Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa
File:                     aa68105b-f17d-3d92-8850-130b7cd821d7.roa (raw, json)
Hash identifier:          ZfQV7ZI+9SjPxUp/U0iirpznhFUNd+oNrsJwoWKOF6I=
Subject key identifier:   D5:86:57:2A:10:04:67:BE:1A:F7:F8:60:15:AD:C7:51:ED:10:22:F5
Certificate issuer:       /CN=ab98592a-7218-439c-b165-34810fd16d71
Certificate serial:       010D0C9F43285849B2AF600B66B3705A969FE000
Authority key identifier: 07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa
Signing time:             Wed 30 Apr 2025 13:01:02 +0000
ROA not before:           Wed 30 Apr 2025 13:01:02 +0000
ROA not after:            Tue 29 Jul 2025 13:01:02 +0000
asID:                     3300
IP address blocks:        192.157.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b2:af:60:0b:66:b3:70:5a:96:9f:e0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab98592a-7218-439c-b165-34810fd16d71
        Validity
            Not Before: Apr 30 13:01:02 2025 GMT
            Not After : Jul 29 13:01:02 2025 GMT
        Subject: CN=e2fd6490-6151-4037-be5d-b5f2722eede3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:96:33:61:77:eb:e8:21:0a:0d:12:b8:90:79:
                    06:27:3b:f7:73:6a:2d:32:6b:7e:0e:50:bc:51:1f:
                    35:c4:4d:a0:c8:2e:eb:45:7c:db:1c:00:90:a9:49:
                    73:5c:b8:49:e0:a2:f8:1a:03:ab:9d:ae:5d:44:9d:
                    d2:ad:ce:e1:8d:4f:aa:4b:14:1d:0f:2a:be:7d:bf:
                    05:26:e0:ff:3d:0e:58:f5:67:39:2b:9c:7c:45:38:
                    ad:d2:fc:bb:fe:88:72:02:0b:0d:8f:a5:69:e8:97:
                    06:1f:dd:fe:c8:3f:16:70:24:8d:30:07:49:4d:82:
                    27:aa:83:01:21:fa:d1:25:c6:99:9a:98:21:e1:38:
                    7c:a1:1c:9d:79:79:d3:7a:d5:55:8d:21:14:74:54:
                    ad:7c:ae:cd:76:62:ac:55:c1:a7:0a:38:cf:f9:5d:
                    1a:7b:c0:df:27:37:17:c8:ad:98:d2:a4:76:00:32:
                    14:69:69:5a:cb:1c:11:dd:33:01:39:d0:96:88:1c:
                    16:65:4c:02:f5:27:6c:f5:1d:35:ae:82:80:aa:a7:
                    7d:9e:e2:1c:1a:a6:1c:80:90:92:5e:dd:df:d4:27:
                    8d:db:50:2d:b4:44:45:ef:e8:5c:57:d5:0b:f1:88:
                    5e:13:ff:2b:ec:7f:06:67:5a:ba:95:ea:f4:14:3c:
                    49:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:57:2A:10:04:67:BE:1A:F7:F8:60:15:AD:C7:51:ED:10:22:F5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/aa68105b-f17d-3d92-8850-130b7cd821d7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71/ab98592a-7218-439c-b165-34810fd16d71.crl

            X509v3 Authority Key Identifier:
                keyid:07:77:4B:3F:A3:E5:F4:F7:B2:D2:93:CC:27:35:33:62:B8:4E:78:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ab98592a-7218-439c-b165-34810fd16d71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.157.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:54:0f:b5:6a:ef:73:94:91:1a:f9:ba:a3:a8:5a:6d:f7:fb:
         77:b3:fc:2e:27:a4:7e:65:5e:ac:58:06:1b:d1:fc:69:ff:0a:
         3d:79:7c:b1:29:c9:78:90:5c:80:21:70:f3:c0:f7:3e:9c:52:
         d5:cf:a5:5b:e9:3f:a0:09:7d:ae:b5:d1:5c:a4:f8:ea:db:85:
         69:9a:dd:69:d6:29:74:d4:c9:72:23:5c:ec:22:ee:10:e2:73:
         ee:34:98:85:fb:fe:00:9e:17:f9:32:7f:57:5c:a9:fc:e6:f9:
         e2:26:b5:12:f4:8c:67:5c:01:81:83:1d:1c:fc:bf:7c:80:1c:
         00:5b:6f:a0:4f:18:35:57:95:31:29:12:c4:85:f7:3c:2e:3b:
         f4:8c:8a:8a:23:bd:aa:37:48:ca:7f:00:f6:ae:84:59:63:64:
         2f:ee:53:10:3f:0f:fd:c9:9d:1f:94:41:0e:1f:8c:6b:87:b5:
         95:b9:e5:ef:b7:91:ff:f8:23:d6:01:cf:fd:0e:78:b9:9b:f8:
         4b:4b:f5:22:ff:1c:bb:20:d4:20:91:d8:56:b4:ad:36:3b:fb:
         e9:9d:8c:a5:eb:83:da:d1:7a:01:37:52:fd:75:02:9a:da:6a:
         22:58:b5:6a:38:91:43:b5:36:b2:5e:ef:09:7d:e6:9d:7a:76:
         4b:ac:1e:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmyr2ALZrNwWpaf4AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ODU5MmEtNzIxOC00MzljLWIxNjUtMzQ4MTBmZDE2
ZDcxMB4XDTI1MDQzMDEzMDEwMloXDTI1MDcyOTEzMDEwMlowLzEtMCsGA1UEAxMk
ZTJmZDY0OTAtNjE1MS00MDM3LWJlNWQtYjVmMjcyMmVlZGUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkpYzYXfr6CEKDRK4kHkGJzv3c2otMmt+DlC8
UR81xE2gyC7rRXzbHACQqUlzXLhJ4KL4GgOrna5dRJ3Src7hjU+qSxQdDyq+fb8F
JuD/PQ5Y9Wc5K5x8RTit0vy7/ohyAgsNj6Vp6JcGH93+yD8WcCSNMAdJTYInqoMB
IfrRJcaZmpgh4Th8oRydeXnTetVVjSEUdFStfK7NdmKsVcGnCjjP+V0ae8DfJzcX
yK2Y0qR2ADIUaWlayxwR3TMBOdCWiBwWZUwC9Sds9R01roKAqqd9nuIcGqYcgJCS
Xt3f1CeN21AttERF7+hcV9UL8YheE/8r7H8GZ1q6ler0FDxJ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNWGVyoQBGe+Gvf4YBWtx1HtECL1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4
NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgxMGZkMTZkNzEvYWE2ODEwNWItZjE3ZC0z
ZDkyLTg4NTAtMTMwYjdjZDgyMWQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWI5ODU5MmEtNzIxOC00MzljLWIx
NjUtMzQ4MTBmZDE2ZDcxL2FiOTg1OTJhLTcyMTgtNDM5Yy1iMTY1LTM0ODEwZmQx
NmQ3MS5jcmwwHwYDVR0jBBgwFoAUB3dLP6Pl9Pey0pPMJzUzYrhOeD0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYjk4NTkyYS03MjE4LTQzOWMtYjE2NS0zNDgx
MGZkMTZkNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwJ2QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGFUD7Vq73OUkRr5uqOoWm33+3ez/C4npH5lXqxYBhvR/Gn/Cj15fLEp
yXiQXIAhcPPA9z6cUtXPpVvpP6AJfa610Vyk+OrbhWma3WnWKXTUyXIjXOwi7hDi
c+40mIX7/gCeF/kyf1dcqfzm+eImtRL0jGdcAYGDHRz8v3yAHABbb6BPGDVXlTEp
EsSF9zwuO/SMioojvao3SMp/APauhFljZC/uUxA/D/3JnR+UQQ4fjGuHtZW55e+3
kf/4I9YBz/0OeLmb+EtL9SL/HLsg1CCR2Fa0rTY7++mdjKXrg9rRegE3Uv11Apra
aiJYtWo4kUO1NrJe7wl95p16dkusHkw=
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:10:51 2025 by rpki-client