Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa
File:                     411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa (raw, json)
Hash identifier:          qUk9ZgSFmBY+CnIhvLMO2TLehNHK/DKmTqcUShWhcGo=
Subject key identifier:   4E:D2:87:60:6E:2B:D7:40:0E:D5:18:1E:AA:88:37:6F:D2:12:8D:93
Certificate issuer:       /CN=5e3e99cc-7992-4ac1-a256-917cce07532e
Certificate serial:       010D0C9F43285849B41494BF4E09430E75243870
Authority key identifier: D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     7843
IP address blocks:        67.214.178.0/24 maxlen: 24
                          74.80.157.0/24 maxlen: 24
                          74.80.165.0/24 maxlen: 24
                          74.80.174.0/24 maxlen: 24
                          74.80.177.0/24 maxlen: 24
                          74.80.178.0/24 maxlen: 24
                          206.212.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:94:bf:4e:09:43:0e:75:24:38:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e3e99cc-7992-4ac1-a256-917cce07532e
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=2692c54f-9d40-408d-93cb-6733c4035a1c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:99:25:db:54:67:62:25:85:34:b2:fd:6a:57:
                    40:03:f6:a2:47:2c:29:6e:90:ef:ca:50:55:88:26:
                    60:d5:39:5f:de:af:0c:73:d1:c8:e8:88:6d:75:32:
                    b2:c5:44:e7:2b:e2:ee:75:b3:e2:52:0a:ac:ab:63:
                    90:8e:60:2d:0f:66:76:52:03:61:b7:01:8e:11:e7:
                    8c:cb:84:d2:59:25:b3:69:a7:2d:36:18:1f:43:8b:
                    2c:9a:60:47:e5:98:39:d1:45:05:b1:85:17:a9:f2:
                    8e:ab:eb:2e:55:11:66:f8:f3:1c:0b:d7:6e:2a:9b:
                    5f:f6:2f:6c:f5:97:02:6d:5f:65:ac:ff:99:21:11:
                    33:99:d8:11:93:51:04:76:17:a3:06:d8:ef:56:6f:
                    d0:c6:8c:7f:34:22:95:e1:fb:cc:80:78:55:90:63:
                    ba:98:9e:4c:63:c1:a5:34:cb:87:ad:88:54:5f:8a:
                    d1:ec:16:e6:e2:f2:d4:4b:e7:08:ad:5a:b6:b2:2e:
                    f4:5c:f0:ff:36:d8:cc:c8:6b:ee:f4:48:82:8e:2c:
                    f6:79:ed:42:71:9e:74:ed:8e:f5:03:7b:3b:91:b5:
                    a1:a0:f1:f3:ee:1d:08:23:98:6c:9b:f7:f8:e2:74:
                    48:dd:53:f1:5b:59:68:c7:8f:28:bf:31:b5:25:e9:
                    fe:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:D2:87:60:6E:2B:D7:40:0E:D5:18:1E:AA:88:37:6F:D2:12:8D:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/411d8101-8fcd-3b25-aaae-7c8cc6e0c117.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e/5e3e99cc-7992-4ac1-a256-917cce07532e.crl

            X509v3 Authority Key Identifier:
                keyid:D9:13:62:72:B7:F8:E6:B5:7D:9F:F0:E0:BA:85:7F:B6:3D:CD:C0:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e3e99cc-7992-4ac1-a256-917cce07532e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.214.178.0/24
                  74.80.157.0/24
                  74.80.165.0/24
                  74.80.174.0/24
                  74.80.177.0-74.80.178.255
                  206.212.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:d2:a5:2d:6c:66:67:da:73:90:21:7a:53:b6:cd:09:b7:f3:
         73:24:4d:2b:07:fd:ef:ab:83:05:2d:c9:d9:00:2b:52:9d:fd:
         87:67:ea:86:75:12:30:ba:8c:41:77:9f:e2:64:bf:29:84:25:
         d8:0a:a7:d6:03:51:26:5d:6a:e9:01:89:24:69:eb:50:98:b3:
         ae:59:b9:e5:6d:80:44:21:fe:18:f3:5f:8a:b5:b8:92:1e:53:
         b1:b0:c0:11:64:55:2a:fc:c2:2d:06:cb:2d:c7:c5:aa:0b:c7:
         ff:ab:9a:fc:c1:31:43:64:6c:d9:05:29:19:04:78:55:55:28:
         d4:db:7e:c5:60:29:42:07:ae:67:47:6d:04:b6:4f:14:70:1a:
         4a:00:45:43:30:45:4d:bb:7a:b1:56:7b:43:7e:54:b3:5e:e4:
         af:b1:f0:ba:ff:6b:80:88:35:5b:64:bc:bd:4e:10:ed:aa:55:
         af:92:61:3b:b7:36:42:c9:bf:01:34:43:74:f4:29:11:70:04:
         b9:b1:30:9d:17:a5:63:92:99:c1:c2:bf:84:54:4d:b0:0e:c2:
         8f:32:f8:cf:f5:00:90:ec:52:2d:a1:f2:8b:a2:64:a4:57:37:
         b7:7f:f6:f4:f1:29:05:50:a0:a8:cf:16:68:c6:72:0d:f7:0f:
         5d:f9:4a:02
-----BEGIN CERTIFICATE-----
MIIGaTCCBVGgAwIBAgIUAQ0Mn0MoWEm0FJS/TglDDnUkOHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWUzZTk5Y2MtNzk5Mi00YWMxLWEyNTYtOTE3Y2NlMDc1
MzJlMB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk
MjY5MmM1NGYtOWQ0MC00MDhkLTkzY2ItNjczM2M0MDM1YTFjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjJkl21RnYiWFNLL9aldAA/aiRywpbpDvylBV
iCZg1Tlf3q8Mc9HI6IhtdTKyxUTnK+LudbPiUgqsq2OQjmAtD2Z2UgNhtwGOEeeM
y4TSWSWzaactNhgfQ4ssmmBH5Zg50UUFsYUXqfKOq+suVRFm+PMcC9duKptf9i9s
9ZcCbV9lrP+ZIREzmdgRk1EEdhejBtjvVm/Qxox/NCKV4fvMgHhVkGO6mJ5MY8Gl
NMuHrYhUX4rR7Bbm4vLUS+cIrVq2si70XPD/NtjMyGvu9EiCjiz2ee1CcZ507Y71
A3s7kbWhoPHz7h0II5hsm/f44nRI3VPxW1lox48ovzG1Jen+oQIDAQABo4IDezCC
A3cwHQYDVR0OBBYEFE7Sh2BuK9dADtUYHqqIN2/SEo2TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNl
OTljYy03OTkyLTRhYzEtYTI1Ni05MTdjY2UwNzUzMmUvNDExZDgxMDEtOGZjZC0z
YjI1LWFhYWUtN2M4Y2M2ZTBjMTE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWUzZTk5Y2MtNzk5Mi00YWMxLWEy
NTYtOTE3Y2NlMDc1MzJlLzVlM2U5OWNjLTc5OTItNGFjMS1hMjU2LTkxN2NjZTA3
NTMyZS5jcmwwHwYDVR0jBBgwFoAU2RNicrf45rV9n/DguoV/tj3NwN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTNlOTljYy03OTkyLTRhYzEtYTI1Ni05MTdj
Y2UwNzUzMmUuY2VyMEUGCCsGAQUFBwEHAQH/BDYwNDAyBAIAATAsAwQAQ9ayAwQA
SlCdAwQASlClAwQASlCuMAwDBABKULEDBABKULIDBADO1PswVAYDVR0gAQH/BEow
SDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5l
dC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEASNKl
LWxmZ9pzkCF6U7bNCbfzcyRNKwf976uDBS3J2QArUp39h2fqhnUSMLqMQXef4mS/
KYQl2Aqn1gNRJl1q6QGJJGnrUJizrlm55W2ARCH+GPNfirW4kh5TsbDAEWRVKvzC
LQbLLcfFqgvH/6ua/MExQ2Rs2QUpGQR4VVUo1Nt+xWApQgeuZ0dtBLZPFHAaSgBF
QzBFTbt6sVZ7Q35Us17kr7Hwuv9rgIg1W2S8vU4Q7apVr5JhO7c2Qsm/ATRDdPQp
EXAEubEwnRelY5KZwcK/hFRNsA7CjzL4z/UAkOxSLaHyi6JkpFc3t3/29PEpBVCg
qM8WaMZyDfcPXflKAg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:31:39 2025 by rpki-client