Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
File:                     b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa (raw, json)
Hash identifier:          m2ybkxbug4/8+Amc0B1dJcADwJGdyLa3IRZbsROMjp8=
Subject key identifier:   32:2A:0A:A0:F8:9E:F9:F3:2F:27:CA:AB:18:2C:68:4B:58:8C:59:ED
Certificate issuer:       /CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
Certificate serial:       010D0C9F432858497279BA585CDD1B1F6659B700
Authority key identifier: 13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     393796
IP address blocks:        63.245.180.0/23 maxlen: 24
                          104.128.32.0/20 maxlen: 24
                          130.51.32.0/23 maxlen: 24
                          2604:7640::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:ba:58:5c:dd:1b:1f:66:59:b7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=21e68909-d8f7-4dcf-ad24-cb76b82fa238
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:2c:34:f3:fd:45:64:b7:67:38:4f:1e:d8:27:
                    89:eb:6f:05:60:f4:b4:cf:f9:c0:26:0a:3f:d0:ac:
                    cb:47:44:93:1c:00:1b:73:84:de:39:e5:80:03:26:
                    00:f2:c6:6e:09:56:5f:74:97:87:8f:4f:5e:02:bf:
                    29:42:e9:f1:30:76:f1:11:dd:f9:cd:6a:f6:53:32:
                    3e:fb:74:22:54:8d:ac:28:e9:b2:af:7f:77:ff:b8:
                    56:28:a2:52:6b:b8:6d:4d:45:45:52:45:ca:2a:65:
                    63:e7:27:82:29:67:da:00:c8:1f:4b:9e:d3:59:3d:
                    44:19:9c:25:e3:52:b7:6b:f3:2f:70:57:b5:93:f4:
                    3c:d0:1f:f4:f1:7d:31:42:ca:22:ac:95:c7:a3:85:
                    d4:61:54:2d:79:21:85:17:6f:08:94:fd:1e:b5:40:
                    66:88:40:d2:e0:2a:22:b4:07:2d:eb:fc:b5:e0:78:
                    80:d6:e6:a6:3f:b9:1c:7f:4d:bf:c2:ea:90:d8:1d:
                    93:d4:a2:99:e3:c2:37:ea:28:45:b7:a5:ce:11:46:
                    e4:a0:4a:b3:d7:6b:5d:06:b9:dc:b5:57:c5:7c:8a:
                    da:b5:a1:84:1d:5f:e4:dc:c3:e6:bf:20:3c:e6:7e:
                    22:f1:74:a7:58:b8:95:e3:3a:1f:8f:de:8a:8a:7a:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:2A:0A:A0:F8:9E:F9:F3:2F:27:CA:AB:18:2C:68:4B:58:8C:59:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/b57357f1-780d-30e0-8f5c-852ff4bafc5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.crl

            X509v3 Authority Key Identifier:
                keyid:13:82:7D:94:A7:FE:AD:EB:60:AD:8D:16:6B:84:61:A4:83:DC:02:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/6d4ceb38-c27a-4ebd-9ad7-a6cece870d3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.245.180.0/23
                  104.128.32.0/20
                  130.51.32.0/23
                IPv6:
                  2604:7640::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:69:9e:a0:6d:66:56:b9:2a:6e:d2:48:14:92:da:e7:61:
         95:b1:f5:f2:6d:23:81:b1:02:3a:aa:93:fe:51:57:65:00:63:
         a6:00:83:6c:97:c1:fc:f9:e5:8b:c7:c0:96:85:aa:e4:44:f7:
         40:98:ee:89:e6:2b:dd:13:22:d0:f8:e2:8a:7b:82:36:d8:50:
         8b:8c:4a:3b:db:32:e0:34:97:f8:5a:21:6f:aa:dd:f9:d8:29:
         6e:b7:d2:89:81:fe:d7:ed:e4:40:85:d5:fb:0c:ea:57:10:53:
         c8:3b:93:91:02:fa:32:33:63:c4:87:66:f4:50:38:14:55:83:
         93:4b:3b:3c:d9:bc:e1:4e:87:4d:ce:06:69:a5:ca:83:31:a5:
         e7:e1:14:ae:35:a0:04:07:6b:bb:97:f9:39:a3:5e:aa:5f:ec:
         db:69:23:f2:d6:b1:d2:bd:20:a8:5b:1b:6c:d7:a3:a1:cb:56:
         fd:62:9c:4d:48:d0:f7:d9:30:fa:bb:d4:42:60:bf:dc:2d:b7:
         77:52:1b:79:13:55:93:b8:1e:2a:ed:61:5b:9b:1b:2d:8d:ed:
         aa:71:00:02:75:69:08:3d:0b:c2:7c:ce:49:bc:04:e3:6e:b9:
         fb:26:8b:32:2c:e8:72:29:dd:90:f9:60:99:69:d1:d5:f8:b6:
         f7:aa:22:bf
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWElyebpYXN0bH2ZZtwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ0Y2ViMzgtYzI3YS00ZWJkLTlhZDctYTZjZWNlODcw
ZDNjMB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
MjFlNjg5MDktZDhmNy00ZGNmLWFkMjQtY2I3NmI4MmZhMjM4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhyw08/1FZLdnOE8e2CeJ628FYPS0z/nAJgo/
0KzLR0STHAAbc4TeOeWAAyYA8sZuCVZfdJeHj09eAr8pQunxMHbxEd35zWr2UzI+
+3QiVI2sKOmyr393/7hWKKJSa7htTUVFUkXKKmVj5yeCKWfaAMgfS57TWT1EGZwl
41K3a/MvcFe1k/Q80B/08X0xQsoirJXHo4XUYVQteSGFF28IlP0etUBmiEDS4Coi
tAct6/y14HiA1uamP7kcf02/wuqQ2B2T1KKZ48I36ihFt6XOEUbkoEqz12tdBrnc
tVfFfIrataGEHV/k3MPmvyA85n4i8XSnWLiV4zofj96KinpBAQIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFDIqCqD4nvnzLyfKqxgsaEtYjFntMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82ZDRj
ZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNlY2U4NzBkM2MvYjU3MzU3ZjEtNzgwZC0z
MGUwLThmNWMtODUyZmY0YmFmYzVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNmQ0Y2ViMzgtYzI3YS00ZWJkLTlh
ZDctYTZjZWNlODcwZDNjLzZkNGNlYjM4LWMyN2EtNGViZC05YWQ3LWE2Y2VjZTg3
MGQzYy5jcmwwHwYDVR0jBBgwFoAUE4J9lKf+retgrY0Wa4RhpIPcAqgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82ZDRjZWIzOC1jMjdhLTRlYmQtOWFkNy1hNmNl
Y2U4NzBkM2MuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQBP/W0AwQE
aIAgAwQBgjMgMA0EAgACMAcDBQAmBHZAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBABm9aZ6gbWZWuSpu0kgU
ktrnYZWx9fJtI4GxAjqqk/5RV2UAY6YAg2yXwfz55YvHwJaFquRE90CY7onmK90T
ItD44op7gjbYUIuMSjvbMuA0l/haIW+q3fnYKW630omB/tft5ECF1fsM6lcQU8g7
k5EC+jIzY8SHZvRQOBRVg5NLOzzZvOFOh03OBmmlyoMxpefhFK41oAQHa7uX+Tmj
Xqpf7NtpI/LWsdK9IKhbG2zXo6HLVv1inE1I0PfZMPq71EJgv9wtt3dSG3kTVZO4
HirtYVubGy2N7apxAAJ1aQg9C8J8zkm8BONuufsmizIs6HIp3ZD5YJlp0dX4tveq
Ir8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 23:46:19 2025 by rpki-client