Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
File:                     f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa (raw, json)
Hash identifier:          3U+HTugxXy6Yf+4r5EjkfeVWIQfSx5dj9zD8EThZgig=
Subject key identifier:   E1:C4:B3:26:09:22:4A:7B:74:08:C2:DF:C2:57:DE:61:EE:79:C9:CD
Certificate issuer:       /CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
Certificate serial:       010D0C9F43285849912F2C5BB5E137DFFC744500
Authority key identifier: 90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa
Signing time:             Fri 18 Apr 2025 13:00:59 +0000
ROA not before:           Fri 18 Apr 2025 13:00:59 +0000
ROA not after:            Thu 17 Jul 2025 13:00:59 +0000
asID:                     14618
IP address blocks:        216.205.53.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 06 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:91:2f:2c:5b:b5:e1:37:df:fc:74:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a3b6948d-3ee1-4153-9c40-1cd7465bea2b
        Validity
            Not Before: Apr 18 13:00:59 2025 GMT
            Not After : Jul 17 13:00:59 2025 GMT
        Subject: CN=b899e4a0-eb95-4053-b69d-1dc41213df5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a2:08:46:5b:50:cc:d4:60:f0:3d:70:4c:8c:
                    24:12:d1:91:d7:29:44:d6:a7:16:f5:6f:d4:3b:c0:
                    6a:0a:3b:ef:fa:f1:bc:e4:07:24:bc:ea:7b:88:ad:
                    07:68:19:b3:21:3b:38:b0:bd:1b:81:7c:b8:41:56:
                    75:55:66:e4:3d:77:d6:a4:3f:5e:33:b2:61:ce:fd:
                    50:96:66:ee:25:89:b5:4d:65:34:7f:8b:3e:a2:91:
                    19:d5:0f:d3:83:be:9d:dc:07:d5:ef:ca:e9:83:5a:
                    de:27:1d:20:4b:1a:6b:45:b1:6e:90:93:8f:bd:f1:
                    09:d4:c8:70:1b:5a:75:f3:48:b8:6e:67:ee:c1:11:
                    a9:4e:ae:1d:40:d3:16:28:ce:64:f6:cf:11:19:e3:
                    ea:d8:0c:c0:bb:a4:cc:e8:d4:5a:d2:66:d8:93:9a:
                    37:2c:ae:8d:ce:c4:74:31:ba:71:d0:cb:1d:90:dc:
                    58:d1:3f:ea:3c:f0:0f:02:be:8f:90:af:77:fb:da:
                    b6:fe:7f:c8:84:7f:a3:11:36:46:20:af:7e:fe:dd:
                    48:6d:b2:15:95:98:54:46:a8:53:b8:e9:fd:b5:26:
                    4d:4f:0e:0b:de:f7:46:e4:01:e5:d3:78:74:5c:b0:
                    45:6f:01:20:fe:29:95:24:df:d6:cd:1b:ad:9f:92:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:C4:B3:26:09:22:4A:7B:74:08:C2:DF:C2:57:DE:61:EE:79:C9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/f0a7c79b-b938-3f9d-9e12-7f47c3ee5a46.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.crl

            X509v3 Authority Key Identifier:
                keyid:90:8D:6E:3D:A8:3C:E5:E7:6B:D5:3D:68:92:0F:67:5B:A6:D6:3E:4A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a3b6948d-3ee1-4153-9c40-1cd7465bea2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.205.53.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:e6:11:1a:75:db:fe:8d:14:a7:d0:e1:9a:ed:af:94:0d:fd:
         42:47:1a:64:b5:4a:1e:e8:0b:2d:c4:3a:9d:50:6e:68:38:e2:
         79:b5:9e:fe:be:61:f2:12:43:74:a0:1b:f0:df:fa:76:fe:32:
         cb:84:99:6d:ce:d6:05:05:8f:2b:7a:9b:ab:4e:e7:9b:21:41:
         61:57:9f:f3:cd:80:c6:f0:a1:39:6e:3e:f7:cf:57:38:5f:24:
         02:c9:1b:cb:6f:c9:d8:3f:91:1b:1d:40:6e:f4:aa:fc:62:7c:
         fe:da:60:4b:3a:53:88:a2:7b:d9:dc:65:42:25:35:0b:67:f3:
         7d:78:a0:5a:4a:fc:08:40:02:73:40:cc:7d:97:6e:0f:c1:08:
         88:83:f8:bc:2e:ce:f5:9a:2c:da:eb:80:23:f9:8d:02:ed:a8:
         e7:7d:d1:19:0a:1b:50:2b:12:0e:34:21:18:c7:39:85:72:c6:
         15:a6:9a:7c:6c:21:93:b8:8b:51:e8:7a:74:0c:e8:5b:47:a6:
         b6:ef:7a:5e:56:9d:27:fa:93:2c:f6:1b:8b:95:a4:17:c3:6e:
         d0:39:21:e2:cc:97:00:a4:19:81:6e:28:d6:da:cf:70:4b:30:
         db:76:46:94:ca:c1:7d:74:d1:86:3a:84:33:70:92:b2:89:40:
         10:44:e1:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmRLyxbteE33/x0RQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTNiNjk0OGQtM2VlMS00MTUzLTljNDAtMWNkNzQ2NWJl
YTJiMB4XDTI1MDQxODEzMDA1OVoXDTI1MDcxNzEzMDA1OVowLzEtMCsGA1UEAxMk
Yjg5OWU0YTAtZWI5NS00MDUzLWI2OWQtMWRjNDEyMTNkZjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgKIIRltQzNRg8D1wTIwkEtGR1ylE1qcW9W/U
O8BqCjvv+vG85AckvOp7iK0HaBmzITs4sL0bgXy4QVZ1VWbkPXfWpD9eM7Jhzv1Q
lmbuJYm1TWU0f4s+opEZ1Q/Tg76d3AfV78rpg1reJx0gSxprRbFukJOPvfEJ1Mhw
G1p180i4bmfuwRGpTq4dQNMWKM5k9s8RGePq2AzAu6TM6NRa0mbYk5o3LK6NzsR0
Mbpx0MsdkNxY0T/qPPAPAr6PkK93+9q2/n/IhH+jETZGIK9+/t1IbbIVlZhURqhT
uOn9tSZNTw4L3vdG5AHl03h0XLBFbwEg/imVJN/WzRutn5KCLwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOHEsyYJIkp7dAjC38JX3mHuecnNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2
OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3NDY1YmVhMmIvZjBhN2M3OWItYjkzOC0z
ZjlkLTllMTItN2Y0N2MzZWU1YTQ2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTNiNjk0OGQtM2VlMS00MTUzLTlj
NDAtMWNkNzQ2NWJlYTJiL2EzYjY5NDhkLTNlZTEtNDE1My05YzQwLTFjZDc0NjVi
ZWEyYi5jcmwwHwYDVR0jBBgwFoAUkI1uPag85edr1T1okg9nW6bWPkowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hM2I2OTQ4ZC0zZWUxLTQxNTMtOWM0MC0xY2Q3
NDY1YmVhMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2M01MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvmERp12/6NFKfQ4Zrtr5QN/UJHGmS1Sh7oCy3EOp1Qbmg44nm1nv6+
YfISQ3SgG/Df+nb+MsuEmW3O1gUFjyt6m6tO55shQWFXn/PNgMbwoTluPvfPVzhf
JALJG8tvydg/kRsdQG70qvxifP7aYEs6U4iie9ncZUIlNQtn8314oFpK/AhAAnNA
zH2Xbg/BCIiD+LwuzvWaLNrrgCP5jQLtqOd90RkKG1ArEg40IRjHOYVyxhWmmnxs
IZO4i1HoenQM6FtHprbvel5WnSf6kyz2G4uVpBfDbtA5IeLMlwCkGYFuKNbaz3BL
MNt2RpTKwX100YY6hDNwkrKJQBBE4aQ=
-----END CERTIFICATE-----
Generated at Mon May 5 08:43:31 2025 by rpki-client