Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa
File:                     a8df26f2-94f2-3c93-a33e-614742e348a1.roa (raw, json)
Hash identifier:          iY0dP/PDHjjm7/chjBnFVbcFmpfI0N719Xc8qC4FDYE=
Subject key identifier:   08:AE:A6:76:1B:80:99:35:49:E8:84:E3:6A:48:A2:50:2D:42:F2:4A
Certificate issuer:       /CN=b718aa52-21de-402e-8bcf-bfe1926502ee
Certificate serial:       010D0C9F43285849244E7B55608C84186CE94E20
Authority key identifier: 0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     19689
IP address blocks:        64.78.240.0/20 maxlen: 20
                          64.119.80.0/20 maxlen: 20
                          208.123.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:7b:55:60:8c:84:18:6c:e9:4e:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b718aa52-21de-402e-8bcf-bfe1926502ee
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=7e68e34d-27e0-41dd-950c-a41cdb6236f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:29:d6:9c:ea:28:84:35:ce:ac:56:3c:79:43:
                    e9:34:16:1b:9e:ed:0c:11:33:64:07:fc:e0:ba:ff:
                    7b:f1:06:8d:31:d0:fe:9f:b7:40:4b:81:2b:e4:d5:
                    c0:10:bd:cc:21:1d:65:81:66:e3:b8:65:e0:8f:85:
                    13:87:13:f1:ad:cb:ea:ca:9f:ef:e3:a9:d5:3e:0f:
                    f5:3c:e7:cc:8b:7b:b3:32:6c:90:f8:9f:b7:e2:16:
                    c4:59:d7:af:b9:42:47:24:e6:62:72:be:55:b4:52:
                    71:15:d5:73:c0:52:a7:f0:d2:9c:90:4f:0d:8c:86:
                    77:f4:de:ce:43:db:6c:18:09:5a:a5:5a:54:b5:7a:
                    90:ca:7c:2e:81:eb:33:b3:fc:da:57:9e:d3:70:8d:
                    7e:3c:67:f2:96:bf:6d:ce:4b:7a:ec:03:4d:a7:98:
                    a4:b7:e6:11:9e:56:47:9e:42:03:3f:ec:64:4e:99:
                    fc:b3:b5:4e:aa:7e:f3:f8:fb:11:41:da:0c:ed:6f:
                    05:ba:0a:73:a0:7e:f8:3e:f4:94:68:4e:85:33:73:
                    d3:f1:0f:0a:93:60:36:e8:40:2c:3c:4b:0f:af:42:
                    4f:90:8b:24:65:f1:fa:95:20:bb:10:03:15:d5:97:
                    18:d0:b6:fd:ac:af:25:ef:b8:98:8f:36:c4:f2:c0:
                    fc:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:AE:A6:76:1B:80:99:35:49:E8:84:E3:6A:48:A2:50:2D:42:F2:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/a8df26f2-94f2-3c93-a33e-614742e348a1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee/b718aa52-21de-402e-8bcf-bfe1926502ee.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1E:2D:73:6C:9D:72:83:29:76:A2:CD:94:A5:8B:E9:73:CD:88:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b718aa52-21de-402e-8bcf-bfe1926502ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.78.240.0/20
                  64.119.80.0/20
                  208.123.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:3f:80:9f:68:ed:fd:0d:ab:2b:b5:ac:48:9f:84:59:59:d7:
         ae:9f:37:2f:5d:c1:e1:63:ef:3f:8c:39:2f:10:68:64:29:4c:
         f7:84:d0:f3:6b:65:fc:01:15:e2:16:e9:fc:13:b4:3f:b1:07:
         26:12:35:a8:3d:7d:9f:8c:7b:c6:35:16:b2:3a:37:02:89:05:
         b0:4c:f3:98:86:01:e7:2a:79:39:19:37:2d:61:f1:9d:c3:45:
         37:af:f6:bb:28:8d:8f:80:11:91:8b:90:90:12:f7:7b:3a:2e:
         67:a7:03:c9:5e:93:1e:aa:f9:25:f6:bc:19:50:3f:ec:c3:1e:
         30:97:27:7d:eb:f6:c1:23:5d:e9:ba:2f:99:6a:56:69:cc:40:
         72:49:20:38:6a:56:99:57:20:67:0f:a9:17:1e:73:53:bd:bb:
         6a:73:7e:9f:26:82:24:51:75:a1:42:55:4b:a8:37:86:50:13:
         05:8e:60:14:d0:51:01:5e:d6:60:03:ce:7d:1a:62:77:15:42:
         aa:31:08:b4:b1:08:3c:a2:aa:70:cf:70:d3:80:b0:73:12:f8:
         1b:94:84:29:ec:1a:b8:60:d7:d8:c5:3b:3f:c0:94:e3:69:3b:
         f1:41:f7:ba:84:b9:9e:8e:54:99:51:0f:a3:a6:93:53:1c:af:
         4a:05:79:d8
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEkkTntVYIyEGGzpTiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjcxOGFhNTItMjFkZS00MDJlLThiY2YtYmZlMTkyNjUw
MmVlMB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
N2U2OGUzNGQtMjdlMC00MWRkLTk1MGMtYTQxY2RiNjIzNmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAginWnOoohDXOrFY8eUPpNBYbnu0METNkB/zg
uv978QaNMdD+n7dAS4Er5NXAEL3MIR1lgWbjuGXgj4UThxPxrcvqyp/v46nVPg/1
POfMi3uzMmyQ+J+34hbEWdevuUJHJOZicr5VtFJxFdVzwFKn8NKckE8NjIZ39N7O
Q9tsGAlapVpUtXqQynwugeszs/zaV57TcI1+PGfylr9tzkt67ANNp5ikt+YRnlZH
nkIDP+xkTpn8s7VOqn7z+PsRQdoM7W8FugpzoH74PvSUaE6FM3PT8Q8Kk2A26EAs
PEsPr0JPkIskZfH6lSC7EAMV1ZcY0Lb9rK8l77iYjzbE8sD8iQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFAiupnYbgJk1SeiE42pIolAtQvJKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzE4
YWE1Mi0yMWRlLTQwMmUtOGJjZi1iZmUxOTI2NTAyZWUvYThkZjI2ZjItOTRmMi0z
YzkzLWEzM2UtNjE0NzQyZTM0OGExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjcxOGFhNTItMjFkZS00MDJlLThi
Y2YtYmZlMTkyNjUwMmVlL2I3MThhYTUyLTIxZGUtNDAyZS04YmNmLWJmZTE5MjY1
MDJlZS5jcmwwHwYDVR0jBBgwFoAUDh4tc2ydcoMpdqLNlKWL6XPNiCowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iNzE4YWE1Mi0yMWRlLTQwMmUtOGJjZi1iZmUx
OTI2NTAyZWUuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQEQE7wAwQE
QHdQAwQE0HugMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAG0/gJ9o7f0Nqyu1rEifhFlZ166fNy9dweFj7z+M
OS8QaGQpTPeE0PNrZfwBFeIW6fwTtD+xByYSNag9fZ+Me8Y1FrI6NwKJBbBM85iG
AecqeTkZNy1h8Z3DRTev9rsojY+AEZGLkJAS93s6LmenA8lekx6q+SX2vBlQP+zD
HjCXJ33r9sEjXem6L5lqVmnMQHJJIDhqVplXIGcPqRcec1O9u2pzfp8mgiRRdaFC
VUuoN4ZQEwWOYBTQUQFe1mADzn0aYncVQqoxCLSxCDyiqnDPcNOAsHMS+BuUhCns
Grhg19jFOz/AlONpO/FB97qEuZ6OVJlRD6Omk1Mcr0oFedg=
-----END CERTIFICATE-----
Generated at Sat Apr 12 11:08:07 2025 by rpki-client