Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa
File:                     38a1563f-ce8e-389b-9f2f-076aa60ec307.roa (raw, json)
Hash identifier:          DbRIT18qKLR1mXfGyKiJhYwDB/ZAC2r8mVT0ObbLcRM=
Subject key identifier:   F2:00:47:1B:6A:14:A9:C5:A2:72:DE:C9:2C:46:54:54:29:CA:1C:38
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285848F4F6A0D63A8E356B1BC3AE00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa
Signing time:             Fri 21 Feb 2025 14:00:50 +0000
ROA not before:           Fri 21 Feb 2025 14:00:50 +0000
ROA not after:            Thu 22 May 2025 13:00:50 +0000
asID:                     8560
IP address blocks:        66.179.248.0/21 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f4:f6:a0:d6:3a:8e:35:6b:1b:c3:ae:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Feb 21 14:00:50 2025 GMT
            Not After : May 22 13:00:50 2025 GMT
        Subject: CN=2ab4e92b-636f-41f2-91fd-016b228cb305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:02:0a:1b:86:05:cd:c4:da:52:dd:e6:41:a5:
                    9d:b8:78:e6:f2:f5:76:06:e7:4c:5b:9b:5d:ea:b1:
                    66:5e:74:ec:4d:f5:83:7f:09:10:3f:23:82:09:5c:
                    95:29:43:b3:f2:a5:8e:d0:86:de:54:83:ef:51:41:
                    93:f0:eb:17:30:c9:22:df:a6:9e:2a:ce:c3:a1:dd:
                    dc:bd:e3:5a:5a:7c:39:8f:c3:80:55:63:9b:6e:69:
                    36:b4:aa:b4:f0:ad:6e:3e:e3:a7:94:68:c1:9e:f2:
                    a9:3b:cd:5e:6b:bf:9b:f3:5f:30:34:91:7d:1e:12:
                    9d:a7:cf:a5:fa:f6:cd:45:be:85:79:9c:8e:ca:f2:
                    4c:7f:b5:a2:71:38:84:3d:f4:d3:25:4a:9c:80:62:
                    33:ee:c5:ba:4f:2b:58:8e:ec:0f:d4:27:07:bc:dc:
                    31:aa:61:9b:85:b5:2d:aa:6c:9a:46:57:26:13:6f:
                    a9:c3:2d:38:03:42:76:45:03:c0:64:3a:ad:3a:c0:
                    94:2e:bf:b6:9d:45:9b:65:7a:a4:8b:40:c3:12:7c:
                    e7:f5:61:51:8b:5b:f8:25:c3:13:ea:7b:a3:30:13:
                    43:e1:ef:2b:66:79:e5:f3:a0:b0:04:31:06:7f:6f:
                    2a:49:e8:c4:6e:5a:84:7a:f9:26:76:8b:47:f4:19:
                    ac:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:00:47:1B:6A:14:A9:C5:A2:72:DE:C9:2C:46:54:54:29:CA:1C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/38a1563f-ce8e-389b-9f2f-076aa60ec307.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:56:b5:3e:1d:4e:cd:93:6b:18:81:5a:a1:2c:30:10:91:84:
         b6:b7:7b:26:94:2f:cb:2f:2a:84:99:49:3f:b0:cb:64:c5:ac:
         80:b4:e6:dc:e3:9a:eb:0f:72:c0:18:a2:2e:83:ff:37:2e:f4:
         f4:0c:60:f0:1e:ee:d7:b2:be:a8:ea:a5:37:3b:5f:84:cc:1d:
         6f:b8:01:38:d2:ff:77:90:ed:7f:98:3f:8b:ab:44:dc:92:81:
         9d:1c:64:83:59:c7:b1:5a:db:ea:99:c4:b8:7e:ad:e3:96:36:
         ce:23:b7:b3:c0:56:70:36:14:10:c7:53:73:58:61:d9:31:84:
         77:c6:bf:b4:3f:46:07:21:24:da:79:3f:30:ef:c7:c7:0a:8c:
         42:d7:ba:8d:f9:47:51:93:d7:e7:9c:70:ac:cb:b8:7a:19:19:
         ab:a6:5d:13:94:77:c2:5d:b8:64:8b:dd:9b:66:07:35:19:e2:
         ce:15:0e:1c:ab:b2:78:3f:14:b3:e8:6a:56:6a:ba:e1:1b:db:
         55:58:1b:7d:23:31:3e:2b:b6:fc:97:66:54:cf:68:88:43:18:
         20:2a:71:9e:33:6f:23:35:f8:0a:e5:57:59:fb:ca:36:b4:9f:
         d5:be:a2:fd:e4:cf:bb:d1:94:eb:d5:e4:99:0d:06:64:00:54:
         79:72:f3:75
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj09qDWOo41axvDrgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDIyMTE0MDA1MFoXDTI1MDUyMjEzMDA1MFowLzEtMCsGA1UEAxMk
MmFiNGU5MmItNjM2Zi00MWYyLTkxZmQtMDE2YjIyOGNiMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQIKG4YFzcTaUt3mQaWduHjm8vV2BudMW5td
6rFmXnTsTfWDfwkQPyOCCVyVKUOz8qWO0IbeVIPvUUGT8OsXMMki36aeKs7Dod3c
veNaWnw5j8OAVWObbmk2tKq08K1uPuOnlGjBnvKpO81ea7+b818wNJF9HhKdp8+l
+vbNRb6FeZyOyvJMf7WicTiEPfTTJUqcgGIz7sW6TytYjuwP1CcHvNwxqmGbhbUt
qmyaRlcmE2+pwy04A0J2RQPAZDqtOsCULr+2nUWbZXqki0DDEnzn9WFRi1v4JcMT
6nujMBND4e8rZnnl86CwBDEGf28qSejEblqEevkmdotH9BmsDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPIARxtqFKnFonLeySxGVFQpyhw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvMzhhMTU2M2YtY2U4ZS0z
ODliLTlmMmYtMDc2YWE2MGVjMzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDQrP4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKdWtT4dTs2TaxiBWqEsMBCRhLa3eyaUL8svKoSZST+wy2TFrIC05tzj
musPcsAYoi6D/zcu9PQMYPAe7teyvqjqpTc7X4TMHW+4ATjS/3eQ7X+YP4urRNyS
gZ0cZINZx7Fa2+qZxLh+reOWNs4jt7PAVnA2FBDHU3NYYdkxhHfGv7Q/RgchJNp5
PzDvx8cKjELXuo35R1GT1+eccKzLuHoZGaumXROUd8JduGSL3ZtmBzUZ4s4VDhyr
sng/FLPoalZquuEb21VYG30jMT4rtvyXZlTPaIhDGCAqcZ4zbyM1+ArlV1n7yja0
n9W+ov3kz7vRlOvV5JkNBmQAVHly83U=
-----END CERTIFICATE-----
Generated at Wed Apr 9 17:37:12 2025 by rpki-client