Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
File:                     41f68333-52c9-3f36-ba59-589d37e6bdf7.roa (raw, json)
Hash identifier:          duZJJlPM6KfAmnJFG/k4K7eC4NYedmWeiRPmgi5cb3M=
Subject key identifier:   49:52:F6:9A:52:FD:B3:97:2A:59:F0:1A:B7:AB:47:88:0B:D1:EB:0B
Certificate issuer:       /CN=edecac80-d7c3-48ad-8738-ec98e8c08265
Certificate serial:       010D0C9F43285849B9AA0330458BA3AB2EA5E240
Authority key identifier: 2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa
Signing time:             Sat 03 May 2025 01:00:47 +0000
ROA not before:           Sat 03 May 2025 01:00:47 +0000
ROA not after:            Fri 01 Aug 2025 01:00:47 +0000
asID:                     394475
IP address blocks:        209.35.176.0/24 maxlen: 24
                          209.35.177.0/24 maxlen: 24
                          209.35.179.0/24 maxlen: 24
                          209.35.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b9:aa:03:30:45:8b:a3:ab:2e:a5:e2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=edecac80-d7c3-48ad-8738-ec98e8c08265
        Validity
            Not Before: May  3 01:00:47 2025 GMT
            Not After : Aug  1 01:00:47 2025 GMT
        Subject: CN=1ed79e25-7701-4233-9dc3-97b75199b83a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:cf:96:ae:55:51:26:fd:28:c8:cd:8f:08:72:
                    f5:b5:8e:92:85:41:58:d5:f0:3f:2b:c5:82:d2:f5:
                    7c:52:b3:50:c5:4c:00:f0:49:97:37:b8:82:50:d5:
                    e7:92:5e:19:24:41:d7:81:a9:4a:2a:d6:a2:de:47:
                    ae:ea:4f:13:80:77:42:2b:2d:fb:6b:69:ff:50:e3:
                    85:b9:b7:a3:af:27:e3:e2:a7:cd:16:da:99:ec:39:
                    fa:42:72:2f:f1:9d:79:60:a9:11:fa:16:fb:2c:5c:
                    4a:67:cb:94:82:0b:95:2e:ce:b8:f5:08:62:6c:15:
                    8f:f4:b1:82:45:27:d7:5e:84:03:c7:cd:0f:ad:eb:
                    67:23:9a:cb:78:9e:92:e6:d4:9c:d2:18:1c:28:5e:
                    94:26:2d:aa:7b:ce:5a:d1:62:a7:f1:6d:53:7d:76:
                    ce:9f:80:ae:c9:b7:ed:ab:c9:3d:3c:dc:ba:8f:17:
                    41:b0:95:fe:45:3b:f3:2c:5a:f9:44:0f:4d:91:a4:
                    52:14:5a:14:28:b0:ca:77:ac:29:e7:a6:7c:3f:5a:
                    e5:e9:7c:36:3e:ac:33:20:88:7f:1b:10:9e:1e:20:
                    a0:94:d8:1b:4d:fd:ed:e8:9c:b1:b9:ae:cb:70:af:
                    62:0e:88:28:aa:3b:24:ee:7b:cb:d4:3d:97:f3:d9:
                    5a:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:52:F6:9A:52:FD:B3:97:2A:59:F0:1A:B7:AB:47:88:0B:D1:EB:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/41f68333-52c9-3f36-ba59-589d37e6bdf7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265/edecac80-d7c3-48ad-8738-ec98e8c08265.crl

            X509v3 Authority Key Identifier:
                keyid:2E:20:36:CA:D5:38:06:D3:8E:AD:50:81:EA:65:9C:73:93:A2:0D:09

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/edecac80-d7c3-48ad-8738-ec98e8c08265.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.35.176.0/23
                  209.35.179.0-209.35.180.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:af:e4:73:6d:48:1d:e7:ca:73:46:26:e3:a3:e1:f8:43:48:
         69:ae:70:b8:00:12:e6:8a:68:ba:18:5f:ed:53:5e:42:bb:aa:
         8b:54:41:b5:ca:bc:17:8b:98:4b:41:f9:f5:0e:1c:92:93:1a:
         44:05:48:03:6d:a8:ed:a5:d7:3f:dd:08:c0:62:87:e6:22:bd:
         4c:01:8a:d5:b5:75:a8:c8:69:0b:c0:ab:26:e6:59:2c:47:28:
         88:71:d9:26:c2:ad:45:8f:6a:a9:df:a7:a3:73:24:de:e7:c3:
         df:45:a2:23:29:7c:0b:c4:bb:10:b0:c9:66:14:ee:91:4c:06:
         bd:8b:f5:51:fc:b6:c5:fe:6e:7c:cc:b3:92:5f:e0:81:8c:86:
         b0:f8:44:1f:09:18:5b:2b:58:2b:41:2d:42:82:0f:e7:b7:86:
         19:ee:8b:e7:fe:1d:f1:52:05:d8:18:ac:19:83:01:5a:ac:f4:
         a9:fe:74:13:ba:d2:77:ed:56:26:ad:02:21:7f:b7:16:44:ba:
         d4:6b:7d:40:66:09:14:16:ed:4c:7e:80:18:d7:da:9a:9d:9f:
         00:5b:13:f6:d7:dd:7e:1e:57:eb:98:94:69:2e:93:6b:59:d3:
         27:7c:cf:cb:3e:38:da:9e:f8:57:a0:49:30:be:8c:9d:69:b0:
         de:0b:35:e4
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEm5qgMwRYujqy6l4kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWRlY2FjODAtZDdjMy00OGFkLTg3MzgtZWM5OGU4YzA4
MjY1MB4XDTI1MDUwMzAxMDA0N1oXDTI1MDgwMTAxMDA0N1owLzEtMCsGA1UEAxMk
MWVkNzllMjUtNzcwMS00MjMzLTlkYzMtOTdiNzUxOTliODNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqs+WrlVRJv0oyM2PCHL1tY6ShUFY1fA/K8WC
0vV8UrNQxUwA8EmXN7iCUNXnkl4ZJEHXgalKKtai3keu6k8TgHdCKy37a2n/UOOF
ubejryfj4qfNFtqZ7Dn6QnIv8Z15YKkR+hb7LFxKZ8uUgguVLs649QhibBWP9LGC
RSfXXoQDx80PretnI5rLeJ6S5tSc0hgcKF6UJi2qe85a0WKn8W1TfXbOn4Cuybft
q8k9PNy6jxdBsJX+RTvzLFr5RA9NkaRSFFoUKLDKd6wp56Z8P1rl6Xw2PqwzIIh/
GxCeHiCglNgbTf3t6Jyxua7LcK9iDogoqjsk7nvL1D2X89lapQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFElS9ppS/bOXKlnwGrerR4gL0esLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lZGVj
YWM4MC1kN2MzLTQ4YWQtODczOC1lYzk4ZThjMDgyNjUvNDFmNjgzMzMtNTJjOS0z
ZjM2LWJhNTktNTg5ZDM3ZTZiZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZWRlY2FjODAtZDdjMy00OGFkLTg3
MzgtZWM5OGU4YzA4MjY1L2VkZWNhYzgwLWQ3YzMtNDhhZC04NzM4LWVjOThlOGMw
ODI2NS5jcmwwHwYDVR0jBBgwFoAULiA2ytU4BtOOrVCB6mWcc5OiDQkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lZGVjYWM4MC1kN2MzLTQ4YWQtODczOC1lYzk4
ZThjMDgyNjUuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUAwQB0SOwMAwD
BADRI7MDBADRI7QwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEANa/kc21IHefKc0Ym46Ph+ENIaa5wuAAS5opo
uhhf7VNeQruqi1RBtcq8F4uYS0H59Q4ckpMaRAVIA22o7aXXP90IwGKH5iK9TAGK
1bV1qMhpC8CrJuZZLEcoiHHZJsKtRY9qqd+no3Mk3ufD30WiIyl8C8S7ELDJZhTu
kUwGvYv1Ufy2xf5ufMyzkl/ggYyGsPhEHwkYWytYK0EtQoIP57eGGe6L5/4d8VIF
2BisGYMBWqz0qf50E7rSd+1WJq0CIX+3FkS61Gt9QGYJFBbtTH6AGNfamp2fAFsT
9tfdfh5X65iUaS6Ta1nTJ3zPyz442p74V6BJML6MnWmw3gs15A==
-----END CERTIFICATE-----
Generated at Thu May 8 21:14:21 2025 by rpki-client