Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa
File:                     dec3fff7-79a1-33c7-a073-9554e9b91685.roa (raw, json)
Hash identifier:          Yde6ADc8CEuV8ZDTBCawk65pr80XiCUWcbjXxLaggYU=
Subject key identifier:   27:F7:EF:DD:1C:0D:88:86:1A:99:F6:5F:88:9F:16:0C:89:F1:EC:18
Certificate issuer:       /CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
Certificate serial:       010D0C9F432858499FBFDBCD0E1BC8778EB31D00
Authority key identifier: 69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa
Signing time:             Wed 23 Apr 2025 18:13:55 +0000
ROA not before:           Wed 23 Apr 2025 18:13:55 +0000
ROA not after:            Tue 22 Jul 2025 18:13:55 +0000
asID:                     200040
IP address blocks:        64.4.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9f:bf:db:cd:0e:1b:c8:77:8e:b3:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024
        Validity
            Not Before: Apr 23 18:13:55 2025 GMT
            Not After : Jul 22 18:13:55 2025 GMT
        Subject: CN=f880e8ad-0948-402d-86f8-a15f301a27f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:62:ec:a9:f2:13:14:97:09:de:9f:6a:79:ec:
                    d6:5c:80:4b:1e:47:fb:de:06:f6:00:b3:0b:ec:f6:
                    19:92:63:8d:1b:ce:2a:3e:dc:4f:8f:70:35:49:5e:
                    74:7f:c3:06:0d:40:5d:b2:48:5a:98:28:ed:b4:76:
                    6e:d1:cb:a4:bd:86:13:a6:83:8a:70:36:62:82:7a:
                    27:2c:ca:99:97:57:6b:08:6a:f8:11:a1:f8:13:ac:
                    0f:3f:2e:f8:ce:07:06:4c:04:0c:f8:59:9b:95:a9:
                    0d:e1:57:e0:ba:4f:68:cf:3c:9f:60:83:2e:10:fe:
                    c5:fc:ac:9a:75:5f:cc:dd:69:d1:f0:0f:8f:b6:5f:
                    3b:1f:e0:90:04:3d:ba:3b:8f:2c:29:14:4b:92:30:
                    f3:3f:bd:e8:dc:20:4b:7f:cd:77:79:01:a2:45:d4:
                    b9:1a:88:de:37:55:04:d4:70:7b:ba:67:f8:cf:9a:
                    f9:ad:78:af:4b:2a:a0:ba:ed:f6:c9:d4:94:75:f9:
                    2e:88:c7:70:03:3f:db:c2:e0:98:51:a8:c5:04:f9:
                    06:91:be:3a:f4:83:6b:e6:92:29:a6:42:d1:ea:90:
                    61:0a:5c:ef:2e:4c:e4:5d:bc:d3:b8:72:53:6f:7d:
                    e2:cb:f5:08:0c:c7:88:d9:9f:eb:5f:93:fd:3f:f1:
                    e9:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:F7:EF:DD:1C:0D:88:86:1A:99:F6:5F:88:9F:16:0C:89:F1:EC:18
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/dec3fff7-79a1-33c7-a073-9554e9b91685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.crl

            X509v3 Authority Key Identifier:
                keyid:69:D4:26:1F:6A:FE:5A:AD:8F:12:D5:58:1A:A6:B6:0B:33:BD:AB:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4a07af2e-cdbb-48d6-9f5a-6d7dd0ea4024.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.4.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:d7:82:5c:ec:7c:1c:14:a8:e6:57:1d:e3:0b:21:a6:4f:69:
         66:fc:a3:13:52:80:9c:e2:25:27:af:b4:7c:b6:bc:1f:73:5a:
         dd:8a:b7:26:6a:18:f2:87:58:d6:24:30:d9:3a:ca:8e:1d:fe:
         98:46:5f:c9:cf:64:b0:28:73:9b:4c:fd:7e:5a:55:72:1d:21:
         d4:3c:ab:c5:27:42:4b:ec:b5:50:ac:62:e1:2f:9d:37:e2:3a:
         39:d4:8c:ca:7c:07:2a:30:0c:c9:f9:85:41:04:a7:2e:96:bb:
         4d:48:ae:84:2d:33:06:a2:82:1d:61:be:16:f1:68:be:99:57:
         6e:e0:63:68:49:13:bb:9e:17:21:6f:ef:a2:35:03:bc:12:3a:
         8c:6c:2b:29:92:07:f3:80:89:7a:24:d5:50:ae:0e:6e:f9:20:
         1d:bb:e0:90:7d:82:2a:72:4c:a7:97:1d:c3:d2:80:f5:05:ea:
         d0:16:40:a0:c0:02:c4:b5:65:a3:32:e8:f7:94:2d:67:76:d3:
         2b:19:9f:92:33:2b:d5:1d:34:b5:46:0f:b9:80:c7:3f:5d:34:
         38:3a:47:d7:47:d5:d5:f3:1f:ba:26:e6:d3:51:41:ab:16:98:
         62:a8:67:b1:cb:0f:f7:a9:43:ed:ab:05:e7:da:0d:3d:87:10:
         33:53:8f:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmfv9vNDhvId46zHQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGEwN2FmMmUtY2RiYi00OGQ2LTlmNWEtNmQ3ZGQwZWE0
MDI0MB4XDTI1MDQyMzE4MTM1NVoXDTI1MDcyMjE4MTM1NVowLzEtMCsGA1UEAxMk
Zjg4MGU4YWQtMDk0OC00MDJkLTg2ZjgtYTE1ZjMwMWEyN2YyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2LsqfITFJcJ3p9qeezWXIBLHkf73gb2ALML
7PYZkmONG84qPtxPj3A1SV50f8MGDUBdskhamCjttHZu0cukvYYTpoOKcDZignon
LMqZl1drCGr4EaH4E6wPPy74zgcGTAQM+FmblakN4Vfguk9ozzyfYIMuEP7F/Kya
dV/M3WnR8A+Ptl87H+CQBD26O48sKRRLkjDzP73o3CBLf813eQGiRdS5GojeN1UE
1HB7umf4z5r5rXivSyqguu32ydSUdfkuiMdwAz/bwuCYUajFBPkGkb469INr5pIp
pkLR6pBhClzvLkzkXbzTuHJTb33iy/UIDMeI2Z/rX5P9P/HpKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCf3790cDYiGGpn2X4ifFgyJ8ewYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3
YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdkZDBlYTQwMjQvZGVjM2ZmZjctNzlhMS0z
M2M3LWEwNzMtOTU1NGU5YjkxNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGEwN2FmMmUtY2RiYi00OGQ2LTlm
NWEtNmQ3ZGQwZWE0MDI0LzRhMDdhZjJlLWNkYmItNDhkNi05ZjVhLTZkN2RkMGVh
NDAyNC5jcmwwHwYDVR0jBBgwFoAUadQmH2r+Wq2PEtVYGqa2CzO9qwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80YTA3YWYyZS1jZGJiLTQ4ZDYtOWY1YS02ZDdk
ZDBlYTQwMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQATcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbXglzsfBwUqOZXHeMLIaZPaWb8oxNSgJziJSevtHy2vB9zWt2KtyZq
GPKHWNYkMNk6yo4d/phGX8nPZLAoc5tM/X5aVXIdIdQ8q8UnQkvstVCsYuEvnTfi
OjnUjMp8ByowDMn5hUEEpy6Wu01IroQtMwaigh1hvhbxaL6ZV27gY2hJE7ueFyFv
76I1A7wSOoxsKymSB/OAiXok1VCuDm75IB274JB9gipyTKeXHcPSgPUF6tAWQKDA
AsS1ZaMy6PeULWd20ysZn5IzK9UdNLVGD7mAxz9dNDg6R9dH1dXzH7om5tNRQasW
mGKoZ7HLD/epQ+2rBefaDT2HEDNTjy4=
-----END CERTIFICATE-----
Generated at Sun Apr 27 09:16:28 2025 by rpki-client