Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
File:                     f5c6de41-323b-3b99-9404-398b289b5319.roa (raw, json)
Hash identifier:          S8GqozRAxq/ensptoXyGdf8AufoMDTcEN1e3ShU2sTM=
Subject key identifier:   95:49:06:F1:DE:1C:A3:92:F0:42:4C:EF:88:04:34:5B:31:74:0A:DB
Certificate issuer:       /CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
Certificate serial:       010D0C9F43285849A089D2E877F1598BF2008300
Authority key identifier: 4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     397803
IP address blocks:        66.102.48.0/20 maxlen: 20
                          167.100.32.0/19 maxlen: 19
                          209.105.180.0/22 maxlen: 22
                          209.105.184.0/22 maxlen: 22
                          216.227.40.0/21 maxlen: 21
                          216.227.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:d2:e8:77:f1:59:8b:f2:00:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=e898b4de-344e-43b6-953c-de89746a8e64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:a6:3f:44:0d:90:b0:64:ed:b7:bb:7a:af:97:
                    e3:a6:cb:69:c1:a0:8c:76:4d:e8:9f:f3:bf:96:e9:
                    06:68:98:ab:40:47:8b:39:02:3c:b3:8f:52:92:a3:
                    79:e4:1f:c1:f7:2e:b4:41:6e:e6:fd:08:da:98:56:
                    59:24:1d:0b:5f:15:e5:bb:8a:66:6e:df:c3:00:46:
                    c3:77:0a:7c:51:19:a7:c7:f5:d7:42:b8:d2:c6:71:
                    fa:54:cf:1b:bd:b3:72:69:ab:6a:f6:2c:f9:4a:1c:
                    3b:fb:8f:20:d5:40:53:ad:f0:64:e1:fd:90:e3:b3:
                    97:8c:21:0a:d4:e9:40:4c:99:cf:9e:34:1f:83:40:
                    e7:eb:9b:96:87:fa:79:5f:9a:0c:a1:68:7a:0b:92:
                    c0:0a:d6:9a:78:c0:97:09:d5:b6:9a:7c:89:d8:8a:
                    a8:77:ac:73:35:6a:c4:72:7f:91:8a:72:8d:c2:13:
                    ce:93:08:e1:c1:52:b7:3f:80:f6:1d:07:64:16:fd:
                    31:a8:d8:bb:dd:32:3c:cb:61:24:65:ea:9d:13:13:
                    9f:68:1b:27:df:ae:25:42:a3:28:fa:10:6a:47:9f:
                    b7:4d:48:ce:ef:f2:ac:3f:91:3f:b8:b8:ec:9d:23:
                    66:dc:39:fb:15:d0:7c:31:ac:48:0f:cb:92:1c:33:
                    7d:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:49:06:F1:DE:1C:A3:92:F0:42:4C:EF:88:04:34:5B:31:74:0A:DB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/f5c6de41-323b-3b99-9404-398b289b5319.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.crl

            X509v3 Authority Key Identifier:
                keyid:4E:6B:2C:DE:04:7A:9D:BE:6D:A4:92:3D:62:DD:65:18:18:1C:B8:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e633b4b1-c2b2-44d5-a1ec-3fe8e1f9773a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.102.48.0/20
                  167.100.32.0/19
                  209.105.180.0-209.105.187.255
                  216.227.40.0-216.227.51.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:6f:6e:bb:0e:a6:32:01:b5:ea:3d:53:37:38:4a:43:39:92:
         7d:72:4c:60:6f:88:9a:69:be:08:28:f1:cd:23:d8:19:ec:19:
         e6:f8:cd:ee:c7:6e:a9:ed:14:3e:65:ef:c7:df:32:df:29:19:
         4d:ff:97:9b:b3:35:a1:f3:5d:c2:df:f6:57:09:3a:01:68:8c:
         98:66:9b:f3:02:ee:01:1f:c9:cf:d5:44:ce:ef:d1:ea:ed:bc:
         37:6b:1d:30:44:90:e3:0b:ea:f9:17:32:2a:69:cb:bd:8f:b4:
         30:1a:0b:74:87:cf:0b:3e:6a:11:f7:c6:02:59:e7:50:66:fb:
         4b:4f:86:f9:f0:44:fb:d3:ee:c1:ba:cf:6e:ae:e8:a3:5d:90:
         fd:0c:9e:8d:0d:bb:3c:60:97:14:05:38:02:89:71:98:45:3b:
         7a:dc:33:40:a1:e2:57:d0:49:72:8e:4c:71:bb:6c:92:99:45:
         0f:67:de:cb:99:35:68:45:02:f4:44:15:86:f2:7d:6e:50:ba:
         03:64:b1:6e:b0:2d:de:2f:cd:f0:95:87:54:33:b5:b0:52:cf:
         2a:93:cc:90:da:49:9d:e6:f0:34:84:5b:16:32:33:78:64:95:
         8d:41:f6:64:3a:c8:a2:a6:cc:bf:8f:01:fa:8f:27:1f:50:76:
         9a:78:b0:30
-----BEGIN CERTIFICATE-----
MIIGZTCCBU2gAwIBAgIUAQ0Mn0MoWEmgidLod/FZi/IAgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYzM2I0YjEtYzJiMi00NGQ1LWExZWMtM2ZlOGUxZjk3
NzNhMB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
ZTg5OGI0ZGUtMzQ0ZS00M2I2LTk1M2MtZGU4OTc0NmE4ZTY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlKY/RA2QsGTtt7t6r5fjpstpwaCMdk3on/O/
lukGaJirQEeLOQI8s49SkqN55B/B9y60QW7m/QjamFZZJB0LXxXlu4pmbt/DAEbD
dwp8URmnx/XXQrjSxnH6VM8bvbNyaatq9iz5Shw7+48g1UBTrfBk4f2Q47OXjCEK
1OlATJnPnjQfg0Dn65uWh/p5X5oMoWh6C5LACtaaeMCXCdW2mnyJ2Iqod6xzNWrE
cn+RinKNwhPOkwjhwVK3P4D2HQdkFv0xqNi73TI8y2EkZeqdExOfaBsn364lQqMo
+hBqR5+3TUjO7/KsP5E/uLjsnSNm3Dn7FdB8MaxID8uSHDN9aQIDAQABo4IDdzCC
A3MwHQYDVR0OBBYEFJVJBvHeHKOS8EJM74gENFsxdArbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lNjMz
YjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4ZTFmOTc3M2EvZjVjNmRlNDEtMzIzYi0z
Yjk5LTk0MDQtMzk4YjI4OWI1MzE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTYzM2I0YjEtYzJiMi00NGQ1LWEx
ZWMtM2ZlOGUxZjk3NzNhL2U2MzNiNGIxLWMyYjItNDRkNS1hMWVjLTNmZThlMWY5
NzczYS5jcmwwHwYDVR0jBBgwFoAUTmss3gR6nb5tpJI9Yt1lGBgcuKowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lNjMzYjRiMS1jMmIyLTQ0ZDUtYTFlYy0zZmU4
ZTFmOTc3M2EuY2VyMEEGCCsGAQUFBwEHAQH/BDIwMDAuBAIAATAoAwQEQmYwAwQF
p2QgMAwDBALRabQDBALRabgwDAMEA9jjKAMEAtjjMDBUBgNVHSABAf8ESjBIMEYG
CCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jl
c291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAIb267DqYy
AbXqPVM3OEpDOZJ9ckxgb4iaab4IKPHNI9gZ7Bnm+M3ux26p7RQ+Ze/H3zLfKRlN
/5ebszWh813C3/ZXCToBaIyYZpvzAu4BH8nP1UTO79Hq7bw3ax0wRJDjC+r5FzIq
acu9j7QwGgt0h88LPmoR98YCWedQZvtLT4b58ET70+7Bus9uruijXZD9DJ6NDbs8
YJcUBTgCiXGYRTt63DNAoeJX0Elyjkxxu2ySmUUPZ97LmTVoRQL0RBWG8n1uULoD
ZLFusC3eL83wlYdUM7WwUs8qk8yQ2kmd5vA0hFsWMjN4ZJWNQfZkOsiipsy/jwH6
jycfUHaaeLAw
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:25:02 2025 by rpki-client