Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa
File:                     8fa2ab40-daf4-3671-8d07-470ed5ade611.roa (raw, json)
Hash identifier:          C0yS+4vbeeUZg5xvhEYI4K39fMrkoir6GyW89ArEYtQ=
Subject key identifier:   B1:3E:A8:25:2E:E0:7B:4C:5F:3E:54:28:8E:89:79:AF:3F:B6:B3:74
Certificate issuer:       /CN=d3f01860-198d-4531-89a3-a4dc5f296657
Certificate serial:       010D0C9F432858499829CCB3F3DDFE30CB4864C0
Authority key identifier: A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        67.158.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cc:b3:f3:dd:fe:30:cb:48:64:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3f01860-198d-4531-89a3-a4dc5f296657
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=2703b0d7-94d1-403f-a1c6-c0cf0c4f2ca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:b5:82:5a:51:e5:ea:b0:73:fb:9e:17:f5:10:
                    0b:8d:93:b4:34:53:a3:0c:25:8a:46:4e:39:ad:3b:
                    1a:07:dd:2b:7d:1a:3e:9a:d9:af:4a:bd:0e:77:bb:
                    ba:2f:bf:50:f3:cd:79:dd:c7:d5:b3:d3:f2:3f:1a:
                    14:06:a4:93:ab:1f:53:e8:c6:bc:73:82:1e:a8:b3:
                    5d:98:fb:dc:10:37:63:d3:0b:c3:07:1b:a6:d3:9a:
                    40:e5:70:68:d4:22:54:17:d9:9d:db:6f:99:9e:2f:
                    34:fc:02:72:bc:1f:8a:07:09:b6:a8:9d:74:36:5f:
                    d1:59:14:80:96:9b:fc:16:a6:ca:27:13:ba:66:59:
                    c8:71:e0:d8:b9:d2:83:39:54:77:a0:48:08:a5:90:
                    47:94:d2:dd:eb:6c:fb:60:19:38:2a:e9:a0:80:3e:
                    76:6a:f4:de:78:41:19:51:8d:11:a7:52:1b:a1:55:
                    d2:c0:eb:9e:41:53:a7:c9:b8:b0:bd:7a:4e:63:8f:
                    88:7f:d4:bd:02:58:1d:f2:b8:b0:49:18:a6:b8:2e:
                    c4:1f:52:6b:54:c8:35:48:a9:9e:d4:8b:51:56:5c:
                    c7:90:98:a6:ed:b0:bd:c3:77:51:d1:4a:b4:d1:fa:
                    db:ec:29:0d:f7:a3:dd:c6:56:a6:7b:1b:65:bb:9c:
                    01:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:3E:A8:25:2E:E0:7B:4C:5F:3E:54:28:8E:89:79:AF:3F:B6:B3:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/8fa2ab40-daf4-3671-8d07-470ed5ade611.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657/d3f01860-198d-4531-89a3-a4dc5f296657.crl

            X509v3 Authority Key Identifier:
                keyid:A4:45:23:A3:79:2D:19:89:56:99:0C:78:53:87:CC:ED:A5:C7:9C:D0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d3f01860-198d-4531-89a3-a4dc5f296657.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.158.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:38:dd:fa:26:5a:d2:e7:1a:e4:f1:45:73:1f:8c:5e:47:f0:
         4f:ce:5b:52:8d:14:0b:c7:bb:e8:49:7e:ae:5c:c7:01:49:75:
         b1:63:f6:76:cc:fd:16:f4:a8:d4:42:11:3b:ff:55:b0:97:e1:
         f5:53:61:8f:40:18:9a:64:cb:bd:74:d8:41:ae:8f:77:d2:a3:
         ff:79:d8:36:ba:23:c0:25:50:63:5e:42:17:24:49:6a:ea:6f:
         31:2e:c1:46:a1:11:9d:8d:b2:0e:9c:c8:40:12:ff:f3:bd:43:
         89:c1:4f:de:9b:a8:83:de:5c:91:41:b3:3a:db:1e:12:05:07:
         02:36:dc:57:b8:7a:18:4f:ee:46:5f:bd:2b:96:72:23:6f:da:
         c8:c6:16:62:e7:ed:14:67:8a:53:8b:b6:af:fe:d0:f4:1e:fb:
         c3:8b:21:0c:31:da:04:e0:f5:fd:40:77:5e:88:d0:f1:ab:ad:
         b8:70:7c:d9:a8:f4:cd:9c:e8:e9:af:65:7d:f8:f7:e2:69:e2:
         eb:b4:6b:79:c4:ad:c2:c5:e8:0e:f4:18:7e:63:89:c7:36:79:
         22:8f:5d:8d:61:e5:7d:60:1b:9c:c1:70:33:ba:5d:54:5e:5b:
         27:de:c1:50:23:dd:5f:17:bd:7f:55:c0:b1:6c:4b:a0:31:74:
         56:45:c2:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKcyz893+MMtIZMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNmMDE4NjAtMTk4ZC00NTMxLTg5YTMtYTRkYzVmMjk2
NjU3MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
MjcwM2IwZDctOTRkMS00MDNmLWExYzYtYzBjZjBjNGYyY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnrWCWlHl6rBz+54X9RALjZO0NFOjDCWKRk45
rTsaB90rfRo+mtmvSr0Od7u6L79Q88153cfVs9PyPxoUBqSTqx9T6Ma8c4IeqLNd
mPvcEDdj0wvDBxum05pA5XBo1CJUF9md22+Zni80/AJyvB+KBwm2qJ10Nl/RWRSA
lpv8FqbKJxO6ZlnIceDYudKDOVR3oEgIpZBHlNLd62z7YBk4KumggD52avTeeEEZ
UY0Rp1IboVXSwOueQVOnybiwvXpOY4+If9S9Algd8riwSRimuC7EH1JrVMg1SKme
1ItRVlzHkJim7bC9w3dR0Uq00frb7CkN96Pdxlamextlu5wBJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLE+qCUu4HtMXz5UKI6Jea8/trN0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kM2Yw
MTg2MC0xOThkLTQ1MzEtODlhMy1hNGRjNWYyOTY2NTcvOGZhMmFiNDAtZGFmNC0z
NjcxLThkMDctNDcwZWQ1YWRlNjExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDNmMDE4NjAtMTk4ZC00NTMxLTg5
YTMtYTRkYzVmMjk2NjU3L2QzZjAxODYwLTE5OGQtNDUzMS04OWEzLWE0ZGM1ZjI5
NjY1Ny5jcmwwHwYDVR0jBBgwFoAUpEUjo3ktGYlWmQx4U4fM7aXHnNAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kM2YwMTg2MC0xOThkLTQ1MzEtODlhMy1hNGRj
NWYyOTY2NTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ545MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAc43fomWtLnGuTxRXMfjF5H8E/OW1KNFAvHu+hJfq5cxwFJdbFj9nbM
/Rb0qNRCETv/VbCX4fVTYY9AGJpky7102EGuj3fSo/952Da6I8AlUGNeQhckSWrq
bzEuwUahEZ2Nsg6cyEAS//O9Q4nBT96bqIPeXJFBszrbHhIFBwI23Fe4ehhP7kZf
vSuWciNv2sjGFmLn7RRnilOLtq/+0PQe+8OLIQwx2gTg9f1Ad16I0PGrrbhwfNmo
9M2c6OmvZX349+Jp4uu0a3nErcLF6A70GH5jicc2eSKPXY1h5X1gG5zBcDO6XVRe
WyfewVAj3V8XvX9VwLFsS6AxdFZFwsc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:41:42 2025 by rpki-client