Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
File:                     3dd79d95-e88c-33a9-b588-25baeab78a4c.roa (raw, json)
Hash identifier:          C2gGUzH8eX7YjH8Oi4xQJ9Sa7iMpX4fwmD17AFlTV1U=
Subject key identifier:   27:C3:DD:3C:35:7D:7F:03:F5:4C:98:3F:52:87:03:4C:15:EB:9F:1E
Certificate issuer:       /CN=0539e490-f62c-4bd3-8f28-c88eda220c48
Certificate serial:       010D0C9F43285849DC8FB9D30A987D7D1420B700
Authority key identifier: D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     198148
IP address blocks:        205.252.8.0/22 maxlen: 24
                          205.252.40.0/22 maxlen: 24
                          205.252.92.0/22 maxlen: 24
                          205.252.216.0/21 maxlen: 24
                          205.252.232.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:b9:d3:0a:98:7d:7d:14:20:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0539e490-f62c-4bd3-8f28-c88eda220c48
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=a5b2cecf-a939-4c34-b9ee-35e31a0b5ced
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:f5:46:78:ae:48:9b:eb:54:81:a6:b8:d7:fa:
                    55:46:fa:8a:6e:92:dd:2f:32:9e:d5:eb:68:fd:6e:
                    1e:fe:1a:6d:d0:c0:f8:ee:93:53:44:40:ab:f0:6b:
                    89:86:84:de:86:19:a3:a1:6c:43:9b:34:b9:62:8a:
                    b8:b7:ca:fd:82:76:f6:11:de:7c:6a:47:62:e8:b3:
                    68:f7:64:d8:7c:74:a6:c7:4d:03:79:01:55:47:0f:
                    50:f1:4a:c1:06:21:be:43:a9:91:3f:5b:f1:02:00:
                    a5:ed:87:49:48:78:64:77:13:7c:57:80:69:d9:ca:
                    c6:4d:73:ec:cc:a2:69:77:dc:37:82:1a:7b:f1:5b:
                    c6:07:ad:cc:3d:4b:c8:b3:e7:46:70:80:f8:7e:76:
                    6b:9d:f0:bb:41:f6:30:7a:30:3b:61:b5:d7:ef:96:
                    41:d7:4d:92:19:0f:ce:c8:94:62:ea:06:5d:24:b0:
                    c1:39:27:f9:e6:eb:5d:72:65:45:ee:b0:82:82:e8:
                    ab:9a:69:9b:e0:e7:7f:8d:27:b5:f9:71:7e:98:cc:
                    16:bf:6e:24:0e:13:f7:6c:18:5b:b2:84:f8:f4:5f:
                    0e:64:a1:25:67:2b:3f:69:70:e4:65:d2:5c:2b:9a:
                    54:4b:3d:10:fa:a0:5c:37:8e:70:68:83:71:b2:e1:
                    87:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C3:DD:3C:35:7D:7F:03:F5:4C:98:3F:52:87:03:4C:15:EB:9F:1E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/3dd79d95-e88c-33a9-b588-25baeab78a4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48/0539e490-f62c-4bd3-8f28-c88eda220c48.crl

            X509v3 Authority Key Identifier:
                keyid:D1:3A:10:33:35:B1:06:13:B9:67:92:EC:3E:91:77:A9:81:15:9F:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/0539e490-f62c-4bd3-8f28-c88eda220c48.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.252.8.0/22
                  205.252.40.0/22
                  205.252.92.0/22
                  205.252.216.0/21
                  205.252.232.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:bf:d9:6b:a3:d9:e2:e5:76:1a:ea:30:57:9d:44:7a:45:19:
         c0:c3:b0:89:ac:9d:02:5b:53:c8:e0:f1:4b:92:5f:78:72:53:
         93:c1:9b:b2:5c:91:b2:0b:dc:0f:66:d7:8f:ff:97:90:b6:0b:
         f6:2b:04:56:26:10:cd:f0:e9:1d:27:b4:d9:2b:53:73:84:eb:
         30:a3:53:1e:75:fd:16:a6:61:7b:43:f7:b3:c8:9f:b7:81:57:
         16:42:64:4d:6d:46:ac:fd:9f:58:fe:bb:4b:ac:0e:d8:ff:91:
         42:09:33:a0:b0:a8:10:d5:f9:84:08:88:10:a3:3a:84:a1:8f:
         d5:b2:58:30:43:d6:02:b6:dd:23:27:5f:f6:6c:f3:08:9d:2c:
         69:67:74:fb:48:3f:30:75:ea:b5:05:57:01:75:6e:52:1e:f5:
         c5:c0:e7:77:80:04:27:dd:4b:07:6a:be:28:87:18:90:2c:cf:
         90:ef:15:c3:84:3e:be:29:e2:b6:ae:38:7a:6e:d8:c2:0d:ba:
         63:61:34:fd:9d:27:50:74:e2:93:ad:6d:f5:b7:62:84:12:c8:
         38:eb:86:96:95:6b:c0:b9:47:1c:21:5a:98:67:da:db:2a:c0:
         0e:d1:79:f8:30:c7:96:5f:91:08:a6:27:33:14:f3:81:5b:16:
         02:58:20:a7
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEncj7nTCph9fRQgtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDUzOWU0OTAtZjYyYy00YmQzLThmMjgtYzg4ZWRhMjIw
YzQ4MB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
YTViMmNlY2YtYTkzOS00YzM0LWI5ZWUtMzVlMzFhMGI1Y2VkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfVGeK5Im+tUgaa41/pVRvqKbpLdLzKe1eto
/W4e/hpt0MD47pNTRECr8GuJhoTehhmjoWxDmzS5Yoq4t8r9gnb2Ed58akdi6LNo
92TYfHSmx00DeQFVRw9Q8UrBBiG+Q6mRP1vxAgCl7YdJSHhkdxN8V4Bp2crGTXPs
zKJpd9w3ghp78VvGB63MPUvIs+dGcID4fnZrnfC7QfYwejA7YbXX75ZB102SGQ/O
yJRi6gZdJLDBOSf55utdcmVF7rCCguirmmmb4Od/jSe1+XF+mMwWv24kDhP3bBhb
soT49F8OZKElZys/aXDkZdJcK5pUSz0Q+qBcN45waINxsuGHBwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFCfD3Tw1fX8D9UyYP1KHA0wV658eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5
ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhlZGEyMjBjNDgvM2RkNzlkOTUtZTg4Yy0z
M2E5LWI1ODgtMjViYWVhYjc4YTRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMDUzOWU0OTAtZjYyYy00YmQzLThm
MjgtYzg4ZWRhMjIwYzQ4LzA1MzllNDkwLWY2MmMtNGJkMy04ZjI4LWM4OGVkYTIy
MGM0OC5jcmwwHwYDVR0jBBgwFoAU0ToQMzWxBhO5Z5LsPpF3qYEVn+cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8wNTM5ZTQ5MC1mNjJjLTRiZDMtOGYyOC1jODhl
ZGEyMjBjNDguY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQCzfwIAwQC
zfwoAwQCzfxcAwQDzfzYAwQDzfzoMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAGm/2Wuj2eLldhrqMFedRHpF
GcDDsImsnQJbU8jg8UuSX3hyU5PBm7JckbIL3A9m14//l5C2C/YrBFYmEM3w6R0n
tNkrU3OE6zCjUx51/RamYXtD97PIn7eBVxZCZE1tRqz9n1j+u0usDtj/kUIJM6Cw
qBDV+YQIiBCjOoShj9WyWDBD1gK23SMnX/Zs8widLGlndPtIPzB16rUFVwF1blIe
9cXA53eABCfdSwdqviiHGJAsz5DvFcOEPr4p4rauOHpu2MINumNhNP2dJ1B04pOt
bfW3YoQSyDjrhpaVa8C5RxwhWphn2tsqwA7Refgwx5ZfkQimJzMU84FbFgJYIKc=
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:58:27 2025 by rpki-client