Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa
File:                     11caecce-9970-30b9-a504-e87b6f540c94.roa (raw, json)
Hash identifier:          pZ/+QMuKomqG1xMuJBkfIb5LBl+K4yCo7LMnTZgeRZQ=
Subject key identifier:   1C:B6:B7:79:C7:E1:D3:AD:02:47:64:57:19:D5:79:7C:03:8E:65:C5
Certificate issuer:       /CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
Certificate serial:       010D0C9F43285849674EF3E83290D9B5FEBCB440
Authority key identifier: 39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa
Signing time:             Thu 03 Apr 2025 13:01:02 +0000
ROA not before:           Thu 03 Apr 2025 13:01:02 +0000
ROA not after:            Wed 02 Jul 2025 13:01:02 +0000
asID:                     32133
IP address blocks:        64.98.0.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:67:4e:f3:e8:32:90:d9:b5:fe:bc:b4:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0793683-aa07-4935-a2c2-ec423ea7dd0b
        Validity
            Not Before: Apr  3 13:01:02 2025 GMT
            Not After : Jul  2 13:01:02 2025 GMT
        Subject: CN=982c50b7-096d-40da-9b0d-a92228cbc92c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:36:ad:59:97:68:6a:91:c9:9b:4d:63:fa:cb:
                    b2:a2:5f:f5:4f:41:5f:3c:d8:19:1b:9c:cf:f2:45:
                    d4:1f:d6:ba:1c:d8:33:e4:51:c1:97:92:c7:41:1a:
                    fc:b9:88:44:a4:bd:56:52:ca:d8:22:89:01:f7:f1:
                    76:37:54:7a:10:35:27:b8:04:c0:95:c0:68:b2:20:
                    5b:3b:94:12:3d:7b:1c:bc:5c:51:a4:9e:97:1a:ef:
                    a5:d9:fa:a2:19:41:c3:10:5d:8b:ff:69:4f:be:59:
                    36:13:df:ff:ab:0a:3d:af:38:bb:5e:aa:b5:66:80:
                    95:de:86:d1:64:47:bd:ce:a2:28:ff:24:28:97:4e:
                    20:ef:1e:20:72:e3:5c:5c:9c:9d:2d:86:f4:a8:b2:
                    2f:d9:98:46:89:c1:2e:4c:c6:b5:52:ca:37:61:5d:
                    73:9a:70:60:e3:fb:96:bc:93:34:f6:09:e4:98:82:
                    a9:8a:60:d7:b2:bb:28:ae:4e:67:14:37:95:04:d6:
                    83:fb:7f:b0:05:0e:13:b6:fa:98:b2:82:66:6d:68:
                    12:13:f1:ba:a6:f8:2d:e3:d0:33:61:23:02:b8:91:
                    6a:d5:a9:ef:a0:ec:e2:61:2b:50:58:51:1d:83:05:
                    a1:fc:5d:b0:1b:f6:f5:c8:72:7d:be:68:ea:bf:28:
                    32:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B6:B7:79:C7:E1:D3:AD:02:47:64:57:19:D5:79:7C:03:8E:65:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/11caecce-9970-30b9-a504-e87b6f540c94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b/c0793683-aa07-4935-a2c2-ec423ea7dd0b.crl

            X509v3 Authority Key Identifier:
                keyid:39:DC:2A:9E:A1:39:C6:5B:6C:A3:48:6F:76:F4:97:DD:04:C2:C8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c0793683-aa07-4935-a2c2-ec423ea7dd0b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.98.0.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:4d:4a:2b:22:01:74:df:47:81:59:0b:5a:20:78:d4:b7:e3:
         7b:2a:68:56:ee:8f:d2:1d:2e:55:d3:3f:76:cf:40:ce:0d:b0:
         30:92:74:28:98:44:7e:55:88:9b:12:a4:e7:a1:1e:c8:79:a3:
         cc:7e:30:a8:53:67:66:a6:37:a5:ca:9e:de:9d:65:c6:55:e5:
         9a:30:3a:b2:69:65:6e:a8:e8:81:74:7b:77:dd:08:ef:72:3e:
         77:a1:1c:00:a1:2b:4a:78:2e:48:ca:59:19:0e:fe:d0:4a:7d:
         3b:3b:10:96:e1:8e:ba:1d:c2:da:c6:f0:86:d8:34:13:34:58:
         1a:80:e1:55:ee:e6:f6:d4:6b:2b:9a:ac:77:e4:ab:b9:32:d6:
         d5:9f:6c:d0:8c:af:43:86:c2:90:ec:a9:13:5d:2b:ac:c9:84:
         0c:6a:42:1d:4c:d2:36:b0:24:64:22:03:dd:91:18:55:83:50:
         4a:d6:40:ff:f1:57:b3:47:83:07:20:31:6c:c6:97:13:2e:39:
         f6:dc:05:af:33:62:70:72:e1:22:9d:0b:5f:47:76:72:bd:c8:
         dd:92:65:91:ea:d8:b1:d9:68:9f:76:76:48:e6:0a:1c:93:73:
         db:ec:51:bb:48:73:ff:33:b0:a7:2e:03:b7:7e:8e:fc:9a:04:
         5d:d1:5d:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElnTvPoMpDZtf68tEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzA3OTM2ODMtYWEwNy00OTM1LWEyYzItZWM0MjNlYTdk
ZDBiMB4XDTI1MDQwMzEzMDEwMloXDTI1MDcwMjEzMDEwMlowLzEtMCsGA1UEAxMk
OTgyYzUwYjctMDk2ZC00MGRhLTliMGQtYTkyMjI4Y2JjOTJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2DatWZdoapHJm01j+suyol/1T0FfPNgZG5zP
8kXUH9a6HNgz5FHBl5LHQRr8uYhEpL1WUsrYIokB9/F2N1R6EDUnuATAlcBosiBb
O5QSPXscvFxRpJ6XGu+l2fqiGUHDEF2L/2lPvlk2E9//qwo9rzi7Xqq1ZoCV3obR
ZEe9zqIo/yQol04g7x4gcuNcXJydLYb0qLIv2ZhGicEuTMa1Uso3YV1zmnBg4/uW
vJM09gnkmIKpimDXsrsork5nFDeVBNaD+3+wBQ4TtvqYsoJmbWgSE/G6pvgt49Az
YSMCuJFq1anvoOziYStQWFEdgwWh/F2wG/b1yHJ9vmjqvygySwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBy2t3nH4dOtAkdkVxnVeXwDjmXFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5
MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQyM2VhN2RkMGIvMTFjYWVjY2UtOTk3MC0z
MGI5LWE1MDQtZTg3YjZmNTQwYzk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzA3OTM2ODMtYWEwNy00OTM1LWEy
YzItZWM0MjNlYTdkZDBiL2MwNzkzNjgzLWFhMDctNDkzNS1hMmMyLWVjNDIzZWE3
ZGQwYi5jcmwwHwYDVR0jBBgwFoAUOdwqnqE5xltso0hvdvSX3QTCyKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMDc5MzY4My1hYTA3LTQ5MzUtYTJjMi1lYzQy
M2VhN2RkMGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQGIAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEtNSisiAXTfR4FZC1ogeNS343sqaFbuj9IdLlXTP3bPQM4NsDCSdCiY
RH5ViJsSpOehHsh5o8x+MKhTZ2amN6XKnt6dZcZV5ZowOrJpZW6o6IF0e3fdCO9y
PnehHAChK0p4LkjKWRkO/tBKfTs7EJbhjrodwtrG8IbYNBM0WBqA4VXu5vbUayua
rHfkq7ky1tWfbNCMr0OGwpDsqRNdK6zJhAxqQh1M0jawJGQiA92RGFWDUErWQP/x
V7NHgwcgMWzGlxMuOfbcBa8zYnBy4SKdC19HdnK9yN2SZZHq2LHZaJ92dkjmChyT
c9vsUbtIc/8zsKcuA7d+jvyaBF3RXdo=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:12:33 2025 by rpki-client