Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
File:                     95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa (raw, json)
Hash identifier:          5olxNvCp+WBxn1rYs8viFrXcAgIpv3YCrTtt61jpcN0=
Subject key identifier:   A7:6E:57:D7:79:69:C8:0F:02:14:47:0E:50:C4:6C:30:AD:33:05:D5
Certificate issuer:       /CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
Certificate serial:       010D0C9F432858497279B841D491ABEB4103DBE0
Authority key identifier: D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa
Signing time:             Mon 07 Apr 2025 13:00:59 +0000
ROA not before:           Mon 07 Apr 2025 13:00:59 +0000
ROA not after:            Sun 06 Jul 2025 13:00:59 +0000
asID:                     174
IP address blocks:        208.82.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:72:79:b8:41:d4:91:ab:eb:41:03:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f08ae50-7566-4f52-9c36-3a3f84a37c59
        Validity
            Not Before: Apr  7 13:00:59 2025 GMT
            Not After : Jul  6 13:00:59 2025 GMT
        Subject: CN=ad41f8d9-6fde-4440-ba9d-a17b43f406f3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:c7:44:a7:d6:10:5b:31:fb:31:9d:4b:f2:
                    11:07:5f:10:33:7a:13:2b:4a:60:01:d2:d4:c7:dc:
                    ad:ec:96:fe:80:e3:35:92:92:cd:4d:f8:e9:d5:3a:
                    7f:3a:4a:10:26:0a:be:3b:23:ac:74:5c:e9:4b:39:
                    fd:34:cd:52:5e:ca:f3:9f:b0:72:19:ec:92:55:0b:
                    c2:d2:7c:75:d9:2b:cc:e4:6a:16:c0:83:8b:27:c6:
                    8a:b0:13:9e:94:94:ea:f3:39:d0:e4:57:00:54:71:
                    6c:f7:06:5b:16:7e:f6:4c:f6:22:fb:8a:92:c9:68:
                    a0:12:32:ba:4e:fd:2b:16:25:47:04:6a:20:7f:d3:
                    b2:74:4c:bf:20:59:18:61:70:41:69:36:ec:ff:4e:
                    86:06:20:b1:48:cb:da:04:75:b4:4e:0b:93:8b:fd:
                    1c:08:76:af:e0:72:b1:f4:7a:5b:2a:dc:cd:f7:2a:
                    7c:37:39:49:2e:e4:54:3f:da:14:c0:9c:e4:6c:3a:
                    ff:b9:f1:f5:07:4c:1e:39:e1:2f:57:66:7c:8c:1e:
                    27:a6:8f:a3:52:31:1c:52:38:3e:cb:ff:90:41:8d:
                    ae:4a:0d:26:ab:26:a5:27:00:39:b2:66:06:ee:3f:
                    39:b9:54:a1:49:24:05:ce:5b:91:76:77:00:af:09:
                    b9:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:6E:57:D7:79:69:C8:0F:02:14:47:0E:50:C4:6C:30:AD:33:05:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/95a5c3a4-3e8a-3c0b-8478-0d8fcf7fa569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59/1f08ae50-7566-4f52-9c36-3a3f84a37c59.crl

            X509v3 Authority Key Identifier:
                keyid:D8:5F:AA:21:72:91:7E:BC:4B:BB:29:C8:07:A7:8C:DD:1A:2B:AD:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/1f08ae50-7566-4f52-9c36-3a3f84a37c59.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:6d:2b:56:1f:82:a9:96:1b:c6:5c:c9:ee:c5:bb:4a:89:44:
         d0:25:03:81:97:37:90:48:27:5d:93:cb:7e:ec:3c:cf:4d:17:
         62:66:db:80:55:e6:55:2a:b2:70:7b:e8:a6:d2:23:6e:b7:8c:
         7f:02:4c:0e:73:71:38:bd:4f:9f:20:a9:cd:9c:8b:72:3c:4f:
         cd:9f:02:9a:62:3d:36:9d:3c:65:8e:9b:6e:58:84:16:51:44:
         3f:a7:28:0e:20:0c:91:5c:b1:e7:8d:90:4c:06:af:dd:21:1b:
         84:f1:8c:ad:37:84:23:d3:c0:6a:e2:a5:cc:45:45:69:5f:5f:
         09:3d:ad:b8:80:35:f1:04:70:04:52:b1:c1:91:67:56:4b:5b:
         e8:ef:9f:fb:b7:ea:9f:5a:09:59:23:91:4c:4d:52:7c:23:c9:
         13:15:52:93:8b:27:c5:7a:6f:36:29:01:76:f7:35:05:56:55:
         8d:64:af:e4:78:1c:13:30:26:1c:6c:d8:df:75:53:9b:e5:0e:
         e4:e9:e2:81:71:4d:8d:f6:90:eb:46:d5:59:76:09:e8:18:eb:
         38:ef:31:31:62:2a:5f:ea:a5:0f:2b:dd:89:1b:f2:84:66:a4:
         c0:fd:52:0c:38:91:75:d3:8b:07:62:72:f7:1f:3f:1d:9b:50:
         80:1f:3b:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElyebhB1JGr60ED2+AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWYwOGFlNTAtNzU2Ni00ZjUyLTljMzYtM2EzZjg0YTM3
YzU5MB4XDTI1MDQwNzEzMDA1OVoXDTI1MDcwNjEzMDA1OVowLzEtMCsGA1UEAxMk
YWQ0MWY4ZDktNmZkZS00NDQwLWJhOWQtYTE3YjQzZjQwNmYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAud3HRKfWEFsx+zGdS/IRB18QM3oTK0pgAdLU
x9yt7Jb+gOM1kpLNTfjp1Tp/OkoQJgq+OyOsdFzpSzn9NM1SXsrzn7ByGeySVQvC
0nx12SvM5GoWwIOLJ8aKsBOelJTq8znQ5FcAVHFs9wZbFn72TPYi+4qSyWigEjK6
Tv0rFiVHBGogf9OydEy/IFkYYXBBaTbs/06GBiCxSMvaBHW0TguTi/0cCHav4HKx
9HpbKtzN9yp8NzlJLuRUP9oUwJzkbDr/ufH1B0weOeEvV2Z8jB4npo+jUjEcUjg+
y/+QQY2uSg0mqyalJwA5smYG7j85uVShSSQFzluRdncArwm51wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKduV9d5acgPAhRHDlDEbDCtMwXVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjA4
YWU1MC03NTY2LTRmNTItOWMzNi0zYTNmODRhMzdjNTkvOTVhNWMzYTQtM2U4YS0z
YzBiLTg0NzgtMGQ4ZmNmN2ZhNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMWYwOGFlNTAtNzU2Ni00ZjUyLTlj
MzYtM2EzZjg0YTM3YzU5LzFmMDhhZTUwLTc1NjYtNGY1Mi05YzM2LTNhM2Y4NGEz
N2M1OS5jcmwwHwYDVR0jBBgwFoAU2F+qIXKRfrxLuynIB6eM3RorrWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8xZjA4YWU1MC03NTY2LTRmNTItOWMzNi0zYTNm
ODRhMzdjNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FJQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAttK1YfgqmWG8Zcye7Fu0qJRNAlA4GXN5BIJ12Ty37sPM9NF2Jm24BV
5lUqsnB76KbSI263jH8CTA5zcTi9T58gqc2ci3I8T82fAppiPTadPGWOm25YhBZR
RD+nKA4gDJFcseeNkEwGr90hG4TxjK03hCPTwGripcxFRWlfXwk9rbiANfEEcARS
scGRZ1ZLW+jvn/u36p9aCVkjkUxNUnwjyRMVUpOLJ8V6bzYpAXb3NQVWVY1kr+R4
HBMwJhxs2N91U5vlDuTp4oFxTY32kOtG1Vl2CegY6zjvMTFiKl/qpQ8r3Ykb8oRm
pMD9Ugw4kXXTiwdicvcfPx2bUIAfOwM=
-----END CERTIFICATE-----
Generated at Sat Apr 26 13:24:13 2025 by rpki-client