Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
File:                     d681baca-275f-3528-8cb6-64dd19384edb.roa (raw, json)
Hash identifier:          7D99R940Xf2t78+Bt5xlZg6aPtQf6JUye+DMTqpTvrY=
Subject key identifier:   92:66:D1:4C:8B:86:19:14:2A:24:26:2B:DB:F8:5C:DE:F0:EA:16:2A
Certificate issuer:       /CN=91518d14-585e-444c-bf2c-92e2195ab178
Certificate serial:       010D0C9F432858499829D7306F54FD1B3F75A840
Authority key identifier: 1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     25700
IP address blocks:        204.8.32.0/22 maxlen: 24
                          204.13.164.0/22 maxlen: 24
                          204.15.224.0/21 maxlen: 24
                          208.99.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:d7:30:6f:54:fd:1b:3f:75:a8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91518d14-585e-444c-bf2c-92e2195ab178
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=b0389171-1fcc-4d98-8819-3f38f63995ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ee:87:1e:3e:b7:3e:8c:1a:d9:a0:1a:35:77:
                    99:a2:d8:fb:f4:89:7d:10:4a:f5:03:04:f8:08:c8:
                    56:f6:a9:aa:d5:78:49:35:91:31:16:f8:58:80:29:
                    e8:99:e8:a6:53:5c:4e:a5:a8:26:23:6d:0c:6e:9d:
                    b9:3f:d1:87:c3:71:b5:52:a1:9b:d4:98:2c:48:19:
                    b3:9e:30:9d:82:33:df:a0:46:1f:44:e8:c4:8d:db:
                    69:90:15:bc:3f:1f:42:3f:78:63:04:4b:66:d5:30:
                    ae:84:c9:72:7e:db:1e:db:9a:2f:f1:b3:ac:bd:a7:
                    ee:01:6a:32:9d:f8:c2:c8:ba:24:e7:b6:6c:c9:bc:
                    8f:a9:9b:e3:33:c9:24:2b:85:f4:63:a4:4a:cc:3d:
                    fd:b3:cd:5b:61:2e:b1:80:c4:e3:8a:cb:ee:44:57:
                    f2:1b:90:87:02:0b:cd:44:19:84:43:75:af:4a:b1:
                    9a:42:f7:c4:c8:ae:b1:21:6a:3a:7a:f4:2f:51:87:
                    06:d9:d5:d2:5e:74:f3:c7:24:1f:4b:5a:b9:e5:68:
                    ca:43:0c:b8:ed:6b:7f:97:28:c2:3e:d3:32:ba:3a:
                    bd:3a:5b:6d:62:da:a4:2e:99:e6:06:19:d0:85:b3:
                    64:62:44:e7:31:1b:a2:28:c2:2d:e5:c3:52:aa:25:
                    a6:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:66:D1:4C:8B:86:19:14:2A:24:26:2B:DB:F8:5C:DE:F0:EA:16:2A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/d681baca-275f-3528-8cb6-64dd19384edb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178/91518d14-585e-444c-bf2c-92e2195ab178.crl

            X509v3 Authority Key Identifier:
                keyid:1D:E6:7D:B1:E0:15:C8:AE:DF:B6:FE:96:9B:CE:8C:25:E8:5E:11:CA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91518d14-585e-444c-bf2c-92e2195ab178.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.8.32.0/22
                  204.13.164.0/22
                  204.15.224.0/21
                  208.99.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:90:a0:69:00:74:3e:37:41:0a:f1:0d:e1:1e:02:86:7f:00:
         7a:52:5e:60:98:14:15:e4:59:26:07:1d:fd:1d:41:fd:e9:9e:
         68:63:6a:7f:6d:ef:f3:fa:8a:82:b8:d5:de:f6:61:2b:96:13:
         bc:99:b7:15:46:21:31:00:4a:8a:70:89:85:a1:4c:f4:f7:d5:
         c8:62:65:e0:01:60:f2:d5:32:1e:a8:4a:cd:b7:55:8f:91:9a:
         53:a7:0b:5d:0a:8d:1c:06:5f:75:92:3d:c4:bf:6c:c3:90:7c:
         cd:b3:7d:71:b8:04:56:c0:e1:b9:96:3f:18:fa:cc:cf:cd:b3:
         8c:63:8f:53:19:25:8e:fe:87:93:f8:d6:82:3e:ec:b7:05:c4:
         d0:c9:ce:3a:47:cf:e0:fe:0a:2f:c0:63:bf:4b:d2:ec:36:86:
         4e:90:ba:75:8c:71:87:19:58:4c:b9:13:7f:b6:d7:61:d4:14:
         d3:56:40:56:f2:23:d7:e7:2d:85:e6:a9:db:f4:0b:71:75:fe:
         97:bb:c1:1d:9f:ca:1b:eb:94:c6:d3:66:b4:ad:0d:dc:3e:03:
         4f:3f:2e:39:6e:6f:d9:7a:11:1e:7e:53:63:1f:8d:2d:6c:34:
         43:57:b6:bd:1c:d1:0b:e7:17:bb:10:00:62:65:2f:a6:45:32:
         68:dd:96:40
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEmYKdcwb1T9Gz91qEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1MThkMTQtNTg1ZS00NDRjLWJmMmMtOTJlMjE5NWFi
MTc4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
YjAzODkxNzEtMWZjYy00ZDk4LTg4MTktM2YzOGY2Mzk5NWFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu6HHj63Powa2aAaNXeZotj79Il9EEr1AwT4
CMhW9qmq1XhJNZExFvhYgCnomeimU1xOpagmI20Mbp25P9GHw3G1UqGb1JgsSBmz
njCdgjPfoEYfROjEjdtpkBW8Px9CP3hjBEtm1TCuhMlyftse25ov8bOsvafuAWoy
nfjCyLok57ZsybyPqZvjM8kkK4X0Y6RKzD39s81bYS6xgMTjisvuRFfyG5CHAgvN
RBmEQ3WvSrGaQvfEyK6xIWo6evQvUYcG2dXSXnTzxyQfS1q55WjKQwy47Wt/lyjC
PtMyujq9OlttYtqkLpnmBhnQhbNkYkTnMRuiKMIt5cNSqiWmFwIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFJJm0UyLhhkUKiQmK9v4XN7w6hYqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTUx
OGQxNC01ODVlLTQ0NGMtYmYyYy05MmUyMTk1YWIxNzgvZDY4MWJhY2EtMjc1Zi0z
NTI4LThjYjYtNjRkZDE5Mzg0ZWRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1MThkMTQtNTg1ZS00NDRjLWJm
MmMtOTJlMjE5NWFiMTc4LzkxNTE4ZDE0LTU4NWUtNDQ0Yy1iZjJjLTkyZTIxOTVh
YjE3OC5jcmwwHwYDVR0jBBgwFoAUHeZ9seAVyK7ftv6Wm86MJeheEcowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTUxOGQxNC01ODVlLTQ0NGMtYmYyYy05MmUy
MTk1YWIxNzguY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQCzAggAwQC
zA2kAwQDzA/gAwQF0GPAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBABWQoGkAdD43QQrxDeEeAoZ/AHpSXmCY
FBXkWSYHHf0dQf3pnmhjan9t7/P6ioK41d72YSuWE7yZtxVGITEASopwiYWhTPT3
1chiZeABYPLVMh6oSs23VY+RmlOnC10KjRwGX3WSPcS/bMOQfM2zfXG4BFbA4bmW
Pxj6zM/Ns4xjj1MZJY7+h5P41oI+7LcFxNDJzjpHz+D+Ci/AY79L0uw2hk6QunWM
cYcZWEy5E3+212HUFNNWQFbyI9fnLYXmqdv0C3F1/pe7wR2fyhvrlMbTZrStDdw+
A08/Ljlub9l6ER5+U2MfjS1sNENXtr0c0QvnF7sQAGJlL6ZFMmjdlkA=
-----END CERTIFICATE-----
Generated at Thu May 15 09:04:39 2025 by rpki-client