Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
File:                     71c32875-17b9-37fc-883b-5b24872cf840.roa (raw, json)
Hash identifier:          mp17dPDNn/nYUqFGt441v5nUV/LZFrtjow2T0gpeW38=
Subject key identifier:   7E:DF:18:C3:E7:D2:42:1D:4D:39:C3:B8:16:BB:A7:CD:99:6D:11:16
Certificate issuer:       /CN=84ee337c-42c7-4207-b916-5028c8c62f82
Certificate serial:       010D0C9F43285849C20A0E206079F63FBCD31E80
Authority key identifier: A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     13436
IP address blocks:        163.253.48.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:0e:20:60:79:f6:3f:bc:d3:1e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84ee337c-42c7-4207-b916-5028c8c62f82
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=c5160bd5-e54f-414b-9d94-17197601d366
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e2:4e:e8:21:be:03:73:05:05:4c:78:13:05:
                    b1:ee:ed:49:c9:60:7a:fc:cd:6e:08:11:e2:f9:f6:
                    52:bc:3c:00:61:77:7f:02:0f:5c:84:a6:88:0e:cb:
                    7c:1d:c1:94:9f:a5:4a:5d:89:c0:bb:69:85:44:27:
                    e2:83:73:bd:c2:5c:eb:1c:f5:41:ba:2b:3d:08:3f:
                    df:ca:2e:4a:31:00:8c:8a:9c:76:e9:45:a1:72:81:
                    91:6b:b4:cf:64:52:0d:61:eb:ea:dc:ea:0a:0e:02:
                    bd:2e:14:3f:b8:59:57:ab:ff:1e:46:75:14:5a:3d:
                    c1:9b:56:d2:c2:4f:b2:05:38:b7:09:c6:39:54:1a:
                    d5:cf:ba:40:a3:fd:79:df:83:4c:26:a4:88:a7:99:
                    2b:fd:c3:0f:0d:e7:ce:c6:ba:c8:50:27:57:21:4f:
                    1e:b6:66:b7:9d:ad:fb:9a:4d:26:07:ed:bd:b8:89:
                    01:62:eb:59:f9:6b:6f:2b:68:50:9b:c8:7b:74:4f:
                    f9:1d:b3:25:1f:5c:56:45:19:0e:7a:8e:b6:bb:c0:
                    25:1f:80:ab:c5:de:db:f5:61:ba:05:0a:c9:24:e8:
                    01:ff:c9:77:04:29:4d:24:76:c0:f7:09:e7:e9:69:
                    25:c1:2f:cb:78:d2:a4:03:b5:1c:4f:5b:3d:21:91:
                    70:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DF:18:C3:E7:D2:42:1D:4D:39:C3:B8:16:BB:A7:CD:99:6D:11:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/71c32875-17b9-37fc-883b-5b24872cf840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82/84ee337c-42c7-4207-b916-5028c8c62f82.crl

            X509v3 Authority Key Identifier:
                keyid:A1:C5:AB:A5:54:83:96:8D:33:34:74:7C:69:C0:5F:29:96:DE:25:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/84ee337c-42c7-4207-b916-5028c8c62f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.253.48.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:67:fd:7b:09:20:80:90:46:e2:45:1b:58:52:18:49:bd:b3:
         21:bb:b4:7a:cc:f0:02:74:32:ff:1d:e1:43:7e:fe:83:72:25:
         d8:5e:70:8b:c1:43:e0:ce:58:c6:aa:a7:68:5a:db:fd:08:7e:
         a1:c8:ca:b6:8a:94:d8:12:15:e3:3c:7d:e5:e1:93:88:a6:38:
         d0:88:60:32:90:d8:45:92:60:16:fb:2b:e9:86:c9:4b:b3:6e:
         6e:71:b2:be:14:45:96:e9:2e:7f:d0:48:6d:a6:76:c0:fd:5f:
         6b:7b:4b:a1:11:77:32:04:b8:cf:41:30:1b:d6:d3:62:fe:bc:
         16:a4:35:0c:b0:4e:bd:6f:a2:43:44:df:b3:0a:29:da:cd:cf:
         c4:8a:53:33:65:60:7b:51:37:71:40:79:d1:7a:33:95:f5:07:
         c2:43:da:6c:45:ca:8a:5c:80:b8:02:16:a9:e0:cf:12:43:6d:
         b2:c4:5a:26:74:06:4a:06:c1:a6:42:9d:11:18:eb:4c:26:33:
         ff:ee:ed:dd:b6:18:38:11:43:b7:df:3b:13:ec:54:61:09:20:
         26:c4:ca:15:c0:cf:ca:7f:3d:33:d1:9c:ee:ff:b6:85:7b:cf:
         f3:e5:4c:01:4d:38:c4:7e:50:df:0c:9b:6f:0c:fa:f0:af:9c:
         d5:2b:a2:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCg4gYHn2P7zTHoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODRlZTMzN2MtNDJjNy00MjA3LWI5MTYtNTAyOGM4YzYy
ZjgyMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzUxNjBiZDUtZTU0Zi00MTRiLTlkOTQtMTcxOTc2MDFkMzY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiuJO6CG+A3MFBUx4EwWx7u1JyWB6/M1uCBHi
+fZSvDwAYXd/Ag9chKaIDst8HcGUn6VKXYnAu2mFRCfig3O9wlzrHPVBuis9CD/f
yi5KMQCMipx26UWhcoGRa7TPZFINYevq3OoKDgK9LhQ/uFlXq/8eRnUUWj3Bm1bS
wk+yBTi3CcY5VBrVz7pAo/1534NMJqSIp5kr/cMPDefOxrrIUCdXIU8etma3na37
mk0mB+29uIkBYutZ+WtvK2hQm8h7dE/5HbMlH1xWRRkOeo62u8AlH4Crxd7b9WG6
BQrJJOgB/8l3BClNJHbA9wnn6WklwS/LeNKkA7UcT1s9IZFwJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7fGMPn0kIdTTnDuBa7p82ZbREWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVl
MzM3Yy00MmM3LTQyMDctYjkxNi01MDI4YzhjNjJmODIvNzFjMzI4NzUtMTdiOS0z
N2ZjLTg4M2ItNWIyNDg3MmNmODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODRlZTMzN2MtNDJjNy00MjA3LWI5
MTYtNTAyOGM4YzYyZjgyLzg0ZWUzMzdjLTQyYzctNDIwNy1iOTE2LTUwMjhjOGM2
MmY4Mi5jcmwwHwYDVR0jBBgwFoAUocWrpVSDlo0zNHR8acBfKZbeJfgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84NGVlMzM3Yy00MmM3LTQyMDctYjkxNi01MDI4
YzhjNjJmODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDo/0wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADVn/XsJIICQRuJFG1hSGEm9syG7tHrM8AJ0Mv8d4UN+/oNyJdhecIvB
Q+DOWMaqp2ha2/0IfqHIyraKlNgSFeM8feXhk4imONCIYDKQ2EWSYBb7K+mGyUuz
bm5xsr4URZbpLn/QSG2mdsD9X2t7S6ERdzIEuM9BMBvW02L+vBakNQywTr1vokNE
37MKKdrNz8SKUzNlYHtRN3FAedF6M5X1B8JD2mxFyopcgLgCFqngzxJDbbLEWiZ0
BkoGwaZCnREY60wmM//u7d22GDgRQ7ffOxPsVGEJICbEyhXAz8p/PTPRnO7/toV7
z/PlTAFNOMR+UN8Mm28M+vCvnNUronA=
-----END CERTIFICATE-----
Generated at Sun May 11 22:20:40 2025 by rpki-client