Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa
File:                     510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa (raw, json)
Hash identifier:          krYe2I+Hx0neTYbhC3bR4desBo9JYkYnFxoitFtDwlc=
Subject key identifier:   72:21:00:CC:6C:22:4D:01:AE:D3:81:04:3F:D4:09:C5:C5:05:B2:B5
Certificate issuer:       /CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
Certificate serial:       010D0C9F432858498769B9BF4B63ABE0E28BEE40
Authority key identifier: 0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     393990
IP address blocks:        192.33.167.0/24 maxlen: 24
                          192.160.255.0/24 maxlen: 24
                          2620:120:8000::/44 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b9:bf:4b:63:ab:e0:e2:8b:ee:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=acf21bfa-9b04-4b52-8af0-e0bcc99128d3
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=5b4e0342-1130-463b-ba60-20c130e15a39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:f4:5f:68:94:3e:6d:6e:a3:2b:3b:52:fc:c6:
                    c3:06:dd:c9:51:ad:8b:c7:2f:e2:ee:5b:5e:db:0b:
                    b5:0b:2a:9d:18:f6:7e:97:c6:a0:7b:61:3c:14:4b:
                    d5:fe:9e:f2:d9:11:0c:7f:31:3a:c4:cc:eb:dd:ea:
                    5f:e4:66:f6:54:8e:c2:a4:41:1d:f4:1b:e4:da:ea:
                    2c:34:5e:65:90:9a:93:7e:e1:53:fd:82:aa:99:e7:
                    1e:25:fa:dd:74:a1:28:d3:fc:e4:be:14:cc:9a:92:
                    40:74:89:02:19:2c:bf:6d:f2:54:56:48:eb:5a:06:
                    d5:4f:d6:2e:9f:27:3f:4c:8b:d6:6f:25:21:0f:ce:
                    6c:ed:e8:08:68:7f:e6:4d:e3:6c:b4:6d:bd:f0:e5:
                    9e:b4:a2:0b:f6:56:0e:0b:01:50:a3:3f:96:8f:1f:
                    55:e3:bf:e9:ac:39:5f:b4:e6:47:13:91:05:88:14:
                    e2:bb:f2:91:7d:9d:4a:03:23:88:cc:0e:26:9f:92:
                    6d:42:f6:2a:e8:bd:e4:7f:c9:39:29:46:d3:89:25:
                    c6:d5:35:c3:a7:aa:53:9f:ff:a8:fa:7a:b6:8a:0b:
                    c7:a4:4a:a6:1c:83:b3:b6:7f:6e:99:78:66:54:20:
                    1c:f6:35:48:2a:36:7e:38:99:27:72:b9:8b:d7:ae:
                    67:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:21:00:CC:6C:22:4D:01:AE:D3:81:04:3F:D4:09:C5:C5:05:B2:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/510c5dab-9904-3aa4-b96a-acb8cdc3d158.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.crl

            X509v3 Authority Key Identifier:
                keyid:0B:96:11:EE:76:93:CA:0A:2F:D7:E9:B1:D8:F5:01:A4:B0:CD:EE:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/acf21bfa-9b04-4b52-8af0-e0bcc99128d3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.33.167.0/24
                  192.160.255.0/24
                IPv6:
                  2620:120:8000::/44

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:52:8e:3c:ce:a2:6f:23:7f:ea:9c:67:f3:03:71:d1:4b:
         7e:12:03:83:b4:cd:71:77:7f:52:62:da:67:9c:9c:0c:5a:4e:
         6f:a2:a2:3d:14:df:da:57:ca:5f:af:7b:4b:28:bd:0a:50:de:
         89:4c:df:56:80:18:e0:de:18:d9:b9:2c:f6:e4:89:70:63:25:
         d1:c0:07:85:5e:cb:8b:2b:6f:3f:da:59:9d:a1:79:9a:df:28:
         50:bd:34:5b:29:c1:65:c8:c2:ac:e3:f5:f6:89:80:3b:7a:3c:
         99:d6:9f:a7:da:27:63:1c:a1:77:44:f8:27:5c:bd:2c:da:f2:
         15:2e:3e:69:15:65:61:5b:68:03:3d:04:e8:d4:71:10:dc:d5:
         34:e1:55:c7:44:e2:e2:30:f2:ab:00:4d:24:46:06:6e:cd:1d:
         76:4e:77:c9:ce:70:ac:b8:a0:9d:13:25:a8:57:03:3b:34:8e:
         41:87:39:da:26:7c:e1:d2:d8:1b:25:09:5b:32:a1:36:e6:3b:
         aa:24:79:66:d8:c9:93:c2:14:fc:7a:9b:f2:a2:f6:6c:27:56:
         c5:3a:cd:c1:8c:cd:c0:d5:fb:57:24:d7:58:8c:01:f3:e3:b2:
         f2:15:e4:3f:c3:64:14:01:42:8f:2c:f1:bf:16:92:a9:7b:6c:
         e4:ec:d2:bc
-----BEGIN CERTIFICATE-----
MIIGWjCCBUKgAwIBAgIUAQ0Mn0MoWEmHabm/S2Or4OKL7kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWNmMjFiZmEtOWIwNC00YjUyLThhZjAtZTBiY2M5OTEy
OGQzMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
NWI0ZTAzNDItMTEzMC00NjNiLWJhNjAtMjBjMTMwZTE1YTM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4PRfaJQ+bW6jKztS/MbDBt3JUa2Lxy/i7lte
2wu1CyqdGPZ+l8age2E8FEvV/p7y2REMfzE6xMzr3epf5Gb2VI7CpEEd9Bvk2uos
NF5lkJqTfuFT/YKqmeceJfrddKEo0/zkvhTMmpJAdIkCGSy/bfJUVkjrWgbVT9Yu
nyc/TIvWbyUhD85s7egIaH/mTeNstG298OWetKIL9lYOCwFQoz+Wjx9V47/prDlf
tOZHE5EFiBTiu/KRfZ1KAyOIzA4mn5JtQvYq6L3kf8k5KUbTiSXG1TXDp6pTn/+o
+nq2igvHpEqmHIOztn9umXhmVCAc9jVIKjZ+OJkncrmL165nOwIDAQABo4IDbDCC
A2gwHQYDVR0OBBYEFHIhAMxsIk0BrtOBBD/UCcXFBbK1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hY2Yy
MWJmYS05YjA0LTRiNTItOGFmMC1lMGJjYzk5MTI4ZDMvNTEwYzVkYWItOTkwNC0z
YWE0LWI5NmEtYWNiOGNkYzNkMTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWNmMjFiZmEtOWIwNC00YjUyLThh
ZjAtZTBiY2M5OTEyOGQzL2FjZjIxYmZhLTliMDQtNGI1Mi04YWYwLWUwYmNjOTkx
MjhkMy5jcmwwHwYDVR0jBBgwFoAUC5YR7naTygov1+mx2PUBpLDN7gUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hY2YyMWJmYS05YjA0LTRiNTItOGFmMC1lMGJj
Yzk5MTI4ZDMuY2VyMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQAwCGnAwQA
wKD/MA8EAgACMAkDBwQmIAEggAAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6
MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBr
aS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAe/FSjjzOom8jf+qcZ/MDcdFL
fhIDg7TNcXd/UmLaZ5ycDFpOb6KiPRTf2lfKX697Syi9ClDeiUzfVoAY4N4Y2bks
9uSJcGMl0cAHhV7LiytvP9pZnaF5mt8oUL00WynBZcjCrOP19omAO3o8mdafp9on
Yxyhd0T4J1y9LNryFS4+aRVlYVtoAz0E6NRxENzVNOFVx0Ti4jDyqwBNJEYGbs0d
dk53yc5wrLignRMlqFcDOzSOQYc52iZ84dLYGyUJWzKhNuY7qiR5ZtjJk8IU/Hqb
8qL2bCdWxTrNwYzNwNX7VyTXWIwB8+Oy8hXkP8NkFAFCjyzxvxaSqXts5OzSvA==
-----END CERTIFICATE-----
Generated at Wed May 14 02:47:21 2025 by rpki-client