Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
File:                     995df7fe-cb96-3240-811c-16a02c3703cb.roa (raw, json)
Hash identifier:          zghJpF8ConKA8L7POiStItu5deIxMdnf1QzJeQtGTXw=
Subject key identifier:   FF:C4:87:61:8C:0C:8A:89:0F:B1:72:BF:24:42:36:88:38:35:89:3A
Certificate issuer:       /CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
Certificate serial:       010D0C9F4328584A3B7AF9C790B00E74C1315780
Authority key identifier: B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     2648
IP address blocks:        198.177.182.0/24 maxlen: 24
                          198.200.151.0/24 maxlen: 24
                          199.104.104.0/24 maxlen: 24
                          199.104.105.0/24 maxlen: 24
                          204.145.202.0/24 maxlen: 24
                          204.228.170.0/24 maxlen: 24
                          204.228.175.0/24 maxlen: 24
                          204.228.176.0/24 maxlen: 24
                          204.228.177.0/24 maxlen: 24
                          204.228.178.0/24 maxlen: 24
                          204.228.179.0/24 maxlen: 24
                          204.228.180.0/24 maxlen: 24
                          204.228.181.0/24 maxlen: 24
                          204.228.182.0/24 maxlen: 24
                          204.228.183.0/24 maxlen: 24
                          204.228.184.0/24 maxlen: 24
                          204.228.185.0/24 maxlen: 24
                          204.228.186.0/24 maxlen: 24
                          204.228.187.0/24 maxlen: 24
                          204.228.188.0/24 maxlen: 24
                          204.228.189.0/24 maxlen: 24
                          204.228.190.0/24 maxlen: 24
                          204.228.191.0/24 maxlen: 24
                          204.238.94.0/24 maxlen: 24
                          204.238.123.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f9:c7:90:b0:0e:74:c1:31:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0339efaa-3121-4a82-8dd8-192f56ab47d1
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=7721c32b-857a-4f9b-8623-f7ad58d57f26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:42:7c:07:fd:9a:85:dd:1d:77:40:73:b5:19:
                    7d:1c:f4:c7:df:60:cf:93:32:78:34:b8:c6:d0:8b:
                    4f:91:56:7d:44:88:59:13:08:ef:a4:37:63:7e:81:
                    10:f5:d8:c4:b8:f1:9b:01:86:e7:57:25:1d:79:0c:
                    73:51:45:ec:27:b7:92:d2:8a:fb:fb:b4:c6:97:be:
                    df:66:b9:ae:66:e3:54:31:b8:37:35:9d:a2:5f:58:
                    b4:79:2e:bc:23:d1:b6:f8:f7:14:69:7f:c0:4f:d2:
                    36:6b:d1:85:ee:3b:68:78:59:1a:09:79:81:68:bd:
                    95:fa:af:7e:b4:87:41:d9:cc:69:b9:51:93:7a:1e:
                    d2:9e:dd:bb:6b:4a:6c:d1:dc:5e:99:90:64:e2:e1:
                    13:52:21:3d:e7:cc:ab:2b:23:b0:17:0f:8f:eb:0d:
                    1d:0c:be:85:b1:aa:56:34:94:99:23:be:d4:cc:af:
                    df:4e:1a:c1:55:a1:46:24:12:f7:06:7c:13:b0:1a:
                    3b:d3:1e:1a:92:f9:c8:96:86:39:8f:51:9f:d6:e8:
                    60:98:1e:35:86:8c:11:7c:3b:93:23:11:9b:8f:9c:
                    28:1a:42:47:3f:8c:3d:6d:f5:a1:07:99:11:31:b8:
                    62:32:98:2f:4a:95:97:41:55:60:27:07:57:60:a2:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:C4:87:61:8C:0C:8A:89:0F:B1:72:BF:24:42:36:88:38:35:89:3A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/995df7fe-cb96-3240-811c-16a02c3703cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1/0339efaa-3121-4a82-8dd8-192f56ab47d1.crl

            X509v3 Authority Key Identifier:
                keyid:B7:D4:2E:91:48:02:33:18:5A:64:6C:A5:2B:0C:93:B7:AF:1F:EC:B3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/0339efaa-3121-4a82-8dd8-192f56ab47d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.177.182.0/24
                  198.200.151.0/24
                  199.104.104.0/23
                  204.145.202.0/24
                  204.228.170.0/24
                  204.228.175.0-204.228.191.255
                  204.238.94.0/24
                  204.238.123.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:f6:fc:86:6a:ab:a2:d1:df:12:db:d1:42:ee:db:7d:92:1c:
         a7:f9:7a:8b:84:d7:1b:23:7e:e5:3f:d0:35:6a:58:a3:1b:3e:
         c0:d2:f0:94:69:1c:64:35:8c:0a:0a:3a:3a:7b:36:df:38:47:
         17:b1:4a:78:09:f1:cf:3f:78:08:b3:40:ed:34:29:b4:59:4d:
         9b:b8:c7:82:cd:19:d8:3c:95:c6:3a:a9:4e:79:2c:b4:4b:15:
         6b:9d:06:49:3a:5e:d7:ff:ef:4c:a7:b8:d4:4d:b8:0d:f7:75:
         40:05:f2:75:91:84:47:31:d7:c9:74:cc:4e:32:69:d0:89:20:
         09:5b:d3:28:36:b8:68:4f:83:a0:45:0c:af:e2:a4:37:d8:48:
         3c:5a:12:84:f1:84:97:ea:56:d8:66:00:e7:45:4d:e5:6d:93:
         7a:67:b5:48:f0:a4:34:ef:52:cf:85:08:ab:b2:d9:8d:dc:f6:
         72:32:15:8c:cc:eb:54:3d:ee:31:29:3a:6b:ff:18:66:bf:2f:
         00:43:38:1e:87:3b:4b:70:56:27:ce:92:82:55:15:16:bb:3e:
         fa:30:cf:3f:39:71:7b:ce:cc:51:f4:c8:ac:d3:45:40:f9:17:
         57:39:cb:69:73:51:4c:d6:94:5f:a3:ef:3e:18:b4:43:f8:30:
         97:b7:9d:e8
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEo7evnHkLAOdMExV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDMzOWVmYWEtMzEyMS00YTgyLThkZDgtMTkyZjU2YWI0
N2QxMB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
NzcyMWMzMmItODU3YS00ZjliLTg2MjMtZjdhZDU4ZDU3ZjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt0J8B/2ahd0dd0BztRl9HPTH32DPkzJ4NLjG
0ItPkVZ9RIhZEwjvpDdjfoEQ9djEuPGbAYbnVyUdeQxzUUXsJ7eS0or7+7TGl77f
ZrmuZuNUMbg3NZ2iX1i0eS68I9G2+PcUaX/AT9I2a9GF7jtoeFkaCXmBaL2V+q9+
tIdB2cxpuVGTeh7Snt27a0ps0dxemZBk4uETUiE958yrKyOwFw+P6w0dDL6FsapW
NJSZI77UzK/fThrBVaFGJBL3BnwTsBo70x4akvnIloY5j1Gf1uhgmB41howRfDuT
IxGbj5woGkJHP4w9bfWhB5kRMbhiMpgvSpWXQVVgJwdXYKK6LQIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFP/Eh2GMDIqJD7FyvyRCNog4NYk6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5
ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJmNTZhYjQ3ZDEvOTk1ZGY3ZmUtY2I5Ni0z
MjQwLTgxMWMtMTZhMDJjMzcwM2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMDMzOWVmYWEtMzEyMS00YTgyLThk
ZDgtMTkyZjU2YWI0N2QxLzAzMzllZmFhLTMxMjEtNGE4Mi04ZGQ4LTE5MmY1NmFi
NDdkMS5jcmwwHwYDVR0jBBgwFoAUt9QukUgCMxhaZGylKwyTt68f7LMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8wMzM5ZWZhYS0zMTIxLTRhODItOGRkOC0xOTJm
NTZhYjQ3ZDEuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQAxrG2AwQA
xsiXAwQBx2hoAwQAzJHKAwQAzOSqMAwDBADM5K8DBAbM5IADBADM7l4DBADM7nsw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAPfb8hmqrotHfEtvRQu7bfZIcp/l6i4TXGyN+5T/QNWpYoxs+wNLw
lGkcZDWMCgo6Ons23zhHF7FKeAnxzz94CLNA7TQptFlNm7jHgs0Z2DyVxjqpTnks
tEsVa50GSTpe1//vTKe41E24Dfd1QAXydZGERzHXyXTMTjJp0IkgCVvTKDa4aE+D
oEUMr+KkN9hIPFoShPGEl+pW2GYA50VN5W2Teme1SPCkNO9Sz4UIq7LZjdz2cjIV
jMzrVD3uMSk6a/8YZr8vAEM4Hoc7S3BWJ86SglUVFrs++jDPPzlxe87MUfTIrNNF
QPkXVznLaXNRTNaUX6PvPhi0Q/gwl7ed6A==
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:49:36 2025 by rpki-client