Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa
File:                     e7c15b5e-702d-38ab-aae4-f403d6989951.roa (raw, json)
Hash identifier:          bq2ltM0j2DK+55q4c9WDH+fODfb0VbLuiCrflJsr9zU=
Subject key identifier:   66:1E:6A:4A:58:65:EC:55:B4:F8:6D:E7:7C:B0:CF:C9:5F:54:08:19
Certificate issuer:       /CN=e0cdac38-6681-4b09-b992-31d2030b8796
Certificate serial:       010D0C9F4328584986046DA38B34D43D42649700
Authority key identifier: AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     16509
IP address blocks:        138.133.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6d:a3:8b:34:d4:3d:42:64:97:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0cdac38-6681-4b09-b992-31d2030b8796
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=70aadb2b-9523-480a-b8f3-ed318d33a2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:44:e5:92:52:df:18:d1:6d:ce:36:bb:24:ab:
                    c2:79:a0:bb:ef:8d:f5:4c:8d:e0:54:4d:b1:be:bc:
                    44:94:ec:4b:5a:55:72:6d:84:d8:2f:d9:fe:70:d5:
                    49:6b:70:a4:f8:2a:7e:d3:1c:f1:ee:2f:c9:2a:bb:
                    c1:8c:ef:7f:d8:db:67:cd:05:a1:3d:58:39:7b:33:
                    2d:99:41:e6:7c:22:bf:b6:b9:11:94:e5:fd:54:52:
                    1c:79:6e:14:0e:a6:6b:82:bd:1d:8b:97:45:d3:fe:
                    a7:ca:37:8c:f4:e2:04:7c:5d:f1:1e:03:04:8f:01:
                    c3:4b:a0:6c:41:f7:8b:4c:49:5c:64:b7:f9:ec:3f:
                    a4:f6:71:c7:42:83:4c:3a:f1:71:80:54:f3:d1:b1:
                    13:50:1e:34:eb:84:14:a5:79:99:95:be:f7:d8:32:
                    36:1e:cb:83:4b:34:5e:7f:8e:9a:cf:2a:bc:2f:34:
                    b6:7d:db:3a:e5:6a:a7:16:28:3f:e7:ec:68:6b:42:
                    a0:a4:7a:9b:aa:63:30:52:db:a3:65:a0:e5:d2:07:
                    51:e6:68:f0:13:0a:7a:df:ed:2c:c0:b2:a0:d8:e4:
                    7a:3e:ed:1b:0e:aa:b4:5e:68:d6:dd:ad:f5:c2:4a:
                    84:a3:a9:07:b8:0f:f6:50:6a:7d:f3:f7:df:12:f1:
                    86:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:1E:6A:4A:58:65:EC:55:B4:F8:6D:E7:7C:B0:CF:C9:5F:54:08:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e7c15b5e-702d-38ab-aae4-f403d6989951.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796/e0cdac38-6681-4b09-b992-31d2030b8796.crl

            X509v3 Authority Key Identifier:
                keyid:AE:50:A4:F3:A0:5E:B8:67:2C:03:39:B8:C9:AB:BC:2B:6B:17:34:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0cdac38-6681-4b09-b992-31d2030b8796.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.133.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a4:42:44:76:c7:34:c1:ab:30:70:f3:6f:ae:40:0c:14:03:ac:
         d9:82:90:99:72:ab:5e:5d:4b:83:4e:57:ea:67:0f:7e:a3:0a:
         c6:8e:6e:2e:0a:a3:9a:8f:a5:b4:fc:63:9f:f6:e7:b0:e6:9e:
         ae:f3:e4:80:9a:88:37:f7:d4:9a:41:99:79:eb:59:3d:86:0b:
         d1:a6:3c:00:c0:12:59:f4:b7:13:6e:87:7a:6f:84:21:86:b2:
         d0:66:53:f0:a5:17:91:92:64:7b:8c:a9:be:96:f4:d5:69:f3:
         f9:e8:1d:a2:69:09:3b:29:5d:ac:df:ab:e6:ae:37:9a:bb:23:
         80:26:5f:a3:b8:7f:83:e0:a9:33:39:6d:4d:ff:ee:ab:df:68:
         07:14:43:8a:d5:97:8c:9c:34:37:d3:a5:c5:48:43:94:dc:03:
         94:9f:f2:9b:03:2c:89:c2:46:2a:bf:c0:ce:d6:82:c7:a4:03:
         03:96:d4:9e:ae:b5:95:42:70:1a:8d:c5:da:f1:84:bb:43:b6:
         8e:9e:d0:e9:66:e8:65:57:6f:88:3e:73:7f:19:81:0b:a5:cc:
         f9:9a:5e:a6:5f:98:0c:cf:a0:ce:40:ce:78:8d:5b:21:d6:e7:
         ab:29:da:c1:f0:67:17:ae:3d:03:a2:cb:f3:ef:77:71:7a:b1:
         10:4f:5e:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBG2jizTUPUJklwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBjZGFjMzgtNjY4MS00YjA5LWI5OTItMzFkMjAzMGI4
Nzk2MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk
NzBhYWRiMmItOTUyMy00ODBhLWI4ZjMtZWQzMThkMzNhMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnkTlklLfGNFtzja7JKvCeaC77431TI3gVE2x
vrxElOxLWlVybYTYL9n+cNVJa3Ck+Cp+0xzx7i/JKrvBjO9/2NtnzQWhPVg5ezMt
mUHmfCK/trkRlOX9VFIceW4UDqZrgr0di5dF0/6nyjeM9OIEfF3xHgMEjwHDS6Bs
QfeLTElcZLf57D+k9nHHQoNMOvFxgFTz0bETUB4064QUpXmZlb732DI2HsuDSzRe
f46azyq8LzS2fds65WqnFig/5+xoa0KgpHqbqmMwUtujZaDl0gdR5mjwEwp63+0s
wLKg2OR6Pu0bDqq0XmjW3a31wkqEo6kHuA/2UGp98/ffEvGGnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGYeakpYZexVtPht53ywz8lfVAgZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGNk
YWMzOC02NjgxLTRiMDktYjk5Mi0zMWQyMDMwYjg3OTYvZTdjMTViNWUtNzAyZC0z
OGFiLWFhZTQtZjQwM2Q2OTg5OTUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBjZGFjMzgtNjY4MS00YjA5LWI5
OTItMzFkMjAzMGI4Nzk2L2UwY2RhYzM4LTY2ODEtNGIwOS1iOTkyLTMxZDIwMzBi
ODc5Ni5jcmwwHwYDVR0jBBgwFoAUrlCk86BeuGcsAzm4yau8K2sXNDkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMGNkYWMzOC02NjgxLTRiMDktYjk5Mi0zMWQy
MDMwYjg3OTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAioWpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKRCRHbHNMGrMHDzb65ADBQDrNmCkJlyq15dS4NOV+pnD36jCsaObi4K
o5qPpbT8Y5/257Dmnq7z5ICaiDf31JpBmXnrWT2GC9GmPADAEln0txNuh3pvhCGG
stBmU/ClF5GSZHuMqb6W9NVp8/noHaJpCTspXazfq+auN5q7I4AmX6O4f4PgqTM5
bU3/7qvfaAcUQ4rVl4ycNDfTpcVIQ5TcA5Sf8psDLInCRiq/wM7WgsekAwOW1J6u
tZVCcBqNxdrxhLtDto6e0Olm6GVXb4g+c38ZgQulzPmaXqZfmAzPoM5AzniNWyHW
56sp2sHwZxeuPQOiy/Pvd3F6sRBPXo8=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:36:02 2025 by rpki-client