Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa
File:                     d74b73cb-f7d0-310e-abd3-eb8242554564.roa (raw, json)
Hash identifier:          X451u33uoB3DTNc+ytbUlrWc9XPsLriq+f/XHl66AMM=
Subject key identifier:   A7:F9:BA:6E:7D:EE:2E:ED:8C:40:6B:1F:27:5E:C7:42:FF:F3:2E:D5
Certificate issuer:       /CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
Certificate serial:       010D0C9F432858492447EC4071DF8AA84DD64B80
Authority key identifier: D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa
Signing time:             Mon 10 Mar 2025 12:47:50 +0000
ROA not before:           Mon 10 Mar 2025 12:47:50 +0000
ROA not after:            Sun 08 Jun 2025 12:47:50 +0000
asID:                     53733
IP address blocks:        148.66.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 16 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:47:ec:40:71:df:8a:a8:4d:d6:4b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2fd9126-b2ee-4caf-bbe5-3387bc901c15
        Validity
            Not Before: Mar 10 12:47:50 2025 GMT
            Not After : Jun  8 12:47:50 2025 GMT
        Subject: CN=5eb6026e-ef39-438f-b2eb-d34e56be76b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:55:91:5b:2f:eb:5c:f9:20:56:b6:65:b2:32:
                    f2:85:43:7e:3c:8a:9e:3b:7a:51:2a:e0:5e:b0:68:
                    15:dd:47:80:04:75:12:00:47:c2:0c:7d:62:03:0e:
                    c1:57:85:6b:23:47:9b:1b:24:bd:54:bc:4e:5a:0c:
                    2f:af:34:07:6d:31:71:6b:a2:46:36:90:be:cb:58:
                    06:f5:38:fa:0d:16:c7:38:aa:1f:14:9e:6d:f7:0f:
                    2c:8b:4c:28:c6:14:7a:f8:25:d8:ed:91:8d:e7:d4:
                    64:1c:d5:d4:28:53:29:aa:93:56:c4:9b:43:92:17:
                    1a:85:da:77:3c:7a:cc:53:d2:a1:24:70:45:c4:5f:
                    f2:56:9c:fb:a4:1e:9b:8e:ba:91:c7:8a:b2:8d:62:
                    46:e8:8e:80:ea:7e:df:05:84:26:a7:67:05:fa:62:
                    f6:f2:70:65:c4:6c:ba:8b:b4:3f:86:03:e6:60:f4:
                    72:eb:7f:c7:f2:2f:73:f6:65:47:2f:86:85:bd:24:
                    d4:76:02:f0:f8:19:43:09:c6:47:97:f0:83:21:df:
                    13:c9:ca:8a:cb:1b:0f:90:2f:87:15:6c:3d:f0:60:
                    53:4a:2d:28:01:3c:7c:26:d2:00:9b:cc:cd:ca:0d:
                    99:22:07:aa:6a:2c:0f:89:5d:e9:c2:45:79:fd:d5:
                    1d:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:F9:BA:6E:7D:EE:2E:ED:8C:40:6B:1F:27:5E:C7:42:FF:F3:2E:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d74b73cb-f7d0-310e-abd3-eb8242554564.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.crl

            X509v3 Authority Key Identifier:
                keyid:D8:C8:1A:E7:4B:D6:96:34:5E:04:AC:C6:5E:28:99:2C:A2:8F:2D:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d2fd9126-b2ee-4caf-bbe5-3387bc901c15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.66.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:88:0b:57:8e:00:99:da:e8:1e:bf:23:46:dc:3c:21:6a:03:
         27:43:e7:a9:db:95:8c:70:ba:d0:ca:bf:0f:9e:74:07:40:36:
         d4:4d:df:c3:da:b2:1e:37:02:29:7b:73:90:d5:b8:64:e5:53:
         29:51:dd:30:4e:ec:d7:f1:0a:e8:03:ea:fb:8f:86:20:26:10:
         cc:86:2e:8b:73:28:bb:5f:6f:e8:a3:4e:ac:93:62:ec:6a:53:
         1c:f3:d9:31:b3:09:01:06:b4:c8:a7:1e:e3:95:27:ad:b1:d7:
         b8:e4:ba:49:a3:75:f3:48:7f:5a:da:d8:27:6b:68:3f:5b:aa:
         1e:40:96:e6:47:7f:a2:3a:d0:6b:bf:53:9b:67:aa:bf:2f:0e:
         7e:5e:da:95:9e:0b:b1:e1:a2:75:bc:2d:f7:a1:e5:69:b3:f3:
         fb:e6:b0:37:17:e4:9e:cd:b6:7f:c4:e6:e9:a6:d9:ea:d2:ed:
         5d:b0:43:d4:73:9a:d3:86:64:21:59:0d:05:7c:96:b4:38:42:
         f3:96:94:d4:a9:ad:a2:59:1e:7b:51:0b:a8:9f:d5:61:14:61:
         4b:94:e8:7b:12:08:0c:5c:a4:6c:b9:dc:0c:ca:13:30:53:9a:
         d8:6c:fc:ee:2a:c7:24:76:5e:e3:a6:20:40:0a:fd:cf:70:00:
         95:99:f7:3a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkR+xAcd+KqE3WS4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJmZDkxMjYtYjJlZS00Y2FmLWJiZTUtMzM4N2JjOTAx
YzE1MB4XDTI1MDMxMDEyNDc1MFoXDTI1MDYwODEyNDc1MFowLzEtMCsGA1UEAxMk
NWViNjAyNmUtZWYzOS00MzhmLWIyZWItZDM0ZTU2YmU3NmI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw1WRWy/rXPkgVrZlsjLyhUN+PIqeO3pRKuBe
sGgV3UeABHUSAEfCDH1iAw7BV4VrI0ebGyS9VLxOWgwvrzQHbTFxa6JGNpC+y1gG
9Tj6DRbHOKofFJ5t9w8si0woxhR6+CXY7ZGN59RkHNXUKFMpqpNWxJtDkhcahdp3
PHrMU9KhJHBFxF/yVpz7pB6bjrqRx4qyjWJG6I6A6n7fBYQmp2cF+mL28nBlxGy6
i7Q/hgPmYPRy63/H8i9z9mVHL4aFvSTUdgLw+BlDCcZHl/CDId8TycqKyxsPkC+H
FWw98GBTSi0oATx8JtIAm8zNyg2ZIgeqaiwPiV3pwkV5/dUdCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKf5um597i7tjEBrHydex0L/8y7VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9kMmZk
OTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3YmM5MDFjMTUvZDc0YjczY2ItZjdkMC0z
MTBlLWFiZDMtZWI4MjQyNTU0NTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZDJmZDkxMjYtYjJlZS00Y2FmLWJi
ZTUtMzM4N2JjOTAxYzE1L2QyZmQ5MTI2LWIyZWUtNGNhZi1iYmU1LTMzODdiYzkw
MWMxNS5jcmwwHwYDVR0jBBgwFoAU2Mga50vWljReBKzGXiiZLKKPLR4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9kMmZkOTEyNi1iMmVlLTRjYWYtYmJlNS0zMzg3
YmM5MDFjMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlEImMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAESIC1eOAJna6B6/I0bcPCFqAydD56nblYxwutDKvw+edAdANtRN38Pa
sh43Ail7c5DVuGTlUylR3TBO7NfxCugD6vuPhiAmEMyGLotzKLtfb+ijTqyTYuxq
Uxzz2TGzCQEGtMinHuOVJ62x17jkukmjdfNIf1ra2CdraD9bqh5AluZHf6I60Gu/
U5tnqr8vDn5e2pWeC7HhonW8Lfeh5Wmz8/vmsDcX5J7Ntn/E5umm2erS7V2wQ9Rz
mtOGZCFZDQV8lrQ4QvOWlNSpraJZHntRC6if1WEUYUuU6HsSCAxcpGy53AzKEzBT
mths/O4qxyR2XuOmIEAK/c9wAJWZ9zo=
-----END CERTIFICATE-----
Generated at Sat Mar 15 02:58:30 2025 by rpki-client