Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
File:                     1291833c-59e9-3300-872f-ed24b4c85804.roa (raw, json)
Hash identifier:          Hfcwx20tt62UQYsuuF80zgaQv99syH0LiOT6zaEUJUU=
Subject key identifier:   C0:03:A4:E9:1D:19:E3:EC:DF:D6:F7:C5:FD:44:B7:07:84:95:91:51
Certificate issuer:       /CN=5fe50bbd-28d3-4434-bf61-3151216bd374
Certificate serial:       010D0C9F43285848F92698C8A94F7A734222AB00
Authority key identifier: 0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        64.190.110.0/24 maxlen: 24
                          64.190.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:98:c8:a9:4f:7a:73:42:22:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5fe50bbd-28d3-4434-bf61-3151216bd374
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=f9573e62-2bad-41fe-9048-8ec329679e1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:6d:33:ed:00:16:4a:ee:d8:ea:58:27:eb:89:
                    7d:41:c4:fc:28:44:0e:1a:c5:6c:b9:20:cc:53:83:
                    20:80:50:17:3f:96:3e:c0:55:35:cf:4b:48:51:91:
                    50:5d:e1:43:54:63:e1:d0:4e:64:e9:de:44:3a:81:
                    eb:90:35:60:bc:88:ee:b1:d9:88:ac:5f:34:54:d2:
                    f6:87:ce:38:70:bf:2a:05:b3:cc:00:a6:8a:2f:21:
                    6f:c5:e5:d3:8d:59:e9:71:b2:fe:d6:8e:76:f1:ae:
                    07:ee:fd:5a:f2:a7:df:5b:6c:45:1b:95:1b:93:a8:
                    60:83:a3:6e:2c:c3:35:ea:9c:38:74:d1:24:1c:2d:
                    a0:92:12:d1:73:22:14:17:ba:95:d5:87:2d:64:93:
                    42:e7:4c:17:0f:bc:7f:a8:89:a8:a6:68:27:53:cd:
                    82:ab:90:66:61:3a:69:ce:38:af:dc:45:f7:9a:f4:
                    34:59:c8:8c:45:9d:96:0f:09:52:5e:6e:ce:90:22:
                    d5:83:bf:53:52:e6:75:51:47:aa:df:59:8b:53:3e:
                    a1:e0:1d:e6:f3:10:fa:9f:3b:a4:85:96:95:ac:b6:
                    07:5f:da:3a:3f:14:ba:96:df:37:17:75:21:4c:58:
                    77:61:6b:92:33:cf:a8:97:cd:0a:26:1d:6c:0e:17:
                    f3:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:03:A4:E9:1D:19:E3:EC:DF:D6:F7:C5:FD:44:B7:07:84:95:91:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/1291833c-59e9-3300-872f-ed24b4c85804.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374/5fe50bbd-28d3-4434-bf61-3151216bd374.crl

            X509v3 Authority Key Identifier:
                keyid:0D:87:E1:30:E6:10:9F:FD:61:DC:D2:29:CF:2B:19:92:3F:A4:B4:08

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/5fe50bbd-28d3-4434-bf61-3151216bd374.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.190.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:0b:2a:a0:3c:4d:06:19:bc:67:7a:57:10:31:34:f4:c4:c6:
         63:c7:86:46:f5:90:f8:fc:ca:10:7e:0d:60:48:0a:d5:75:e8:
         0c:39:d8:28:f0:c9:78:db:25:b7:9b:74:f3:1a:d3:08:e1:fe:
         60:6d:87:97:52:b3:47:f3:e1:08:b9:56:f5:84:6e:75:eb:c2:
         bc:62:6e:68:cb:bd:39:67:a5:fd:3b:8f:41:4e:68:15:b3:9d:
         cd:81:29:5a:71:e2:99:ee:2f:17:76:66:c9:03:66:9a:6d:7c:
         26:c6:f5:91:e5:bc:f3:b8:2e:fb:60:70:54:57:f4:9e:34:9d:
         0d:24:c0:6b:51:b6:60:de:b6:09:3d:11:86:54:70:09:dd:95:
         7b:4f:39:aa:58:55:85:43:58:20:d9:10:b7:b1:28:69:dd:24:
         35:83:c6:dc:9c:fe:4d:91:9c:30:4f:c4:2c:b4:1f:3e:c2:0b:
         80:79:ba:ad:e3:5f:c6:9f:3d:64:b1:d5:12:33:a7:6d:85:78:
         ad:63:f2:2e:4b:88:d8:4a:71:c2:b2:c0:98:fa:50:79:50:ef:
         2c:55:da:3d:83:99:81:5d:09:19:9c:75:54:4f:4d:53:56:a0:
         a4:d0:ff:af:65:31:f9:06:c1:8e:18:c9:7c:94:82:8b:11:2f:
         8d:fe:b4:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JpjIqU96c0IiqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWZlNTBiYmQtMjhkMy00NDM0LWJmNjEtMzE1MTIxNmJk
Mzc0MB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
Zjk1NzNlNjItMmJhZC00MWZlLTkwNDgtOGVjMzI5Njc5ZTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhG0z7QAWSu7Y6lgn64l9QcT8KEQOGsVsuSDM
U4MggFAXP5Y+wFU1z0tIUZFQXeFDVGPh0E5k6d5EOoHrkDVgvIjusdmIrF80VNL2
h844cL8qBbPMAKaKLyFvxeXTjVnpcbL+1o528a4H7v1a8qffW2xFG5Ubk6hgg6Nu
LMM16pw4dNEkHC2gkhLRcyIUF7qV1YctZJNC50wXD7x/qImopmgnU82Cq5BmYTpp
zjiv3EX3mvQ0WciMRZ2WDwlSXm7OkCLVg79TUuZ1UUeq31mLUz6h4B3m8xD6nzuk
hZaVrLYHX9o6PxS6lt83F3UhTFh3YWuSM8+ol80KJh1sDhfzFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMADpOkdGePs39b3xf1EtweElZFRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmU1
MGJiZC0yOGQzLTQ0MzQtYmY2MS0zMTUxMjE2YmQzNzQvMTI5MTgzM2MtNTllOS0z
MzAwLTg3MmYtZWQyNGI0Yzg1ODA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNWZlNTBiYmQtMjhkMy00NDM0LWJm
NjEtMzE1MTIxNmJkMzc0LzVmZTUwYmJkLTI4ZDMtNDQzNC1iZjYxLTMxNTEyMTZi
ZDM3NC5jcmwwHwYDVR0jBBgwFoAUDYfhMOYQn/1h3NIpzysZkj+ktAgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81ZmU1MGJiZC0yOGQzLTQ0MzQtYmY2MS0zMTUx
MjE2YmQzNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQL5uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG8LKqA8TQYZvGd6VxAxNPTExmPHhkb1kPj8yhB+DWBICtV16Aw52Cjw
yXjbJbebdPMa0wjh/mBth5dSs0fz4Qi5VvWEbnXrwrxibmjLvTlnpf07j0FOaBWz
nc2BKVpx4pnuLxd2ZskDZpptfCbG9ZHlvPO4LvtgcFRX9J40nQ0kwGtRtmDetgk9
EYZUcAndlXtPOapYVYVDWCDZELexKGndJDWDxtyc/k2RnDBPxCy0Hz7CC4B5uq3j
X8afPWSx1RIzp22FeK1j8i5LiNhKccKywJj6UHlQ7yxV2j2DmYFdCRmcdVRPTVNW
oKTQ/69lMfkGwY4YyXyUgosRL43+tHc=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:36 2025 by rpki-client