Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa
File:                     84704c59-1b86-3949-9b9d-26dfdf55ba37.roa (raw, json)
Hash identifier:          lTCqHtHgEqTlgLYq9fSUXnxpu7jk9ShY/ahQ0Q2ZuTk=
Subject key identifier:   98:B5:5E:6D:89:EE:C3:96:9A:97:C4:0F:B1:6F:05:FD:BE:63:C9:A4
Certificate issuer:       /CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
Certificate serial:       010D0C9F432858494FFF4293E25B0FB2A7D8BB80
Authority key identifier: F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa
Signing time:             Wed 26 Mar 2025 04:37:00 +0000
ROA not before:           Wed 26 Mar 2025 04:37:00 +0000
ROA not after:            Tue 24 Jun 2025 04:37:00 +0000
asID:                     14090
IP address blocks:        64.21.250.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4f:ff:42:93:e2:5b:0f:b2:a7:d8:bb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5da7d5c0-eec9-425c-a574-6eb9dd4ede61
        Validity
            Not Before: Mar 26 04:37:00 2025 GMT
            Not After : Jun 24 04:37:00 2025 GMT
        Subject: CN=0c9317be-666f-4308-9c46-d81a6a955821
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:aa:0b:6e:33:ec:e1:9c:6e:3f:09:c7:cb:b5:
                    fc:92:b1:15:58:94:44:59:2f:58:31:ff:13:1c:a6:
                    54:66:3c:2d:26:d6:63:ca:05:6e:04:b3:ae:a9:f6:
                    d7:76:bc:9e:d1:aa:21:28:25:75:0c:4a:93:67:99:
                    60:ea:72:d2:b6:a6:23:0e:f0:fa:6b:40:00:f5:9b:
                    96:75:4a:7e:0b:aa:e7:56:5b:f7:6e:20:cc:20:1f:
                    6c:12:1b:09:3d:46:61:2d:70:fe:8e:f7:b4:8d:38:
                    91:f8:f8:54:a0:aa:55:28:9a:cb:c6:c4:d4:c6:a8:
                    53:41:a5:83:70:70:8c:db:ff:c9:3e:18:e3:6b:aa:
                    bb:fd:1f:95:55:53:be:0e:6e:37:fb:36:bc:06:e8:
                    10:02:cb:e9:be:b0:3f:66:c2:1f:50:0b:e8:69:20:
                    31:f9:f3:5b:d1:9d:6c:45:6a:d2:59:cb:c6:b6:b6:
                    35:47:e9:bc:d8:16:fc:29:ea:bb:cf:ec:61:c2:5e:
                    46:dd:55:f5:49:5e:90:63:b6:01:6c:a8:c6:c2:e5:
                    2b:a7:4f:ae:ba:48:82:8e:c1:ad:37:26:06:93:8a:
                    4f:40:e4:a0:fc:5b:3f:37:82:b9:44:be:56:83:6c:
                    87:2a:19:90:11:68:f7:1f:c7:5b:a7:4e:7f:2d:47:
                    23:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:B5:5E:6D:89:EE:C3:96:9A:97:C4:0F:B1:6F:05:FD:BE:63:C9:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/84704c59-1b86-3949-9b9d-26dfdf55ba37.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.crl

            X509v3 Authority Key Identifier:
                keyid:F1:05:9C:8E:EF:DA:59:41:FA:26:D3:A3:69:B6:85:FA:04:3C:76:1B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/5da7d5c0-eec9-425c-a574-6eb9dd4ede61.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.21.250.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         00:80:3b:8f:e8:dd:92:45:18:b4:dd:69:92:0a:1a:49:e3:52:
         eb:9b:ff:7c:26:29:a4:6f:4a:f2:1e:6a:96:68:f4:1b:69:ad:
         0e:ad:99:1f:4a:40:da:61:1c:8c:33:43:b6:bd:1f:9b:2d:9d:
         14:63:c0:7e:2f:0a:b7:6f:56:bf:43:32:6b:cd:3d:a0:3d:26:
         c3:6c:b8:5a:cc:13:46:3e:f5:3f:4c:7d:22:53:12:ce:d7:9f:
         4a:e0:58:25:b7:be:e2:df:52:d9:fa:f7:b4:7a:81:22:16:db:
         fa:ff:0c:37:69:bd:74:45:4c:f6:eb:70:da:50:48:89:52:0d:
         5c:ed:27:6d:c5:8e:d4:73:f0:39:c9:f9:51:3a:1d:8a:78:77:
         b9:d9:b4:95:18:da:be:d9:f8:8e:c8:68:5b:e5:73:9a:1b:87:
         4e:ff:16:56:66:f3:f9:70:20:7a:47:34:b8:95:6e:5b:1d:48:
         10:d7:57:7f:2c:58:c4:7d:71:0e:60:d0:85:14:bd:dc:68:36:
         2b:f8:67:9a:d8:f9:f9:c4:68:e1:73:d8:d9:bc:fe:24:c5:31:
         78:fa:72:30:b6:a8:ef:d0:0a:d2:ac:9b:1d:25:d4:e1:fb:a2:
         83:15:68:fb:bf:53:7a:90:45:d1:8f:db:08:be:b4:9d:5d:d8:
         c2:7f:c8:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElP/0KT4lsPsqfYu4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRhN2Q1YzAtZWVjOS00MjVjLWE1NzQtNmViOWRkNGVk
ZTYxMB4XDTI1MDMyNjA0MzcwMFoXDTI1MDYyNDA0MzcwMFowLzEtMCsGA1UEAxMk
MGM5MzE3YmUtNjY2Zi00MzA4LTljNDYtZDgxYTZhOTU1ODIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxqoLbjPs4ZxuPwnHy7X8krEVWJREWS9YMf8T
HKZUZjwtJtZjygVuBLOuqfbXdrye0aohKCV1DEqTZ5lg6nLStqYjDvD6a0AA9ZuW
dUp+C6rnVlv3biDMIB9sEhsJPUZhLXD+jve0jTiR+PhUoKpVKJrLxsTUxqhTQaWD
cHCM2//JPhjja6q7/R+VVVO+Dm43+za8BugQAsvpvrA/ZsIfUAvoaSAx+fNb0Z1s
RWrSWcvGtrY1R+m82Bb8Keq7z+xhwl5G3VX1SV6QY7YBbKjGwuUrp0+uukiCjsGt
NyYGk4pPQOSg/Fs/N4K5RL5Wg2yHKhmQEWj3H8dbp05/LUcjuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJi1Xm2J7sOWmpfED7FvBf2+Y8mkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3
ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5ZGQ0ZWRlNjEvODQ3MDRjNTktMWI4Ni0z
OTQ5LTliOWQtMjZkZmRmNTViYTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNWRhN2Q1YzAtZWVjOS00MjVjLWE1
NzQtNmViOWRkNGVkZTYxLzVkYTdkNWMwLWVlYzktNDI1Yy1hNTc0LTZlYjlkZDRl
ZGU2MS5jcmwwHwYDVR0jBBgwFoAU8QWcju/aWUH6JtOjabaF+gQ8dhswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy81ZGE3ZDVjMC1lZWM5LTQyNWMtYTU3NC02ZWI5
ZGQ0ZWRlNjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQBX6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAACAO4/o3ZJFGLTdaZIKGknjUuub/3wmKaRvSvIeapZo9BtprQ6tmR9K
QNphHIwzQ7a9H5stnRRjwH4vCrdvVr9DMmvNPaA9JsNsuFrME0Y+9T9MfSJTEs7X
n0rgWCW3vuLfUtn697R6gSIW2/r/DDdpvXRFTPbrcNpQSIlSDVztJ23FjtRz8DnJ
+VE6HYp4d7nZtJUY2r7Z+I7IaFvlc5obh07/FlZm8/lwIHpHNLiVblsdSBDXV38s
WMR9cQ5g0IUUvdxoNiv4Z5rY+fnEaOFz2Nm8/iTFMXj6cjC2qO/QCtKsmx0l1OH7
ooMVaPu/U3qQRdGP2wi+tJ1d2MJ/yEA=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:34:02 2025 by rpki-client