Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/04c5ba4b-16c6-3a79-b8ec-2d3d8aff7ae2.roa
File:                     04c5ba4b-16c6-3a79-b8ec-2d3d8aff7ae2.roa (raw, json)
Hash identifier:          Hf3zmBIYU2L0hUIrvfcvMwEle3e9hKXhk1kNws1lt5g=
Subject key identifier:   64:1F:86:10:BF:0C:67:25:85:2C:22:BD:3A:DE:A1:05:92:08:AC:4A
Certificate issuer:       /CN=fc9e4738-7902-435b-802c-f37dc4b25f95
Certificate serial:       010D0C9F43285848E59BB9F0A0A9D91D95C44600
Authority key identifier: 34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/04c5ba4b-16c6-3a79-b8ec-2d3d8aff7ae2.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     199527
IP address blocks:        64.145.96.0/22 maxlen: 22
                          64.145.100.0/22 maxlen: 22
                          64.145.104.0/22 maxlen: 22
                          64.145.108.0/22 maxlen: 22
                          64.145.112.0/22 maxlen: 22
                          64.145.116.0/22 maxlen: 22
                          64.145.120.0/22 maxlen: 22
                          64.145.124.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 14 Mar 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b9:f0:a0:a9:d9:1d:95:c4:46:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9e4738-7902-435b-802c-f37dc4b25f95
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=d5536186-72fe-4d4d-81f3-f34d360ba4ac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:3f:8b:ba:3d:77:32:2c:b7:ab:d8:77:5c:f1:
                    57:4c:bf:fe:6a:22:14:b0:c3:f2:b9:db:e3:00:67:
                    e6:e7:f0:76:60:d2:5f:04:66:f3:8d:04:76:75:63:
                    88:bf:ad:4f:d6:21:59:a8:1e:3b:46:5f:1b:50:c1:
                    81:02:ae:09:77:a1:a6:6e:21:e3:f4:5b:19:5d:c2:
                    7a:4d:78:c2:9e:ed:98:85:08:5a:da:34:df:4d:fa:
                    19:f8:6c:7f:67:44:a6:b6:b8:8f:08:01:09:54:30:
                    ae:d2:3c:af:fd:28:48:ea:be:bb:71:dc:98:cc:9d:
                    9c:ef:60:4b:8e:1e:ff:5e:1c:30:21:82:5e:27:e5:
                    95:e6:7c:64:2d:8d:05:6e:3c:76:79:b9:64:7a:f7:
                    11:60:81:f3:b7:05:01:f7:04:9d:63:dc:8e:7a:b4:
                    f7:9e:c3:ae:dd:1a:d7:97:a2:85:f9:84:36:fb:e6:
                    e3:97:c6:e9:13:84:13:28:c7:42:87:21:ac:dc:11:
                    5f:1f:83:96:29:2f:59:4e:87:ff:b2:8b:58:6d:da:
                    54:46:9d:40:31:c2:95:f5:1e:20:82:9d:eb:be:4b:
                    82:c4:9a:62:d3:14:76:8d:f3:f5:d1:a6:61:e4:1d:
                    34:1b:6d:e9:d2:62:61:95:33:9f:e9:59:1e:47:d1:
                    11:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1F:86:10:BF:0C:67:25:85:2C:22:BD:3A:DE:A1:05:92:08:AC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/04c5ba4b-16c6-3a79-b8ec-2d3d8aff7ae2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95/fc9e4738-7902-435b-802c-f37dc4b25f95.crl

            X509v3 Authority Key Identifier:
                keyid:34:EB:92:D2:04:DB:D1:33:BC:6C:FD:75:3F:36:3B:E4:3B:E0:43:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fc9e4738-7902-435b-802c-f37dc4b25f95.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.145.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:1a:19:56:b7:2e:57:71:43:ac:f3:13:d3:63:d8:8c:c4:c0:
         f4:6e:de:26:29:91:2e:2f:8d:fb:0a:39:00:1b:a9:7c:65:a9:
         6a:77:33:34:d9:bd:63:09:9a:cc:53:29:a8:ea:0e:29:13:01:
         8b:96:8c:2c:97:80:2f:ad:34:57:6b:ab:c5:d5:52:f5:a5:90:
         37:73:15:ef:08:03:85:55:fc:80:9c:45:a6:42:e3:57:63:c7:
         33:85:5e:99:04:7d:1f:e2:76:03:73:dc:2c:29:d4:19:99:51:
         fb:ff:79:ad:e2:1e:ea:7a:2e:9d:30:34:a8:5a:51:ea:da:ae:
         01:9c:ab:56:9b:68:14:3d:64:71:ba:f3:c9:55:d0:10:82:ac:
         5d:b2:16:a3:c7:dc:40:fb:1d:4f:0b:3e:5f:69:d8:17:37:75:
         86:1c:db:91:25:9a:19:67:a5:8c:bd:af:84:12:d6:62:b6:08:
         62:47:2b:81:fc:62:67:0d:37:a9:b7:44:16:64:07:ed:9d:e4:
         ac:76:f8:c2:73:99:5c:56:73:78:53:76:52:89:fd:82:5a:64:
         9f:74:b1:90:da:39:3e:2b:08:ea:8c:e7:e7:5b:25:84:99:26:
         23:ca:05:51:00:fb:41:22:5d:5e:38:1a:75:06:cd:5c:df:9b:
         7d:68:ee:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7nwoKnZHZXERgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5ZTQ3MzgtNzkwMi00MzViLTgwMmMtZjM3ZGM0YjI1
Zjk1MB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZDU1MzYxODYtNzJmZS00ZDRkLTgxZjMtZjM0ZDM2MGJhNGFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlD+Luj13Miy3q9h3XPFXTL/+aiIUsMPyudvj
AGfm5/B2YNJfBGbzjQR2dWOIv61P1iFZqB47Rl8bUMGBAq4Jd6GmbiHj9FsZXcJ6
TXjCnu2YhQha2jTfTfoZ+Gx/Z0SmtriPCAEJVDCu0jyv/ShI6r67cdyYzJ2c72BL
jh7/XhwwIYJeJ+WV5nxkLY0Fbjx2eblkevcRYIHztwUB9wSdY9yOerT3nsOu3RrX
l6KF+YQ2++bjl8bpE4QTKMdChyGs3BFfH4OWKS9ZTof/sotYbdpURp1AMcKV9R4g
gp3rvkuCxJpi0xR2jfP10aZh5B00G23p0mJhlTOf6VkeR9ERdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQfhhC/DGclhSwivTreoQWSCKxKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzll
NDczOC03OTAyLTQzNWItODAyYy1mMzdkYzRiMjVmOTUvMDRjNWJhNGItMTZjNi0z
YTc5LWI4ZWMtMmQzZDhhZmY3YWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmM5ZTQ3MzgtNzkwMi00MzViLTgw
MmMtZjM3ZGM0YjI1Zjk1L2ZjOWU0NzM4LTc5MDItNDM1Yi04MDJjLWYzN2RjNGIy
NWY5NS5jcmwwHwYDVR0jBBgwFoAUNOuS0gTb0TO8bP11PzY75DvgQ74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mYzllNDczOC03OTAyLTQzNWItODAyYy1mMzdk
YzRiMjVmOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQJFgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEgaGVa3LldxQ6zzE9Nj2IzEwPRu3iYpkS4vjfsKOQAbqXxlqWp3MzTZ
vWMJmsxTKajqDikTAYuWjCyXgC+tNFdrq8XVUvWlkDdzFe8IA4VV/ICcRaZC41dj
xzOFXpkEfR/idgNz3Cwp1BmZUfv/ea3iHup6Lp0wNKhaUerargGcq1abaBQ9ZHG6
88lV0BCCrF2yFqPH3ED7HU8LPl9p2Bc3dYYc25ElmhlnpYy9r4QS1mK2CGJHK4H8
YmcNN6m3RBZkB+2d5Kx2+MJzmVxWc3hTdlKJ/YJaZJ90sZDaOT4rCOqM5+dbJYSZ
JiPKBVEA+0EiXV44GnUGzVzfm31o7n8=
-----END CERTIFICATE-----
Generated at Thu Mar 13 06:52:22 2025 by rpki-client