Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
File:                     7f2d1f41-a628-3634-bde1-7eeda4689406.roa (raw, json)
Hash identifier:          +J2zneHoXqBZ0gLFmwpa5BNgXHp/CwIjEtEmAIAQTu8=
Subject key identifier:   21:84:86:0A:7F:60:F8:0D:C3:EC:E9:9F:50:CA:2D:F6:7E:94:12:DA
Certificate issuer:       /CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
Certificate serial:       010D0C9F43285849B3A2F6A8A475D82603F2CE00
Authority key identifier: 19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa
Signing time:             Wed 30 Apr 2025 21:11:52 +0000
ROA not before:           Wed 30 Apr 2025 21:11:52 +0000
ROA not after:            Tue 29 Jul 2025 21:11:52 +0000
asID:                     0
IP address blocks:        198.20.0.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b3:a2:f6:a8:a4:75:d8:26:03:f2:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11ee0436-2341-4fcc-9197-d4dc6cce847f
        Validity
            Not Before: Apr 30 21:11:52 2025 GMT
            Not After : Jul 29 21:11:52 2025 GMT
        Subject: CN=70ed0db4-f3b7-4431-a002-53e6c17c794b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:dd:c0:31:ec:7a:23:63:40:58:15:4c:94:0a:
                    23:ec:60:bb:ea:40:4c:7c:8a:ee:a1:49:8a:f4:eb:
                    6e:09:a4:7e:8f:5c:2c:9b:34:cf:a7:fe:d9:b5:5d:
                    01:ec:ac:5b:20:d3:2f:76:97:33:db:ca:09:da:34:
                    5b:ed:26:b4:db:db:9b:f8:0f:eb:46:ec:42:a0:d0:
                    ff:25:e7:0e:65:65:4e:78:b0:02:e9:79:eb:5a:c0:
                    fa:5a:6b:dc:c1:a9:ef:5d:3f:ee:0e:07:3e:6e:50:
                    35:a5:d9:95:f5:b9:b5:88:36:66:c8:a6:1a:77:be:
                    05:a9:59:43:90:a8:7b:8e:e1:b9:5e:63:fc:87:80:
                    54:d0:fe:b2:3e:f3:f9:87:fe:92:9b:d5:2c:ac:6a:
                    71:5d:de:82:08:99:3d:38:fd:bc:42:37:41:1b:80:
                    1b:3f:a7:ce:e6:63:5e:b0:0a:8c:37:89:cc:d0:9c:
                    2f:a3:4e:ab:51:36:39:92:86:5f:fe:5e:a5:1f:f8:
                    3f:14:21:9c:d4:e2:ab:9a:6b:34:7a:96:b9:9a:5a:
                    26:19:23:d6:26:32:d8:b9:17:89:7f:e0:94:84:d5:
                    58:ca:69:db:bc:c2:c5:49:4c:c9:02:22:d0:88:0b:
                    9d:36:03:99:f5:da:dd:9f:92:b9:2b:26:ce:3d:4f:
                    e8:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:84:86:0A:7F:60:F8:0D:C3:EC:E9:9F:50:CA:2D:F6:7E:94:12:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/7f2d1f41-a628-3634-bde1-7eeda4689406.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f/11ee0436-2341-4fcc-9197-d4dc6cce847f.crl

            X509v3 Authority Key Identifier:
                keyid:19:7A:BE:AD:ED:5F:CB:7D:47:33:C4:44:FE:0F:FE:2D:16:FB:9E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/11ee0436-2341-4fcc-9197-d4dc6cce847f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.20.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:93:d2:1b:79:c0:02:c4:c7:b5:e3:2d:45:a8:18:36:2d:c2:
         6a:ac:3c:81:6d:4d:5d:63:ac:5f:74:be:12:df:01:99:2c:4b:
         23:2f:2f:b2:34:19:fe:6b:f1:64:96:b9:02:61:8a:e8:5d:a2:
         a6:1b:b8:a2:0d:b2:c5:32:be:c1:05:32:eb:8d:a1:18:bd:53:
         46:67:c8:d4:e6:5d:3a:25:6d:14:af:33:92:79:01:22:96:f8:
         28:3f:5d:82:4b:8a:5c:8a:4f:e3:96:e0:2c:c7:63:fb:fa:f9:
         62:20:17:f0:8d:d1:ff:b8:23:2e:7b:4a:56:64:2b:39:49:c2:
         30:69:c0:18:d3:94:cb:6c:5f:98:c2:38:e6:83:78:05:59:92:
         2b:fb:c0:8e:bb:6d:32:c1:39:a2:7d:72:c1:f1:fe:21:c5:51:
         bc:16:d0:c2:df:6c:7f:27:fd:2e:1a:40:4f:1c:76:cb:8a:c7:
         af:62:35:d7:27:e8:1f:56:ff:62:8a:e5:6e:e5:8c:4f:74:c0:
         7d:cc:1e:47:3f:00:dc:8d:e7:02:60:83:8d:85:b0:60:85:78:
         00:49:a6:63:0a:d3:8d:c1:a9:9c:28:07:2d:52:e9:27:48:95:
         f7:54:85:d5:c3:92:fc:44:1a:4a:e9:3b:08:d5:9f:97:18:7f:
         c1:63:ce:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmzovaopHXYJgPyzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTFlZTA0MzYtMjM0MS00ZmNjLTkxOTctZDRkYzZjY2U4
NDdmMB4XDTI1MDQzMDIxMTE1MloXDTI1MDcyOTIxMTE1MlowLzEtMCsGA1UEAxMk
NzBlZDBkYjQtZjNiNy00NDMxLWEwMDItNTNlNmMxN2M3OTRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0N3AMex6I2NAWBVMlAoj7GC76kBMfIruoUmK
9OtuCaR+j1wsmzTPp/7ZtV0B7KxbINMvdpcz28oJ2jRb7Sa029ub+A/rRuxCoND/
JecOZWVOeLAC6XnrWsD6WmvcwanvXT/uDgc+blA1pdmV9bm1iDZmyKYad74FqVlD
kKh7juG5XmP8h4BU0P6yPvP5h/6Sm9UsrGpxXd6CCJk9OP28QjdBG4AbP6fO5mNe
sAqMN4nM0Jwvo06rUTY5koZf/l6lH/g/FCGc1OKrmms0epa5mlomGSPWJjLYuReJ
f+CUhNVYymnbvMLFSUzJAiLQiAudNgOZ9drdn5K5KybOPU/okQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGEhgp/YPgNw+zpn1DKLfZ+lBLaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVl
MDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRjNmNjZTg0N2YvN2YyZDFmNDEtYTYyOC0z
NjM0LWJkZTEtN2VlZGE0Njg5NDA2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMTFlZTA0MzYtMjM0MS00ZmNjLTkx
OTctZDRkYzZjY2U4NDdmLzExZWUwNDM2LTIzNDEtNGZjYy05MTk3LWQ0ZGM2Y2Nl
ODQ3Zi5jcmwwHwYDVR0jBBgwFoAUGXq+re1fy31HM8RE/g/+LRb7nhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xMWVlMDQzNi0yMzQxLTRmY2MtOTE5Ny1kNGRj
NmNjZTg0N2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxhQAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIST0ht5wALEx7XjLUWoGDYtwmqsPIFtTV1jrF90vhLfAZksSyMvL7I0
Gf5r8WSWuQJhiuhdoqYbuKINssUyvsEFMuuNoRi9U0ZnyNTmXTolbRSvM5J5ASKW
+Cg/XYJLilyKT+OW4CzHY/v6+WIgF/CN0f+4Iy57SlZkKzlJwjBpwBjTlMtsX5jC
OOaDeAVZkiv7wI67bTLBOaJ9csHx/iHFUbwW0MLfbH8n/S4aQE8cdsuKx69iNdcn
6B9W/2KK5W7ljE90wH3MHkc/ANyN5wJgg42FsGCFeABJpmMK043BqZwoBy1S6SdI
lfdUhdXDkvxEGkrpOwjVn5cYf8FjzvQ=
-----END CERTIFICATE-----
Generated at Tue May 13 00:57:54 2025 by rpki-client