Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa
File:                     c349dc38-3f23-3090-af77-fe6470f4ab3d.roa (raw, json)
Hash identifier:          9LUWJxBf54eBqBi45vvMrqeGtHk2Wn+DvMtkmP06BVA=
Subject key identifier:   CB:BA:A8:94:CA:C4:36:CF:7A:7D:CC:FC:48:66:60:A9:C2:D3:C8:4C
Certificate issuer:       /CN=2fd92816-1579-4d40-9111-f86331c3fd8f
Certificate serial:       010D0C9F43285849BDDA26B5027F0D69F0462200
Authority key identifier: B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa
Signing time:             Sun 04 May 2025 13:01:00 +0000
ROA not before:           Sun 04 May 2025 13:01:00 +0000
ROA not after:            Sat 02 Aug 2025 13:01:00 +0000
asID:                     14977
IP address blocks:        137.84.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bd:da:26:b5:02:7f:0d:69:f0:46:22:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2fd92816-1579-4d40-9111-f86331c3fd8f
        Validity
            Not Before: May  4 13:01:00 2025 GMT
            Not After : Aug  2 13:01:00 2025 GMT
        Subject: CN=d7041c8b-30f1-4906-9dec-c948e794c9c4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:15:cd:42:b3:43:98:69:8c:6f:8f:f2:f2:e5:
                    75:dd:3e:1a:d1:00:52:a8:da:4b:35:bf:d3:3b:5f:
                    37:e4:80:79:29:c4:3a:a5:2a:d0:80:fd:e8:6b:4a:
                    0a:53:1e:37:22:de:94:62:46:29:da:34:7f:31:43:
                    2e:fc:0f:cd:f7:ac:4d:bd:de:16:d0:25:ae:dc:26:
                    3b:6d:ba:dc:1b:3b:36:c6:7b:30:b1:e4:94:3e:ba:
                    f7:29:88:8d:37:1f:3c:4f:1b:2a:22:75:0a:41:27:
                    e3:4c:13:6b:cd:95:8e:13:aa:91:8e:fd:ff:57:94:
                    6d:0c:fa:b4:0b:1f:5b:1a:45:ac:8f:60:79:e1:38:
                    94:a4:af:22:7a:ae:5b:5b:27:b9:8a:5a:11:9b:7a:
                    d2:b0:de:ab:9d:04:03:c3:a4:30:1a:0a:64:23:f7:
                    ba:48:6c:e0:95:a6:38:c7:ab:d6:33:ad:02:c3:54:
                    b5:e1:6d:f4:ee:b0:62:d1:1c:90:08:bd:cd:d7:b9:
                    a2:ab:ba:48:52:1a:4a:c1:ec:e9:0a:ba:6b:73:90:
                    d4:48:dd:99:5b:7d:ab:82:05:3b:7e:72:09:46:a1:
                    9f:a9:85:a2:29:cf:c2:f2:3a:b1:5e:c9:38:f8:d2:
                    7a:dd:fe:21:e0:e8:11:44:e3:78:96:76:15:b5:95:
                    60:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:BA:A8:94:CA:C4:36:CF:7A:7D:CC:FC:48:66:60:A9:C2:D3:C8:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/c349dc38-3f23-3090-af77-fe6470f4ab3d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f/2fd92816-1579-4d40-9111-f86331c3fd8f.crl

            X509v3 Authority Key Identifier:
                keyid:B7:AA:88:F5:F2:0A:B8:14:18:D2:77:D3:A3:51:A5:EF:FE:48:97:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2fd92816-1579-4d40-9111-f86331c3fd8f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.84.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:2c:01:86:17:65:34:e7:a5:5e:d8:52:96:1f:eb:bf:8f:96:
         41:03:6f:fb:98:26:53:ca:c9:87:c0:03:19:01:f9:d2:83:d7:
         23:d1:10:11:5d:e3:a7:c1:00:3b:2b:fa:b4:cf:c5:67:40:30:
         72:be:9c:d4:68:ab:48:37:46:d2:3d:b7:c3:cb:88:f3:91:ef:
         b1:c1:4c:b9:3c:fa:7d:66:01:aa:68:88:54:1b:84:0e:b9:e1:
         8b:12:6a:81:c5:f8:16:2f:c1:a9:0e:10:8e:d2:7a:4f:a1:21:
         24:75:5c:4e:19:ed:2e:b1:dc:c1:35:2b:01:45:14:50:df:a9:
         fe:f7:5c:42:48:ed:37:53:22:0d:5d:e5:82:5b:f6:b0:8f:b4:
         ab:0e:e0:28:ef:74:90:53:c6:68:65:ae:58:8c:b1:13:d2:fe:
         94:16:62:a3:b2:a9:e8:28:c8:33:89:48:91:67:26:5b:5e:72:
         a2:63:da:98:40:55:07:64:f2:6f:61:36:0c:91:bd:4b:8b:f8:
         9b:f1:8c:02:07:61:a6:51:23:4f:50:f7:50:18:30:a7:3c:b9:
         b6:a1:3f:be:20:fc:07:3e:d0:5d:74:e9:cc:bf:fa:c3:8a:59:
         65:2d:76:df:4b:9e:24:2a:79:e0:c7:6b:72:3b:63:4b:74:34:
         41:17:3c:01
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEm92ia1An8NafBGIgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZkOTI4MTYtMTU3OS00ZDQwLTkxMTEtZjg2MzMxYzNm
ZDhmMB4XDTI1MDUwNDEzMDEwMFoXDTI1MDgwMjEzMDEwMFowLzEtMCsGA1UEAxMk
ZDcwNDFjOGItMzBmMS00OTA2LTlkZWMtYzk0OGU3OTRjOWM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhhXNQrNDmGmMb4/y8uV13T4a0QBSqNpLNb/T
O1835IB5KcQ6pSrQgP3oa0oKUx43It6UYkYp2jR/MUMu/A/N96xNvd4W0CWu3CY7
bbrcGzs2xnswseSUPrr3KYiNNx88TxsqInUKQSfjTBNrzZWOE6qRjv3/V5RtDPq0
Cx9bGkWsj2B54TiUpK8ieq5bWye5iloRm3rSsN6rnQQDw6QwGgpkI/e6SGzglaY4
x6vWM60Cw1S14W307rBi0RyQCL3N17miq7pIUhpKwezpCrprc5DUSN2ZW32rggU7
fnIJRqGfqYWiKc/C8jqxXsk4+NJ63f4h4OgRRON4lnYVtZVgCQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMu6qJTKxDbPen3M/EhmYKnC08hMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5
MjgxNi0xNTc5LTRkNDAtOTExMS1mODYzMzFjM2ZkOGYvYzM0OWRjMzgtM2YyMy0z
MDkwLWFmNzctZmU2NDcwZjRhYjNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMmZkOTI4MTYtMTU3OS00ZDQwLTkx
MTEtZjg2MzMxYzNmZDhmLzJmZDkyODE2LTE1NzktNGQ0MC05MTExLWY4NjMzMWMz
ZmQ4Zi5jcmwwHwYDVR0jBBgwFoAUt6qI9fIKuBQY0nfTo1Gl7/5Il/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yZmQ5MjgxNi0xNTc5LTRkNDAtOTExMS1mODYz
MzFjM2ZkOGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiVQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAgiwBhhdlNOelXthSlh/rv4+WQQNv+5gmU8rJh8ADGQH50oPXI9EQEV3j
p8EAOyv6tM/FZ0Awcr6c1GirSDdG0j23w8uI85HvscFMuTz6fWYBqmiIVBuEDrnh
ixJqgcX4Fi/BqQ4QjtJ6T6EhJHVcThntLrHcwTUrAUUUUN+p/vdcQkjtN1MiDV3l
glv2sI+0qw7gKO90kFPGaGWuWIyxE9L+lBZio7Kp6CjIM4lIkWcmW15yomPamEBV
B2Tyb2E2DJG9S4v4m/GMAgdhplEjT1D3UBgwpzy5tqE/viD8Bz7QXXTpzL/6w4pZ
ZS1230ueJCp54MdrcjtjS3Q0QRc8AQ==
-----END CERTIFICATE-----
Generated at Sat May 10 03:53:34 2025 by rpki-client