Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
File:                     db5ee974-efb8-37ae-8b96-c339cbc8523b.roa (raw, json)
Hash identifier:          Qt6+M7NlfvKCbZV/5Aa1340kigF4L3EGYOYpgEnmmjY=
Subject key identifier:   D3:CA:E9:C6:56:5C:C5:56:CD:0B:18:8C:2E:BC:23:A5:C1:28:41:C8
Certificate issuer:       /CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
Certificate serial:       010D0C9F43285849393E78CD6DEB10A0727CAB80
Authority key identifier: 58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     397966
IP address blocks:        170.205.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 09 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:78:cd:6d:eb:10:a0:72:7c:ab:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2f9f859b-6735-4c5f-8f00-0526da777ec4
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=89028e55-22e9-4ebc-acf4-e9e043f5f31d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:b1:0b:d2:76:c7:4c:5f:04:d6:4d:76:de:37:
                    75:c3:62:c9:93:5f:54:68:8a:ba:73:1d:59:d9:69:
                    8a:1e:d1:dd:1f:fd:85:dc:dc:0c:bf:57:ce:2a:20:
                    7e:f1:1e:82:08:d3:db:98:1c:b3:71:b8:ce:bc:cd:
                    e3:d8:20:eb:74:99:34:43:7b:f2:97:f8:fe:d4:d5:
                    78:9b:0a:57:28:ed:bc:1d:1a:64:ff:c7:9a:a0:41:
                    c9:1b:b0:b3:57:26:ec:5e:65:97:f1:45:5e:b0:27:
                    a8:f9:24:8a:f2:c5:f2:8f:24:d4:1e:fc:16:f0:3a:
                    48:9b:32:e2:ed:a2:d5:38:20:71:90:ed:79:18:34:
                    41:30:9f:c6:43:51:37:d6:c7:41:bc:45:6e:e4:a9:
                    0b:75:e7:79:d1:f8:24:7c:cc:ac:76:fb:a0:e8:7a:
                    fc:27:7e:49:99:f9:7a:a9:0d:82:ef:a3:cd:d4:ab:
                    3c:1d:7f:cf:c9:5f:02:5e:c6:76:db:bf:10:d4:53:
                    47:16:16:b7:fa:60:b6:27:4b:25:48:68:36:ea:2c:
                    f0:c1:05:4d:f8:93:e3:25:92:dc:18:79:49:90:02:
                    7b:bd:8a:d8:7c:c1:be:f8:69:cb:c3:b2:08:99:69:
                    be:ca:4a:89:e5:61:35:6d:3b:4a:8f:a3:be:68:f4:
                    f7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CA:E9:C6:56:5C:C5:56:CD:0B:18:8C:2E:BC:23:A5:C1:28:41:C8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/db5ee974-efb8-37ae-8b96-c339cbc8523b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4/2f9f859b-6735-4c5f-8f00-0526da777ec4.crl

            X509v3 Authority Key Identifier:
                keyid:58:8F:9F:47:4B:5A:E8:5E:4B:B6:F5:0F:6C:2E:BC:76:98:94:AB:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2f9f859b-6735-4c5f-8f00-0526da777ec4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:e4:71:bf:f6:0f:66:26:d5:d4:35:82:82:55:9f:bb:43:80:
         06:72:81:cb:0d:09:5e:92:fb:66:fd:ab:00:f5:45:0f:31:0b:
         92:a8:67:ae:1e:90:03:89:b4:c5:13:35:b2:78:29:c5:b2:aa:
         a4:98:3a:2a:26:82:2d:4d:f2:ae:7d:eb:77:2e:d9:25:ba:75:
         86:3d:3d:39:5f:a5:ef:8c:75:ab:96:26:61:9b:cc:c1:c3:d2:
         5d:57:dc:4c:b5:a1:dd:ea:b1:d4:96:27:62:cb:d9:58:96:f8:
         3a:86:9f:07:82:56:38:3e:2a:0d:d9:5f:19:cc:76:bf:42:23:
         6a:9b:8e:2d:db:44:cf:0e:00:8a:05:fc:97:0a:46:3e:41:4c:
         19:08:ec:8e:2f:2d:f6:2b:67:ed:05:8c:f5:bb:2f:5a:6f:f2:
         7a:00:11:8f:11:1b:98:26:94:3e:af:cd:58:b2:0c:c4:04:d6:
         14:f3:33:ca:98:ed:20:dd:35:f8:85:96:c1:be:39:1c:1d:3a:
         eb:e5:fa:84:36:3e:46:6b:e8:e5:31:63:09:86:4a:c6:19:2d:
         06:16:c3:7c:57:2b:75:f2:b4:8b:9d:7c:2e:93:65:20:4e:87:
         a3:96:a8:b0:1b:8f:ab:f5:27:5e:cf:9b:8a:e4:69:ce:a5:4d:
         ef:50:6b:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5PnjNbesQoHJ8q4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmY5Zjg1OWItNjczNS00YzVmLThmMDAtMDUyNmRhNzc3
ZWM0MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
ODkwMjhlNTUtMjJlOS00ZWJjLWFjZjQtZTllMDQzZjVmMzFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgbEL0nbHTF8E1k123jd1w2LJk19UaIq6cx1Z
2WmKHtHdH/2F3NwMv1fOKiB+8R6CCNPbmByzcbjOvM3j2CDrdJk0Q3vyl/j+1NV4
mwpXKO28HRpk/8eaoEHJG7CzVybsXmWX8UVesCeo+SSK8sXyjyTUHvwW8DpImzLi
7aLVOCBxkO15GDRBMJ/GQ1E31sdBvEVu5KkLded50fgkfMysdvug6Hr8J35Jmfl6
qQ2C76PN1Ks8HX/PyV8CXsZ2278Q1FNHFha3+mC2J0slSGg26izwwQVN+JPjJZLc
GHlJkAJ7vYrYfMG++GnLw7IImWm+ykqJ5WE1bTtKj6O+aPT3/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNPK6cZWXMVWzQsYjC68I6XBKEHIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlm
ODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2ZGE3NzdlYzQvZGI1ZWU5NzQtZWZiOC0z
N2FlLThiOTYtYzMzOWNiYzg1MjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmY5Zjg1OWItNjczNS00YzVmLThm
MDAtMDUyNmRhNzc3ZWM0LzJmOWY4NTliLTY3MzUtNGM1Zi04ZjAwLTA1MjZkYTc3
N2VjNC5jcmwwHwYDVR0jBBgwFoAUWI+fR0ta6F5LtvUPbC68dpiUqyswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yZjlmODU5Yi02NzM1LTRjNWYtOGYwMC0wNTI2
ZGE3NzdlYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqs01MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATkcb/2D2Ym1dQ1goJVn7tDgAZygcsNCV6S+2b9qwD1RQ8xC5KoZ64e
kAOJtMUTNbJ4KcWyqqSYOiomgi1N8q5963cu2SW6dYY9PTlfpe+MdauWJmGbzMHD
0l1X3Ey1od3qsdSWJ2LL2ViW+DqGnweCVjg+Kg3ZXxnMdr9CI2qbji3bRM8OAIoF
/JcKRj5BTBkI7I4vLfYrZ+0FjPW7L1pv8noAEY8RG5gmlD6vzViyDMQE1hTzM8qY
7SDdNfiFlsG+ORwdOuvl+oQ2PkZr6OUxYwmGSsYZLQYWw3xXK3XytIudfC6TZSBO
h6OWqLAbj6v1J17Pm4rkac6lTe9Qa04=
-----END CERTIFICATE-----
Generated at Tue Apr 8 13:31:10 2025 by rpki-client