Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ad94a1ea-9702-3d9f-8f86-e573feaad247.roa
File:                     ad94a1ea-9702-3d9f-8f86-e573feaad247.roa (raw, json)
Hash identifier:          Ys8tQs0Erz3LDdD7U1jdlt7K0zwFzEXmUn88vsp2+VQ=
Subject key identifier:   13:8F:00:B2:23:27:8D:68:6C:C4:EC:2B:3D:43:C8:9F:1C:AA:83:49
Certificate issuer:       /CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
Certificate serial:       010D0C9F432858495ABEC77B37D32C05569F4A20
Authority key identifier: AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ad94a1ea-9702-3d9f-8f86-e573feaad247.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     46457
IP address blocks:        164.116.49.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c7:7b:37:d3:2c:05:56:9f:4a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c3399d97-64f6-4e12-8cbe-4d11491ad816
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=7ebc6ca1-32dc-4f16-81f3-744f536c0034
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:2b:45:72:89:10:ea:7b:9c:4e:ae:6b:16:64:
                    80:9c:79:d6:ea:a4:47:f8:d1:3f:3b:84:fa:aa:3c:
                    0e:cf:e8:ae:fe:fb:5a:fb:cc:84:d8:10:5c:f4:77:
                    98:22:06:be:a8:58:95:a2:bc:15:1a:8d:64:e6:07:
                    f3:54:d2:65:56:2d:17:52:ec:cf:2d:24:51:3a:90:
                    27:cc:ca:e6:2b:22:80:31:7f:0c:1b:96:62:24:48:
                    b3:cb:8d:77:00:01:c9:0d:e2:19:e7:09:fd:11:f9:
                    7c:0d:60:9c:64:ad:26:cb:d1:07:6a:84:52:7b:9d:
                    ce:0f:79:96:8d:1c:8e:3a:4f:98:83:54:80:5c:a0:
                    76:6b:21:d7:9b:e9:7c:ab:03:7d:3f:eb:c0:2a:57:
                    74:3a:2a:c2:2a:87:c6:e8:5b:e1:12:61:fc:d2:63:
                    50:e1:9c:9b:78:cc:41:e4:ae:7f:8d:55:a4:7c:e7:
                    5c:c8:05:ce:94:f6:4e:4e:1c:73:00:44:f8:74:3e:
                    1a:a2:87:84:ac:93:65:9b:8f:8d:7c:fe:94:bc:6a:
                    de:ea:12:a8:68:74:64:7a:85:98:95:76:e5:e2:0b:
                    71:a8:2a:fd:ec:35:b5:f0:6f:3e:d3:07:de:c5:98:
                    08:35:af:3b:d8:8c:25:a3:94:86:d5:19:f5:77:9a:
                    4f:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:8F:00:B2:23:27:8D:68:6C:C4:EC:2B:3D:43:C8:9F:1C:AA:83:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/ad94a1ea-9702-3d9f-8f86-e573feaad247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816/c3399d97-64f6-4e12-8cbe-4d11491ad816.crl

            X509v3 Authority Key Identifier:
                keyid:AE:9F:C4:18:27:7C:A7:FA:C1:3F:17:65:C6:D4:CC:82:0E:16:5E:23

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c3399d97-64f6-4e12-8cbe-4d11491ad816.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.116.49.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1b:ce:cb:63:b3:cb:a8:60:ef:e1:a6:c0:7b:39:7f:af:59:8f:
         fa:51:45:e6:20:80:0d:1e:dc:e6:d3:3a:aa:3f:1d:34:ac:c5:
         93:ec:89:ab:4b:39:bd:2b:ae:b8:7e:8e:91:e7:2d:bc:97:1b:
         1a:e4:cf:0f:2a:a7:3a:e0:07:ad:e7:24:bd:a9:d8:99:42:d7:
         00:a0:42:03:d0:3d:31:18:f7:c7:8b:99:4b:36:9b:43:e0:94:
         1d:75:ed:4a:9a:d6:2d:5c:62:0f:1a:bd:64:97:f7:15:91:ce:
         a3:77:fd:17:b6:fa:34:64:eb:19:db:16:b0:90:cb:41:58:18:
         e8:03:f7:a9:44:5d:6a:eb:5b:5a:82:de:41:bc:31:12:0d:38:
         5e:8b:b3:af:c1:66:ad:32:64:0b:1e:0a:2f:42:cc:54:9f:db:
         08:bf:d9:de:8a:32:ee:e6:f5:ad:6c:ff:5f:88:50:9e:91:ce:
         7a:cb:4c:54:46:d9:fd:d5:18:e6:21:49:bd:7f:ab:28:b8:6f:
         ff:0d:e3:2f:6c:87:a2:8f:14:92:cc:05:f5:19:f4:b1:55:9d:
         36:78:9b:62:38:4a:ab:3f:c4:9d:55:50:28:8a:c5:3d:6d:71:
         43:a8:f6:3b:8e:18:92:fe:24:9d:df:f0:b1:54:14:40:b5:27:
         4e:77:5c:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsd7N9MsBVafSiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMzOTlkOTctNjRmNi00ZTEyLThjYmUtNGQxMTQ5MWFk
ODE2MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
N2ViYzZjYTEtMzJkYy00ZjE2LTgxZjMtNzQ0ZjUzNmMwMDM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiCtFcokQ6nucTq5rFmSAnHnW6qRH+NE/O4T6
qjwOz+iu/vta+8yE2BBc9HeYIga+qFiVorwVGo1k5gfzVNJlVi0XUuzPLSRROpAn
zMrmKyKAMX8MG5ZiJEizy413AAHJDeIZ5wn9Efl8DWCcZK0my9EHaoRSe53OD3mW
jRyOOk+Yg1SAXKB2ayHXm+l8qwN9P+vAKld0OirCKofG6FvhEmH80mNQ4ZybeMxB
5K5/jVWkfOdcyAXOlPZOThxzAET4dD4aooeErJNlm4+NfP6UvGre6hKoaHRkeoWY
lXbl4gtxqCr97DW18G8+0wfexZgINa872Iwlo5SG1Rn1d5pP4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOPALIjJ41obMTsKz1DyJ8cqoNJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5
OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDExNDkxYWQ4MTYvYWQ5NGExZWEtOTcwMi0z
ZDlmLThmODYtZTU3M2ZlYWFkMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzMzOTlkOTctNjRmNi00ZTEyLThj
YmUtNGQxMTQ5MWFkODE2L2MzMzk5ZDk3LTY0ZjYtNGUxMi04Y2JlLTRkMTE0OTFh
ZDgxNi5jcmwwHwYDVR0jBBgwFoAUrp/EGCd8p/rBPxdlxtTMgg4WXiMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMzM5OWQ5Ny02NGY2LTRlMTItOGNiZS00ZDEx
NDkxYWQ4MTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApHQxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABvOy2Ozy6hg7+GmwHs5f69Zj/pRReYggA0e3ObTOqo/HTSsxZPsiatL
Ob0rrrh+jpHnLbyXGxrkzw8qpzrgB63nJL2p2JlC1wCgQgPQPTEY98eLmUs2m0Pg
lB117Uqa1i1cYg8avWSX9xWRzqN3/Re2+jRk6xnbFrCQy0FYGOgD96lEXWrrW1qC
3kG8MRINOF6Ls6/BZq0yZAseCi9CzFSf2wi/2d6KMu7m9a1s/1+IUJ6RznrLTFRG
2f3VGOYhSb1/qyi4b/8N4y9sh6KPFJLMBfUZ9LFVnTZ4m2I4Sqs/xJ1VUCiKxT1t
cUOo9juOGJL+JJ3f8LFUFEC1J053XPI=
-----END CERTIFICATE-----
Generated at Mon Apr 28 00:38:08 2025 by rpki-client