Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
File:                     c0d92aec-a852-3811-9169-c6a18fe58454.roa (raw, json)
Hash identifier:          uM2hLypLEiHSO6oxvHCZdCaOwdC3YM0p2A9VkmmmnV0=
Subject key identifier:   C5:EC:17:F0:31:4B:24:CC:00:36:1B:4A:5F:59:F1:72:FE:48:C4:B9
Certificate issuer:       /CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
Certificate serial:       010D0C9F432858498A34642BE48B185368108380
Authority key identifier: BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     14434
IP address blocks:        66.248.160.0/19 maxlen: 24
                          98.142.160.0/20 maxlen: 24
                          172.84.192.0/18 maxlen: 24
                          198.36.28.0/22 maxlen: 24
                          209.221.192.0/19 maxlen: 24
                          2606:5a00::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:64:2b:e4:8b:18:53:68:10:83:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc8dacf3-283f-4888-8217-ee30c6e58c44
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=de6ab9b1-b153-4417-9296-363baae81120
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:02:a6:04:60:2b:e8:36:0b:be:9d:b3:2e:fb:
                    50:32:13:5d:7b:87:47:5f:d3:72:6e:99:66:75:71:
                    e7:0b:4c:7a:61:67:64:2f:b2:22:5f:87:37:e5:c5:
                    7e:ea:e1:6e:f4:55:c4:bc:3f:62:68:f2:ae:39:55:
                    d0:89:18:bf:86:64:68:20:28:36:80:e8:22:3b:28:
                    05:92:87:86:c5:4a:7d:9c:97:56:95:bb:0c:6a:3f:
                    a6:6d:9d:6a:98:6d:51:50:cf:3a:23:c6:0e:86:0f:
                    ba:0f:14:92:28:8f:b9:94:11:03:e9:9b:aa:45:f2:
                    42:c3:31:00:ee:48:24:13:b0:48:5d:ea:79:78:bc:
                    ac:80:78:c6:a7:10:b9:ad:77:20:dc:e4:87:98:cf:
                    15:22:a8:a7:cf:07:f1:cd:02:1f:57:9f:01:c5:4e:
                    3d:d5:23:49:30:9a:46:26:c4:e0:a2:bd:78:8a:71:
                    e0:72:fb:ce:d3:81:b0:36:5c:99:ba:97:b8:f8:98:
                    94:ca:dc:82:52:a2:87:07:36:48:68:be:93:bc:33:
                    d1:b6:0c:3a:1c:ff:6f:83:d2:43:0e:31:38:8d:f4:
                    33:e6:21:cd:62:b0:8a:30:d5:92:f0:e1:f7:c8:6e:
                    6b:25:62:d5:11:35:cd:08:80:cc:30:2b:12:90:94:
                    23:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:EC:17:F0:31:4B:24:CC:00:36:1B:4A:5F:59:F1:72:FE:48:C4:B9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/c0d92aec-a852-3811-9169-c6a18fe58454.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44/dc8dacf3-283f-4888-8217-ee30c6e58c44.crl

            X509v3 Authority Key Identifier:
                keyid:BC:78:88:8A:0C:C4:26:DC:74:DC:53:A1:5F:F0:3B:F8:4A:D7:51:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/dc8dacf3-283f-4888-8217-ee30c6e58c44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.248.160.0/19
                  98.142.160.0/20
                  172.84.192.0/18
                  198.36.28.0/22
                  209.221.192.0/19
                IPv6:
                  2606:5a00::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:f0:c5:5f:37:dd:df:8b:af:52:12:b1:4b:03:db:61:60:5f:
         2b:1d:69:fa:46:12:f2:ef:48:8b:c1:29:59:e1:37:e3:ad:c6:
         f0:7f:48:1c:03:49:65:28:e5:82:1b:11:70:57:49:20:a9:34:
         b1:4e:46:ae:3d:de:5d:52:19:08:e3:af:3c:91:4b:f5:c1:34:
         d2:64:da:63:1a:28:4e:6e:af:3e:7d:f6:71:3d:bb:f1:c6:86:
         36:27:36:fc:c4:6d:15:af:f8:c1:e3:6c:04:99:47:5a:fd:d4:
         19:4d:85:13:72:c8:ed:f9:36:c1:8f:07:70:09:91:62:2b:a1:
         d8:13:87:29:88:ea:a4:d2:d4:d0:e9:63:8f:8d:55:f8:17:32:
         fd:e5:28:0b:69:bf:f8:13:b8:46:7d:ed:d4:4c:64:a3:52:60:
         bd:50:6c:7c:f4:3f:f6:cb:b2:0f:aa:f2:98:55:ed:c2:33:1e:
         76:12:bc:34:ab:fd:a8:9a:2f:08:08:4e:3b:ae:c7:1c:19:e6:
         96:3b:a7:28:0b:28:4b:fc:6c:8d:ae:50:57:a4:b1:97:e8:ed:
         13:35:39:a7:35:cd:20:75:ce:93:49:82:9a:16:41:61:b9:2a:
         6f:e9:e7:78:e4:48:4a:98:76:d1:d1:f5:cb:49:76:01:16:f8:
         b3:ec:c8:6a
-----BEGIN CERTIFICATE-----
MIIGajCCBVKgAwIBAgIUAQ0Mn0MoWEmKNGQr5IsYU2gQg4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM4ZGFjZjMtMjgzZi00ODg4LTgyMTctZWUzMGM2ZTU4
YzQ0MB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk
ZGU2YWI5YjEtYjE1My00NDE3LTkyOTYtMzYzYmFhZTgxMTIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwKmBGAr6DYLvp2zLvtQMhNde4dHX9Nybplm
dXHnC0x6YWdkL7IiX4c35cV+6uFu9FXEvD9iaPKuOVXQiRi/hmRoICg2gOgiOygF
koeGxUp9nJdWlbsMaj+mbZ1qmG1RUM86I8YOhg+6DxSSKI+5lBED6ZuqRfJCwzEA
7kgkE7BIXep5eLysgHjGpxC5rXcg3OSHmM8VIqinzwfxzQIfV58BxU491SNJMJpG
JsTgor14inHgcvvO04GwNlyZupe4+JiUytyCUqKHBzZIaL6TvDPRtgw6HP9vg9JD
DjE4jfQz5iHNYrCKMNWS8OH3yG5rJWLVETXNCIDMMCsSkJQjewIDAQABo4IDfDCC
A3gwHQYDVR0OBBYEFMXsF/AxSyTMADYbSl9Z8XL+SMS5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhk
YWNmMy0yODNmLTQ4ODgtODIxNy1lZTMwYzZlNThjNDQvYzBkOTJhZWMtYTg1Mi0z
ODExLTkxNjktYzZhMThmZTU4NDU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGM4ZGFjZjMtMjgzZi00ODg4LTgy
MTctZWUzMGM2ZTU4YzQ0L2RjOGRhY2YzLTI4M2YtNDg4OC04MjE3LWVlMzBjNmU1
OGM0NC5jcmwwHwYDVR0jBBgwFoAUvHiIigzEJtx03FOhX/A7+ErXURMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYzhkYWNmMy0yODNmLTQ4ODgtODIxNy1lZTMw
YzZlNThjNDQuY2VyMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQFQvigAwQE
Yo6gAwQGrFTAAwQCxiQcAwQF0d3AMA0EAgACMAcDBQAmBloAMFQGA1UdIAEB/wRK
MEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5u
ZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAArw
xV833d+Lr1ISsUsD22FgXysdafpGEvLvSIvBKVnhN+OtxvB/SBwDSWUo5YIbEXBX
SSCpNLFORq493l1SGQjjrzyRS/XBNNJk2mMaKE5urz599nE9u/HGhjYnNvzEbRWv
+MHjbASZR1r91BlNhRNyyO35NsGPB3AJkWIrodgThymI6qTS1NDpY4+NVfgXMv3l
KAtpv/gTuEZ97dRMZKNSYL1QbHz0P/bLsg+q8phV7cIzHnYSvDSr/aiaLwgITjuu
xxwZ5pY7pygLKEv8bI2uUFeksZfo7RM1Oac1zSB1zpNJgpoWQWG5Km/p53jkSEqY
dtHR9ctJdgEW+LPsyGo=
-----END CERTIFICATE-----
Generated at Wed Apr 30 11:44:03 2025 by rpki-client