Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa
File:                     bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa (raw, json)
Hash identifier:          /cIQ8+419LEKVxn7x8j2nAeQPAc6M4VMHBkselRRnMU=
Subject key identifier:   4D:5F:98:9C:89:2D:15:B2:87:5A:64:7A:79:C6:5C:7B:4F:DD:54:25
Certificate issuer:       /CN=5d35eb8b-40d6-4e37-beae-ce9733027467
Certificate serial:       010D0C9F43285849DB2A27C49261FF220EB5CA80
Authority key identifier: 6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa
Signing time:             Thu 15 May 2025 01:00:47 +0000
ROA not before:           Thu 15 May 2025 01:00:47 +0000
ROA not after:            Wed 13 Aug 2025 01:00:47 +0000
asID:                     401244
IP address blocks:        198.160.238.0/23 maxlen: 23
                          198.160.240.0/23 maxlen: 23
                          2602:819:c000::/40 maxlen: 40
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:2a:27:c4:92:61:ff:22:0e:b5:ca:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d35eb8b-40d6-4e37-beae-ce9733027467
        Validity
            Not Before: May 15 01:00:47 2025 GMT
            Not After : Aug 13 01:00:47 2025 GMT
        Subject: CN=8dfb7cbd-0818-479f-9fbf-ce27c17b00fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:8e:d1:46:d5:90:7c:2b:6a:bf:62:8c:59:6c:
                    2c:b6:10:7f:08:b5:92:6d:d3:a6:f3:77:68:8f:a8:
                    bf:c4:4a:7c:5e:d2:ee:dc:dd:6d:97:46:bd:cd:8d:
                    0f:86:1c:d8:ba:a5:97:38:bd:2b:b8:41:98:c2:6d:
                    a1:bc:7f:62:d4:bc:0e:53:49:70:bd:30:87:8f:2a:
                    88:5e:a1:6a:f6:57:07:05:19:b4:59:41:18:d4:b2:
                    d5:b8:0e:d2:0d:b2:1d:71:5c:77:06:b5:4a:1b:f2:
                    5f:f1:17:fc:38:4a:5f:f3:1d:29:6b:fb:28:4d:4f:
                    66:da:51:37:90:f6:d6:57:01:97:76:22:35:71:55:
                    ce:4f:9c:0b:92:61:b6:34:59:a1:fc:05:2d:70:fe:
                    20:35:b8:c3:5f:84:72:d6:91:fa:3e:79:fb:d6:f5:
                    68:f9:7c:6b:c5:10:76:05:1d:aa:b3:a9:d7:52:9e:
                    90:cc:a2:a1:a9:ac:06:bb:8b:01:15:5e:25:f1:73:
                    13:d2:cb:69:39:e7:cf:a5:66:19:b6:08:95:8e:60:
                    c0:87:d0:ca:b7:f8:0e:cd:53:d7:0e:bd:12:e1:95:
                    06:d1:bb:45:5e:c6:54:10:d0:34:90:75:11:82:ba:
                    a5:c9:8d:a9:7a:75:06:4f:ba:22:49:15:54:5e:ec:
                    30:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5F:98:9C:89:2D:15:B2:87:5A:64:7A:79:C6:5C:7B:4F:DD:54:25
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/bd81b659-bc77-3a9c-a8cb-fcd72b0f8840.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467/5d35eb8b-40d6-4e37-beae-ce9733027467.crl

            X509v3 Authority Key Identifier:
                keyid:6F:59:45:11:43:B1:12:C5:88:7B:D2:DA:58:1E:F4:C1:4E:90:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/5d35eb8b-40d6-4e37-beae-ce9733027467.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.160.238.0-198.160.241.255
                IPv6:
                  2602:819:c000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         02:07:fe:7a:35:92:51:0f:a5:14:06:69:83:6a:dd:47:05:73:
         aa:3e:10:87:1f:c5:95:c2:b3:c1:db:11:d2:3c:ad:a1:e2:53:
         10:ad:24:78:2a:05:1b:49:6c:d1:ad:cf:4b:1f:1e:9f:6b:41:
         a0:4f:22:96:a6:cd:f1:b9:33:55:1b:2b:bd:5c:ca:69:c0:64:
         23:49:01:cf:75:d5:07:53:0e:94:c4:7b:2d:0a:ba:60:10:62:
         de:52:a0:1a:09:bd:2a:a8:a1:00:db:6e:d3:1a:36:eb:32:36:
         8f:3f:c9:17:76:b5:78:aa:30:5c:1b:23:a2:50:e2:e4:92:d0:
         34:e8:f1:d3:14:fa:c6:bc:46:86:b0:db:2c:82:c2:f2:de:19:
         5e:34:6a:30:b5:b9:30:36:7f:bc:eb:33:1c:27:7a:f3:e3:8f:
         f7:91:87:59:41:05:94:38:23:82:79:85:a7:87:18:75:e2:53:
         b9:06:92:2f:ff:d5:dc:a1:e8:85:79:92:09:26:1b:18:d3:69:
         6c:36:34:1b:ca:27:59:dc:81:31:a3:df:b9:17:11:f0:34:a9:
         44:ec:d6:b3:03:0a:a4:46:e2:98:89:94:d1:4b:5b:43:e5:98:
         f0:d9:a3:d9:ac:65:a0:61:e9:e9:0f:b3:97:27:91:d6:9a:f5:
         14:1c:7e:42
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEnbKifEkmH/Ig61yoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQzNWViOGItNDBkNi00ZTM3LWJlYWUtY2U5NzMzMDI3
NDY3MB4XDTI1MDUxNTAxMDA0N1oXDTI1MDgxMzAxMDA0N1owLzEtMCsGA1UEAxMk
OGRmYjdjYmQtMDgxOC00NzlmLTlmYmYtY2UyN2MxN2IwMGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApY7RRtWQfCtqv2KMWWwsthB/CLWSbdOm83do
j6i/xEp8XtLu3N1tl0a9zY0PhhzYuqWXOL0ruEGYwm2hvH9i1LwOU0lwvTCHjyqI
XqFq9lcHBRm0WUEY1LLVuA7SDbIdcVx3BrVKG/Jf8Rf8OEpf8x0pa/soTU9m2lE3
kPbWVwGXdiI1cVXOT5wLkmG2NFmh/AUtcP4gNbjDX4Ry1pH6Pnn71vVo+XxrxRB2
BR2qs6nXUp6QzKKhqawGu4sBFV4l8XMT0stpOefPpWYZtgiVjmDAh9DKt/gOzVPX
Dr0S4ZUG0btFXsZUENA0kHURgrqlyY2penUGT7oiSRVUXuwwFQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFE1fmJyJLRWyh1pkennGXHtP3VQlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1
ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3MzMwMjc0NjcvYmQ4MWI2NTktYmM3Ny0z
YTljLWE4Y2ItZmNkNzJiMGY4ODQwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNWQzNWViOGItNDBkNi00ZTM3LWJl
YWUtY2U5NzMzMDI3NDY3LzVkMzVlYjhiLTQwZDYtNGUzNy1iZWFlLWNlOTczMzAy
NzQ2Ny5jcmwwHwYDVR0jBBgwFoAUb1lFEUOxEsWIe9LaWB70wU6QvTkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81ZDM1ZWI4Yi00MGQ2LTRlMzctYmVhZS1jZTk3
MzMwMjc0NjcuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAUBAIAATAOMAwDBAHGoO4D
BAHGoPAwDgQCAAIwCAMGACYCCBnAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAAIH/no1klEPpRQGaYNq3UcF
c6o+EIcfxZXCs8HbEdI8raHiUxCtJHgqBRtJbNGtz0sfHp9rQaBPIpamzfG5M1Ub
K71cymnAZCNJAc911QdTDpTEey0KumAQYt5SoBoJvSqooQDbbtMaNusyNo8/yRd2
tXiqMFwbI6JQ4uSS0DTo8dMU+sa8Roaw2yyCwvLeGV40ajC1uTA2f7zrMxwnevPj
j/eRh1lBBZQ4I4J5haeHGHXiU7kGki//1dyh6IV5kgkmGxjTaWw2NBvKJ1ncgTGj
37kXEfA0qUTs1rMDCqRG4piJlNFLW0PlmPDZo9msZaBh6ekPs5cnkdaa9RQcfkI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:23:48 2025 by rpki-client