Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
File:                     91a33a82-7a3f-380c-8092-58cb232957ba.roa (raw, json)
Hash identifier:          d2sk1yEPiacQATcIaXakycrj3xc+3XJcN7mUDLA9um8=
Subject key identifier:   41:27:32:15:08:87:D2:0F:BA:D0:92:94:9C:09:DD:EA:D0:7A:17:F4
Certificate issuer:       /CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
Certificate serial:       010D0C9F43285849DF5A6535B35D29806BBAA160
Authority key identifier: F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     6315
IP address blocks:        68.69.160.0/20 maxlen: 20
                          166.70.0.0/16 maxlen: 16
                          198.60.22.0/24 maxlen: 24
                          198.60.80.0/22 maxlen: 22
                          198.60.84.0/24 maxlen: 24
                          198.60.113.0/24 maxlen: 24
                          198.60.114.0/24 maxlen: 24
                          199.104.120.0/21 maxlen: 21
                          204.107.178.0/24 maxlen: 24
                          204.228.128.0/19 maxlen: 19
                          207.135.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:65:35:b3:5d:29:80:6b:ba:a1:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0fe7804f-f16a-4f78-9979-6a8d5099e5e7
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=f1ca4aa6-464f-448e-b84a-4dbc8b32ef68
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:9f:ec:fd:0c:47:0a:a3:64:b8:fd:2e:d9:56:
                    c1:ce:42:56:ed:0d:3f:a3:dc:0b:40:a2:87:eb:15:
                    ae:3b:8a:e5:50:58:1f:0f:fd:df:35:3b:0f:dd:23:
                    9d:d5:72:af:5c:3b:59:15:ac:b1:f8:26:e5:0b:c9:
                    21:4e:07:f9:3a:b2:64:4f:0c:1b:fd:3f:c8:be:27:
                    9d:94:db:fb:90:07:93:38:f3:ef:b8:4b:c6:01:63:
                    84:9e:08:cb:4b:ae:c1:62:a6:66:99:05:16:9c:50:
                    99:49:02:39:53:34:ef:c1:b8:76:48:8e:3c:9f:0c:
                    51:c7:aa:c5:0b:e3:e5:a5:52:a0:2f:8c:a3:1a:7a:
                    d8:f4:be:c4:d6:55:1d:ab:36:ae:c9:4b:c8:d9:50:
                    7c:f7:d1:80:51:b6:1b:4e:f3:ba:20:c9:35:cf:47:
                    b6:4a:c3:d3:91:8e:88:82:76:de:5c:2a:7c:13:09:
                    76:a4:21:37:c5:80:90:b5:f3:35:e7:02:f7:01:b9:
                    88:8b:3c:05:16:33:95:03:91:b5:c3:c3:f4:53:33:
                    91:47:20:a1:98:a5:71:45:ac:60:d5:93:82:58:0f:
                    2a:eb:96:4a:ab:f1:93:05:b2:01:0b:a5:40:7b:99:
                    2f:63:7f:41:09:24:94:85:3e:e6:15:74:04:37:28:
                    8b:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:27:32:15:08:87:D2:0F:BA:D0:92:94:9C:09:DD:EA:D0:7A:17:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/91a33a82-7a3f-380c-8092-58cb232957ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.crl

            X509v3 Authority Key Identifier:
                keyid:F9:55:C0:43:84:51:2F:06:CF:3A:B4:BA:91:F2:6A:C3:4D:A4:E4:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0fe7804f-f16a-4f78-9979-6a8d5099e5e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  68.69.160.0/20
                  166.70.0.0/16
                  198.60.22.0/24
                  198.60.80.0-198.60.84.255
                  198.60.113.0-198.60.114.255
                  199.104.120.0/21
                  204.107.178.0/24
                  204.228.128.0/19
                  207.135.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:fe:b0:79:43:da:28:07:cf:26:00:43:6f:48:4b:ef:56:ff:
         4b:de:bd:b8:59:2e:a4:d9:ed:b6:0a:6d:3a:ab:01:81:75:a0:
         ac:5d:2c:81:2f:b4:33:44:98:6f:c6:d2:26:63:55:ee:ea:ff:
         fd:ae:a9:76:44:29:b8:40:71:0a:b7:7c:74:fd:ac:ef:53:a9:
         f4:93:e0:cc:5b:37:4b:0f:7f:8c:95:21:62:3f:0a:7c:9a:49:
         52:14:b3:4c:1f:09:66:b2:64:e5:a8:fb:10:c8:33:65:f4:77:
         d1:64:37:67:87:c9:41:12:3e:de:b0:68:52:3c:5e:5c:f3:40:
         a6:2b:cd:80:bd:9a:81:29:f5:47:4f:94:67:60:50:f1:7d:a6:
         14:ab:c4:82:6b:3c:54:cf:24:02:1a:b0:3b:53:a2:af:86:9b:
         c3:08:21:9c:72:9d:33:37:ee:87:3f:77:8c:fa:78:e2:c9:2a:
         e0:88:cc:19:1b:ed:19:d8:4d:84:12:84:2c:fb:9c:c5:19:8a:
         04:d4:bb:3e:15:6b:73:95:31:d5:b5:76:77:6a:04:95:bf:12:
         49:bb:31:80:58:1f:2b:fd:54:4d:97:0c:48:9c:40:e6:00:e3:
         52:96:17:a6:ff:63:bf:38:53:0c:1a:b4:98:ca:30:5e:d7:63:
         8a:a2:5a:ce
-----BEGIN CERTIFICATE-----
MIIGgjCCBWqgAwIBAgIUAQ0Mn0MoWEnfWmU1s10pgGu6oWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGZlNzgwNGYtZjE2YS00Zjc4LTk5NzktNmE4ZDUwOTll
NWU3MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
ZjFjYTRhYTYtNDY0Zi00NDhlLWI4NGEtNGRiYzhiMzJlZjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZ/s/QxHCqNkuP0u2VbBzkJW7Q0/o9wLQKKH
6xWuO4rlUFgfD/3fNTsP3SOd1XKvXDtZFayx+CblC8khTgf5OrJkTwwb/T/Ivied
lNv7kAeTOPPvuEvGAWOEngjLS67BYqZmmQUWnFCZSQI5UzTvwbh2SI48nwxRx6rF
C+PlpVKgL4yjGnrY9L7E1lUdqzauyUvI2VB899GAUbYbTvO6IMk1z0e2SsPTkY6I
gnbeXCp8Ewl2pCE3xYCQtfM15wL3AbmIizwFFjOVA5G1w8P0UzORRyChmKVxRaxg
1ZOCWA8q65ZKq/GTBbIBC6VAe5kvY39BCSSUhT7mFXQENyiL1QIDAQABo4IDlDCC
A5AwHQYDVR0OBBYEFEEnMhUIh9IPutCSlJwJ3erQehf0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3
ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThkNTA5OWU1ZTcvOTFhMzNhODItN2EzZi0z
ODBjLTgwOTItNThjYjIzMjk1N2JhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGZlNzgwNGYtZjE2YS00Zjc4LTk5
NzktNmE4ZDUwOTllNWU3LzBmZTc4MDRmLWYxNmEtNGY3OC05OTc5LTZhOGQ1MDk5
ZTVlNy5jcmwwHwYDVR0jBBgwFoAU+VXAQ4RRLwbPOrS6kfJqw02k5GgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wZmU3ODA0Zi1mMTZhLTRmNzgtOTk3OS02YThk
NTA5OWU1ZTcuY2VyMF4GCCsGAQUFBwEHAQH/BE8wTTBLBAIAATBFAwQEREWgAwMA
pkYDBADGPBYwDAMEBMY8UAMEAMY8VDAMAwQAxjxxAwQAxjxyAwQDx2h4AwQAzGuy
AwQFzOSAAwQFz4eAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAAP+sHlD2igHzyYAQ29IS+9W/0vevbhZLqTZ
7bYKbTqrAYF1oKxdLIEvtDNEmG/G0iZjVe7q//2uqXZEKbhAcQq3fHT9rO9TqfST
4MxbN0sPf4yVIWI/CnyaSVIUs0wfCWayZOWo+xDIM2X0d9FkN2eHyUESPt6waFI8
XlzzQKYrzYC9moEp9UdPlGdgUPF9phSrxIJrPFTPJAIasDtToq+Gm8MIIZxynTM3
7oc/d4z6eOLJKuCIzBkb7RnYTYQShCz7nMUZigTUuz4Va3OVMdW1dndqBJW/Ekm7
MYBYHyv9VE2XDEicQOYA41KWF6b/Y784UwwatJjKMF7XY4qiWs4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:45:11 2025 by rpki-client