Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa
File:                     254b380b-2877-3b52-9210-faa230df58ef.roa (raw, json)
Hash identifier:          95Tc+Nm6lOp4X53bbYBr5p9/HJbo08qEM7k5fkFCSLs=
Subject key identifier:   EA:98:13:A0:66:46:5E:BF:14:AF:41:81:0C:51:D5:27:00:17:D9:51
Certificate issuer:       /CN=b769440d-4a7e-478f-82a5-04834c8887fe
Certificate serial:       010D0C9F4328584906694680EE13022106EAC300
Authority key identifier: B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa
Signing time:             Thu 27 Feb 2025 20:00:47 +0000
ROA not before:           Thu 27 Feb 2025 20:00:47 +0000
ROA not after:            Wed 28 May 2025 19:00:47 +0000
asID:                     10980
IP address blocks:        198.167.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:06:69:46:80:ee:13:02:21:06:ea:c3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b769440d-4a7e-478f-82a5-04834c8887fe
        Validity
            Not Before: Feb 27 20:00:47 2025 GMT
            Not After : May 28 19:00:47 2025 GMT
        Subject: CN=c5665c7c-261c-45aa-afd9-2d96df12060a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:8b:bc:bb:11:01:b3:b2:74:b4:d9:1a:4c:b5:
                    54:39:7a:69:34:1d:77:95:57:9a:9b:59:8d:d1:62:
                    32:6b:74:0e:6e:3f:a1:f6:45:e7:ca:3c:d7:52:dc:
                    09:1f:e8:46:e7:6a:fc:b8:a1:19:5b:12:4b:06:d1:
                    24:fc:12:0a:6f:a4:b6:92:f2:fd:83:1a:7a:a3:6a:
                    2b:ed:f8:40:13:f4:57:85:49:3e:9d:dd:85:f8:78:
                    d8:ca:57:74:ca:8d:1b:cb:f1:7f:65:2e:5e:09:bd:
                    a2:08:b8:cc:bd:f1:7d:e6:8e:5c:3d:95:7a:d9:42:
                    db:d3:66:47:dc:cd:dc:f6:d1:70:f4:29:d7:0f:0f:
                    00:2b:b5:1e:74:7c:dd:76:4d:4a:9a:c3:a5:dd:1d:
                    91:57:28:9f:e3:68:08:d4:1c:ef:9b:71:80:e3:84:
                    38:c8:94:58:18:b1:6b:e4:26:4e:28:93:4e:5f:70:
                    48:fd:03:d4:69:1a:7a:0e:b9:4b:d3:bb:b0:d5:15:
                    47:7a:31:23:bb:31:d6:48:e0:eb:18:b4:32:e1:67:
                    9e:bf:31:1e:68:fe:9d:ff:f8:56:16:13:8b:0b:52:
                    d2:e7:77:5b:1b:60:f6:ba:be:9c:b1:54:75:78:e1:
                    8c:ee:97:ad:7b:ec:a7:f3:95:26:6e:f6:90:5b:00:
                    e6:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:98:13:A0:66:46:5E:BF:14:AF:41:81:0C:51:D5:27:00:17:D9:51
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/254b380b-2877-3b52-9210-faa230df58ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe/b769440d-4a7e-478f-82a5-04834c8887fe.crl

            X509v3 Authority Key Identifier:
                keyid:B0:CF:FC:49:E8:8E:7A:E5:0C:08:D4:BA:F5:55:72:38:C0:84:97:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/b769440d-4a7e-478f-82a5-04834c8887fe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.167.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         62:25:d3:99:96:cc:c0:91:73:9c:4a:7b:ae:e0:be:55:c2:77:
         20:4c:27:f6:32:b2:7a:b5:49:00:39:0f:47:fc:d7:17:ef:a3:
         9a:43:3f:b9:52:aa:78:6f:a7:3e:7a:a7:5a:50:ee:22:b3:ad:
         29:2d:8c:8d:c2:d7:89:a3:49:33:d4:35:e5:a5:52:17:2f:9b:
         81:56:24:a0:4e:86:c1:69:36:b5:ea:97:67:27:18:8f:e3:47:
         58:5e:97:5b:14:7e:d0:94:23:72:35:9e:54:4e:41:32:1d:30:
         e2:76:83:42:e9:9b:91:df:4b:84:b3:4b:8c:14:a7:36:94:5d:
         4d:5b:74:0a:86:26:1b:6a:b4:06:8a:4e:c4:54:98:b5:6f:94:
         f6:f3:11:e4:82:3b:39:4b:3e:e2:f5:a5:83:7e:ca:06:6b:c7:
         05:22:21:3b:b3:a0:c8:a3:9c:d1:0b:09:05:b0:ce:31:0e:d0:
         6a:82:27:54:85:c0:59:28:5a:26:94:82:a7:8d:11:87:0d:66:
         a5:f7:ad:9e:aa:d3:65:80:1c:37:61:70:53:2b:07:72:fb:96:
         96:99:64:95:71:8b:b7:7b:43:69:76:32:1a:1f:b8:f9:f7:12:
         35:f4:e9:a1:e2:3e:96:b6:7d:86:3b:79:e8:2f:25:d2:6d:d9:
         3d:3a:1a:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkGaUaA7hMCIQbqwwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2OTQ0MGQtNGE3ZS00NzhmLTgyYTUtMDQ4MzRjODg4
N2ZlMB4XDTI1MDIyNzIwMDA0N1oXDTI1MDUyODE5MDA0N1owLzEtMCsGA1UEAxMk
YzU2NjVjN2MtMjYxYy00NWFhLWFmZDktMmQ5NmRmMTIwNjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIu8uxEBs7J0tNkaTLVUOXppNB13lVeam1mN
0WIya3QObj+h9kXnyjzXUtwJH+hG52r8uKEZWxJLBtEk/BIKb6S2kvL9gxp6o2or
7fhAE/RXhUk+nd2F+HjYyld0yo0by/F/ZS5eCb2iCLjMvfF95o5cPZV62ULb02ZH
3M3c9tFw9CnXDw8AK7UedHzddk1KmsOl3R2RVyif42gI1Bzvm3GA44Q4yJRYGLFr
5CZOKJNOX3BI/QPUaRp6DrlL07uw1RVHejEjuzHWSODrGLQy4WeevzEeaP6d//hW
FhOLC1LS53dbG2D2ur6csVR1eOGM7pete+yn85UmbvaQWwDmQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqYE6BmRl6/FK9BgQxR1ScAF9lRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5
NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgzNGM4ODg3ZmUvMjU0YjM4MGItMjg3Ny0z
YjUyLTkyMTAtZmFhMjMwZGY1OGVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYjc2OTQ0MGQtNGE3ZS00NzhmLTgy
YTUtMDQ4MzRjODg4N2ZlL2I3Njk0NDBkLTRhN2UtNDc4Zi04MmE1LTA0ODM0Yzg4
ODdmZS5jcmwwHwYDVR0jBBgwFoAUsM/8SeiOeuUMCNS69VVyOMCEl58wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9iNzY5NDQwZC00YTdlLTQ3OGYtODJhNS0wNDgz
NGM4ODg3ZmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxqekMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGIl05mWzMCRc5xKe67gvlXCdyBMJ/Yysnq1SQA5D0f81xfvo5pDP7lS
qnhvpz56p1pQ7iKzrSktjI3C14mjSTPUNeWlUhcvm4FWJKBOhsFpNrXql2cnGI/j
R1hel1sUftCUI3I1nlROQTIdMOJ2g0Lpm5HfS4SzS4wUpzaUXU1bdAqGJhtqtAaK
TsRUmLVvlPbzEeSCOzlLPuL1pYN+ygZrxwUiITuzoMijnNELCQWwzjEO0GqCJ1SF
wFkoWiaUgqeNEYcNZqX3rZ6q02WAHDdhcFMrB3L7lpaZZJVxi7d7Q2l2MhofuPn3
EjX06aHiPpa2fYY7eegvJdJt2T06GtA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 18:52:00 2025 by rpki-client