Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
File:                     2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa (raw, json)
Hash identifier:          6eLP/KItHIIpBfKWpBG0J+jObD0Mg4spWV8xLID7gIA=
Subject key identifier:   E5:F5:7E:78:B4:C1:6B:E9:B1:31:5D:73:26:EE:2B:91:E5:69:F1:37
Certificate issuer:       /CN=66ee137c-4201-4a21-a4f5-2f3161305281
Certificate serial:       010D0C9F43285849689C6A624D13BAFA44F682E0
Authority key identifier: 93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa
Signing time:             Fri 04 Apr 2025 00:13:03 +0000
ROA not before:           Fri 04 Apr 2025 00:13:03 +0000
ROA not after:            Thu 03 Jul 2025 00:13:03 +0000
asID:                     8796
IP address blocks:        98.158.28.0/24 maxlen: 24
                          98.158.29.0/24 maxlen: 24
                          98.158.30.0/24 maxlen: 24
                          98.158.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:68:9c:6a:62:4d:13:ba:fa:44:f6:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66ee137c-4201-4a21-a4f5-2f3161305281
        Validity
            Not Before: Apr  4 00:13:03 2025 GMT
            Not After : Jul  3 00:13:03 2025 GMT
        Subject: CN=a5478343-1d0b-4d2b-8924-8c44a1f6e069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:cf:53:b7:e8:b4:18:9d:13:07:2c:ed:00:dd:
                    57:7d:e0:94:26:5a:20:8e:c1:84:d7:8f:ba:ab:b1:
                    e0:82:f4:81:cc:ee:ef:0e:13:14:62:47:9d:e3:a6:
                    41:12:a6:d8:b7:9b:6f:c4:10:9d:f3:9f:e0:55:15:
                    ce:92:e0:80:88:4f:c6:43:c7:de:0e:c5:b9:f9:11:
                    7c:ee:10:8f:80:ae:4d:5d:ce:98:91:3a:93:b9:d7:
                    32:de:99:3c:9d:3b:92:ff:94:5a:25:6e:4b:4b:40:
                    da:05:53:c6:de:ea:97:f1:b8:24:ab:17:df:70:7b:
                    b8:28:af:11:a3:8b:15:1d:7a:7d:9c:88:d9:9c:06:
                    dc:9b:31:8f:61:6a:7e:1e:b5:06:8c:18:51:d0:66:
                    96:09:5a:cf:18:74:19:8c:f1:0a:b1:0d:af:3c:b7:
                    3b:52:a0:4a:73:fb:97:f1:dc:3e:d6:e8:82:46:77:
                    48:08:f4:55:c3:0a:0d:2c:ec:ea:e2:23:6d:07:e2:
                    c6:c4:f9:57:63:0a:4c:c4:ce:cb:6d:aa:a5:f4:c1:
                    2d:bb:fd:38:55:9b:00:87:b9:46:b2:d7:60:9e:d8:
                    70:5c:1a:63:e1:57:42:15:06:15:81:74:56:88:21:
                    5a:97:79:c5:fb:99:c9:b2:ab:e9:b6:9c:b9:d4:49:
                    f4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:F5:7E:78:B4:C1:6B:E9:B1:31:5D:73:26:EE:2B:91:E5:69:F1:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/2f6fb8ee-4b76-3e40-83e1-91ba75b74c01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281/66ee137c-4201-4a21-a4f5-2f3161305281.crl

            X509v3 Authority Key Identifier:
                keyid:93:AB:BA:5B:78:E6:75:D1:1A:42:E2:19:57:D6:1E:B4:6E:0D:DB:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/66ee137c-4201-4a21-a4f5-2f3161305281.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  98.158.28.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:2b:08:0e:95:43:58:ad:11:43:fd:87:fd:45:1e:65:cb:07:
         28:b8:14:18:07:21:14:1e:63:f2:72:5e:88:e3:51:8b:54:05:
         b0:d7:f7:8f:e9:9c:3f:27:0a:3b:c3:41:22:5e:39:85:95:7d:
         39:e1:bd:9e:75:73:77:0c:5b:25:7a:8e:40:b7:28:a9:a5:fe:
         b3:2f:98:26:7a:00:47:72:a6:c2:ad:b7:2a:65:33:0d:f3:1e:
         ab:0f:12:6d:ca:d2:0e:dc:bb:87:2e:1f:24:3c:d1:b4:ff:6b:
         87:c5:20:50:c3:17:28:48:a8:8e:94:43:c6:47:03:f3:c6:1e:
         4d:26:b2:2c:80:71:65:17:f8:41:2f:b4:a0:a0:f5:38:a5:9a:
         eb:7f:1f:ac:76:7d:00:a7:38:d4:99:30:f9:c7:71:8d:42:ad:
         db:6f:bd:0b:70:d6:ec:8d:78:da:46:d3:67:a1:79:c9:26:d9:
         27:fa:fe:c4:28:89:45:ce:ab:19:e9:3c:1e:f2:f4:2e:80:26:
         9a:4e:9a:a9:00:44:48:99:10:5f:7d:32:75:8f:07:05:ad:ab:
         56:44:e2:d7:68:34:6b:d9:49:6b:d7:f4:81:71:c6:1e:29:03:
         f7:d8:b6:12:e1:38:00:63:73:82:1b:93:fe:f7:12:42:1f:0e:
         b2:e8:39:ac
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElonGpiTRO6+kT2guAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjZlZTEzN2MtNDIwMS00YTIxLWE0ZjUtMmYzMTYxMzA1
MjgxMB4XDTI1MDQwNDAwMTMwM1oXDTI1MDcwMzAwMTMwM1owLzEtMCsGA1UEAxMk
YTU0NzgzNDMtMWQwYi00ZDJiLTg5MjQtOGM0NGExZjZlMDY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp89Tt+i0GJ0TByztAN1XfeCUJlogjsGE14+6
q7HggvSBzO7vDhMUYked46ZBEqbYt5tvxBCd85/gVRXOkuCAiE/GQ8feDsW5+RF8
7hCPgK5NXc6YkTqTudcy3pk8nTuS/5RaJW5LS0DaBVPG3uqX8bgkqxffcHu4KK8R
o4sVHXp9nIjZnAbcmzGPYWp+HrUGjBhR0GaWCVrPGHQZjPEKsQ2vPLc7UqBKc/uX
8dw+1uiCRndICPRVwwoNLOzq4iNtB+LGxPlXYwpMxM7Lbaql9MEtu/04VZsAh7lG
stdgnthwXBpj4VdCFQYVgXRWiCFal3nF+5nJsqvptpy51En0PQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOX1fni0wWvpsTFdcybuK5HlafE3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NmVl
MTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMxNjEzMDUyODEvMmY2ZmI4ZWUtNGI3Ni0z
ZTQwLTgzZTEtOTFiYTc1Yjc0YzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjZlZTEzN2MtNDIwMS00YTIxLWE0
ZjUtMmYzMTYxMzA1MjgxLzY2ZWUxMzdjLTQyMDEtNGEyMS1hNGY1LTJmMzE2MTMw
NTI4MS5jcmwwHwYDVR0jBBgwFoAUk6u6W3jmddEaQuIZV9YetG4N28YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NmVlMTM3Yy00MjAxLTRhMjEtYTRmNS0yZjMx
NjEzMDUyODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCYp4cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0rCA6VQ1itEUP9h/1FHmXLByi4FBgHIRQeY/JyXojjUYtUBbDX94/p
nD8nCjvDQSJeOYWVfTnhvZ51c3cMWyV6jkC3KKml/rMvmCZ6AEdypsKttyplMw3z
HqsPEm3K0g7cu4cuHyQ80bT/a4fFIFDDFyhIqI6UQ8ZHA/PGHk0msiyAcWUX+EEv
tKCg9Tilmut/H6x2fQCnONSZMPnHcY1CrdtvvQtw1uyNeNpG02eheckm2Sf6/sQo
iUXOqxnpPB7y9C6AJppOmqkAREiZEF99MnWPBwWtq1ZE4tdoNGvZSWvX9IFxxh4p
A/fYthLhOABjc4Ibk/73EkIfDrLoOaw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:24:39 2025 by rpki-client