Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
File:                     4e6253b3-d831-3192-8372-3f91ef10aa0f.roa (raw, json)
Hash identifier:          s8VjX5Dt9EH8TLRFV5eX4TVVsF6mEA51kMlG4CwLyps=
Subject key identifier:   4A:B2:99:F2:2A:0D:49:19:2A:F2:AF:96:85:C4:76:D6:2A:8B:68:97
Certificate issuer:       /CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
Certificate serial:       010D0C9F43285849C20A1685C84A4F4401005FD0
Authority key identifier: 49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     15213
IP address blocks:        64.57.0.0/20 maxlen: 20
                          64.57.0.0/21 maxlen: 21
                          64.57.1.0/24 maxlen: 24
                          64.57.2.0/24 maxlen: 24
                          64.57.3.0/24 maxlen: 24
                          64.57.4.0/24 maxlen: 24
                          64.57.5.0/24 maxlen: 24
                          64.57.6.0/24 maxlen: 24
                          64.57.8.0/21 maxlen: 21
                          64.57.8.0/24 maxlen: 24
                          64.57.9.0/24 maxlen: 24
                          64.57.10.0/24 maxlen: 24
                          64.57.11.0/24 maxlen: 24
                          64.57.12.0/24 maxlen: 24
                          64.57.13.0/24 maxlen: 24
                          64.57.14.0/24 maxlen: 24
                          64.57.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:16:85:c8:4a:4f:44:01:00:5f:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6333ed6-b74f-4665-b7a8-2f04df6f87f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=dddab75a-9931-4d1b-b5d5-5e809b61e7ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:4e:32:d7:f1:67:a3:9a:d1:a4:97:f8:1f:89:
                    16:58:ce:f5:1a:a9:8c:77:0d:b0:2f:54:b8:53:e3:
                    3b:82:64:24:b6:a3:ec:ca:57:3a:b3:5c:7f:14:c8:
                    c4:fa:ff:b4:a7:64:50:e0:d7:20:9a:fc:65:c9:b8:
                    20:5d:75:04:d2:3f:6b:f3:06:3d:50:4b:42:49:05:
                    a4:01:7a:09:4a:c5:15:d3:aa:82:e0:c4:4f:2a:71:
                    02:ee:a8:71:2f:8b:cd:0b:d3:b2:37:12:9d:82:7d:
                    9b:69:a7:75:4d:d9:f6:56:10:76:d7:2b:d1:f8:b6:
                    a3:51:52:26:30:e2:85:11:9c:52:54:e7:ef:a2:fb:
                    8b:5d:d7:b5:a3:85:65:61:d2:2f:3f:8d:95:92:af:
                    23:67:83:1d:c7:c5:08:60:c0:31:94:dc:8f:18:75:
                    b3:19:30:48:8d:34:3e:93:91:c2:98:6f:2a:c3:06:
                    7c:fc:56:18:9b:1c:50:32:69:63:58:ca:b0:90:56:
                    11:31:84:3b:a9:e8:52:20:1e:c7:26:53:bd:d7:a9:
                    1c:68:51:55:ed:7b:dc:a4:97:13:43:5d:93:8b:53:
                    de:90:82:bc:78:8f:68:41:83:b1:f1:a7:66:17:0d:
                    94:cf:38:bb:14:4e:a1:38:94:4d:bf:21:30:e1:e0:
                    2b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:B2:99:F2:2A:0D:49:19:2A:F2:AF:96:85:C4:76:D6:2A:8B:68:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/4e6253b3-d831-3192-8372-3f91ef10aa0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.crl

            X509v3 Authority Key Identifier:
                keyid:49:02:B5:B5:43:93:D2:6F:ED:30:8D:50:A5:AF:E0:A8:45:08:DD:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/f6333ed6-b74f-4665-b7a8-2f04df6f87f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.57.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:63:f9:75:c3:70:dd:20:3c:a3:2d:cf:1d:a3:7a:b2:36:42:
         07:d9:ba:b7:1a:1f:08:15:c1:3b:91:86:91:50:29:b5:1e:b9:
         71:ed:04:fd:85:70:21:c6:ed:44:b7:98:31:14:b9:3c:15:17:
         ba:4c:cc:4c:69:c1:61:2e:0b:ab:c4:a2:a9:1c:0a:23:8f:25:
         3c:e2:21:cd:ce:fe:53:88:4d:fd:6c:ec:c7:07:b0:c5:e5:e3:
         4b:b8:c3:b2:28:d9:f4:a6:71:32:d7:52:9c:41:37:8a:4f:e5:
         9e:d4:37:ec:2d:60:5d:8b:92:91:f9:31:2b:25:35:a6:bd:2c:
         8a:47:62:b8:79:d9:88:c1:b0:00:7f:73:45:fb:75:21:08:a2:
         3e:21:69:ef:d1:bc:d7:fa:43:9a:02:33:86:da:6b:3b:f0:8d:
         0f:26:64:e0:45:ff:5b:7e:af:7a:0f:c6:72:fe:64:19:35:77:
         6c:64:ee:11:b5:43:f8:a6:76:28:42:cf:ee:07:c9:d1:5b:64:
         05:6d:0d:f4:a3:10:10:86:08:d8:35:17:18:4d:a2:b2:2d:73:
         55:3f:13:f5:61:73:67:80:24:9d:35:ae:a0:eb:ad:f1:90:9c:
         0d:eb:11:59:43:4e:2e:6a:6f:11:bf:a8:72:1b:26:ec:1d:cf:
         c9:79:e6:76
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCChaFyEpPRAEAX9AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzMzNlZDYtYjc0Zi00NjY1LWI3YTgtMmYwNGRmNmY4
N2YzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
ZGRkYWI3NWEtOTkzMS00ZDFiLWI1ZDUtNWU4MDliNjFlN2VmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyU4y1/Fno5rRpJf4H4kWWM71GqmMdw2wL1S4
U+M7gmQktqPsylc6s1x/FMjE+v+0p2RQ4NcgmvxlybggXXUE0j9r8wY9UEtCSQWk
AXoJSsUV06qC4MRPKnEC7qhxL4vNC9OyNxKdgn2baad1Tdn2VhB21yvR+LajUVIm
MOKFEZxSVOfvovuLXde1o4VlYdIvP42Vkq8jZ4Mdx8UIYMAxlNyPGHWzGTBIjTQ+
k5HCmG8qwwZ8/FYYmxxQMmljWMqwkFYRMYQ7qehSIB7HJlO916kcaFFV7XvcpJcT
Q12Ti1PekIK8eI9oQYOx8admFw2Uzzi7FE6hOJRNvyEw4eArJQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqymfIqDUkZKvKvloXEdtYqi2iXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMz
M2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0ZGY2Zjg3ZjMvNGU2MjUzYjMtZDgzMS0z
MTkyLTgzNzItM2Y5MWVmMTBhYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZjYzMzNlZDYtYjc0Zi00NjY1LWI3
YTgtMmYwNGRmNmY4N2YzL2Y2MzMzZWQ2LWI3NGYtNDY2NS1iN2E4LTJmMDRkZjZm
ODdmMy5jcmwwHwYDVR0jBBgwFoAUSQK1tUOT0m/tMI1Qpa/gqEUI3Z0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9mNjMzM2VkNi1iNzRmLTQ2NjUtYjdhOC0yZjA0
ZGY2Zjg3ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQDkAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB1j+XXDcN0gPKMtzx2jerI2QgfZurcaHwgVwTuRhpFQKbUeuXHtBP2F
cCHG7US3mDEUuTwVF7pMzExpwWEuC6vEoqkcCiOPJTziIc3O/lOITf1s7McHsMXl
40u4w7Io2fSmcTLXUpxBN4pP5Z7UN+wtYF2LkpH5MSslNaa9LIpHYrh52YjBsAB/
c0X7dSEIoj4hae/RvNf6Q5oCM4baazvwjQ8mZOBF/1t+r3oPxnL+ZBk1d2xk7hG1
Q/imdihCz+4HydFbZAVtDfSjEBCGCNg1FxhNorItc1U/E/Vhc2eAJJ01rqDrrfGQ
nA3rEVlDTi5qbxG/qHIbJuwdz8l55nY=
-----END CERTIFICATE-----
Generated at Sat May 10 22:18:44 2025 by rpki-client