Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
File:                     68c3e179-83ba-37b3-a535-05d541d0cf2b.roa (raw, json)
Hash identifier:          7NfZJCB7xnaybRzhtzZdfRwJ+3/9yCitNYN22k3kADI=
Subject key identifier:   C1:D1:E2:F3:40:DE:BE:72:0D:CC:07:65:A3:BB:9E:9B:2E:9B:F5:CC
Certificate issuer:       /CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
Certificate serial:       010D0C9F43285849BF3F62F365829E481A3DAC80
Authority key identifier: 3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33739
IP address blocks:        204.16.33.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:62:f3:65:82:9e:48:1a:3d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a5013bd8-fc34-4ad4-8dc8-516bdd8bc765
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=10d677ec-4ddb-4ab7-a819-a21c6845acd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:07:52:cb:f0:e7:ad:de:7e:e0:a9:c8:79:c7:
                    0b:3b:ae:61:f1:0c:f3:24:50:11:b2:bb:3f:3e:72:
                    ac:18:da:35:4b:0e:de:c6:84:00:48:ae:7a:39:68:
                    94:15:05:5e:f3:94:4e:e1:2f:ac:aa:92:85:ab:3c:
                    bc:15:27:17:4d:73:23:02:81:21:92:cf:e0:f7:2e:
                    04:a8:88:5a:1a:08:d0:19:7b:c6:a3:93:b2:e5:4b:
                    1e:bc:ae:06:d4:36:da:82:2a:11:a8:2c:3c:83:8c:
                    68:7d:48:91:17:4c:e9:74:4a:ce:3d:48:27:85:2f:
                    89:b1:d1:e0:1a:d9:a8:54:23:51:02:b3:a3:3d:7e:
                    b1:ad:12:15:9c:f9:51:43:52:02:1f:37:60:6d:04:
                    a9:c8:a2:b8:19:07:64:a3:35:bb:d3:16:91:28:6c:
                    29:e8:d8:cc:7a:41:67:7f:93:93:ae:29:99:4f:23:
                    00:7d:e0:64:f0:7b:b6:30:73:ae:57:a4:7d:7b:77:
                    52:aa:0f:a3:85:86:fb:27:5b:35:62:7b:c9:7a:63:
                    66:28:58:ac:1d:f4:f7:80:c2:da:29:e6:35:0e:60:
                    ad:e6:a2:76:9d:57:58:93:f5:45:48:0b:b6:3d:e9:
                    3a:36:dc:f6:f7:44:91:b9:7e:3f:3a:76:cc:12:cb:
                    3e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:D1:E2:F3:40:DE:BE:72:0D:CC:07:65:A3:BB:9E:9B:2E:9B:F5:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/68c3e179-83ba-37b3-a535-05d541d0cf2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.crl

            X509v3 Authority Key Identifier:
                keyid:3C:D1:9E:69:77:A5:96:FF:7A:1C:C6:7B:50:98:68:49:55:CF:4B:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/a5013bd8-fc34-4ad4-8dc8-516bdd8bc765.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.16.33.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1e:42:57:eb:ee:d4:9e:20:a4:1c:b0:c1:ac:dd:04:d6:f8:bc:
         4a:d5:a8:84:0a:9c:d7:a4:9e:30:39:61:6e:80:11:27:91:07:
         d2:e6:f4:1a:21:86:9d:fd:3a:1a:8b:52:90:02:25:72:d0:35:
         52:62:e6:ce:b0:4e:fa:05:25:6f:1a:18:ca:9f:d9:bd:82:48:
         c4:9d:da:79:b2:f8:83:aa:38:3f:6f:63:83:f2:40:0f:ba:ca:
         b0:8d:d2:39:3a:78:58:3b:0c:e2:d8:cf:11:0f:95:55:cb:1b:
         ec:d3:a6:73:b5:14:f5:7f:a7:3b:5e:a9:94:bc:97:1e:b5:4a:
         c2:c9:cd:ec:8f:4c:93:e0:c2:fe:7c:74:37:92:1b:ae:95:1b:
         0d:b0:86:7d:a0:02:4e:90:d6:0e:62:9f:9f:d2:15:f3:82:15:
         5e:e3:b4:82:3b:36:05:20:56:a3:27:90:60:ad:78:98:68:d9:
         a4:7c:87:cc:fb:cd:99:39:32:70:04:0e:6f:fb:96:53:28:b9:
         7f:27:75:11:c8:48:45:44:78:11:8e:0d:ac:08:57:e2:17:12:
         85:5b:d6:5f:c0:dd:d8:bc:fc:f3:ba:0f:70:fd:35:0a:ae:d5:
         4b:a8:31:8a:ff:b4:f9:24:43:61:40:a1:4f:d7:3c:63:40:68:
         05:89:41:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P2LzZYKeSBo9rIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUwMTNiZDgtZmMzNC00YWQ0LThkYzgtNTE2YmRkOGJj
NzY1MB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MTBkNjc3ZWMtNGRkYi00YWI3LWE4MTktYTIxYzY4NDVhY2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyAdSy/Dnrd5+4KnIeccLO65h8QzzJFARsrs/
PnKsGNo1Sw7exoQASK56OWiUFQVe85RO4S+sqpKFqzy8FScXTXMjAoEhks/g9y4E
qIhaGgjQGXvGo5Oy5UsevK4G1DbagioRqCw8g4xofUiRF0zpdErOPUgnhS+JsdHg
GtmoVCNRArOjPX6xrRIVnPlRQ1ICHzdgbQSpyKK4GQdkozW70xaRKGwp6NjMekFn
f5OTrimZTyMAfeBk8Hu2MHOuV6R9e3dSqg+jhYb7J1s1YnvJemNmKFisHfT3gMLa
KeY1DmCt5qJ2nVdYk/VFSAu2Pek6Ntz290SRuX4/OnbMEss+1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMHR4vNA3r5yDcwHZaO7npsum/XMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAx
M2JkOC1mYzM0LTRhZDQtOGRjOC01MTZiZGQ4YmM3NjUvNjhjM2UxNzktODNiYS0z
N2IzLWE1MzUtMDVkNTQxZDBjZjJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYTUwMTNiZDgtZmMzNC00YWQ0LThk
YzgtNTE2YmRkOGJjNzY1L2E1MDEzYmQ4LWZjMzQtNGFkNC04ZGM4LTUxNmJkZDhi
Yzc2NS5jcmwwHwYDVR0jBBgwFoAUPNGeaXellv96HMZ7UJhoSVXPS6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9hNTAxM2JkOC1mYzM0LTRhZDQtOGRjOC01MTZi
ZGQ4YmM3NjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzBAhMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB5CV+vu1J4gpBywwazdBNb4vErVqIQKnNeknjA5YW6AESeRB9Lm9Boh
hp39OhqLUpACJXLQNVJi5s6wTvoFJW8aGMqf2b2CSMSd2nmy+IOqOD9vY4PyQA+6
yrCN0jk6eFg7DOLYzxEPlVXLG+zTpnO1FPV/pzteqZS8lx61SsLJzeyPTJPgwv58
dDeSG66VGw2whn2gAk6Q1g5in5/SFfOCFV7jtII7NgUgVqMnkGCteJho2aR8h8z7
zZk5MnAEDm/7llMouX8ndRHISEVEeBGODawIV+IXEoVb1l/A3di8/PO6D3D9NQqu
1UuoMYr/tPkkQ2FAoU/XPGNAaAWJQYc=
-----END CERTIFICATE-----
Generated at Sat May 10 09:47:21 2025 by rpki-client