Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/62d0b164-b48b-3add-b375-5f365cab02cd.roa
File:                     62d0b164-b48b-3add-b375-5f365cab02cd.roa (raw, json)
Hash identifier:          HcFiDjLec0wqWeRx2aBTb+I2D68MnbFIJL1Bdpds3ck=
Subject key identifier:   79:EA:8E:12:7E:5B:7F:91:7A:40:75:96:48:30:2D:8F:11:4E:AB:40
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858498CFF03B8BCA7E4652130D140
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/62d0b164-b48b-3add-b375-5f365cab02cd.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     19905
IP address blocks:        216.123.220.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:03:b8:bc:a7:e4:65:21:30:d1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=3454e8cb-0af5-4411-bd87-700fb3300769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:83:f1:5c:ef:12:c6:4f:70:8e:46:f9:30:f0:
                    8e:be:b7:7b:18:80:a7:41:7f:c3:1e:6c:4d:b7:82:
                    1a:8b:9f:e8:59:91:9d:a8:cf:09:23:15:5c:f3:ce:
                    5b:91:32:5e:f9:cf:1f:53:75:d2:6d:be:eb:3c:4f:
                    7f:f4:e0:a4:87:4d:c6:0a:e2:cc:9e:2c:33:c9:ac:
                    2d:9c:8c:b2:6c:b1:19:f8:36:02:56:0a:4b:81:b5:
                    36:98:f5:dd:aa:63:84:62:83:52:1a:d4:04:d8:d7:
                    51:39:39:b3:7f:3a:70:90:7e:5c:f6:57:3e:48:eb:
                    45:bb:e6:b4:3c:d8:18:62:10:aa:a9:1d:38:91:95:
                    90:9f:a6:6b:5e:ba:72:4e:cc:f2:71:7d:00:b1:e6:
                    85:cc:d8:64:b8:dd:b8:77:42:8e:1f:e7:01:32:13:
                    a9:95:15:6a:79:06:6a:23:db:63:fa:e3:97:ed:6a:
                    cd:5c:47:c0:49:6d:3c:63:e4:d7:68:99:96:01:3c:
                    27:1d:e0:a3:10:04:8f:cd:ac:1b:53:9e:7d:dd:63:
                    96:59:49:3e:f0:5a:b5:72:0d:7e:a9:6b:41:46:ad:
                    97:a4:77:c5:53:29:da:16:0a:fe:2f:db:fb:d5:11:
                    9d:de:4d:d8:95:9b:1d:de:a5:ff:88:92:69:a6:e4:
                    33:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:EA:8E:12:7E:5B:7F:91:7A:40:75:96:48:30:2D:8F:11:4E:AB:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/62d0b164-b48b-3add-b375-5f365cab02cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.123.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         95:98:2d:95:44:b6:b1:c3:83:8e:0e:23:d9:fc:cb:96:cd:44:
         96:ab:17:e3:1e:37:c6:6f:6b:4c:30:f9:8d:32:60:e7:2a:48:
         54:dd:4f:5d:ab:c2:ae:f5:b4:3d:b2:83:74:5f:d8:00:8b:b7:
         7f:ca:3a:df:ab:51:ff:70:de:b6:f1:a3:79:8b:4b:23:1a:1e:
         b1:17:33:26:b8:6b:96:0b:ae:e6:f6:a2:fe:e4:88:88:2a:1f:
         93:47:3c:d4:74:4a:40:01:6a:cf:f8:74:83:27:1e:b0:da:60:
         e4:36:41:eb:5b:0e:ca:23:f2:a9:57:24:be:e9:fb:54:6d:09:
         41:d4:33:f3:b8:60:4d:33:0f:67:4e:9f:94:a5:1c:7b:fa:34:
         df:2a:11:d5:6d:b6:24:1d:0f:0d:a2:76:9d:8e:86:ac:ae:13:
         e5:2b:06:69:2a:ef:e4:1d:57:0f:09:fc:4e:d5:0b:19:a4:e5:
         fd:e1:3f:1f:05:c6:a4:71:eb:6a:ac:e5:c6:35:05:34:99:be:
         4b:cd:ad:8e:48:95:74:2c:2f:51:1c:94:2c:a3:48:a6:00:12:
         2f:e0:d2:dd:00:e6:59:b2:56:c0:8e:ab:33:ed:01:01:52:c6:
         78:de:7b:76:13:1b:11:71:a5:f5:23:f3:66:d3:66:91:fd:05:
         89:f5:ff:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wO4vKfkZSEw0UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
MzQ1NGU4Y2ItMGFmNS00NDExLWJkODctNzAwZmIzMzAwNzY5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm4PxXO8Sxk9wjkb5MPCOvrd7GICnQX/DHmxN
t4Iai5/oWZGdqM8JIxVc885bkTJe+c8fU3XSbb7rPE9/9OCkh03GCuLMniwzyawt
nIyybLEZ+DYCVgpLgbU2mPXdqmOEYoNSGtQE2NdROTmzfzpwkH5c9lc+SOtFu+a0
PNgYYhCqqR04kZWQn6ZrXrpyTszycX0AseaFzNhkuN24d0KOH+cBMhOplRVqeQZq
I9tj+uOX7WrNXEfASW08Y+TXaJmWATwnHeCjEASPzawbU5593WOWWUk+8Fq1cg1+
qWtBRq2XpHfFUynaFgr+L9v71RGd3k3YlZsd3qX/iJJppuQz/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHnqjhJ+W3+RekB1lkgwLY8RTqtAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNjJkMGIxNjQtYjQ4Yi0z
YWRkLWIzNzUtNWYzNjVjYWIwMmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2HvcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJWYLZVEtrHDg44OI9n8y5bNRJarF+MeN8Zva0ww+Y0yYOcqSFTdT12r
wq71tD2yg3Rf2ACLt3/KOt+rUf9w3rbxo3mLSyMaHrEXMya4a5YLrub2ov7kiIgq
H5NHPNR0SkABas/4dIMnHrDaYOQ2QetbDsoj8qlXJL7p+1RtCUHUM/O4YE0zD2dO
n5SlHHv6NN8qEdVttiQdDw2idp2OhqyuE+UrBmkq7+QdVw8J/E7VCxmk5f3hPx8F
xqRx62qs5cY1BTSZvkvNrY5IlXQsL1EclCyjSKYAEi/g0t0A5lmyVsCOqzPtAQFS
xnjee3YTGxFxpfUj82bTZpH9BYn1/1E=
-----END CERTIFICATE-----
Generated at Sat Apr 26 12:22:38 2025 by rpki-client