Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa
File:                     e6479c60-8b63-3eb3-947f-628003239ed4.roa (raw, json)
Hash identifier:          Z93PTg8A0JSgPFz4NZSNTFh6YrT9I0v6Uh+bvXkkQKs=
Subject key identifier:   5C:93:F8:DF:6F:BC:A1:FC:D8:14:80:6B:A8:31:88:DD:27:B2:AA:60
Certificate issuer:       /CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
Certificate serial:       010D0C9F43285849F01A802359F4D83C2469BCC0
Authority key identifier: 1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa
Signing time:             Thu 22 May 2025 13:01:05 +0000
ROA not before:           Thu 22 May 2025 13:01:05 +0000
ROA not after:            Wed 20 Aug 2025 13:01:05 +0000
asID:                     17161
IP address blocks:        167.245.3.0/24 maxlen: 24
                          167.245.8.0/22 maxlen: 22
                          167.245.12.0/22 maxlen: 22
                          167.245.16.0/22 maxlen: 22
                          167.245.20.0/22 maxlen: 22
                          167.245.24.0/22 maxlen: 22
                          167.245.28.0/22 maxlen: 22
                          167.245.32.0/22 maxlen: 22
                          167.245.36.0/22 maxlen: 22
                          167.245.40.0/22 maxlen: 22
                          167.245.104.0/22 maxlen: 22
                          167.245.108.0/23 maxlen: 23
                          167.245.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f0:1a:80:23:59:f4:d8:3c:24:69:bc:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d512566a-2d54-474a-a1b0-93c74d4f7e45
        Validity
            Not Before: May 22 13:01:05 2025 GMT
            Not After : Aug 20 13:01:05 2025 GMT
        Subject: CN=9121df91-ee23-40e4-96e9-9c497b5aab50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:a9:d5:bf:8e:f3:c1:83:58:33:98:25:c2:cb:
                    e0:a7:bd:02:a3:28:f0:bd:06:ac:a3:fe:57:a1:21:
                    41:de:bc:a8:b7:64:6f:5a:68:8c:03:2d:33:80:3b:
                    f6:22:a6:e8:c6:ef:c9:08:0c:8b:c4:ef:24:a0:7a:
                    fc:e2:31:bd:bb:98:fd:e4:d7:bb:5c:ec:af:c6:cb:
                    40:2d:45:6a:2b:7b:bc:aa:bb:8d:3c:d7:e4:4c:78:
                    f3:8f:93:86:82:35:c0:95:c3:9d:9d:7a:71:27:b9:
                    e6:5b:40:24:13:d8:5a:4c:2d:65:d5:e4:80:08:88:
                    ca:eb:18:f0:2f:6d:0f:f5:6c:4c:fd:76:45:e7:b5:
                    d3:48:84:1e:bf:e4:a4:14:96:10:0e:78:61:f4:ae:
                    29:0a:1d:44:e8:e6:90:62:34:72:a8:4f:1e:f8:86:
                    f3:ff:3b:45:35:44:78:03:34:a9:e9:55:79:bc:92:
                    a4:65:b7:95:46:ff:83:1f:5f:96:d2:bb:09:4f:ca:
                    e4:70:ce:25:c3:ba:f5:a1:4e:85:b7:7f:36:9a:27:
                    8b:b7:ba:40:6d:6b:47:39:02:1e:72:9f:fc:de:a7:
                    8a:9a:46:08:86:b8:41:db:98:bf:c0:51:16:ce:7d:
                    b3:64:2e:c8:38:e0:35:b9:11:34:32:d9:cf:0a:22:
                    f7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:93:F8:DF:6F:BC:A1:FC:D8:14:80:6B:A8:31:88:DD:27:B2:AA:60
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/e6479c60-8b63-3eb3-947f-628003239ed4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45/d512566a-2d54-474a-a1b0-93c74d4f7e45.crl

            X509v3 Authority Key Identifier:
                keyid:1F:FA:6D:95:AF:5A:0B:BF:31:14:4C:3C:C6:AF:E5:51:0F:41:55:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/d512566a-2d54-474a-a1b0-93c74d4f7e45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.245.3.0/24
                  167.245.8.0-167.245.43.255
                  167.245.104.0-167.245.109.255
                  167.245.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:e1:3c:77:9f:bf:cb:38:8f:a8:e7:e3:74:1f:28:23:9d:53:
         ee:a6:6f:f7:5a:54:0e:07:24:16:60:17:59:66:d5:45:a9:31:
         ad:04:94:6a:1c:13:b3:86:0f:bd:39:d1:7d:1b:0f:eb:c8:5b:
         3b:7e:d5:3e:ea:5c:1f:5d:59:67:1f:e8:82:18:3e:02:29:db:
         5e:f1:14:64:20:d0:9e:78:65:84:14:d4:2e:e9:24:63:ca:24:
         e6:fa:01:d4:3b:a7:b3:b9:6a:14:51:90:9f:1e:c2:5d:09:3c:
         2a:7b:5b:7f:52:3b:cc:35:cd:b8:62:30:7e:38:6c:f4:04:8b:
         30:9b:a1:52:2b:f0:a8:f6:d8:04:b4:41:c5:f3:96:5a:92:56:
         6e:54:1d:4e:2f:12:8c:78:e7:6e:f7:f2:e7:2b:59:20:0f:69:
         cf:48:a7:eb:0c:b9:86:c4:bc:08:6c:6e:af:28:58:fd:22:c6:
         fc:53:da:f7:42:23:8a:a4:72:f4:d7:72:eb:53:2a:f2:14:27:
         a7:fb:d9:4d:fd:7a:9d:eb:a5:c0:a2:82:db:25:14:04:cb:92:
         fe:c1:c4:d5:32:ce:bb:2a:f5:a2:50:ea:a3:39:ad:7b:9b:fc:
         00:1a:07:1d:08:4c:ef:4c:9c:24:98:a9:e4:15:60:4a:62:28:
         31:7e:8b:c8
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEnwGoAjWfTYPCRpvMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDUxMjU2NmEtMmQ1NC00NzRhLWExYjAtOTNjNzRkNGY3
ZTQ1MB4XDTI1MDUyMjEzMDEwNVoXDTI1MDgyMDEzMDEwNVowLzEtMCsGA1UEAxMk
OTEyMWRmOTEtZWUyMy00MGU0LTk2ZTktOWM0OTdiNWFhYjUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqnVv47zwYNYM5glwsvgp70CoyjwvQaso/5X
oSFB3ryot2RvWmiMAy0zgDv2Iqboxu/JCAyLxO8koHr84jG9u5j95Ne7XOyvxstA
LUVqK3u8qruNPNfkTHjzj5OGgjXAlcOdnXpxJ7nmW0AkE9haTC1l1eSACIjK6xjw
L20P9WxM/XZF57XTSIQev+SkFJYQDnhh9K4pCh1E6OaQYjRyqE8e+Ibz/ztFNUR4
AzSp6VV5vJKkZbeVRv+DH1+W0rsJT8rkcM4lw7r1oU6Ft382mieLt7pAbWtHOQIe
cp/83qeKmkYIhrhB25i/wFEWzn2zZC7IOOA1uRE0MtnPCiL3KwIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFFyT+N9vvKH82BSAa6gxiN0nsqpgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9kNTEy
NTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3NGQ0ZjdlNDUvZTY0NzljNjAtOGI2My0z
ZWIzLTk0N2YtNjI4MDAzMjM5ZWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZDUxMjU2NmEtMmQ1NC00NzRhLWEx
YjAtOTNjNzRkNGY3ZTQ1L2Q1MTI1NjZhLTJkNTQtNDc0YS1hMWIwLTkzYzc0ZDRm
N2U0NS5jcmwwHwYDVR0jBBgwFoAUH/ptla9aC78xFEw8xq/lUQ9BVfYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9kNTEyNTY2YS0yZDU0LTQ3NGEtYTFiMC05M2M3
NGQ0ZjdlNDUuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQAp/UDMAwD
BAOn9QgDBAKn9SgwDAMEA6f1aAMEAaf1bAMEBaf1oDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQCG4Tx3n7/L
OI+o5+N0HygjnVPupm/3WlQOByQWYBdZZtVFqTGtBJRqHBOzhg+9OdF9Gw/ryFs7
ftU+6lwfXVlnH+iCGD4CKdte8RRkINCeeGWEFNQu6SRjyiTm+gHUO6ezuWoUUZCf
HsJdCTwqe1t/UjvMNc24YjB+OGz0BIswm6FSK/Co9tgEtEHF85ZaklZuVB1OLxKM
eOdu9/LnK1kgD2nPSKfrDLmGxLwIbG6vKFj9Isb8U9r3QiOKpHL013LrUyryFCen
+9lN/Xqd66XAooLbJRQEy5L+wcTVMs67KvWiUOqjOa17m/wAGgcdCEzvTJwkmKnk
FWBKYigxfovI
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:41:59 2025 by rpki-client