Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa
File:                     c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa (raw, json)
Hash identifier:          mmy0W7xYluavLUGcEPhxmAzNph0JgDOJTpjoKc1GhfE=
Subject key identifier:   38:46:B0:10:AD:2D:AC:2F:3A:A6:EB:31:1A:E9:58:A1:3A:B6:AF:62
Certificate issuer:       /CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9
Certificate serial:       010D0C9F43285849A784C1C4B16A497EF97AC290
Authority key identifier: 73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa
Signing time:             Sat 26 Apr 2025 13:01:01 +0000
ROA not before:           Sat 26 Apr 2025 13:01:01 +0000
ROA not after:            Fri 25 Jul 2025 13:01:01 +0000
asID:                     31782
IP address blocks:        216.249.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a7:84:c1:c4:b1:6a:49:7e:f9:7a:c2:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f2a9189-c125-4e00-9c8a-343805ff6fb9
        Validity
            Not Before: Apr 26 13:01:01 2025 GMT
            Not After : Jul 25 13:01:01 2025 GMT
        Subject: CN=dc5b5f66-ff2d-43cb-849d-5c6ac44f04ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:16:27:f1:59:5e:22:88:09:18:e3:aa:bd:9d:
                    0a:2a:52:97:c1:3e:eb:e0:44:5b:03:f9:c1:1d:6f:
                    4a:23:db:49:25:b6:52:da:61:1a:96:26:f9:52:0c:
                    92:87:49:5b:f6:4b:8e:0f:5e:a2:60:03:e3:0e:80:
                    1c:2f:91:37:0b:88:b7:01:ac:44:d2:18:2e:a3:b9:
                    2e:7a:23:d2:78:99:37:ff:f8:b7:d8:62:ed:ba:a7:
                    4d:00:81:83:80:51:12:3d:fe:d0:e9:64:72:95:73:
                    48:47:4e:d9:cb:82:fb:0b:b2:ab:70:3d:94:c0:3e:
                    ae:88:4e:48:7a:c2:62:26:32:00:90:5a:7f:5e:ee:
                    15:67:60:52:d3:e8:c4:7b:60:81:2a:c1:56:77:9c:
                    f5:b9:26:0a:17:23:73:fc:54:af:d5:16:26:15:27:
                    42:f2:9b:a0:64:97:5b:4d:e8:a2:15:bc:a0:73:6d:
                    94:7d:c7:7e:0a:11:43:b7:32:9a:4f:f6:ce:9d:d6:
                    ff:34:ec:a7:71:d7:5f:3e:71:c1:ac:d7:6f:77:dd:
                    a7:e2:b6:c2:54:4b:ce:09:28:51:03:cf:13:15:3f:
                    82:30:88:47:5a:ec:4f:81:f1:28:cc:78:48:5c:66:
                    8d:ff:83:d3:f9:bb:01:f6:31:7f:01:42:e5:c4:30:
                    09:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:46:B0:10:AD:2D:AC:2F:3A:A6:EB:31:1A:E9:58:A1:3A:B6:AF:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/c9ef75f7-186f-362a-8e0d-43272fc3f66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9/5f2a9189-c125-4e00-9c8a-343805ff6fb9.crl

            X509v3 Authority Key Identifier:
                keyid:73:8B:FB:18:EB:D4:32:31:82:1C:A3:D7:32:18:DF:21:F1:44:1D:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5f2a9189-c125-4e00-9c8a-343805ff6fb9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.249.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:29:7b:de:17:12:fa:fa:0b:f5:70:c4:e2:28:45:dc:42:56:
         5c:6c:6a:1e:ef:20:2d:0b:ff:69:b1:0a:41:b6:93:28:ba:64:
         4f:30:82:23:91:8e:5c:06:25:57:d2:46:5f:13:cd:9f:52:99:
         3d:46:2e:b1:b2:c2:7c:c7:3c:7c:77:80:e8:c6:8d:eb:29:af:
         8b:4e:4d:51:0b:45:b4:59:0e:1e:d5:64:a0:c9:ce:d0:0f:f7:
         c8:dd:76:6d:68:d0:69:96:5c:67:3d:1e:93:93:89:27:e9:65:
         13:49:68:19:94:6f:5b:b3:60:21:1f:c8:1f:08:cb:e8:85:97:
         ef:72:ed:bb:84:83:b2:64:16:00:c4:50:af:18:f0:5e:b8:ef:
         29:06:82:ff:fd:ef:56:ca:fd:84:ca:74:cd:ca:02:57:00:22:
         0d:2e:cc:f4:05:34:05:e2:0a:0f:30:e3:ff:79:23:54:c3:70:
         b7:f2:80:e6:fe:34:81:8d:fb:98:da:a1:2a:ea:ce:31:d5:d8:
         7d:3f:a4:ee:50:c8:5b:14:28:19:28:dd:76:c6:93:48:62:21:
         8e:be:0b:0f:67:8c:39:02:15:32:6d:d1:3e:b5:29:af:d7:85:
         43:19:62:7f:9e:fd:f4:c6:24:0a:32:df:f8:81:7f:de:16:4b:
         c9:89:ac:7d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmnhMHEsWpJfvl6wpAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYyYTkxODktYzEyNS00ZTAwLTljOGEtMzQzODA1ZmY2
ZmI5MB4XDTI1MDQyNjEzMDEwMVoXDTI1MDcyNTEzMDEwMVowLzEtMCsGA1UEAxMk
ZGM1YjVmNjYtZmYyZC00M2NiLTg0OWQtNWM2YWM0NGYwNGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiRYn8VleIogJGOOqvZ0KKlKXwT7r4ERbA/nB
HW9KI9tJJbZS2mEalib5UgySh0lb9kuOD16iYAPjDoAcL5E3C4i3AaxE0hguo7ku
eiPSeJk3//i32GLtuqdNAIGDgFESPf7Q6WRylXNIR07Zy4L7C7KrcD2UwD6uiE5I
esJiJjIAkFp/Xu4VZ2BS0+jEe2CBKsFWd5z1uSYKFyNz/FSv1RYmFSdC8pugZJdb
TeiiFbygc22Ufcd+ChFDtzKaT/bOndb/NOyncddfPnHBrNdvd92n4rbCVEvOCShR
A88TFT+CMIhHWuxPgfEozHhIXGaN/4PT+bsB9jF/AULlxDAJCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhGsBCtLawvOqbrMRrpWKE6tq9iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJh
OTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4MDVmZjZmYjkvYzllZjc1ZjctMTg2Zi0z
NjJhLThlMGQtNDMyNzJmYzNmNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWYyYTkxODktYzEyNS00ZTAwLTlj
OGEtMzQzODA1ZmY2ZmI5LzVmMmE5MTg5LWMxMjUtNGUwMC05YzhhLTM0MzgwNWZm
NmZiOS5jcmwwHwYDVR0jBBgwFoAUc4v7GOvUMjGCHKPXMhjfIfFEHRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81ZjJhOTE4OS1jMTI1LTRlMDAtOWM4YS0zNDM4
MDVmZjZmYjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2PkwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0pe94XEvr6C/VwxOIoRdxCVlxsah7vIC0L/2mxCkG2kyi6ZE8wgiOR
jlwGJVfSRl8TzZ9SmT1GLrGywnzHPHx3gOjGjespr4tOTVELRbRZDh7VZKDJztAP
98jddm1o0GmWXGc9HpOTiSfpZRNJaBmUb1uzYCEfyB8Iy+iFl+9y7buEg7JkFgDE
UK8Y8F647ykGgv/971bK/YTKdM3KAlcAIg0uzPQFNAXiCg8w4/95I1TDcLfygOb+
NIGN+5jaoSrqzjHV2H0/pO5QyFsUKBko3XbGk0hiIY6+Cw9njDkCFTJt0T61Ka/X
hUMZYn+e/fTGJAoy3/iBf94WS8mJrH0=
-----END CERTIFICATE-----
Generated at Wed May 7 20:58:32 2025 by rpki-client