Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa
File:                     8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa (raw, json)
Hash identifier:          TVs7Brcqg0jQjm4gg9+VrjUjYkw33qq/b51sQAib2OQ=
Subject key identifier:   45:1A:7D:48:C5:48:2E:F6:A3:C0:5D:1C:A8:E3:2E:1D:1C:E5:CB:3F
Certificate issuer:       /CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
Certificate serial:       010D0C9F43285849A1EF6BC0EDBD13C4E4DA5900
Authority key identifier: 63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     46261
IP address blocks:        172.98.168.0/24 maxlen: 24
                          172.98.171.0/24 maxlen: 24
                          172.98.176.0/24 maxlen: 24
                          172.98.180.0/24 maxlen: 24
                          172.98.181.0/24 maxlen: 24
                          172.98.184.0/24 maxlen: 24
                          172.98.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:6b:c0:ed:bd:13:c4:e4:da:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=9ebde295-2385-4b06-9c24-699d0384b8ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:fc:7b:4d:c3:b5:2d:6d:ae:22:22:e9:98:53:
                    ea:a5:b0:3e:f2:0f:b6:f6:e3:79:f7:b7:66:5d:77:
                    4e:79:c5:42:41:f4:19:09:04:ae:5e:c0:69:fe:51:
                    91:67:7e:e5:85:6e:12:28:6b:52:85:84:30:59:b2:
                    7a:a2:50:e8:60:02:1e:35:1c:4c:f1:38:51:b8:30:
                    8e:d6:10:03:b8:62:c9:de:f6:42:68:92:4b:73:2d:
                    6d:42:9d:cd:4f:77:b7:45:88:2f:44:61:96:a6:6d:
                    d0:f1:91:77:a2:20:6b:43:d5:d5:17:d8:92:d7:95:
                    b2:a1:09:7a:9c:f0:37:46:57:cf:5a:4c:0e:bf:8c:
                    88:ac:c5:85:80:d0:b0:b5:38:a7:c7:24:c7:0a:a5:
                    d2:c3:6e:74:a6:e6:90:e0:40:22:4d:57:f8:2e:a3:
                    c9:5b:d3:cf:c4:ff:fe:34:f1:bc:e0:ca:46:01:56:
                    39:3e:e8:89:32:e6:e7:51:93:b8:f9:b3:54:3f:8f:
                    2e:d1:1c:d0:22:32:eb:92:d4:e9:d8:c7:6d:65:38:
                    43:ea:25:91:ae:52:de:13:fe:94:1d:81:cc:43:62:
                    c9:15:6d:ee:a9:2f:fb:76:74:5b:5b:c7:9c:57:de:
                    35:3c:be:02:ca:ef:15:ce:39:41:61:a0:a0:0b:41:
                    15:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:7D:48:C5:48:2E:F6:A3:C0:5D:1C:A8:E3:2E:1D:1C:E5:CB:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/8dc69216-34a7-38eb-a1b2-2d3de36859d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.crl

            X509v3 Authority Key Identifier:
                keyid:63:BC:D6:85:28:16:AD:41:06:B3:08:B9:46:EC:5B:FF:7A:DF:DC:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/aaf6d830-ed84-41cc-a7e8-52bf89c3b5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.168.0/24
                  172.98.171.0/24
                  172.98.176.0/24
                  172.98.180.0/23
                  172.98.184.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:c2:52:12:36:45:49:07:78:6a:0e:60:f7:d5:a1:59:17:fb:
         4f:77:86:01:d2:53:eb:1e:63:09:7c:bb:e8:58:25:55:15:03:
         56:f0:60:13:7b:89:b2:3d:99:73:69:51:ad:a2:9f:3f:f7:ad:
         f0:74:54:6f:2f:bd:e0:37:96:4d:08:dc:c8:ca:32:0b:ca:28:
         e7:a3:91:f4:09:40:5b:08:63:62:a2:36:ea:48:f7:8e:b4:ca:
         e6:d8:e4:5c:79:76:ab:0a:6f:3c:88:85:a4:3d:10:e9:81:2e:
         80:2a:71:18:d9:ce:05:e2:ed:d8:85:eb:24:4b:a7:7b:d4:4b:
         12:1e:93:95:99:82:24:1b:05:5f:52:6e:b8:5f:45:f1:89:e5:
         ef:38:7c:78:d1:94:b8:3a:a3:cc:66:d2:d2:f3:63:6f:8a:dd:
         4f:e7:4c:7f:a8:d4:79:5c:79:ce:07:6a:17:03:f7:e3:e5:17:
         51:d9:d2:0f:b6:1d:c5:59:b9:90:d7:0a:fb:65:a7:cf:fd:e0:
         55:59:03:c3:1b:e9:fd:18:69:a1:78:9e:d2:30:88:4f:d3:52:
         a7:b6:57:53:3b:cc:11:04:7c:8f:50:c3:cb:1c:3b:74:55:c9:
         f1:0f:db:32:5f:a2:66:0d:fb:4c:18:06:2c:00:02:63:cb:11:
         97:98:38:fa
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEmh72vA7b0TxOTaWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFmNmQ4MzAtZWQ4NC00MWNjLWE3ZTgtNTJiZjg5YzNi
NWVlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
OWViZGUyOTUtMjM4NS00YjA2LTljMjQtNjk5ZDAzODRiOGFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhPx7TcO1LW2uIiLpmFPqpbA+8g+29uN597dm
XXdOecVCQfQZCQSuXsBp/lGRZ37lhW4SKGtShYQwWbJ6olDoYAIeNRxM8ThRuDCO
1hADuGLJ3vZCaJJLcy1tQp3NT3e3RYgvRGGWpm3Q8ZF3oiBrQ9XVF9iS15WyoQl6
nPA3RlfPWkwOv4yIrMWFgNCwtTinxyTHCqXSw250puaQ4EAiTVf4LqPJW9PPxP/+
NPG84MpGAVY5PuiJMubnUZO4+bNUP48u0RzQIjLrktTp2MdtZThD6iWRrlLeE/6U
HYHMQ2LJFW3uqS/7dnRbW8ecV941PL4Cyu8VzjlBYaCgC0EVRwIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFEUafUjFSC72o8BdHKjjLh0c5cs/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2
ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJmODljM2I1ZWUvOGRjNjkyMTYtMzRhNy0z
OGViLWExYjItMmQzZGUzNjg1OWQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWFmNmQ4MzAtZWQ4NC00MWNjLWE3
ZTgtNTJiZjg5YzNiNWVlL2FhZjZkODMwLWVkODQtNDFjYy1hN2U4LTUyYmY4OWMz
YjVlZS5jcmwwHwYDVR0jBBgwFoAUY7zWhSgWrUEGswi5Ruxb/3rf3OIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYWY2ZDgzMC1lZDg0LTQxY2MtYTdlOC01MmJm
ODljM2I1ZWUuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArGKoAwQA
rGKrAwQArGKwAwQBrGK0AwQBrGK4MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBADHCUhI2RUkHeGoOYPfVoVkX
+093hgHSU+seYwl8u+hYJVUVA1bwYBN7ibI9mXNpUa2inz/3rfB0VG8vveA3lk0I
3MjKMgvKKOejkfQJQFsIY2KiNupI9460yubY5Fx5dqsKbzyIhaQ9EOmBLoAqcRjZ
zgXi7diF6yRLp3vUSxIek5WZgiQbBV9SbrhfRfGJ5e84fHjRlLg6o8xm0tLzY2+K
3U/nTH+o1Hlcec4HahcD9+PlF1HZ0g+2HcVZuZDXCvtlp8/94FVZA8Mb6f0YaaF4
ntIwiE/TUqe2V1M7zBEEfI9Qw8scO3RVyfEP2zJfomYN+0wYBiwAAmPLEZeYOPo=
-----END CERTIFICATE-----
Generated at Mon Apr 28 06:13:08 2025 by rpki-client