Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dae0fe7-4d8c-31d9-b35c-6ed71d1b98ca.roa
File:                     8dae0fe7-4d8c-31d9-b35c-6ed71d1b98ca.roa (raw, json)
Hash identifier:          vrnitTpAPLKT5SS6Xo8VypmidbYZ35QVA2NUh/yGDa8=
Subject key identifier:   23:C8:6E:9F:F3:8A:3A:AB:81:E1:E3:2B:69:B9:B3:09:E7:45:82:DD
Certificate issuer:       /CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
Certificate serial:       010D0C9F43285849C904F2EC8F69CFDB86D18380
Authority key identifier: 9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dae0fe7-4d8c-31d9-b35c-6ed71d1b98ca.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     134351
IP address blocks:        64.79.242.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f2:ec:8f:69:cf:db:86:d1:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d5d49c9b-466a-40e6-ae00-485dc3a50d70
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=dafce671-0724-4f2e-bb66-ed39d9f14245
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:6c:91:6e:0a:05:5f:ed:34:46:a7:89:96:e1:
                    8b:3d:8d:9a:a9:ba:8f:a8:66:1b:28:f1:91:a7:4a:
                    e1:a0:49:97:65:8a:63:ea:48:8c:64:87:06:d0:61:
                    8e:8e:37:e9:13:d4:c8:94:69:43:c7:d5:fd:b2:d3:
                    05:c0:e4:c2:a4:a4:56:e2:4b:41:1b:83:44:f9:ad:
                    23:c3:68:43:57:ea:9e:10:9b:86:cd:49:e8:98:f4:
                    cb:b8:e7:2d:0d:0c:b1:c0:af:a8:b4:cf:be:9c:f3:
                    82:0f:95:02:c8:74:de:58:c1:de:73:8b:3c:44:c5:
                    0e:13:f6:1c:16:90:83:ae:06:03:e7:d9:8e:99:14:
                    52:0e:ae:3f:e6:d6:20:d0:a2:79:02:5a:20:3b:76:
                    2a:4c:b0:a4:3b:1b:6c:d7:37:cf:d9:9a:fe:5b:ac:
                    ac:4f:2a:50:6d:1e:f9:c8:69:45:4d:36:22:41:8c:
                    a7:41:70:f0:e1:97:2e:e7:a6:e9:76:6f:a1:ee:92:
                    8f:1f:ea:94:8e:22:09:4b:52:5f:72:a8:79:18:67:
                    6b:37:6a:9c:2f:49:c0:c1:8f:5b:39:81:21:98:5e:
                    f2:ea:2a:e4:77:df:ed:cd:a4:22:54:2e:76:60:7f:
                    9e:2a:56:e4:bd:28:70:1b:7b:6c:98:9b:db:e0:fe:
                    2f:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:C8:6E:9F:F3:8A:3A:AB:81:E1:E3:2B:69:B9:B3:09:E7:45:82:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/8dae0fe7-4d8c-31d9-b35c-6ed71d1b98ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70/d5d49c9b-466a-40e6-ae00-485dc3a50d70.crl

            X509v3 Authority Key Identifier:
                keyid:9E:20:91:9E:BA:50:3B:76:60:A2:48:96:2F:6C:91:33:AC:A0:27:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d5d49c9b-466a-40e6-ae00-485dc3a50d70.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.79.242.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:62:fb:fa:cf:0f:0d:05:73:87:b0:32:ad:0b:26:6e:6a:01:
         74:af:1b:91:20:e2:a2:de:2c:2d:23:bf:ed:dd:2b:95:ed:fc:
         f6:4c:b4:7b:44:34:31:ca:d4:3e:8f:ad:8a:d8:d7:ae:af:16:
         02:f2:20:e8:f1:6f:14:15:48:80:a2:3f:6a:19:1c:ed:6c:27:
         47:32:de:b6:51:8e:12:45:e6:a3:c6:58:a2:6a:86:ea:42:fc:
         2f:f1:45:5e:02:c3:3c:da:cb:35:f1:a5:7a:59:9b:90:77:77:
         22:c0:71:06:be:f3:ce:01:7b:70:39:8e:1f:bc:ac:39:a6:9a:
         9d:c5:c3:c2:79:d3:b4:ca:fb:ba:9c:8f:3e:0d:75:a6:b6:ad:
         56:06:f3:0c:a8:cb:e6:7c:c7:7f:f7:a8:da:7b:6c:ea:a7:51:
         b6:be:07:21:d3:2b:61:2a:7d:22:39:e3:e8:c3:22:93:85:7d:
         37:4a:d3:8e:fa:e6:fe:98:6c:d3:ec:37:ee:0a:b9:04:bf:72:
         ea:35:79:3a:dc:95:37:78:7b:5f:7a:15:24:be:45:bf:c5:63:
         bd:7a:6c:70:29:74:a5:be:9c:a8:f2:b2:07:ba:9c:ce:b1:64:
         67:b9:8a:9f:b1:d0:3b:8a:c4:16:1b:8b:b5:8d:98:85:62:19:
         7f:77:dd:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPLsj2nP24bRg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDVkNDljOWItNDY2YS00MGU2LWFlMDAtNDg1ZGMzYTUw
ZDcwMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGFmY2U2NzEtMDcyNC00ZjJlLWJiNjYtZWQzOWQ5ZjE0MjQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoGyRbgoFX+00RqeJluGLPY2aqbqPqGYbKPGR
p0rhoEmXZYpj6kiMZIcG0GGOjjfpE9TIlGlDx9X9stMFwOTCpKRW4ktBG4NE+a0j
w2hDV+qeEJuGzUnomPTLuOctDQyxwK+otM++nPOCD5UCyHTeWMHec4s8RMUOE/Yc
FpCDrgYD59mOmRRSDq4/5tYg0KJ5AlogO3YqTLCkOxts1zfP2Zr+W6ysTypQbR75
yGlFTTYiQYynQXDw4Zcu56bpdm+h7pKPH+qUjiIJS1Jfcqh5GGdrN2qcL0nAwY9b
OYEhmF7y6irkd9/tzaQiVC52YH+eKlbkvShwG3tsmJvb4P4veQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCPIbp/zijqrgeHjK2m5swnnRYLdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0
OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVkYzNhNTBkNzAvOGRhZTBmZTctNGQ4Yy0z
MWQ5LWIzNWMtNmVkNzFkMWI5OGNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDVkNDljOWItNDY2YS00MGU2LWFl
MDAtNDg1ZGMzYTUwZDcwL2Q1ZDQ5YzliLTQ2NmEtNDBlNi1hZTAwLTQ4NWRjM2E1
MGQ3MC5jcmwwHwYDVR0jBBgwFoAUniCRnrpQO3ZgokiWL2yRM6ygJzEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kNWQ0OWM5Yi00NjZhLTQwZTYtYWUwMC00ODVk
YzNhNTBkNzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQE/yMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGli+/rPDw0Fc4ewMq0LJm5qAXSvG5Eg4qLeLC0jv+3dK5Xt/PZMtHtE
NDHK1D6PrYrY166vFgLyIOjxbxQVSICiP2oZHO1sJ0cy3rZRjhJF5qPGWKJqhupC
/C/xRV4CwzzayzXxpXpZm5B3dyLAcQa+884Be3A5jh+8rDmmmp3Fw8J507TK+7qc
jz4Ndaa2rVYG8wyoy+Z8x3/3qNp7bOqnUba+ByHTK2EqfSI54+jDIpOFfTdK0476
5v6YbNPsN+4KuQS/cuo1eTrclTd4e196FSS+Rb/FY716bHApdKW+nKjysge6nM6x
ZGe5ip+x0DuKxBYbi7WNmIViGX933QY=
-----END CERTIFICATE-----
Generated at Fri May 9 17:35:50 2025 by rpki-client