Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
File:                     923e8850-cfe0-3825-bfad-bd433a1c0778.roa (raw, json)
Hash identifier:          KJwm2AHSCSmza+0WeFZ+QMhVeHa0jHwdNw29LCP/2Dw=
Subject key identifier:   2D:BF:70:C5:6F:4B:9A:0B:C9:22:46:A5:6C:DE:36:50:75:1B:1A:3A
Certificate issuer:       /CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
Certificate serial:       010D0C9F432858495D897064BB5FC84A51E2B380
Authority key identifier: A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
Signing time:             Mon 31 Mar 2025 01:00:47 +0000
ROA not before:           Mon 31 Mar 2025 01:00:47 +0000
ROA not after:            Sun 29 Jun 2025 01:00:47 +0000
asID:                     400164
IP address blocks:        65.75.212.0/22 maxlen: 24
                          2606:8ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5d:89:70:64:bb:5f:c8:4a:51:e2:b3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Validity
            Not Before: Mar 31 01:00:47 2025 GMT
            Not After : Jun 29 01:00:47 2025 GMT
        Subject: CN=b672a9f8-3d01-44d4-ac20-9f65de3d9d13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fd:a8:5b:be:89:43:c0:88:96:18:ff:81:bc:
                    a1:14:5a:7f:d8:f7:40:a2:e0:28:78:0e:7b:d6:a9:
                    fd:47:4b:95:cc:bf:5e:16:2b:dd:12:58:7b:87:68:
                    93:1e:77:9d:e1:96:bc:9c:69:02:88:d0:44:45:08:
                    c0:43:f8:77:8f:8f:7e:b4:eb:dd:8c:cb:a0:fb:8a:
                    cf:63:eb:83:02:7e:17:94:72:07:cc:c0:f4:fb:9e:
                    db:7a:9e:e8:bd:61:f2:65:20:88:ea:33:88:ed:d8:
                    b1:23:76:e6:30:66:5b:ed:3f:bb:9f:9c:53:94:42:
                    5c:1b:c7:f8:f3:56:1a:5e:bf:37:72:52:c6:40:df:
                    e7:34:4c:45:07:02:77:61:87:c9:66:92:5b:fb:b6:
                    18:50:bb:6f:92:1a:62:6a:2d:b5:f7:42:0d:e4:54:
                    d8:43:47:d7:72:42:aa:df:d2:cb:64:e8:ab:37:97:
                    77:09:6f:cf:32:58:cd:98:db:20:74:02:9f:6f:08:
                    bf:b2:85:a7:cb:e8:b5:bb:35:7a:d3:2c:da:3c:a6:
                    7e:fb:d5:d6:64:dc:30:a4:f5:51:6c:a4:a5:14:6d:
                    91:83:08:93:63:c7:4f:7b:46:c6:59:9e:76:2f:b5:
                    da:e8:f0:58:a1:22:9a:be:49:0d:7b:a6:9c:46:66:
                    e7:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:BF:70:C5:6F:4B:9A:0B:C9:22:46:A5:6C:DE:36:50:75:1B:1A:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl

            X509v3 Authority Key Identifier:
                keyid:A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:34:64:ca:67:c2:05:05:1d:f0:8c:14:da:19:35:a8:4c:36:
         1f:96:ce:33:d1:3b:8b:7c:82:9c:5b:74:86:70:e0:98:6f:29:
         ef:d7:56:9b:c8:2b:f9:de:2a:33:9f:b2:a8:1d:72:8c:08:e3:
         3e:97:d5:28:3e:53:43:8d:e5:f2:eb:e9:fc:d8:4c:ee:31:ae:
         14:bd:c2:5d:d2:12:45:72:76:60:14:af:d5:35:ff:78:55:cb:
         8e:56:d3:d9:93:60:43:95:a7:01:46:e3:3b:57:0f:64:54:6c:
         d0:56:87:07:da:d0:ab:c9:50:a3:38:66:63:dc:06:39:3b:f6:
         20:2d:49:43:03:4a:48:b1:d9:1a:04:2a:eb:ec:f4:6c:18:f7:
         24:7c:83:e4:e6:b4:71:43:ab:e2:d0:4d:75:37:ae:8e:fd:4f:
         25:4d:dc:05:73:fb:29:97:53:3c:73:36:ea:09:e9:f5:2c:92:
         ad:c8:4b:7f:f1:74:27:43:9b:c3:01:be:ac:f5:6d:8e:8e:34:
         b7:ec:c9:5d:d3:0c:8c:3e:a5:2e:26:12:9e:dc:e1:99:cb:97:
         1e:cc:59:e0:6c:54:f2:dd:82:a1:54:1e:95:42:44:28:59:0b:
         0b:3a:1e:b4:64:1f:01:2c:33:e0:7d:3b:b4:76:e5:27:f8:18:
         62:10:91:70
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEldiXBku1/ISlHis4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTVhMWM1Y2QtZDYwYi00NjcwLWFkOGQtMjE4NTY4NTVl
ZTQ2MB4XDTI1MDMzMTAxMDA0N1oXDTI1MDYyOTAxMDA0N1owLzEtMCsGA1UEAxMk
YjY3MmE5ZjgtM2QwMS00NGQ0LWFjMjAtOWY2NWRlM2Q5ZDEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvf2oW76JQ8CIlhj/gbyhFFp/2PdAouAoeA57
1qn9R0uVzL9eFivdElh7h2iTHned4Za8nGkCiNBERQjAQ/h3j49+tOvdjMug+4rP
Y+uDAn4XlHIHzMD0+57bep7ovWHyZSCI6jOI7dixI3bmMGZb7T+7n5xTlEJcG8f4
81YaXr83clLGQN/nNExFBwJ3YYfJZpJb+7YYULtvkhpiai2190IN5FTYQ0fXckKq
39LLZOirN5d3CW/PMljNmNsgdAKfbwi/soWny+i1uzV60yzaPKZ++9XWZNwwpPVR
bKSlFG2RgwiTY8dPe0bGWZ52L7Xa6PBYoSKavkkNe6acRmbnTwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFC2/cMVvS5oLySJGpWzeNlB1Gxo6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWEx
YzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1Njg1NWVlNDYvOTIzZTg4NTAtY2ZlMC0z
ODI1LWJmYWQtYmQ0MzNhMWMwNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTVhMWM1Y2QtZDYwYi00NjcwLWFk
OGQtMjE4NTY4NTVlZTQ2LzE1YTFjNWNkLWQ2MGItNDY3MC1hZDhkLTIxODU2ODU1
ZWU0Ni5jcmwwHwYDVR0jBBgwFoAUoAmmsrKCrmq2QHkvlJmArJ1hifMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWExYzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1
Njg1NWVlNDYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCQUvUMA0E
AgACMAcDBQAmBorAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIs0ZMpnwgUFHfCMFNoZNahMNh+WzjPRO4t8
gpxbdIZw4JhvKe/XVpvIK/neKjOfsqgdcowI4z6X1Sg+U0ON5fLr6fzYTO4xrhS9
wl3SEkVydmAUr9U1/3hVy45W09mTYEOVpwFG4ztXD2RUbNBWhwfa0KvJUKM4ZmPc
Bjk79iAtSUMDSkix2RoEKuvs9GwY9yR8g+TmtHFDq+LQTXU3ro79TyVN3AVz+ymX
UzxzNuoJ6fUskq3IS3/xdCdDm8MBvqz1bY6ONLfsyV3TDIw+pS4mEp7c4ZnLlx7M
WeBsVPLdgqFUHpVCRChZCws6HrRkHwEsM+B9O7R25Sf4GGIQkXA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:14:29 2025 by rpki-client