Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/13753efb-f032-3177-ae46-c039a275e11c.roa
File:                     13753efb-f032-3177-ae46-c039a275e11c.roa (raw, json)
Hash identifier:          5Q5Y4g3fHRgeB8YqR82ZUJKAb5g674o6xWEzPy5C06g=
Subject key identifier:   24:3A:18:2F:E1:7F:F3:20:05:6F:83:55:82:46:D6:91:86:F5:48:67
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F43285849A089D3039182FBB85E5DBF00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/13753efb-f032-3177-ae46-c039a275e11c.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     31898
IP address blocks:        66.179.148.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d3:03:91:82:fb:b8:5e:5d:bf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=47eb36a2-c0fe-46fd-9727-91e8be45983d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:45:76:e8:33:08:a9:f2:c3:0c:b0:83:37:8e:
                    6d:ab:ab:cb:d3:29:2a:d0:49:fa:bf:8c:57:ab:f9:
                    31:30:8f:bc:f3:2b:31:2a:00:54:5b:b2:ad:bd:c6:
                    ac:93:00:d5:86:70:06:4c:d4:d8:c8:8b:e9:cf:99:
                    cc:cb:f5:7b:4b:c8:ac:7f:a0:bf:15:9c:87:72:4c:
                    13:7b:ef:77:42:af:69:3e:77:5c:b4:a1:e8:b1:72:
                    23:2d:ed:e6:f4:f3:5d:80:4b:9e:5f:1f:9a:c7:46:
                    d8:94:01:dc:f0:ff:d4:4a:9a:f5:a4:a1:38:dd:e8:
                    2a:ac:e0:be:64:9e:55:b1:83:e7:3f:ae:8a:f8:0a:
                    09:62:d0:f2:3e:da:59:75:e0:5e:ea:7e:a6:47:b7:
                    06:07:70:85:44:81:fb:ab:37:2b:86:2b:c3:ae:88:
                    07:7d:40:11:8e:a9:9d:85:e8:93:55:17:e9:09:52:
                    44:c8:83:bd:d9:6b:31:52:b9:21:c4:b1:19:13:03:
                    6d:be:36:65:98:01:29:f9:8a:7f:01:1d:2d:dd:be:
                    74:23:4e:d8:b9:97:5c:b7:ca:8d:c8:c0:58:5d:22:
                    59:f3:de:27:93:91:c8:26:8c:70:71:46:c2:15:70:
                    d2:f9:98:12:6a:bf:62:de:36:8e:af:ba:63:08:ea:
                    bb:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:3A:18:2F:E1:7F:F3:20:05:6F:83:55:82:46:D6:91:86:F5:48:67
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/13753efb-f032-3177-ae46-c039a275e11c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.148.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cc:c6:be:65:28:f1:f1:3b:4a:68:5b:5b:e5:e8:9c:75:de:16:
         72:df:b4:25:75:79:7e:8f:84:3b:57:60:29:99:71:8f:b1:9c:
         dd:5c:1e:56:c2:ef:5d:c0:0c:41:13:71:c8:09:2a:70:34:16:
         9e:22:f3:61:58:6b:91:bf:2f:4d:d4:40:b5:da:49:54:12:48:
         45:3d:e6:0d:f9:c1:4d:6c:a4:e5:7c:a7:0c:a7:3a:df:3e:ae:
         78:37:6f:6b:eb:6e:b9:b8:68:e5:12:51:94:72:54:5f:e4:27:
         a7:6d:12:06:05:ca:de:f3:62:c2:d4:bc:a6:98:40:26:67:1e:
         33:95:dd:13:de:a8:b4:46:88:c8:36:c1:84:e6:c5:a0:3a:51:
         d3:a4:f3:fc:b6:16:22:3b:d0:78:0e:25:a5:61:59:3b:b8:dc:
         e2:cb:27:f1:0b:c1:a6:ae:33:05:44:1a:c0:43:75:e8:31:ba:
         22:e2:7d:67:8a:2c:c2:b1:ee:ab:cc:2c:21:e8:99:a0:f3:24:
         69:86:c9:dd:b9:c1:51:07:fe:3b:0a:b3:ba:96:ac:0b:35:ee:
         fd:d5:4c:cb:a5:1d:bb:ad:87:71:30:be:77:40:69:e4:1f:3d:
         3d:f7:a1:4b:56:88:4f:2c:32:c4:6c:93:d4:c7:8a:62:ae:7c:
         e1:ed:1b:26
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgidMDkYL7uF5dvwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
NDdlYjM2YTItYzBmZS00NmZkLTk3MjctOTFlOGJlNDU5ODNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwUV26DMIqfLDDLCDN45tq6vL0ykq0En6v4xX
q/kxMI+88ysxKgBUW7KtvcaskwDVhnAGTNTYyIvpz5nMy/V7S8isf6C/FZyHckwT
e+93Qq9pPndctKHosXIjLe3m9PNdgEueXx+ax0bYlAHc8P/USpr1pKE43egqrOC+
ZJ5VsYPnP66K+AoJYtDyPtpZdeBe6n6mR7cGB3CFRIH7qzcrhivDrogHfUARjqmd
heiTVRfpCVJEyIO92WsxUrkhxLEZEwNtvjZlmAEp+Yp/AR0t3b50I07YuZdct8qN
yMBYXSJZ894nk5HIJoxwcUbCFXDS+ZgSar9i3jaOr7pjCOq74wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCQ6GC/hf/MgBW+DVYJG1pGG9UhnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMTM3NTNlZmItZjAzMi0z
MTc3LWFlNDYtYzAzOWEyNzVlMTFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQrOUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMzGvmUo8fE7SmhbW+XonHXeFnLftCV1eX6PhDtXYCmZcY+xnN1cHlbC
713ADEETccgJKnA0Fp4i82FYa5G/L03UQLXaSVQSSEU95g35wU1spOV8pwynOt8+
rng3b2vrbrm4aOUSUZRyVF/kJ6dtEgYFyt7zYsLUvKaYQCZnHjOV3RPeqLRGiMg2
wYTmxaA6UdOk8/y2FiI70HgOJaVhWTu43OLLJ/ELwaauMwVEGsBDdegxuiLifWeK
LMKx7qvMLCHomaDzJGmGyd25wVEH/jsKs7qWrAs17v3VTMulHbuth3EwvndAaeQf
PT33oUtWiE8sMsRsk9THimKufOHtGyY=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:13:22 2025 by rpki-client