Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa
File:                     0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa (raw, json)
Hash identifier:          nWgG+kcL/Knr43cVxCbM8/CVENfGh0CfyJqWAIp/+mY=
Subject key identifier:   9A:D5:C9:92:FB:E0:EE:41:8B:EE:5F:46:47:08:40:C8:4E:4B:B0:6A
Certificate issuer:       /CN=e9687864-e283-4f19-98f3-a437efb373e8
Certificate serial:       010D0C9F432858489F7FAD431DBB6BD598430180
Authority key identifier: 0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa
Signing time:             Tue 21 Jan 2025 23:17:40 +0000
ROA not before:           Tue 21 Jan 2025 23:17:40 +0000
ROA not after:            Mon 21 Apr 2025 22:17:40 +0000
asID:                     22772
IP address blocks:        198.182.64.0/18 maxlen: 24
                          199.33.243.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:7f:ad:43:1d:bb:6b:d5:98:43:01:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e9687864-e283-4f19-98f3-a437efb373e8
        Validity
            Not Before: Jan 21 23:17:40 2025 GMT
            Not After : Apr 21 22:17:40 2025 GMT
        Subject: CN=76547b87-fc63-4a9b-bf8b-b69aef15196d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:4d:02:c5:c4:25:46:1b:6f:fc:9e:b6:94:55:
                    a7:92:1c:bb:16:0e:90:45:f0:0a:ef:00:62:00:3a:
                    71:1a:94:85:4d:9e:5a:58:56:dc:5e:43:83:f5:1d:
                    2d:6a:16:1e:47:58:6e:f4:93:57:3f:00:b7:a6:bf:
                    e4:31:01:00:7b:ad:88:2d:43:e3:88:71:67:93:c6:
                    56:7c:45:0e:b9:86:47:b2:d7:65:b1:c0:a0:92:32:
                    0e:2e:36:ef:9f:81:79:0d:67:a2:2b:62:83:e9:29:
                    82:d0:60:8a:aa:2e:68:d0:bc:66:d9:f2:fd:f8:61:
                    e8:c7:a9:a3:95:ad:0a:08:af:9a:36:76:fe:5c:95:
                    cf:cb:d9:ed:08:2a:d3:45:fb:38:de:80:42:b3:7a:
                    1f:13:9a:60:b5:31:ff:ad:bb:b6:cd:11:fe:75:e9:
                    b6:0e:fd:07:5a:79:81:bd:fe:b7:57:b7:dd:eb:54:
                    60:a9:20:df:34:15:e4:89:0a:f8:30:ab:93:bc:a7:
                    cd:87:55:66:d9:43:df:ce:5e:0f:95:a8:43:22:a0:
                    03:15:88:6d:72:ae:12:27:ac:28:44:3e:64:ce:c4:
                    53:21:6b:51:01:da:08:7a:eb:84:f1:d0:3f:ce:db:
                    49:bd:c4:f8:98:4c:a9:b7:d8:8f:12:d6:ee:55:cf:
                    16:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:D5:C9:92:FB:E0:EE:41:8B:EE:5F:46:47:08:40:C8:4E:4B:B0:6A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/0a0e3ba9-ad56-3580-847b-2d7bb7164c31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8/e9687864-e283-4f19-98f3-a437efb373e8.crl

            X509v3 Authority Key Identifier:
                keyid:0E:B9:83:27:01:F7:06:7A:CB:A5:9C:9A:5E:61:CB:C7:D9:58:C3:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/e9687864-e283-4f19-98f3-a437efb373e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.182.64.0/18
                  199.33.243.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:44:a4:1b:f7:0e:48:76:12:a3:0c:ad:e4:ba:65:11:d8:25:
         60:f8:fb:2a:ec:1b:7f:1a:9a:aa:26:fc:02:26:b7:0e:8c:1d:
         95:d1:65:9a:2f:6f:ea:77:da:8d:63:99:f7:21:6a:e3:93:d6:
         c2:44:7a:47:ee:a2:1e:f0:84:89:ff:51:47:30:ce:ba:58:7a:
         8b:f6:a6:9f:03:6c:56:93:84:56:c0:77:0c:db:0a:00:2e:e5:
         cf:b9:b1:31:0d:e6:93:5b:e6:b5:49:d1:3a:b0:4f:5c:b3:c9:
         e9:4c:aa:82:76:be:69:6b:5a:1d:a2:21:f1:4a:51:90:2c:b2:
         81:93:ba:f2:85:b5:45:57:01:c3:8c:f7:b4:29:80:49:31:6d:
         db:ac:52:4b:21:5d:3e:3f:58:38:f7:93:0d:09:6f:40:4a:ed:
         94:0d:5b:df:b7:d2:8c:f9:69:af:e1:6d:1d:13:13:9b:80:45:
         a8:de:26:a3:ea:ad:65:65:95:28:7e:f3:8b:91:cf:fe:6f:2a:
         59:1e:5c:35:4f:80:96:76:e3:b9:00:d3:a7:f7:83:d9:32:7f:
         f4:54:c7:cf:80:70:bd:bb:7e:06:92:da:ec:4f:7c:ab:1a:f6:
         5e:07:98:af:e9:48:06:3c:b2:ea:22:30:e4:8c:59:57:cf:c0:
         63:d6:85:24
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEiff61DHbtr1ZhDAYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2ODc4NjQtZTI4My00ZjE5LTk4ZjMtYTQzN2VmYjM3
M2U4MB4XDTI1MDEyMTIzMTc0MFoXDTI1MDQyMTIyMTc0MFowLzEtMCsGA1UEAxMk
NzY1NDdiODctZmM2My00YTliLWJmOGItYjY5YWVmMTUxOTZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhU0CxcQlRhtv/J62lFWnkhy7Fg6QRfAK7wBi
ADpxGpSFTZ5aWFbcXkOD9R0tahYeR1hu9JNXPwC3pr/kMQEAe62ILUPjiHFnk8ZW
fEUOuYZHstdlscCgkjIOLjbvn4F5DWeiK2KD6SmC0GCKqi5o0Lxm2fL9+GHox6mj
la0KCK+aNnb+XJXPy9ntCCrTRfs43oBCs3ofE5pgtTH/rbu2zRH+dem2Dv0HWnmB
vf63V7fd61RgqSDfNBXkiQr4MKuTvKfNh1Vm2UPfzl4PlahDIqADFYhtcq4SJ6wo
RD5kzsRTIWtRAdoIeuuE8dA/zttJvcT4mEypt9iPEtbuVc8WGQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJrVyZL74O5Bi+5fRkcIQMhOS7BqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4
Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3ZWZiMzczZTgvMGEwZTNiYTktYWQ1Ni0z
NTgwLTg0N2ItMmQ3YmI3MTY0YzMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZTk2ODc4NjQtZTI4My00ZjE5LTk4
ZjMtYTQzN2VmYjM3M2U4L2U5Njg3ODY0LWUyODMtNGYxOS05OGYzLWE0MzdlZmIz
NzNlOC5jcmwwHwYDVR0jBBgwFoAUDrmDJwH3BnrLpZyaXmHLx9lYw+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9lOTY4Nzg2NC1lMjgzLTRmMTktOThmMy1hNDM3
ZWZiMzczZTguY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQGxrZAAwQA
xyHzMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAtEpBv3Dkh2EqMMreS6ZRHYJWD4+yrsG38amqom/AImtw6M
HZXRZZovb+p32o1jmfchauOT1sJEekfuoh7whIn/UUcwzrpYeov2pp8DbFaThFbA
dwzbCgAu5c+5sTEN5pNb5rVJ0TqwT1yzyelMqoJ2vmlrWh2iIfFKUZAssoGTuvKF
tUVXAcOM97QpgEkxbdusUkshXT4/WDj3kw0Jb0BK7ZQNW9+30oz5aa/hbR0TE5uA
RajeJqPqrWVllSh+84uRz/5vKlkeXDVPgJZ247kA06f3g9kyf/RUx8+AcL27fgaS
2uxPfKsa9l4HmK/pSAY8suoiMOSMWVfPwGPWhSQ=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:20:57 2025 by rpki-client