Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b145f1f8-c319-34af-9637-c6e69855b834.roa
File:                     b145f1f8-c319-34af-9637-c6e69855b834.roa (raw, json)
Hash identifier:          h9xr8uYn96soCxal3ZLgpw/Fyp8vKt74TgWkQJg40K0=
Subject key identifier:   EB:79:03:27:9A:41:55:54:30:89:B3:0B:AE:DA:F3:0A:FA:2D:35:DD
Certificate issuer:       /CN=767ef686-79af-43b0-9354-86aa78f8c407
Certificate serial:       010D0C9F4328584898D610FC2995C0B2E4D41080
Authority key identifier: 9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b145f1f8-c319-34af-9637-c6e69855b834.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     3360
IP address blocks:        206.164.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:10:fc:29:95:c0:b2:e4:d4:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=767ef686-79af-43b0-9354-86aa78f8c407
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=65d12394-510b-4b32-b2aa-e5d64a93c599
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:39:2c:60:78:12:bd:46:83:1c:12:93:90:a0:
                    bb:c8:77:60:27:5c:0f:bb:3d:59:dc:15:04:fd:49:
                    c8:a4:fd:21:05:32:2f:9a:6e:49:39:e8:eb:2a:90:
                    0f:a2:41:00:76:2c:94:40:e6:5b:75:85:60:c7:f7:
                    44:5b:5e:cf:e9:21:cc:8e:55:d0:bc:24:91:fa:e2:
                    5e:dc:37:88:2c:c5:e9:45:82:e8:63:4e:36:9f:38:
                    d5:d5:ff:5d:e6:9b:d6:08:e8:87:91:92:0d:5f:a6:
                    a8:3b:0e:4e:a7:36:94:04:c0:d7:f6:df:b0:2a:fd:
                    7b:3d:26:f5:47:44:dc:5d:f2:93:cd:00:da:77:43:
                    c6:41:1d:84:c3:c4:aa:62:9a:cc:3a:d9:bd:49:39:
                    0f:8c:a1:30:fc:df:62:43:81:d6:97:e7:13:de:98:
                    1b:02:fa:4f:dd:eb:90:d3:9e:a3:a1:12:fb:20:f9:
                    6a:2a:03:22:58:18:b2:2f:13:95:ae:9b:7b:a0:d4:
                    1b:51:ef:b4:6f:c3:cb:82:50:4f:48:4a:80:fd:91:
                    61:02:ac:e7:91:5e:65:95:ed:fd:4c:d3:b6:da:35:
                    5d:0f:36:3f:5c:52:17:3c:3f:cb:9e:e3:bc:2a:da:
                    ff:d1:fd:96:1f:a5:36:20:3e:fd:f6:a3:be:a9:7f:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:79:03:27:9A:41:55:54:30:89:B3:0B:AE:DA:F3:0A:FA:2D:35:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/b145f1f8-c319-34af-9637-c6e69855b834.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407/767ef686-79af-43b0-9354-86aa78f8c407.crl

            X509v3 Authority Key Identifier:
                keyid:9F:B7:05:B4:3A:B6:2C:04:90:48:DE:C9:3A:D2:AE:EC:C3:F5:79:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/767ef686-79af-43b0-9354-86aa78f8c407.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.164.48.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:52:cd:7f:31:a1:f3:62:bd:7a:9e:1f:e7:43:db:15:6c:82:
         9a:c9:0c:c8:26:9f:d8:e2:55:ca:ff:25:82:79:3f:36:05:9d:
         69:e9:54:37:54:f3:bd:99:55:1f:3d:a6:34:17:49:3e:8e:32:
         b8:f4:2c:8b:53:1b:32:08:f6:b9:fa:0a:77:1e:41:f4:4f:51:
         25:ee:a9:0b:cb:d5:13:89:c2:77:d6:b1:84:63:e5:57:85:c5:
         80:ae:bf:ee:17:11:99:d8:f6:85:7f:59:2f:b0:c2:c3:52:82:
         4e:06:68:d8:e0:69:fb:54:e7:b6:27:b7:95:32:c8:11:91:91:
         b8:b9:af:d2:4b:6c:89:a0:9c:95:6a:dd:7c:62:49:bc:a9:f0:
         49:5b:3e:3a:18:2c:66:5c:36:2e:c6:52:cc:9c:82:e4:30:57:
         53:77:23:6d:d0:6b:ee:49:00:22:ff:b1:41:01:ab:54:12:fb:
         d6:6d:12:c4:4a:50:bf:b7:ad:f8:d4:f7:4a:d3:1b:f0:76:2a:
         e7:aa:48:c3:c6:58:05:c3:e0:84:46:59:15:8d:6e:71:ac:27:
         b7:8f:d7:2d:e2:a6:80:e4:69:39:92:81:f7:dc:da:b1:6f:95:
         14:7d:2f:62:0a:b4:71:7b:f0:ab:e8:2c:b1:b7:e8:1e:6d:ee:
         8a:ea:89:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1hD8KZXAsuTUEIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzY3ZWY2ODYtNzlhZi00M2IwLTkzNTQtODZhYTc4Zjhj
NDA3MB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NjVkMTIzOTQtNTEwYi00YjMyLWIyYWEtZTVkNjRhOTNjNTk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjzksYHgSvUaDHBKTkKC7yHdgJ1wPuz1Z3BUE
/UnIpP0hBTIvmm5JOejrKpAPokEAdiyUQOZbdYVgx/dEW17P6SHMjlXQvCSR+uJe
3DeILMXpRYLoY042nzjV1f9d5pvWCOiHkZINX6aoOw5OpzaUBMDX9t+wKv17PSb1
R0TcXfKTzQDad0PGQR2Ew8SqYprMOtm9STkPjKEw/N9iQ4HWl+cT3pgbAvpP3euQ
056joRL7IPlqKgMiWBiyLxOVrpt7oNQbUe+0b8PLglBPSEqA/ZFhAqznkV5lle39
TNO22jVdDzY/XFIXPD/LnuO8Ktr/0f2WH6U2ID799qO+qX8JLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOt5AyeaQVVUMImzC67a8wr6LTXdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83Njdl
ZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFhNzhmOGM0MDcvYjE0NWYxZjgtYzMxOS0z
NGFmLTk2MzctYzZlNjk4NTViODM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzY3ZWY2ODYtNzlhZi00M2IwLTkz
NTQtODZhYTc4ZjhjNDA3Lzc2N2VmNjg2LTc5YWYtNDNiMC05MzU0LTg2YWE3OGY4
YzQwNy5jcmwwHwYDVR0jBBgwFoAUn7cFtDq2LASQSN7JOtKu7MP1eXgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83NjdlZjY4Ni03OWFmLTQzYjAtOTM1NC04NmFh
NzhmOGM0MDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqQwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZSzX8xofNivXqeH+dD2xVsgprJDMgmn9jiVcr/JYJ5PzYFnWnpVDdU
872ZVR89pjQXST6OMrj0LItTGzII9rn6CnceQfRPUSXuqQvL1ROJwnfWsYRj5VeF
xYCuv+4XEZnY9oV/WS+wwsNSgk4GaNjgaftU57Ynt5UyyBGRkbi5r9JLbImgnJVq
3XxiSbyp8ElbPjoYLGZcNi7GUsycguQwV1N3I23Qa+5JACL/sUEBq1QS+9ZtEsRK
UL+3rfjU90rTG/B2KueqSMPGWAXD4IRGWRWNbnGsJ7eP1y3ipoDkaTmSgffc2rFv
lRR9L2IKtHF78KvoLLG36B5t7orqiY8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:38:51 2025 by rpki-client