Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
File:                     630c9798-0269-3e7f-bafe-971b39e013ea.roa (raw, json)
Hash identifier:          G6adRVj/4Zf2w0EX0pItrJcm8dRf4oy295QXVzDtEkU=
Subject key identifier:   57:B6:DE:45:09:D2:63:8A:B3:12:BD:14:3C:1B:DA:83:90:E1:28:12
Certificate issuer:       /CN=05a654f5-4306-42f8-a547-0a21265d5db2
Certificate serial:       010D0C9F43285848E59BB52A325F0DAE9AE55F40
Authority key identifier: 72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        158.26.56.0/21 maxlen: 24
                          158.26.168.0/21 maxlen: 24
                          158.26.216.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:b5:2a:32:5f:0d:ae:9a:e5:5f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=05a654f5-4306-42f8-a547-0a21265d5db2
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=90417538-fa8a-4acd-934a-75a9be784d24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:2f:0c:63:45:f6:49:8e:a8:ce:95:69:b8:ef:
                    c5:b2:37:df:ff:b3:f3:97:c1:98:c3:04:9e:f3:2a:
                    65:e9:97:f4:2b:a5:7a:1a:40:b4:e0:45:06:ad:ce:
                    4e:85:de:17:e0:93:fd:4c:c6:ac:b1:12:3b:42:c0:
                    48:c3:ea:29:0d:a9:c6:10:70:ba:2a:80:3a:c3:1a:
                    42:64:76:1f:35:ee:09:e9:3c:af:dc:8f:94:96:60:
                    8e:2e:3b:28:d7:1d:ab:57:7b:89:4c:d1:5a:09:7f:
                    80:34:13:5a:29:80:7e:7e:92:7d:f7:12:34:40:36:
                    b9:b1:29:e6:3a:86:1f:3f:9d:21:8a:fe:4d:5a:d4:
                    f2:97:6b:b1:2d:7a:7f:e8:7a:61:dc:e6:19:8b:5b:
                    6f:d7:fe:9a:da:90:da:7b:5c:7a:bd:83:85:95:ed:
                    0d:1b:19:20:06:17:7e:f6:8b:3b:12:eb:83:34:cf:
                    df:30:50:17:d9:a1:cf:f4:2b:9e:ff:a7:85:ff:44:
                    ea:bd:b2:cf:cf:4f:5a:91:70:94:ea:04:08:60:27:
                    1e:5a:b5:ae:8f:87:ec:f1:52:59:64:03:0a:c5:58:
                    52:71:3b:8d:f5:e4:3c:1f:65:97:c0:09:15:f6:1e:
                    a8:24:dc:8c:02:fe:b0:ae:47:bc:df:8f:33:66:6e:
                    99:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:B6:DE:45:09:D2:63:8A:B3:12:BD:14:3C:1B:DA:83:90:E1:28:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/630c9798-0269-3e7f-bafe-971b39e013ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2/05a654f5-4306-42f8-a547-0a21265d5db2.crl

            X509v3 Authority Key Identifier:
                keyid:72:A6:75:73:77:76:FE:4B:E7:E0:39:E5:85:DD:8F:C2:FA:7F:DD:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/05a654f5-4306-42f8-a547-0a21265d5db2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.26.56.0/21
                  158.26.168.0/21
                  158.26.216.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:6f:4f:69:ae:87:e9:fc:68:56:4d:9a:9c:53:89:2d:08:0e:
         b5:00:44:5e:60:a7:66:42:a5:3c:b5:d6:57:fc:0f:dd:a7:f3:
         2b:fe:b4:66:cb:f2:ca:7d:50:b7:40:b3:7d:90:03:83:9c:cc:
         1d:64:b7:1d:a6:44:1a:4b:16:d2:3a:4d:2d:61:85:01:ea:da:
         81:f1:98:49:d7:b6:13:ac:4d:fe:66:1e:5f:84:63:a4:65:28:
         aa:e0:2c:64:64:08:e1:62:36:e0:a7:50:6c:89:24:a1:3b:3a:
         9f:a5:32:ea:81:a4:08:a0:bd:a7:88:7e:24:e6:29:ad:d5:b8:
         68:a6:43:93:7b:5d:c1:0d:07:42:e6:56:95:41:27:eb:75:59:
         0d:e7:9b:ce:a4:65:3a:9f:37:68:21:fc:70:2b:be:45:0e:2d:
         2a:6b:08:01:09:47:cb:b1:45:fd:0f:0f:a7:e1:96:db:a6:db:
         bf:2e:34:14:63:0a:06:57:89:75:4d:98:28:1c:bc:7a:19:0e:
         e8:72:2b:e7:b2:05:c7:bd:e8:fb:45:f0:7d:5b:01:2e:12:e6:
         ff:2d:b4:2f:72:4f:9b:c2:b5:76:2b:cf:44:91:c8:4c:d7:e5:
         70:e2:d1:3c:89:e0:34:0b:56:c0:f7:ba:36:a8:d1:1d:c2:e4:
         d5:b3:df:02
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEjlm7UqMl8NrprlX0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDVhNjU0ZjUtNDMwNi00MmY4LWE1NDctMGEyMTI2NWQ1
ZGIyMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
OTA0MTc1MzgtZmE4YS00YWNkLTkzNGEtNzVhOWJlNzg0ZDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6S8MY0X2SY6ozpVpuO/Fsjff/7Pzl8GYwwSe
8ypl6Zf0K6V6GkC04EUGrc5Ohd4X4JP9TMassRI7QsBIw+opDanGEHC6KoA6wxpC
ZHYfNe4J6Tyv3I+UlmCOLjso1x2rV3uJTNFaCX+ANBNaKYB+fpJ99xI0QDa5sSnm
OoYfP50hiv5NWtTyl2uxLXp/6Hph3OYZi1tv1/6a2pDae1x6vYOFle0NGxkgBhd+
9os7EuuDNM/fMFAX2aHP9Cue/6eF/0TqvbLPz09akXCU6gQIYCceWrWuj4fs8VJZ
ZAMKxVhScTuN9eQ8H2WXwAkV9h6oJNyMAv6wrke8348zZm6ZkQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFFe23kUJ0mOKsxK9FDwb2oOQ4SgSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2
NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIxMjY1ZDVkYjIvNjMwYzk3OTgtMDI2OS0z
ZTdmLWJhZmUtOTcxYjM5ZTAxM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDVhNjU0ZjUtNDMwNi00MmY4LWE1
NDctMGEyMTI2NWQ1ZGIyLzA1YTY1NGY1LTQzMDYtNDJmOC1hNTQ3LTBhMjEyNjVk
NWRiMi5jcmwwHwYDVR0jBBgwFoAUcqZ1c3d2/kvn4Dnlhd2Pwvp/3WMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wNWE2NTRmNS00MzA2LTQyZjgtYTU0Ny0wYTIx
MjY1ZDVkYjIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDnho4AwQD
nhqoAwQDnhrYMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAB1vT2muh+n8aFZNmpxTiS0IDrUARF5gp2ZCpTy1
1lf8D92n8yv+tGbL8sp9ULdAs32QA4OczB1ktx2mRBpLFtI6TS1hhQHq2oHxmEnX
thOsTf5mHl+EY6RlKKrgLGRkCOFiNuCnUGyJJKE7Op+lMuqBpAigvaeIfiTmKa3V
uGimQ5N7XcENB0LmVpVBJ+t1WQ3nm86kZTqfN2gh/HArvkUOLSprCAEJR8uxRf0P
D6fhltum278uNBRjCgZXiXVNmCgcvHoZDuhyK+eyBce96PtF8H1bAS4S5v8ttC9y
T5vCtXYrz0SRyEzX5XDi0TyJ4DQLVsD3ujao0R3C5NWz3wI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:52 2025 by rpki-client