Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa
File:                     1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa (raw, json)
Hash identifier:          oz3yVVxQoIR9WFycTpVq3reGA7WWOHhGaXZXDKjbHJ8=
Subject key identifier:   6B:F5:F7:13:E9:6A:C6:A5:F7:05:9A:AF:4D:50:64:16:3B:EA:89:5A
Certificate issuer:       /CN=84071564-b087-4d9c-88d0-6fa5a30617a3
Certificate serial:       010D0C9F43285848A400B80E3731A4028DD3B280
Authority key identifier: 83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa
Signing time:             Thu 23 Jan 2025 14:00:52 +0000
ROA not before:           Thu 23 Jan 2025 14:00:52 +0000
ROA not after:            Wed 23 Apr 2025 13:00:52 +0000
asID:                     16717
IP address blocks:        141.193.160.0/20 maxlen: 24
                          199.116.192.0/21 maxlen: 24
                          205.178.164.0/22 maxlen: 24
                          207.254.160.0/20 maxlen: 24
                          216.49.224.0/19 maxlen: 24
                          216.183.192.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a4:00:b8:0e:37:31:a4:02:8d:d3:b2:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84071564-b087-4d9c-88d0-6fa5a30617a3
        Validity
            Not Before: Jan 23 14:00:52 2025 GMT
            Not After : Apr 23 13:00:52 2025 GMT
        Subject: CN=1e3defb4-5eeb-40c5-9bc5-4af21bec152f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:29:3d:bb:c5:86:1c:2c:93:01:b0:d5:8d:db:
                    23:ab:2c:dd:b0:d4:92:30:d8:01:41:2f:f4:fa:5d:
                    4e:da:c0:5e:1a:9f:f1:df:53:69:e2:8c:ff:88:18:
                    8f:fc:85:2c:57:f5:ea:16:7d:57:ab:6f:e3:6c:f7:
                    05:bb:cb:67:a4:48:b7:51:45:93:65:44:d4:3d:b9:
                    6a:14:e5:42:5f:4f:28:f0:65:5e:f8:c2:5c:18:be:
                    12:35:28:07:2b:3c:c2:de:52:92:a6:9e:37:87:e3:
                    84:ec:51:6a:08:d6:b9:2d:29:8e:f7:89:f3:c9:0f:
                    6c:d0:e0:46:c7:3e:cc:df:2f:3e:35:51:41:d1:25:
                    9f:e4:ab:ca:13:0a:03:df:c4:0e:fa:db:4e:bf:73:
                    0d:3b:7e:70:3b:fd:11:91:6f:47:6e:35:67:3d:1e:
                    62:de:37:16:ef:fe:83:5f:00:af:00:7b:3b:20:c9:
                    f2:a8:4e:72:e6:97:1f:d2:4f:2c:06:a8:bb:11:6b:
                    0c:a0:e0:af:91:78:6b:70:69:47:ce:35:9a:f9:a2:
                    47:10:6f:02:20:81:0a:1e:be:f0:ef:45:91:45:aa:
                    79:4b:01:ab:13:85:4b:cb:67:a7:e4:db:fe:c0:4d:
                    23:cd:38:b6:b6:2a:2b:a7:c8:27:63:64:75:1f:11:
                    34:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F5:F7:13:E9:6A:C6:A5:F7:05:9A:AF:4D:50:64:16:3B:EA:89:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/1f79e9c8-cf2a-3d9c-99c7-499e71596ab6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3/84071564-b087-4d9c-88d0-6fa5a30617a3.crl

            X509v3 Authority Key Identifier:
                keyid:83:51:B7:FD:D5:53:2D:4E:D1:C9:ED:AF:24:F1:9E:41:2D:7E:15:AB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/84071564-b087-4d9c-88d0-6fa5a30617a3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.193.160.0/20
                  199.116.192.0/21
                  205.178.164.0/22
                  207.254.160.0/20
                  216.49.224.0/19
                  216.183.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:48:ad:1b:0f:fb:c9:48:c5:a4:68:d0:56:d9:52:ef:11:94:
         1b:b9:b2:19:f1:43:c9:7a:6d:a6:12:da:fc:08:c1:ea:5c:d0:
         7e:be:d6:24:20:9d:3f:88:5b:53:d2:b6:14:f3:bc:9e:1d:e3:
         a7:96:64:6c:29:4b:7e:fa:8b:f0:10:c6:66:52:6e:e5:d5:91:
         4e:97:8d:41:87:92:31:7f:7e:ec:c6:09:84:0d:16:a7:dc:e3:
         5b:e8:5c:f6:1a:65:71:00:1c:80:65:a7:ab:70:94:59:c2:fa:
         75:18:24:90:4c:1c:cc:ab:05:e6:85:e4:22:1a:2a:50:5f:ff:
         19:41:80:20:6b:19:e2:13:38:7c:83:96:84:07:86:23:c5:fa:
         d4:e2:34:1e:72:de:f5:bc:df:68:ea:a9:ef:22:b3:40:7c:64:
         4e:d2:7b:15:b0:6f:2c:52:96:91:97:66:59:2e:aa:2e:ff:2a:
         ac:de:c4:0e:14:51:04:5c:c7:02:02:e3:d5:be:44:dd:b4:eb:
         fa:ba:b8:10:26:3b:8b:49:32:8a:11:92:ce:08:27:94:78:f2:
         d7:82:f6:df:d4:70:5b:91:1f:1d:2d:36:77:8e:70:5f:3b:98:
         c9:dc:05:da:9c:c0:b7:1a:97:82:d3:d1:94:1a:c5:25:89:9c:
         8b:73:0e:2c
-----BEGIN CERTIFICATE-----
MIIGYTCCBUmgAwIBAgIUAQ0Mn0MoWEikALgONzGkAo3TsoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODQwNzE1NjQtYjA4Ny00ZDljLTg4ZDAtNmZhNWEzMDYx
N2EzMB4XDTI1MDEyMzE0MDA1MloXDTI1MDQyMzEzMDA1MlowLzEtMCsGA1UEAxMk
MWUzZGVmYjQtNWVlYi00MGM1LTliYzUtNGFmMjFiZWMxNTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmyk9u8WGHCyTAbDVjdsjqyzdsNSSMNgBQS/0
+l1O2sBeGp/x31Np4oz/iBiP/IUsV/XqFn1Xq2/jbPcFu8tnpEi3UUWTZUTUPblq
FOVCX08o8GVe+MJcGL4SNSgHKzzC3lKSpp43h+OE7FFqCNa5LSmO94nzyQ9s0OBG
xz7M3y8+NVFB0SWf5KvKEwoD38QO+ttOv3MNO35wO/0RkW9HbjVnPR5i3jcW7/6D
XwCvAHs7IMnyqE5y5pcf0k8sBqi7EWsMoOCvkXhrcGlHzjWa+aJHEG8CIIEKHr7w
70WRRap5SwGrE4VLy2en5Nv+wE0jzTi2tiorp8gnY2R1HxE0GwIDAQABo4IDczCC
A28wHQYDVR0OBBYEFGv19xPpasal9wWar01QZBY76olaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3
MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1YTMwNjE3YTMvMWY3OWU5YzgtY2YyYS0z
ZDljLTk5YzctNDk5ZTcxNTk2YWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODQwNzE1NjQtYjA4Ny00ZDljLTg4
ZDAtNmZhNWEzMDYxN2EzLzg0MDcxNTY0LWIwODctNGQ5Yy04OGQwLTZmYTVhMzA2
MTdhMy5jcmwwHwYDVR0jBBgwFoAUg1G3/dVTLU7Rye2vJPGeQS1+FaswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NDA3MTU2NC1iMDg3LTRkOWMtODhkMC02ZmE1
YTMwNjE3YTMuY2VyMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQEjcGgAwQD
x3TAAwQCzbKkAwQEz/6gAwQF2DHgAwQE2LfAMFQGA1UdIAEB/wRKMEgwRgYIKwYB
BQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3Vy
Y2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAJRIrRsP+8lIxaRo
0FbZUu8RlBu5shnxQ8l6baYS2vwIwepc0H6+1iQgnT+IW1PSthTzvJ4d46eWZGwp
S376i/AQxmZSbuXVkU6XjUGHkjF/fuzGCYQNFqfc41voXPYaZXEAHIBlp6twlFnC
+nUYJJBMHMyrBeaF5CIaKlBf/xlBgCBrGeITOHyDloQHhiPF+tTiNB5y3vW832jq
qe8is0B8ZE7SexWwbyxSlpGXZlkuqi7/KqzexA4UUQRcxwIC49W+RN206/q6uBAm
O4tJMooRks4IJ5R48teC9t/UcFuRHx0tNneOcF87mMncBdqcwLcal4LT0ZQaxSWJ
nItzDiw=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:01:39 2025 by rpki-client