Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa
File:                     1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa (raw, json)
Hash identifier:          u59Q8GwHvGzJHtjcq0SuVBhkv09QQgXtSuPzapCVaRk=
Subject key identifier:   A5:E1:BA:7E:E4:42:95:2C:1D:66:5B:E7:CB:A3:6B:AE:E0:A8:82:B3
Certificate issuer:       /CN=8314711c-e263-425a-adda-3995b7095d9d
Certificate serial:       010D0C9F432858499F24B2749CB4EDDF9CA9E750
Authority key identifier: D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa
Signing time:             Wed 23 Apr 2025 13:01:01 +0000
ROA not before:           Wed 23 Apr 2025 13:01:01 +0000
ROA not after:            Tue 22 Jul 2025 13:01:01 +0000
asID:                     396982
IP address blocks:        104.198.112.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:24:b2:74:9c:b4:ed:df:9c:a9:e7:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8314711c-e263-425a-adda-3995b7095d9d
        Validity
            Not Before: Apr 23 13:01:01 2025 GMT
            Not After : Jul 22 13:01:01 2025 GMT
        Subject: CN=571f2788-39bb-461b-9fdf-6474962a175e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ec:db:84:e9:60:f8:5c:5d:7e:d1:56:07:3a:
                    a9:4e:eb:e4:9e:a6:b7:49:0f:8f:e0:68:10:cd:d0:
                    15:a9:eb:6b:bc:48:28:26:85:39:6d:c0:1a:37:fe:
                    29:15:5b:59:24:29:87:2b:fb:1d:7e:2f:e8:09:5a:
                    42:89:4c:0a:73:3e:f4:64:10:23:7a:aa:5e:80:a2:
                    18:e4:99:97:3a:c9:88:66:b7:f9:14:aa:b9:f5:34:
                    ad:ea:6a:20:ed:8d:f5:b8:dd:ea:f4:86:1a:36:91:
                    72:70:92:54:c1:1d:4f:35:3f:3d:90:f2:37:19:b5:
                    b2:5f:dc:57:fa:91:db:d8:27:cb:b2:fa:08:dd:93:
                    9c:87:af:bc:ad:e7:73:11:19:5c:c4:8a:dc:20:9e:
                    e9:c3:48:20:84:89:1d:aa:26:95:6b:3d:b7:af:b0:
                    fe:22:5e:f4:a2:dd:48:14:b5:7f:6a:73:93:8f:cd:
                    de:8e:00:c0:ef:98:14:93:15:84:d6:b8:75:65:02:
                    d8:10:e4:03:36:80:53:01:f1:4f:6d:44:49:e7:1b:
                    02:37:57:24:8c:a3:65:30:fb:1f:2a:d4:8a:2b:16:
                    30:20:48:59:40:d1:b8:f2:b6:c8:cf:50:5a:19:bc:
                    bc:52:18:61:20:ea:c5:71:04:c1:3a:25:4d:e1:ec:
                    f0:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:E1:BA:7E:E4:42:95:2C:1D:66:5B:E7:CB:A3:6B:AE:E0:A8:82:B3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/1b21a6bd-393a-3758-b6f8-8bf00cc96628.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d/8314711c-e263-425a-adda-3995b7095d9d.crl

            X509v3 Authority Key Identifier:
                keyid:D7:89:41:9C:30:38:7C:E9:99:8E:FA:C3:C7:2B:68:00:5E:26:9E:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/8314711c-e263-425a-adda-3995b7095d9d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.198.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:06:58:dd:57:10:d2:97:c7:4f:13:a0:e2:a4:80:ee:5e:ad:
         bf:11:55:0a:99:ed:dc:77:7e:ec:a6:51:c2:ba:42:8f:7f:1b:
         7c:0a:6f:e9:ad:d4:6d:9d:5a:44:ea:03:c3:2c:8c:05:5d:ba:
         fe:ff:e7:35:b2:e7:55:e1:a8:ec:eb:95:ca:80:39:b9:48:1f:
         86:6c:82:0d:4b:81:1b:67:d1:08:75:72:29:e0:30:00:e9:37:
         4e:4b:64:6d:e4:e1:d4:c3:61:f5:2f:a6:ca:2a:16:bf:09:24:
         51:3c:70:00:5d:e0:e3:e3:4e:67:60:a7:a1:52:22:00:4d:41:
         77:4c:8d:c4:e5:37:9e:25:66:46:61:01:eb:5e:13:f0:95:7e:
         26:6e:9b:75:37:de:d4:f5:cd:c9:e9:e4:81:27:9f:bc:26:06:
         14:36:3b:e7:2a:b5:50:f7:16:a6:f4:6c:16:2d:eb:af:1a:08:
         a9:10:6f:53:d8:e7:0a:9a:a5:28:8a:cf:0c:1b:cd:e0:03:64:
         10:8b:02:c6:25:11:09:39:8f:ad:23:47:68:fd:80:4e:b9:53:
         d6:ed:bd:dd:39:18:8c:ca:a3:2f:f4:ff:3a:b6:b5:50:ed:9b:
         d6:1d:59:8b:f8:36:e5:53:4e:ec:5f:b8:48:95:f4:9f:ba:cf:
         e1:cb:18:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfJLJ0nLTt35yp51AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODMxNDcxMWMtZTI2My00MjVhLWFkZGEtMzk5NWI3MDk1
ZDlkMB4XDTI1MDQyMzEzMDEwMVoXDTI1MDcyMjEzMDEwMVowLzEtMCsGA1UEAxMk
NTcxZjI3ODgtMzliYi00NjFiLTlmZGYtNjQ3NDk2MmExNzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+zbhOlg+FxdftFWBzqpTuvknqa3SQ+P4GgQ
zdAVqetrvEgoJoU5bcAaN/4pFVtZJCmHK/sdfi/oCVpCiUwKcz70ZBAjeqpegKIY
5JmXOsmIZrf5FKq59TSt6mog7Y31uN3q9IYaNpFycJJUwR1PNT89kPI3GbWyX9xX
+pHb2CfLsvoI3ZOch6+8redzERlcxIrcIJ7pw0gghIkdqiaVaz23r7D+Il70ot1I
FLV/anOTj83ejgDA75gUkxWE1rh1ZQLYEOQDNoBTAfFPbURJ5xsCN1ckjKNlMPsf
KtSKKxYwIEhZQNG48rbIz1BaGby8UhhhIOrFcQTBOiVN4ezwGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKXhun7kQpUsHWZb58uja67gqIKzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0
NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1YjcwOTVkOWQvMWIyMWE2YmQtMzkzYS0z
NzU4LWI2ZjgtOGJmMDBjYzk2NjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODMxNDcxMWMtZTI2My00MjVhLWFk
ZGEtMzk5NWI3MDk1ZDlkLzgzMTQ3MTFjLWUyNjMtNDI1YS1hZGRhLTM5OTViNzA5
NWQ5ZC5jcmwwHwYDVR0jBBgwFoAU14lBnDA4fOmZjvrDxytoAF4mnu0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84MzE0NzExYy1lMjYzLTQyNWEtYWRkYS0zOTk1
YjcwOTVkOWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEaMZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYGWN1XENKXx08ToOKkgO5erb8RVQqZ7dx3fuymUcK6Qo9/G3wKb+mt
1G2dWkTqA8MsjAVduv7/5zWy51XhqOzrlcqAOblIH4Zsgg1LgRtn0Qh1cingMADp
N05LZG3k4dTDYfUvpsoqFr8JJFE8cABd4OPjTmdgp6FSIgBNQXdMjcTlN54lZkZh
AeteE/CVfiZum3U33tT1zcnp5IEnn7wmBhQ2O+cqtVD3Fqb0bBYt668aCKkQb1PY
5wqapSiKzwwbzeADZBCLAsYlEQk5j60jR2j9gE65U9btvd05GIzKoy/0/zq2tVDt
m9YdWYv4NuVTTuxfuEiV9J+6z+HLGJU=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:35:24 2025 by rpki-client