Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa
File:                     59164d63-d428-368e-b33d-c57508b4ca42.roa (raw, json)
Hash identifier:          rMi0CzUY5BMnsJ/4F18kYTXcB2Hq2/iT4PJtv4JSOtY=
Subject key identifier:   D8:3F:D7:97:6D:CE:FC:20:8F:85:8D:E2:7F:25:6E:33:2C:FD:50:AC
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAF095739179E8E80D9300
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     16540
IP address blocks:        104.152.100.0/22 maxlen: 24
                          199.36.176.0/21 maxlen: 24
                          199.187.148.0/22 maxlen: 24
                          2607:6200::/32 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f0:95:73:91:79:e8:e8:0d:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=ad130e48-b0cd-4ece-a036-a54262e53670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c2:31:d9:91:d6:c1:4e:21:1d:bf:7f:8f:74:
                    89:cb:2d:a7:95:93:f6:9f:66:00:f3:32:53:e8:0b:
                    f3:2b:39:20:bd:51:46:01:98:cf:df:90:38:2f:84:
                    fe:8c:7c:01:23:e3:65:ca:a9:c7:9c:e0:77:6e:95:
                    8b:1d:be:13:a3:b7:df:fe:bd:6c:4d:c8:08:b9:cf:
                    d3:13:de:99:74:d5:c3:d3:df:01:1c:a1:6d:3a:a8:
                    0b:43:f6:9d:61:a2:bb:63:5f:f6:5f:a8:ae:23:6e:
                    41:44:81:8f:18:e7:df:de:40:d2:6d:36:ea:e4:07:
                    ae:ed:b2:b1:19:6a:76:19:35:fa:6a:26:1b:3d:67:
                    eb:d5:b4:8b:96:98:48:a2:cd:4c:f1:a4:44:1a:48:
                    64:87:59:53:8d:c7:49:d6:ae:33:b3:54:60:f6:3f:
                    47:4b:6a:05:9d:7f:29:d7:7b:e2:18:68:e3:74:33:
                    54:c2:99:8b:2a:1d:c6:e0:44:53:96:1b:4f:31:8d:
                    fc:4c:76:b7:95:4b:f0:a0:73:c4:94:01:76:b4:01:
                    59:5b:8f:46:8e:82:34:6d:78:7f:ca:af:ee:b2:7a:
                    69:58:57:1a:bd:71:41:92:77:7c:db:71:f1:3d:8e:
                    43:52:70:1d:ab:3a:2f:20:e9:5c:6f:c0:aa:a8:37:
                    84:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:3F:D7:97:6D:CE:FC:20:8F:85:8D:E2:7F:25:6E:33:2C:FD:50:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/59164d63-d428-368e-b33d-c57508b4ca42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.152.100.0/22
                  199.36.176.0/21
                  199.187.148.0/22
                IPv6:
                  2607:6200::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:27:42:d3:20:67:f1:3d:eb:eb:3c:58:02:11:60:7b:6f:ff:
         4c:62:c6:5c:4b:9b:85:62:dd:02:09:95:08:ea:1e:35:80:e8:
         42:b2:db:25:ff:81:de:de:0c:40:7f:74:c0:0b:b5:ee:9a:34:
         35:62:e0:74:78:78:cb:06:35:75:09:9e:d0:4e:17:80:25:b6:
         50:f3:e3:cc:5a:38:39:71:a8:01:bf:f0:b6:90:c0:0c:ae:73:
         c2:38:bc:9f:92:29:9e:85:9e:8d:c2:0d:14:6e:55:8c:08:a4:
         b1:18:5d:b4:b9:48:d7:a4:2c:d6:a0:a5:df:a9:04:70:53:d4:
         c2:77:10:64:13:50:74:b8:aa:22:7b:32:9b:2b:e3:f6:4f:8f:
         6f:ae:ba:96:1e:7e:63:e6:b6:e7:8e:9c:67:d9:1b:7e:1a:dc:
         da:47:ba:00:3c:e2:02:22:c8:4c:f3:63:e6:7d:ac:31:17:44:
         ce:f0:64:dd:6e:f3:af:0a:9a:56:7d:e2:9f:f9:ba:53:0f:54:
         dc:e3:b6:4d:2d:81:5a:4e:95:ff:64:2c:74:3a:fe:6f:51:5c:
         0b:cb:a7:28:1b:47:3b:58:99:72:82:a2:a4:ed:af:ff:95:62:
         1b:25:c3:28:9f:a5:fb:2a:7e:ba:a3:98:7c:bc:58:0d:f8:a4:
         aa:5c:e8:38
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWEoquvCVc5F56OgNkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
YWQxMzBlNDgtYjBjZC00ZWNlLWEwMzYtYTU0MjYyZTUzNjcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvsIx2ZHWwU4hHb9/j3SJyy2nlZP2n2YA8zJT
6AvzKzkgvVFGAZjP35A4L4T+jHwBI+NlyqnHnOB3bpWLHb4To7ff/r1sTcgIuc/T
E96ZdNXD098BHKFtOqgLQ/adYaK7Y1/2X6iuI25BRIGPGOff3kDSbTbq5Aeu7bKx
GWp2GTX6aiYbPWfr1bSLlphIos1M8aREGkhkh1lTjcdJ1q4zs1Rg9j9HS2oFnX8p
13viGGjjdDNUwpmLKh3G4ERTlhtPMY38THa3lUvwoHPElAF2tAFZW49GjoI0bXh/
yq/usnppWFcavXFBknd823HxPY5DUnAdqzovIOlcb8CqqDeEUwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFNg/15dtzvwgj4WN4n8lbjMs/VCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNTkxNjRkNjMtZDQyOC0z
NjhlLWIzM2QtYzU3NTA4YjRjYTQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCaJhkAwQD
xySwAwQCx7uUMA0EAgACMAcDBQAmB2IAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAHwnQtMgZ/E96+s8WAIR
YHtv/0xixlxLm4Vi3QIJlQjqHjWA6EKy2yX/gd7eDEB/dMALte6aNDVi4HR4eMsG
NXUJntBOF4AltlDz48xaODlxqAG/8LaQwAyuc8I4vJ+SKZ6Fno3CDRRuVYwIpLEY
XbS5SNekLNagpd+pBHBT1MJ3EGQTUHS4qiJ7Mpsr4/ZPj2+uupYefmPmtueOnGfZ
G34a3NpHugA84gIiyEzzY+Z9rDEXRM7wZN1u868KmlZ94p/5ulMPVNzjtk0tgVpO
lf9kLHQ6/m9RXAvLpygbRztYmXKCoqTtr/+VYhslwyifpfsqfrqjmHy8WA34pKpc
6Dg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 16:07:24 2025 by rpki-client