUP8Cc2bT7NYh1mXoKI19VDzB9aG16tA7S4jm7Ti39g5ASXw
SQtCB2eHrNmLLojFNNx6Jh/9MHxk+MW3YN9Qs43ALzywePIdtBeW73+RnndBarf8
OT5uceJmlQS1Yf+K4vpvl888E7I5P1LKyQie+ONeCO/0qWd3yxDZUU/30jq8igP4
62jlvk0LqLzztzaTKYQziOlXnR4orck=
-----END CERTIFICATE-----
Generated at Sat Apr 5 04:47:15 2025 by rpki-client