Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
File:                     20d1212e-4550-3264-be13-ddc23d320d75.roa (raw, json)
Hash identifier:          eH3mmIfIcAqLHhiX6JW8ORmWm2+ubInUlaO6VusHDPg=
Subject key identifier:   22:15:63:43:C5:F7:1C:FE:6C:A6:1F:69:EF:6B:C9:20:7C:33:D9:3F
Certificate issuer:       /CN=fab93855-2977-4ee8-a66b-a46aa3059782
Certificate serial:       010D0C9F432858498CFF106F7B5FBFB13D7D5990
Authority key identifier: 30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     63355
IP address blocks:        142.202.44.0/24 maxlen: 24
                          208.79.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:10:6f:7b:5f:bf:b1:3d:7d:59:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fab93855-2977-4ee8-a66b-a46aa3059782
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=365584fd-5216-48da-98e7-8d51a0d021c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:92:61:81:01:98:6c:8c:a8:cf:d4:5d:1b:20:
                    9f:4f:6a:a6:b7:6f:d7:b7:ee:56:d0:80:e2:e6:61:
                    88:23:61:ff:f6:eb:6f:dd:c1:df:e2:26:a0:74:7d:
                    2d:f9:ab:b5:b3:5e:f1:ef:e9:93:ff:63:13:1f:fe:
                    0d:d6:cd:2a:bd:a0:fb:6e:ef:75:89:ce:1b:58:4b:
                    34:d9:69:a6:6f:99:48:fb:50:22:00:de:49:cd:0f:
                    f4:4d:c2:17:07:b4:f0:2d:08:4a:b2:37:91:5f:b8:
                    b3:5e:b3:85:84:3c:04:44:42:27:1d:0f:ac:2e:30:
                    39:6e:11:a5:08:99:e4:74:04:da:4a:70:b4:bb:63:
                    35:ab:df:a3:6b:89:a1:07:0d:16:07:9a:10:58:c8:
                    2a:c6:b9:e8:c4:3d:04:03:ed:7e:27:89:93:f9:03:
                    aa:ee:88:33:7c:8d:d3:cb:a2:d1:07:e9:96:08:7b:
                    40:d9:bd:e8:5f:e9:f6:fe:bc:fa:bb:3f:69:98:f9:
                    f5:77:50:24:d3:2e:b6:70:82:9d:8d:0a:f9:3d:5c:
                    67:da:07:d6:2f:de:74:9c:5e:e2:42:09:36:6e:d4:
                    c8:e1:06:9e:13:e8:14:67:82:20:df:85:4e:9d:88:
                    f0:7d:d1:a5:ce:67:f1:60:6a:43:d8:7c:c7:84:c9:
                    be:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:15:63:43:C5:F7:1C:FE:6C:A6:1F:69:EF:6B:C9:20:7C:33:D9:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/20d1212e-4550-3264-be13-ddc23d320d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782/fab93855-2977-4ee8-a66b-a46aa3059782.crl

            X509v3 Authority Key Identifier:
                keyid:30:F9:55:E2:F9:76:AE:70:1A:88:E1:00:7B:67:BB:5E:E4:46:D1:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/fab93855-2977-4ee8-a66b-a46aa3059782.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.44.0/24
                  208.79.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:ee:83:78:94:9c:a6:e0:b1:6b:9a:d1:b3:e6:ac:8f:5f:f5:
         56:a3:f4:96:00:b1:8e:a3:c7:f4:b1:90:5c:4b:64:2a:97:48:
         36:57:a6:00:78:fb:62:38:5a:ee:51:ff:d1:e8:34:13:9e:c2:
         6f:3a:0b:85:a4:02:0e:84:96:b4:26:83:7e:24:59:fa:ee:3a:
         8e:6e:15:af:c7:7f:da:0d:14:0f:47:15:6f:38:ea:68:27:4e:
         60:b0:1b:a4:c8:35:ac:5a:bc:69:1a:b4:6a:37:a3:83:eb:e0:
         00:bd:da:c8:a1:20:ad:16:f2:57:a9:2b:16:fd:3e:b5:be:5a:
         9f:d4:00:39:03:49:ab:25:f2:f7:7d:79:6d:7d:be:97:c8:65:
         86:c4:ce:60:ac:b5:98:76:ba:70:49:58:20:53:30:63:d0:1b:
         2a:16:03:72:79:72:2b:b1:23:fc:f6:51:e0:e2:57:2f:6d:7e:
         b4:89:c7:c1:fe:9b:03:ad:d4:c9:c8:f5:04:5e:f1:de:1a:24:
         d2:63:a9:19:63:99:ae:ad:1c:3a:92:8b:a7:fa:fe:cf:93:14:
         66:55:87:47:91:aa:96:bc:73:19:e8:1c:82:e1:72:fa:dc:95:
         50:02:9a:70:b2:2e:43:96:82:3f:7c:02:77:43:4c:87:fa:09:
         8a:b6:db:55
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmM/xBve1+/sT19WZAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmFiOTM4NTUtMjk3Ny00ZWU4LWE2NmItYTQ2YWEzMDU5
NzgyMB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
MzY1NTg0ZmQtNTIxNi00OGRhLTk4ZTctOGQ1MWEwZDAyMWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuZJhgQGYbIyoz9RdGyCfT2qmt2/Xt+5W0IDi
5mGII2H/9utv3cHf4iagdH0t+au1s17x7+mT/2MTH/4N1s0qvaD7bu91ic4bWEs0
2Wmmb5lI+1AiAN5JzQ/0TcIXB7TwLQhKsjeRX7izXrOFhDwEREInHQ+sLjA5bhGl
CJnkdATaSnC0u2M1q9+ja4mhBw0WB5oQWMgqxrnoxD0EA+1+J4mT+QOq7ogzfI3T
y6LRB+mWCHtA2b3oX+n2/rz6uz9pmPn1d1Ak0y62cIKdjQr5PVxn2gfWL950nF7i
Qgk2btTI4QaeE+gUZ4Ig34VOnYjwfdGlzmfxYGpD2HzHhMm+2wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFCIVY0PF9xz+bKYfae9rySB8M9k/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9mYWI5
Mzg1NS0yOTc3LTRlZTgtYTY2Yi1hNDZhYTMwNTk3ODIvMjBkMTIxMmUtNDU1MC0z
MjY0LWJlMTMtZGRjMjNkMzIwZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZmFiOTM4NTUtMjk3Ny00ZWU4LWE2
NmItYTQ2YWEzMDU5NzgyL2ZhYjkzODU1LTI5NzctNGVlOC1hNjZiLWE0NmFhMzA1
OTc4Mi5jcmwwHwYDVR0jBBgwFoAUMPlV4vl2rnAaiOEAe2e7XuRG0TowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9mYWI5Mzg1NS0yOTc3LTRlZTgtYTY2Yi1hNDZh
YTMwNTk3ODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjsosAwQA
0E+LMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAHXug3iUnKbgsWua0bPmrI9f9Vaj9JYAsY6jx/SxkFxLZCqX
SDZXpgB4+2I4Wu5R/9HoNBOewm86C4WkAg6ElrQmg34kWfruOo5uFa/Hf9oNFA9H
FW846mgnTmCwG6TINaxavGkatGo3o4Pr4AC92sihIK0W8lepKxb9PrW+Wp/UADkD
Sasl8vd9eW19vpfIZYbEzmCstZh2unBJWCBTMGPQGyoWA3J5ciuxI/z2UeDiVy9t
frSJx8H+mwOt1MnI9QRe8d4aJNJjqRljma6tHDqSi6f6/s+TFGZVh0eRqpa8cxno
HILhcvrclVACmnCyLkOWgj98AndDTIf6CYq221U=
-----END CERTIFICATE-----
Generated at Mon May 12 03:53:17 2025 by rpki-client