Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/c53b1bd2-f222-3d61-a5ba-7c0b593e5024.roa
File:                     c53b1bd2-f222-3d61-a5ba-7c0b593e5024.roa (raw, json)
Hash identifier:          6wrxEaPs30Sxlc/eYSw8yzpYUSQ9n+NDL3tTB4F+IqM=
Subject key identifier:   D3:DE:FD:0A:1A:55:5E:08:9A:96:53:E7:47:B4:5F:7B:EB:16:68:45
Certificate issuer:       /CN=9cbe10a0-2935-48b8-8e13-29a34fb07db6
Certificate serial:       010D0C9F43285849C20A133799A93F075900B980
Authority key identifier: 40:33:6E:DA:44:51:64:F4:2B:CD:88:78:66:E2:BF:EA:85:91:61:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/c53b1bd2-f222-3d61-a5ba-7c0b593e5024.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     11624
IP address blocks:        75.127.16.0/20 maxlen: 24
                          162.252.128.0/22 maxlen: 24
                          2605:af80::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/9cbe10a0-2935-48b8-8e13-29a34fb07db6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/9cbe10a0-2935-48b8-8e13-29a34fb07db6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:13:37:99:a9:3f:07:59:00:b9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cbe10a0-2935-48b8-8e13-29a34fb07db6
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=735ddf59-b558-499a-9019-85af408153f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:e0:b7:90:d0:5b:1c:ac:db:8d:9f:04:0a:26:
                    b5:39:72:2a:ed:d3:25:3a:bf:4b:7f:b7:a8:a8:eb:
                    cb:51:9e:fd:cd:01:52:ca:d4:5a:50:29:6d:40:f9:
                    1f:b9:ce:ac:d9:da:31:9b:ad:09:4b:9d:06:53:4f:
                    a7:00:74:b1:d4:22:82:bc:8a:f5:9d:28:ca:38:c1:
                    43:63:51:a6:2d:f2:d0:5d:cb:17:8e:aa:17:91:d5:
                    d0:f6:dc:bd:60:a2:d3:9e:75:13:10:12:87:8d:42:
                    0b:ea:24:b8:da:11:87:75:5d:8e:20:e1:78:0f:48:
                    c5:19:51:f4:a9:58:fe:3f:57:97:97:a3:c7:4c:66:
                    26:a0:ca:16:61:7d:03:7c:d2:ec:30:0d:e4:a8:ad:
                    90:9c:5d:46:87:0d:3f:ec:ce:e9:7e:66:16:26:a7:
                    de:bf:0f:aa:a6:b9:75:a0:12:a2:63:18:68:e7:a7:
                    52:6a:d5:b8:d8:a7:0e:fb:8a:87:e3:ba:c4:b3:99:
                    96:45:8f:e9:ea:b8:72:89:f5:33:6a:c5:c0:7f:91:
                    bf:6c:23:98:52:2e:78:82:29:24:6d:58:22:cd:6a:
                    ce:5b:94:ce:d9:57:7c:34:fc:31:62:75:ae:49:c8:
                    f5:8f:eb:50:ed:03:9d:50:2c:a9:bb:55:8a:47:81:
                    2d:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:DE:FD:0A:1A:55:5E:08:9A:96:53:E7:47:B4:5F:7B:EB:16:68:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/c53b1bd2-f222-3d61-a5ba-7c0b593e5024.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6/9cbe10a0-2935-48b8-8e13-29a34fb07db6.crl

            X509v3 Authority Key Identifier:
                keyid:40:33:6E:DA:44:51:64:F4:2B:CD:88:78:66:E2:BF:EA:85:91:61:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cbe10a0-2935-48b8-8e13-29a34fb07db6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.127.16.0/20
                  162.252.128.0/22
                IPv6:
                  2605:af80::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:f7:7e:64:ee:1e:91:9e:07:5a:2f:01:31:50:63:cf:39:c8:
         9e:ee:7f:b1:6b:f2:11:9c:5f:83:ab:46:76:ca:12:65:0a:4a:
         36:3a:23:2c:09:8f:60:29:48:06:79:24:34:55:97:79:d8:e6:
         c8:ac:3e:22:43:2b:2c:d4:84:e8:56:47:8a:62:ac:13:85:3a:
         27:7f:bb:9e:a2:2a:f2:0f:84:f0:7f:5a:1a:58:2f:9c:16:33:
         00:46:a9:fd:a5:c8:75:05:b5:fa:fc:3a:fe:7c:13:a0:ad:1f:
         8f:72:35:e8:ea:1e:9b:bb:06:21:c5:be:d1:38:85:da:9c:19:
         e7:0f:6f:85:fe:e9:d0:e7:b5:fb:68:19:cd:10:c3:20:e4:c0:
         b2:9c:a6:d0:a0:68:fe:36:d8:01:bf:23:9f:2b:87:c8:5c:a4:
         41:cf:42:c9:12:4a:0e:bd:f7:45:0f:19:26:6a:bd:92:44:5e:
         28:d5:36:54:13:2e:02:3d:9d:c0:14:b2:82:44:03:71:eb:6d:
         a4:7c:8f:c4:9d:b5:bd:2b:70:1d:04:cd:34:bb:34:6f:9c:b0:
         9c:be:be:9a:55:54:f5:6a:2a:3b:bc:63:ee:1f:b2:25:27:2f:
         cc:3a:3e:3c:66:55:f5:e7:21:41:b0:15:d8:8d:a0:74:9d:65:
         77:9b:5e:8a
-----BEGIN CERTIFICATE-----
MIIGWDCCBUCgAwIBAgIUAQ0Mn0MoWEnCChM3mak/B1kAuYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNiZTEwYTAtMjkzNS00OGI4LThlMTMtMjlhMzRmYjA3
ZGI2MB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
NzM1ZGRmNTktYjU1OC00OTlhLTkwMTktODVhZjQwODE1M2YxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkOC3kNBbHKzbjZ8ECia1OXIq7dMlOr9Lf7eo
qOvLUZ79zQFSytRaUCltQPkfuc6s2doxm60JS50GU0+nAHSx1CKCvIr1nSjKOMFD
Y1GmLfLQXcsXjqoXkdXQ9ty9YKLTnnUTEBKHjUIL6iS42hGHdV2OIOF4D0jFGVH0
qVj+P1eXl6PHTGYmoMoWYX0DfNLsMA3kqK2QnF1Ghw0/7M7pfmYWJqfevw+qprl1
oBKiYxho56dSatW42KcO+4qH47rEs5mWRY/p6rhyifUzasXAf5G/bCOYUi54gikk
bVgizWrOW5TO2Vd8NPwxYnWuScj1j+tQ7QOdUCypu1WKR4EtOwIDAQABo4IDajCC
A2YwHQYDVR0OBBYEFNPe/QoaVV4ImpZT50e0X3vrFmhFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Jl
MTBhMC0yOTM1LTQ4YjgtOGUxMy0yOWEzNGZiMDdkYjYvYzUzYjFiZDItZjIyMi0z
ZDYxLWE1YmEtN2MwYjU5M2U1MDI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNiZTEwYTAtMjkzNS00OGI4LThl
MTMtMjlhMzRmYjA3ZGI2LzljYmUxMGEwLTI5MzUtNDhiOC04ZTEzLTI5YTM0ZmIw
N2RiNi5jcmwwHwYDVR0jBBgwFoAUQDNu2kRRZPQrzYh4ZuK/6oWRYTcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2JlMTBhMC0yOTM1LTQ4YjgtOGUxMy0yOWEz
NGZiMDdkYjYuY2VyMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQES38QAwQC
ovyAMA0EAgACMAcDBQAmBa+AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4
BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kv
Y3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBACL3fmTuHpGeB1ovATFQY885yJ7u
f7Fr8hGcX4OrRnbKEmUKSjY6IywJj2ApSAZ5JDRVl3nY5sisPiJDKyzUhOhWR4pi
rBOFOid/u56iKvIPhPB/WhpYL5wWMwBGqf2lyHUFtfr8Ov58E6CtH49yNejqHpu7
BiHFvtE4hdqcGecPb4X+6dDntftoGc0QwyDkwLKcptCgaP422AG/I58rh8hcpEHP
QskSSg6990UPGSZqvZJEXijVNlQTLgI9ncAUsoJEA3HrbaR8j8Sdtb0rcB0EzTS7
NG+csJy+vppVVPVqKju8Y+4fsiUnL8w6PjxmVfXnIUGwFdiNoHSdZXebXoo=
-----END CERTIFICATE-----
Generated at Sun May 11 02:13:58 2025 by rpki-client