Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
File:                     016473cc-01cd-3366-bfcf-35691cae283c.roa (raw, json)
Hash identifier:          o5Nh5G39Q7Rvi6m8bjfS/UN4RArs4jTY/ffIn2YuAFc=
Subject key identifier:   59:14:0F:8F:C7:5D:EE:DA:D6:CA:1B:68:B1:AA:A7:B4:C1:91:38:70
Certificate issuer:       /CN=9a696f17-cb36-4b2b-be82-47f0c467096d
Certificate serial:       010D0C9F43285849C904F091B952808495782300
Authority key identifier: 38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa
Signing time:             Thu 08 May 2025 13:01:00 +0000
ROA not before:           Thu 08 May 2025 13:01:00 +0000
ROA not after:            Wed 06 Aug 2025 13:01:00 +0000
asID:                     46632
IP address blocks:        199.33.104.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c9:04:f0:91:b9:52:80:84:95:78:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9a696f17-cb36-4b2b-be82-47f0c467096d
        Validity
            Not Before: May  8 13:01:00 2025 GMT
            Not After : Aug  6 13:01:00 2025 GMT
        Subject: CN=508c5b72-58d5-4f6d-81f7-3871503f6a3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:33:c4:4e:66:be:74:26:8e:b2:a3:2a:b8:23:
                    d8:ac:16:6c:d4:e0:2f:83:fc:8e:c4:be:95:ad:e6:
                    17:33:ef:f0:83:c5:06:d2:f1:72:d3:a0:92:ef:86:
                    53:29:2c:68:08:05:e9:15:ab:c4:3a:33:09:d8:1a:
                    c8:c3:e1:30:38:e3:36:10:2c:44:f0:4a:90:34:d6:
                    c9:16:24:c6:69:33:66:87:8b:9d:4c:e1:e6:73:d4:
                    d2:25:dc:fd:4a:0e:b4:1d:ea:b9:d4:d8:ea:b4:e7:
                    c2:0d:61:4a:e5:01:29:9b:f3:da:f1:63:96:fd:94:
                    1d:eb:6c:42:4e:37:7f:df:55:b4:e7:8e:b1:88:98:
                    40:74:40:44:41:1b:a9:e8:1c:d6:b1:f0:b8:57:00:
                    82:8a:47:a4:d8:67:39:32:6c:3e:af:98:9d:55:c2:
                    d0:1c:74:c9:9e:62:05:8c:41:ef:b8:41:45:f7:f2:
                    c0:92:46:b4:e3:b5:62:39:af:b9:7e:e0:6b:bd:10:
                    09:da:53:0c:b6:46:14:a5:63:70:d5:7f:34:69:42:
                    f0:a6:3e:57:bd:41:87:7a:c0:24:28:c5:7f:94:72:
                    ee:85:7a:45:96:9f:14:72:4f:dd:6e:f8:64:af:55:
                    b4:03:1c:dc:bd:15:33:8d:8a:8a:d6:30:30:e9:aa:
                    7b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:14:0F:8F:C7:5D:EE:DA:D6:CA:1B:68:B1:AA:A7:B4:C1:91:38:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/016473cc-01cd-3366-bfcf-35691cae283c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d/9a696f17-cb36-4b2b-be82-47f0c467096d.crl

            X509v3 Authority Key Identifier:
                keyid:38:65:43:C4:A4:97:8B:F1:CC:D7:67:C1:50:02:FE:EF:BC:D4:AE:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/9a696f17-cb36-4b2b-be82-47f0c467096d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:54:24:d3:39:da:9b:d4:4e:70:b7:b4:1d:22:6c:28:76:
         df:47:45:f7:dd:fe:f5:1c:0f:98:a2:00:f9:79:b7:ee:86:c3:
         33:83:18:24:fa:e2:78:52:1c:09:e6:de:48:22:15:7d:f2:61:
         9b:d0:a0:ce:5f:c1:0e:6c:09:37:65:81:d8:c1:39:61:e1:05:
         ab:e1:ca:8f:29:f0:78:d8:04:10:70:5e:72:8d:27:8b:a1:d1:
         b2:33:65:12:bf:ed:70:4e:ce:7c:d7:cf:4f:e9:e0:f3:86:f9:
         28:2e:ab:9d:6f:31:44:00:05:3a:77:ab:da:c5:9d:60:fd:1c:
         74:24:ef:8b:18:c2:4f:d8:ff:95:aa:50:85:a6:a5:11:be:4a:
         c3:c4:e1:db:75:1a:76:0f:74:a5:84:91:eb:d6:2a:bc:bd:fb:
         d7:0d:b3:98:ec:17:f6:68:08:d0:da:10:71:28:41:88:75:af:
         b7:cc:8f:91:7c:a2:96:4b:cd:62:25:e3:a1:15:8f:94:35:fa:
         bb:2a:56:f1:6c:4f:cb:a2:bc:be:8e:d3:37:8e:a1:29:60:b5:
         07:00:b0:66:60:75:23:8e:4e:b2:de:8e:8e:1e:74:1b:fa:d7:
         29:9f:06:4c:38:da:18:15:aa:87:03:ef:92:54:1c:95:f0:2e:
         a4:f6:64:86
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnJBPCRuVKAhJV4IwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWE2OTZmMTctY2IzNi00YjJiLWJlODItNDdmMGM0Njcw
OTZkMB4XDTI1MDUwODEzMDEwMFoXDTI1MDgwNjEzMDEwMFowLzEtMCsGA1UEAxMk
NTA4YzViNzItNThkNS00ZjZkLTgxZjctMzg3MTUwM2Y2YTNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjPETma+dCaOsqMquCPYrBZs1OAvg/yOxL6V
reYXM+/wg8UG0vFy06CS74ZTKSxoCAXpFavEOjMJ2BrIw+EwOOM2ECxE8EqQNNbJ
FiTGaTNmh4udTOHmc9TSJdz9Sg60Heq51NjqtOfCDWFK5QEpm/Pa8WOW/ZQd62xC
Tjd/31W0546xiJhAdEBEQRup6BzWsfC4VwCCikek2Gc5Mmw+r5idVcLQHHTJnmIF
jEHvuEFF9/LAkka047ViOa+5fuBrvRAJ2lMMtkYUpWNw1X80aULwpj5XvUGHesAk
KMV/lHLuhXpFlp8Uck/dbvhkr1W0AxzcvRUzjYqK1jAw6ap7OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFkUD4/HXe7a1sobaLGqp7TBkThwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5
NmYxNy1jYjM2LTRiMmItYmU4Mi00N2YwYzQ2NzA5NmQvMDE2NDczY2MtMDFjZC0z
MzY2LWJmY2YtMzU2OTFjYWUyODNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvOWE2OTZmMTctY2IzNi00YjJiLWJl
ODItNDdmMGM0NjcwOTZkLzlhNjk2ZjE3LWNiMzYtNGIyYi1iZTgyLTQ3ZjBjNDY3
MDk2ZC5jcmwwHwYDVR0jBBgwFoAUOGVDxKSXi/HM12fBUAL+77zUroAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy85YTY5NmYxNy1jYjM2LTRiMmItYmU4Mi00N2Yw
YzQ2NzA5NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxyFoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7TVCTTOdqb1E5wt7QdImwodt9HRffd/vUcD5iiAPl5t+6GwzODGCT6
4nhSHAnm3kgiFX3yYZvQoM5fwQ5sCTdlgdjBOWHhBavhyo8p8HjYBBBwXnKNJ4uh
0bIzZRK/7XBOznzXz0/p4POG+Sguq51vMUQABTp3q9rFnWD9HHQk74sYwk/Y/5Wq
UIWmpRG+SsPE4dt1GnYPdKWEkevWKry9+9cNs5jsF/ZoCNDaEHEoQYh1r7fMj5F8
opZLzWIl46EVj5Q1+rsqVvFsT8uivL6O0zeOoSlgtQcAsGZgdSOOTrLejo4edBv6
1ymfBkw42hgVqocD75JUHJXwLqT2ZIY=
-----END CERTIFICATE-----
Generated at Sat May 10 10:12:00 2025 by rpki-client