Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a61d2d3e-3e26-3b91-a91a-81c83eb5fae8.roa
File:                     a61d2d3e-3e26-3b91-a91a-81c83eb5fae8.roa (raw, json)
Hash identifier:          lcDlLPeTaCJjg0NVxd8EB1dYAUfnB85HLnSgOCAcyks=
Subject key identifier:   6E:85:85:82:16:F7:B0:19:A8:2F:62:D0:AE:D4:1F:47:4D:95:FC:2F
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F43285848BE8623137B7D535D1BF56840
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a61d2d3e-3e26-3b91-a91a-81c83eb5fae8.roa
Signing time:             Sun 02 Feb 2025 02:00:39 +0000
ROA not before:           Sun 02 Feb 2025 02:00:39 +0000
ROA not after:            Sat 03 May 2025 01:00:39 +0000
asID:                     3360
IP address blocks:        205.239.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:be:86:23:13:7b:7d:53:5d:1b:f5:68:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Feb  2 02:00:39 2025 GMT
            Not After : May  3 01:00:39 2025 GMT
        Subject: CN=8d648f5f-a383-486a-9330-7420fe3cc855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:38:30:2a:2c:ef:cf:8e:6f:57:e2:79:24:
                    9d:96:9d:a0:70:f9:3c:0b:f6:70:a2:1f:6c:46:bd:
                    a9:39:8e:d0:7d:88:ae:b9:1d:f3:d3:07:c2:42:d4:
                    38:f4:7f:0c:1c:85:eb:d4:30:01:8d:35:8e:3c:47:
                    13:d4:49:b1:58:dd:bf:29:58:83:68:c1:f0:62:01:
                    d0:f1:48:48:dc:1d:46:f3:7f:79:b0:4f:c7:94:2f:
                    1c:bc:48:33:6b:c0:1a:b2:69:58:81:f8:b0:8b:02:
                    bc:98:5c:b7:3e:b9:8d:9e:61:5b:b7:63:cb:44:17:
                    03:d0:55:3d:75:9e:ab:09:5d:85:ab:82:a2:75:ab:
                    a6:7d:ca:56:f5:db:c0:41:aa:96:52:a9:df:67:17:
                    81:75:57:60:33:fb:b2:62:b9:58:4d:66:c1:9d:0f:
                    1b:47:f9:ee:32:47:df:7a:7c:1d:d4:32:ff:a5:23:
                    1c:be:42:e9:2a:c8:92:b1:f5:f1:c4:e6:a6:96:1a:
                    b2:bb:e6:75:b7:c6:bb:50:eb:34:26:23:4b:13:08:
                    b7:b9:08:13:ac:d4:ff:81:84:f2:3b:37:5e:07:cd:
                    3e:ca:13:08:2d:80:0b:cf:20:a5:0c:90:bc:43:9d:
                    22:54:e0:17:3e:34:46:95:a6:cb:20:b7:05:50:73:
                    ff:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:85:85:82:16:F7:B0:19:A8:2F:62:D0:AE:D4:1F:47:4D:95:FC:2F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/a61d2d3e-3e26-3b91-a91a-81c83eb5fae8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.239.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:51:1d:42:93:39:c0:81:f8:f0:5e:0e:44:6f:86:ed:1d:42:
         26:4d:7d:27:49:78:cc:1c:26:4f:f8:78:c4:98:5b:a3:d0:4c:
         9c:dc:fd:f6:1b:e2:f4:e9:f0:a2:af:31:89:d7:b2:a6:ef:17:
         ef:5c:ec:41:36:68:dd:a5:d9:47:2e:e8:a6:e7:ac:17:64:fb:
         55:e3:19:db:0f:3a:3e:07:72:5e:0c:58:46:63:6a:a5:f2:62:
         02:97:07:5c:ea:99:5a:99:11:95:55:fc:f4:96:3b:b7:c8:77:
         25:b1:64:93:9f:cc:18:3c:f9:e1:d2:7b:16:a7:a3:ad:1d:68:
         24:49:b8:e3:26:9f:51:58:a8:ff:dc:c3:aa:62:e8:b7:e7:ac:
         bc:e7:23:d0:21:78:67:a6:83:51:4d:56:0f:f7:bc:aa:01:55:
         b1:bd:35:eb:fc:99:69:91:67:70:cb:3d:be:6f:ba:f6:9a:2c:
         22:58:53:cb:7f:2d:f3:ee:4c:a5:c0:ce:cf:f0:ef:df:5d:76:
         4a:04:41:68:d4:f4:80:82:5b:54:95:e7:1a:a3:6d:c6:f0:ae:
         d0:88:d9:92:19:b7:c8:29:2f:7d:92:8d:d8:97:2f:25:4d:6d:
         b3:4c:f7:b2:42:86:2d:37:9b:25:cd:a2:44:91:19:ed:d5:57:
         65:92:4b:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi+hiMTe31TXRv1aEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDIwMjAyMDAzOVoXDTI1MDUwMzAxMDAzOVowLzEtMCsGA1UEAxMk
OGQ2NDhmNWYtYTM4My00ODZhLTkzMzAtNzQyMGZlM2NjODU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvw4MCos78+Ob1fieSSdlp2gcPk8C/Zwoh9s
Rr2pOY7QfYiuuR3z0wfCQtQ49H8MHIXr1DABjTWOPEcT1EmxWN2/KViDaMHwYgHQ
8UhI3B1G8395sE/HlC8cvEgza8AasmlYgfiwiwK8mFy3PrmNnmFbt2PLRBcD0FU9
dZ6rCV2Fq4KidaumfcpW9dvAQaqWUqnfZxeBdVdgM/uyYrlYTWbBnQ8bR/nuMkff
enwd1DL/pSMcvkLpKsiSsfXxxOamlhqyu+Z1t8a7UOs0JiNLEwi3uQgTrNT/gYTy
OzdeB80+yhMILYALzyClDJC8Q50iVOAXPjRGlabLILcFUHP/FQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFG6FhYIW97AZqC9i0K7UH0dNlfwvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYTYxZDJkM2UtM2UyNi0z
YjkxLWE5MWEtODFjODNlYjVmYWU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBze+eMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9RHUKTOcCB+PBeDkRvhu0dQiZNfSdJeMwcJk/4eMSYW6PQTJzc/fYb
4vTp8KKvMYnXsqbvF+9c7EE2aN2l2Ucu6KbnrBdk+1XjGdsPOj4Hcl4MWEZjaqXy
YgKXB1zqmVqZEZVV/PSWO7fIdyWxZJOfzBg8+eHSexano60daCRJuOMmn1FYqP/c
w6pi6LfnrLznI9AheGemg1FNVg/3vKoBVbG9Nev8mWmRZ3DLPb5vuvaaLCJYU8t/
LfPuTKXAzs/w799ddkoEQWjU9ICCW1SV5xqjbcbwrtCI2ZIZt8gpL32SjdiXLyVN
bbNM97JChi03myXNokSRGe3VV2WSS4U=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:19:37 2025 by rpki-client