Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b88af60a-bc66-302d-86e0-a871c9573c65.roa
File:                     b88af60a-bc66-302d-86e0-a871c9573c65.roa (raw, json)
Hash identifier:          b8Ajsf5Comt4CvhvT3FyMHXRZnicQb/kjbSnc813Fc8=
Subject key identifier:   D4:68:6A:32:16:BE:DD:14:12:F8:69:A7:EA:63:7B:02:36:9B:E0:BC
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F432858498769B2792FDD6F0972471B00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b88af60a-bc66-302d-86e0-a871c9573c65.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     396982
IP address blocks:        165.85.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:b2:79:2f:dd:6f:09:72:47:1b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=c0e64361-4255-4605-b96a-451bd4c4674c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:f2:7e:88:b6:29:aa:97:09:7d:14:fb:34:c2:
                    b9:29:14:dc:af:06:17:c8:3e:24:45:c6:bb:c7:06:
                    e7:4d:32:56:03:2c:a6:10:2b:02:50:23:83:fc:94:
                    07:81:ad:71:da:cf:23:50:58:ef:bf:1b:ea:d8:ae:
                    b1:ba:78:98:35:45:9b:fd:8f:a8:1e:cd:52:1f:1c:
                    ea:3e:f9:bd:37:fe:91:15:3b:55:40:55:9a:99:dc:
                    d0:e3:55:0a:f5:08:b1:ed:ff:c9:2b:76:8f:c0:2c:
                    d9:3b:3e:a4:75:23:c9:9e:79:2d:41:e0:fa:34:4b:
                    6c:d6:e1:f6:85:50:ec:5f:c4:d7:86:5e:56:47:70:
                    95:fc:0f:79:32:36:e1:38:dc:f7:2d:96:eb:b1:50:
                    da:9c:66:9b:d2:4d:2f:ed:16:a3:a8:40:50:ee:d1:
                    33:7a:15:f8:98:19:54:ef:f8:6e:4e:ab:28:26:1d:
                    16:1c:5d:e5:6c:53:49:ee:ca:8a:5e:b4:fe:e8:58:
                    65:61:4e:2f:e2:4b:7c:a8:dd:d0:7e:e6:1c:1a:ed:
                    c5:51:a9:5e:5e:09:dd:25:73:09:d0:9a:e4:0a:b5:
                    0a:90:5e:c8:f0:71:f0:95:4c:18:d8:fd:5d:82:c6:
                    54:d7:8e:97:a2:f7:ca:95:5f:cf:67:79:e5:fd:12:
                    c6:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:68:6A:32:16:BE:DD:14:12:F8:69:A7:EA:63:7B:02:36:9B:E0:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/b88af60a-bc66-302d-86e0-a871c9573c65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.85.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d6:e0:f0:a7:4e:16:52:e7:17:ce:1c:86:92:e3:a7:e0:c5:bd:
         4b:09:f6:3e:03:52:87:e4:7f:6f:30:c4:37:1f:b5:90:92:e4:
         e7:d0:85:01:01:d0:5a:93:2c:b5:67:f0:2e:26:33:7e:86:b2:
         37:66:fd:05:68:16:3f:ea:45:66:bf:e0:cb:4b:41:8d:56:6c:
         99:09:cf:ce:56:7f:17:82:7f:cd:a7:47:c7:5e:3b:c4:c4:c3:
         bf:6b:ba:42:76:de:48:db:a0:44:3d:d8:dd:fa:60:72:c8:3e:
         5c:17:f5:82:5b:09:7c:8c:5d:d1:74:57:35:ba:cd:f0:9a:dc:
         8c:ed:c5:ba:73:5f:99:e6:3b:61:99:cd:d6:60:ec:37:86:19:
         15:35:d1:bd:81:a2:49:5b:85:2c:3b:98:8d:7f:e2:99:08:0c:
         df:d4:3a:e7:05:98:1b:5b:f3:df:b8:0f:36:a0:46:ca:e7:94:
         14:ee:82:8d:cf:7a:f3:04:b2:4b:d1:d9:a5:dd:04:34:ee:54:
         a9:44:3a:71:d2:c0:80:a8:38:b5:52:c8:c0:cd:a3:15:bf:0d:
         cb:df:8b:dc:db:09:1e:29:c0:a9:52:7e:72:3b:e0:b9:24:a6:
         25:fd:da:59:e7:1b:1b:9f:3c:20:23:8e:48:9b:1b:9d:31:da:
         b5:a1:d1:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHabJ5L91vCXJHGwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
YzBlNjQzNjEtNDI1NS00NjA1LWI5NmEtNDUxYmQ0YzQ2NzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnvJ+iLYpqpcJfRT7NMK5KRTcrwYXyD4kRca7
xwbnTTJWAyymECsCUCOD/JQHga1x2s8jUFjvvxvq2K6xuniYNUWb/Y+oHs1SHxzq
Pvm9N/6RFTtVQFWamdzQ41UK9Qix7f/JK3aPwCzZOz6kdSPJnnktQeD6NEts1uH2
hVDsX8TXhl5WR3CV/A95MjbhONz3LZbrsVDanGab0k0v7RajqEBQ7tEzehX4mBlU
7/huTqsoJh0WHF3lbFNJ7sqKXrT+6FhlYU4v4kt8qN3QfuYcGu3FUaleXgndJXMJ
0JrkCrUKkF7I8HHwlUwY2P1dgsZU146XovfKlV/PZ3nl/RLGcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNRoajIWvt0UEvhpp+pjewI2m+C8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvYjg4YWY2MGEtYmM2Ni0z
MDJkLTg2ZTAtYTg3MWM5NTczYzY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGpVUAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANbg8KdOFlLnF84chpLjp+DFvUsJ9j4DUofkf28wxDcftZCS5OfQhQEB
0FqTLLVn8C4mM36Gsjdm/QVoFj/qRWa/4MtLQY1WbJkJz85WfxeCf82nR8deO8TE
w79rukJ23kjboEQ92N36YHLIPlwX9YJbCXyMXdF0VzW6zfCa3IztxbpzX5nmO2GZ
zdZg7DeGGRU10b2BoklbhSw7mI1/4pkIDN/UOucFmBtb89+4DzagRsrnlBTugo3P
evMEskvR2aXdBDTuVKlEOnHSwICoOLVSyMDNoxW/Dcvfi9zbCR4pwKlSfnI74Lkk
piX92lnnGxufPCAjjkibG50x2rWh0W4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 19:14:30 2025 by rpki-client