Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa
File:                     07623340-3853-35a1-8fd1-9b6c1d2e9675.roa (raw, json)
Hash identifier:          V/7yBsu/lTJPdWBGPn00tV0eeRQtwplVT9NM/BCQRLY=
Subject key identifier:   EE:3E:D4:13:F4:DB:8A:02:CF:2C:6B:0C:1A:61:29:E1:77:7A:38:70
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F43285849393E7FAD9F6D2F7258B85380
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa
Signing time:             Tue 18 Mar 2025 01:00:38 +0000
ROA not before:           Tue 18 Mar 2025 01:00:38 +0000
ROA not after:            Mon 16 Jun 2025 01:00:38 +0000
asID:                     16625
IP address blocks:        104.122.44.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:39:3e:7f:ad:9f:6d:2f:72:58:b8:53:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Mar 18 01:00:38 2025 GMT
            Not After : Jun 16 01:00:38 2025 GMT
        Subject: CN=aa70bc2a-2a34-4c28-b936-0a2e19432913
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:17:6f:da:12:7b:79:4a:99:75:7a:8f:85:ab:
                    dd:f5:73:d8:c7:16:0e:25:6b:71:36:3c:55:7b:81:
                    f1:8e:d7:23:6e:af:69:cf:c7:cc:29:88:b7:f3:38:
                    91:30:77:e2:c9:99:eb:41:a3:37:3d:5f:d7:fe:41:
                    29:d7:98:7c:26:c1:9e:a0:ac:61:db:cc:cf:d0:64:
                    c5:a9:b9:16:ca:d6:9b:49:01:0e:93:9a:e7:1a:49:
                    5b:4d:32:62:70:78:c0:1c:9a:e8:e5:b8:9e:c3:1f:
                    77:9a:eb:12:d9:9f:a8:2b:82:4b:90:fe:f1:e1:27:
                    49:f3:e2:da:00:2e:0a:e2:f4:d4:ec:98:88:ad:2c:
                    77:bf:0f:86:df:ba:a1:6c:2a:0e:ad:10:48:f3:4f:
                    39:f0:99:12:c6:14:4b:07:cb:da:09:dd:6f:f5:6b:
                    16:a9:67:62:82:3e:9e:35:6d:fe:2b:d0:04:81:4d:
                    33:ae:5d:b9:8c:fe:17:e1:b9:a3:45:9a:04:ee:a8:
                    57:18:4e:4d:23:cb:2e:5f:f7:7e:bb:56:77:82:96:
                    98:d2:cb:86:c7:69:4e:6d:8c:2a:da:16:bd:74:58:
                    6a:df:ad:fd:9f:78:10:32:1b:c9:fe:37:8b:7c:b9:
                    6d:f7:c0:09:5b:8d:cf:71:3d:db:c4:03:14:3e:13:
                    48:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3E:D4:13:F4:DB:8A:02:CF:2C:6B:0C:1A:61:29:E1:77:7A:38:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/07623340-3853-35a1-8fd1-9b6c1d2e9675.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.122.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:6f:68:e7:4d:56:41:b5:89:74:b5:30:1e:30:c3:70:bf:4a:
         28:b1:17:6d:6d:6c:22:48:38:30:e6:ae:4f:4e:32:84:fe:93:
         03:06:23:38:b0:6b:fa:c2:68:9f:1f:d2:fe:4b:e8:8c:26:8d:
         a0:ce:8f:a5:59:93:17:f6:da:e7:0d:e7:d0:b9:dc:a9:f6:c3:
         42:2c:77:c2:af:37:fc:9f:79:d7:25:9d:b8:18:47:a5:11:4f:
         26:46:9a:ad:5e:12:0d:d6:0a:90:1a:ca:b5:5e:0a:43:51:af:
         03:99:29:c7:ba:5c:5d:b5:40:bd:87:78:52:6e:8f:69:f7:b6:
         4c:1c:19:fa:06:66:f1:47:84:4c:0c:37:61:40:aa:f7:0a:4f:
         bf:89:b7:81:68:12:33:97:fd:2a:7b:c4:5b:52:4d:bd:25:c6:
         88:93:13:d1:4a:55:77:e7:34:0a:c6:a0:72:3a:60:d2:e2:8b:
         12:d8:eb:8f:0e:9a:b2:ff:4c:71:67:c0:38:c6:b2:80:53:b2:
         27:2b:c7:fc:29:af:58:9e:ec:9e:2e:6d:a4:28:84:cc:f2:a5:
         24:87:30:26:68:8f:fd:20:b4:5d:73:4e:e4:cd:b3:64:71:36:
         9b:bf:c4:6c:37:e1:02:55:1a:c0:83:51:e6:50:67:ee:d0:cd:
         2a:4a:99:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk5Pn+tn20vcli4U4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDMxODAxMDAzOFoXDTI1MDYxNjAxMDAzOFowLzEtMCsGA1UEAxMk
YWE3MGJjMmEtMmEzNC00YzI4LWI5MzYtMGEyZTE5NDMyOTEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBdv2hJ7eUqZdXqPhavd9XPYxxYOJWtxNjxV
e4Hxjtcjbq9pz8fMKYi38ziRMHfiyZnrQaM3PV/X/kEp15h8JsGeoKxh28zP0GTF
qbkWytabSQEOk5rnGklbTTJicHjAHJro5biewx93musS2Z+oK4JLkP7x4SdJ8+La
AC4K4vTU7JiIrSx3vw+G37qhbCoOrRBI80858JkSxhRLB8vaCd1v9WsWqWdigj6e
NW3+K9AEgU0zrl25jP4X4bmjRZoE7qhXGE5NI8suX/d+u1Z3gpaY0suGx2lObYwq
2ha9dFhq3639n3gQMhvJ/jeLfLlt98AJW43PcT3bxAMUPhNIrwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO4+1BP024oCzyxrDBphKeF3ejhwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvMDc2MjMzNDAtMzg1My0z
NWExLThmZDEtOWI2YzFkMmU5Njc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCaHosMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJvaOdNVkG1iXS1MB4ww3C/SiixF21tbCJIODDmrk9OMoT+kwMGIziw
a/rCaJ8f0v5L6IwmjaDOj6VZkxf22ucN59C53Kn2w0Isd8KvN/yfedclnbgYR6UR
TyZGmq1eEg3WCpAayrVeCkNRrwOZKce6XF21QL2HeFJuj2n3tkwcGfoGZvFHhEwM
N2FAqvcKT7+Jt4FoEjOX/Sp7xFtSTb0lxoiTE9FKVXfnNArGoHI6YNLiixLY648O
mrL/THFnwDjGsoBTsicrx/wpr1ie7J4ubaQohMzypSSHMCZoj/0gtF1zTuTNs2Rx
Npu/xGw34QJVGsCDUeZQZ+7QzSpKmUs=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:06:54 2025 by rpki-client