Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b3eae416-e8ab-398a-9917-7f1aad8eeecb.roa
File:                     b3eae416-e8ab-398a-9917-7f1aad8eeecb.roa (raw, json)
Hash identifier:          AwS2Su71w616Czn+8Z8A0oWzamGRExVU8uilfaN27MA=
Subject key identifier:   2F:EB:21:05:EA:8B:D7:15:2D:A6:46:86:EC:EE:FA:09:B8:5E:DB:A1
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848B8F0C7B87A99929A42DE3560
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b3eae416-e8ab-398a-9917-7f1aad8eeecb.roa
Signing time:             Fri 31 Jan 2025 02:00:39 +0000
ROA not before:           Fri 31 Jan 2025 02:00:39 +0000
ROA not after:            Thu 01 May 2025 01:00:39 +0000
asID:                     25611
IP address blocks:        69.27.229.0/24 maxlen: 24
                          69.74.179.0/24 maxlen: 24
                          69.74.180.0/24 maxlen: 24
                          108.179.35.32/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b8:f0:c7:b8:7a:99:92:9a:42:de:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Jan 31 02:00:39 2025 GMT
            Not After : May  1 01:00:39 2025 GMT
        Subject: CN=3e7f592e-63b4-4dcd-a8ed-0d5870dd2849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e2:f3:20:8a:73:74:d7:c9:fa:f1:d0:8d:20:
                    ce:6d:9d:e2:10:ac:60:cc:a9:32:58:1f:55:87:37:
                    10:76:df:d3:aa:99:fa:12:fd:97:dc:0f:db:64:73:
                    28:f3:7d:5b:0a:25:42:12:70:a2:93:46:a5:a5:79:
                    a1:f8:b7:09:7f:63:f2:ba:d2:80:df:d7:bf:cb:85:
                    b9:9a:4f:cd:5b:03:ee:4b:ed:28:27:97:d8:95:c6:
                    92:dc:8b:3b:df:ad:4e:80:fd:39:6c:d9:f0:83:96:
                    ae:c1:66:01:09:7b:bb:ae:1d:ad:1a:02:6c:c8:41:
                    b5:47:66:e5:56:08:e7:4c:8c:70:ae:1c:69:46:09:
                    78:ed:d0:aa:6a:fa:85:a1:2b:d4:a7:88:59:e7:83:
                    6e:84:94:d8:43:ce:a3:98:6a:d9:07:d7:20:fa:54:
                    11:4c:e1:64:86:f1:a1:f0:39:38:9d:05:33:a4:c2:
                    bd:ed:9e:39:23:49:48:a6:ff:66:8b:1c:43:a9:03:
                    98:44:2a:a3:ac:b7:f2:ac:86:dd:2f:94:b2:15:7c:
                    5b:a7:c7:5c:1f:39:76:01:f7:d6:6a:0c:c0:91:aa:
                    62:04:fc:f5:4a:41:ea:47:3a:b2:18:d8:f7:89:af:
                    9a:ad:e7:74:68:e5:23:84:93:c7:33:4b:3c:c1:72:
                    59:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:EB:21:05:EA:8B:D7:15:2D:A6:46:86:EC:EE:FA:09:B8:5E:DB:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/b3eae416-e8ab-398a-9917-7f1aad8eeecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.27.229.0/24
                  69.74.179.0-69.74.180.255
                  108.179.35.32/28

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a6:c9:eb:52:45:c5:5a:6b:aa:29:a9:20:23:19:c8:3a:89:2e:
         74:88:ff:aa:87:ca:44:c1:cb:c6:52:1b:4c:e4:2c:52:c2:e4:
         51:f1:2a:61:09:7b:c2:96:6b:cf:19:5b:a8:ab:44:35:bf:56:
         e7:b6:4c:00:59:37:57:b4:ab:9f:6f:50:db:7d:20:59:b7:ef:
         9b:b3:0a:41:cc:b2:5d:25:8f:6f:34:1a:32:eb:18:83:a4:48:
         bd:af:37:e1:5e:81:40:66:ae:5a:f3:90:b9:14:29:8a:33:b6:
         e4:6e:c1:da:5d:95:33:74:9c:7a:04:a1:49:fb:3a:15:51:8b:
         fc:81:6c:66:ce:0d:9b:61:0d:23:dc:a5:da:3d:68:9f:46:8d:
         c4:40:b2:4e:dc:c5:75:31:17:4b:33:fe:1f:99:ea:26:e0:ba:
         91:19:fd:72:a4:bb:94:1a:83:d2:db:18:43:41:df:a0:64:6f:
         37:04:45:2f:ff:fc:aa:07:a2:50:87:ef:fb:fc:e4:15:86:b3:
         0e:c1:de:b0:2c:e3:5f:e2:f3:79:a2:a3:4a:04:93:05:08:8b:
         99:89:88:c7:d8:50:c9:3e:6e:b1:98:66:ed:fe:c0:eb:2b:0f:
         29:af:40:16:4b:1b:c4:de:ce:9e:96:6a:28:31:ee:18:93:36:
         cb:0d:e3:ec
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEi48Me4epmSmkLeNWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDEzMTAyMDAzOVoXDTI1MDUwMTAxMDAzOVowLzEtMCsGA1UEAxMk
M2U3ZjU5MmUtNjNiNC00ZGNkLWE4ZWQtMGQ1ODcwZGQyODQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAueLzIIpzdNfJ+vHQjSDObZ3iEKxgzKkyWB9V
hzcQdt/Tqpn6Ev2X3A/bZHMo831bCiVCEnCik0alpXmh+LcJf2PyutKA39e/y4W5
mk/NWwPuS+0oJ5fYlcaS3Is7361OgP05bNnwg5auwWYBCXu7rh2tGgJsyEG1R2bl
VgjnTIxwrhxpRgl47dCqavqFoSvUp4hZ54NuhJTYQ86jmGrZB9cg+lQRTOFkhvGh
8Dk4nQUzpMK97Z45I0lIpv9mixxDqQOYRCqjrLfyrIbdL5SyFXxbp8dcHzl2AffW
agzAkapiBPz1SkHqRzqyGNj3ia+ared0aOUjhJPHM0s8wXJZZwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFC/rIQXqi9cVLaZGhuzu+gm4XtuhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvYjNlYWU0MTYtZThhYi0z
OThhLTk5MTctN2YxYWFkOGVlZWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzAhBAIAATAbAwQARRvlMAwD
BABFSrMDBABFSrQDBQRssyMgMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAKbJ61JFxVprqimpICMZyDqJLnSI
/6qHykTBy8ZSG0zkLFLC5FHxKmEJe8KWa88ZW6irRDW/Vue2TABZN1e0q59vUNt9
IFm375uzCkHMsl0lj280GjLrGIOkSL2vN+FegUBmrlrzkLkUKYoztuRuwdpdlTN0
nHoEoUn7OhVRi/yBbGbODZthDSPcpdo9aJ9GjcRAsk7cxXUxF0sz/h+Z6ibgupEZ
/XKku5Qag9LbGENB36BkbzcERS///KoHolCH7/v85BWGsw7B3rAs41/i83mio0oE
kwUIi5mJiMfYUMk+brGYZu3+wOsrDymvQBZLG8Tezp6Waigx7hiTNssN4+w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 23:16:33 2025 by rpki-client