Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
File:                     4545cdb9-209d-3cc9-9074-490c2687d75d.roa (raw, json)
Hash identifier:          3IgmN+MrO6421zgvWdmuYJVLBX+EHBCafRsUunkfxXk=
Subject key identifier:   C6:B1:A3:0F:0A:E0:1C:D7:9C:57:7B:83:DD:AF:59:C0:87:D5:9F:92
Certificate issuer:       /CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
Certificate serial:       010D0C9F4328584908815EA2369D47ECA56FFB80
Authority key identifier: 68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     3663
IP address blocks:        50.116.128.0/18 maxlen: 24
                          63.135.128.0/19 maxlen: 24
                          64.246.240.0/20 maxlen: 24
                          70.40.224.0/19 maxlen: 24
                          74.213.208.0/20 maxlen: 24
                          96.126.0.0/18 maxlen: 24
                          108.167.192.0/18 maxlen: 24
                          142.11.0.0/18 maxlen: 24
                          173.254.128.0/19 maxlen: 24
                          173.254.160.0/20 maxlen: 24
                          184.95.64.0/18 maxlen: 24
                          192.173.192.0/18 maxlen: 24
                          198.190.64.0/18 maxlen: 24
                          199.115.224.0/22 maxlen: 24
                          206.40.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:5e:a2:36:9d:47:ec:a5:6f:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=039cfe68-90bd-49ec-9597-6ac7ebfc0cf9
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=7569c147-4253-4d90-ba5f-101525d40cb4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:0b:d1:83:49:22:23:22:db:d9:0c:d5:d4:65:
                    be:af:8a:55:89:bd:ac:23:5d:34:8c:26:56:3f:76:
                    e3:50:55:5f:98:c3:37:27:04:7e:12:1c:e8:36:d0:
                    81:f8:63:5c:49:dc:0b:5f:f6:d5:a3:dc:5c:98:1c:
                    a9:d2:f1:e8:f6:de:f9:f4:9b:46:bb:5b:c5:9b:f5:
                    9d:eb:ef:33:07:4f:21:0e:01:e1:4d:bd:22:1e:f1:
                    1e:5d:77:f4:3b:97:96:35:2c:b5:98:8e:2d:6e:3c:
                    6e:7c:b2:e8:dd:76:ff:20:b4:ca:62:e9:17:8c:1b:
                    86:17:4e:33:fa:ed:67:1a:a9:57:cf:48:cd:0f:02:
                    77:c1:4a:cf:3e:c9:0b:10:46:68:ad:1d:a8:f3:ee:
                    d3:88:6b:58:9a:d0:3a:2a:e9:c0:dd:e1:11:01:c9:
                    e9:05:2e:1d:a3:f1:8d:4b:d6:91:1d:2a:69:65:82:
                    3a:c9:58:a3:d9:3e:c3:d6:db:b1:67:d7:b5:2a:77:
                    1e:3c:da:fc:54:6b:fe:a0:ff:1b:6a:c5:8b:c8:e1:
                    f4:65:3f:08:77:b8:54:e0:d4:ba:1b:cc:b0:4b:9f:
                    50:9d:d6:4b:ac:77:25:ce:0a:33:7a:f0:71:81:99:
                    3e:48:d7:e7:8b:3f:b2:a2:3b:be:7f:11:fb:4e:37:
                    8c:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:B1:A3:0F:0A:E0:1C:D7:9C:57:7B:83:DD:AF:59:C0:87:D5:9F:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/4545cdb9-209d-3cc9-9074-490c2687d75d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.crl

            X509v3 Authority Key Identifier:
                keyid:68:4C:8A:9A:C3:36:3B:3A:06:FA:5D:6B:80:2F:49:44:EA:10:01:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/039cfe68-90bd-49ec-9597-6ac7ebfc0cf9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  50.116.128.0/18
                  63.135.128.0/19
                  64.246.240.0/20
                  70.40.224.0/19
                  74.213.208.0/20
                  96.126.0.0/18
                  108.167.192.0/18
                  142.11.0.0/18
                  173.254.128.0-173.254.175.255
                  184.95.64.0/18
                  192.173.192.0/18
                  198.190.64.0/18
                  199.115.224.0/22
                  206.40.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:8c:0a:db:26:24:86:9a:33:d7:28:a2:7d:1f:5a:a3:65:23:
         1f:34:0b:5b:03:51:3e:7a:0f:a0:18:98:4e:e1:74:5f:15:44:
         21:1e:5b:dd:93:40:44:fd:21:b6:b7:93:89:87:c1:59:3f:39:
         1a:5f:32:73:28:89:07:af:86:c1:09:cc:81:fa:4f:c9:62:8a:
         d2:7a:c0:39:66:1d:7d:10:f5:85:2f:ba:1f:f9:d0:89:f2:43:
         23:7e:36:33:e2:2b:67:92:7a:49:b5:44:28:a7:9d:4c:f4:f4:
         8b:6a:7d:60:fc:00:b8:99:72:ef:72:b9:b0:1f:d6:33:88:38:
         c2:f8:b3:d7:c3:e8:67:07:b5:23:cd:95:30:ad:0b:f9:af:f4:
         7b:a9:23:a2:68:d8:6a:c0:c8:25:da:26:00:da:a3:26:cc:a7:
         6b:7d:b3:43:ee:c9:45:8a:f2:6e:6a:d2:10:68:c2:68:f3:88:
         8d:ba:0b:17:ec:bb:a8:68:ba:ab:9c:6f:5f:ce:0b:14:fd:02:
         41:a5:c5:15:78:d2:2f:96:58:aa:db:2d:54:4b:5a:8d:70:e0:
         44:06:3c:0c:fe:13:db:26:a1:12:66:14:79:b9:ba:b9:ff:a9:
         5d:e2:de:a6:0d:b6:74:8f:01:64:8c:b0:2a:72:6f:68:4a:38:
         54:0b:65:ea
-----BEGIN CERTIFICATE-----
MIIGmTCCBYGgAwIBAgIUAQ0Mn0MoWEkIgV6iNp1H7KVv+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDM5Y2ZlNjgtOTBiZC00OWVjLTk1OTctNmFjN2ViZmMw
Y2Y5MB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzU2OWMxNDctNDI1My00ZDkwLWJhNWYtMTAxNTI1ZDQwY2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzgvRg0kiIyLb2QzV1GW+r4pVib2sI100jCZW
P3bjUFVfmMM3JwR+EhzoNtCB+GNcSdwLX/bVo9xcmByp0vHo9t759JtGu1vFm/Wd
6+8zB08hDgHhTb0iHvEeXXf0O5eWNSy1mI4tbjxufLLo3Xb/ILTKYukXjBuGF04z
+u1nGqlXz0jNDwJ3wUrPPskLEEZorR2o8+7TiGtYmtA6KunA3eERAcnpBS4do/GN
S9aRHSppZYI6yVij2T7D1tuxZ9e1KncePNr8VGv+oP8basWLyOH0ZT8Id7hU4NS6
G8ywS59QndZLrHclzgozevBxgZk+SNfniz+yoju+fxH7TjeM1wIDAQABo4IDqzCC
A6cwHQYDVR0OBBYEFMaxow8K4BzXnFd7g92vWcCH1Z+SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzlj
ZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3ZWJmYzBjZjkvNDU0NWNkYjktMjA5ZC0z
Y2M5LTkwNzQtNDkwYzI2ODdkNzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDM5Y2ZlNjgtOTBiZC00OWVjLTk1
OTctNmFjN2ViZmMwY2Y5LzAzOWNmZTY4LTkwYmQtNDllYy05NTk3LTZhYzdlYmZj
MGNmOS5jcmwwHwYDVR0jBBgwFoAUaEyKmsM2OzoG+l1rgC9JROoQAX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wMzljZmU2OC05MGJkLTQ5ZWMtOTU5Ny02YWM3
ZWJmYzBjZjkuY2VyMHUGCCsGAQUFBwEHAQH/BGYwZDBiBAIAATBcAwQGMnSAAwQF
P4eAAwQEQPbwAwQFRijgAwQEStXQAwQGYH4AAwQGbKfAAwQGjgsAMAwDBAet/oAD
BASt/qADBAa4X0ADBAbArcADBAbGvkADBALHc+ADBAXOKGAwVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAcYwK
2yYkhpoz1yiifR9ao2UjHzQLWwNRPnoPoBiYTuF0XxVEIR5b3ZNARP0htreTiYfB
WT85Gl8ycyiJB6+GwQnMgfpPyWKK0nrAOWYdfRD1hS+6H/nQifJDI342M+IrZ5J6
SbVEKKedTPT0i2p9YPwAuJly73K5sB/WM4g4wviz18PoZwe1I82VMK0L+a/0e6kj
omjYasDIJdomANqjJsyna32zQ+7JRYrybmrSEGjCaPOIjboLF+y7qGi6q5xvX84L
FP0CQaXFFXjSL5ZYqtstVEtajXDgRAY8DP4T2yahEmYUebm6uf+pXeLepg22dI8B
ZIywKnJvaEo4VAtl6g==
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:15:41 2025 by rpki-client