Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e794aea3-f437-345c-8083-16f17d59d2ad.roa
File:                     e794aea3-f437-345c-8083-16f17d59d2ad.roa (raw, json)
Hash identifier:          ypY80zTpmn2FP8+cxK/PqFF8FBDeVR9s9bqJ+WpwnPY=
Subject key identifier:   19:D7:69:D1:26:B9:7B:8E:92:07:CC:A9:88:5D:D1:86:49:4F:27:2B
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F432858495ABEC9FFC80059F88023C0C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e794aea3-f437-345c-8083-16f17d59d2ad.roa
Signing time:             Sun 30 Mar 2025 01:00:47 +0000
ROA not before:           Sun 30 Mar 2025 01:00:47 +0000
ROA not after:            Sat 28 Jun 2025 01:00:47 +0000
asID:                     30103
IP address blocks:        159.124.0.0/23 maxlen: 24
                          159.124.2.0/23 maxlen: 24
                          159.124.4.0/23 maxlen: 24
                          159.124.6.0/23 maxlen: 24
                          159.124.8.0/23 maxlen: 24
                          159.124.10.0/23 maxlen: 24
                          159.124.12.0/23 maxlen: 24
                          159.124.14.0/23 maxlen: 24
                          159.124.16.0/23 maxlen: 24
                          159.124.18.0/23 maxlen: 24
                          159.124.20.0/23 maxlen: 24
                          159.124.22.0/23 maxlen: 24
                          159.124.24.0/23 maxlen: 24
                          159.124.26.0/23 maxlen: 24
                          159.124.28.0/23 maxlen: 24
                          159.124.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5a:be:c9:ff:c8:00:59:f8:80:23:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 30 01:00:47 2025 GMT
            Not After : Jun 28 01:00:47 2025 GMT
        Subject: CN=90ee08d9-715d-472f-bd69-9a8285b58106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:3b:92:a8:cf:d0:1e:de:dd:42:09:d5:53:3d:
                    18:ee:6c:14:ce:ad:50:5d:7a:9d:4c:71:1c:b7:18:
                    81:87:bb:c4:53:7e:b0:37:65:a4:f8:65:e0:f2:3a:
                    b3:68:39:45:ef:dc:af:de:4b:f1:62:d6:1b:f6:0f:
                    e1:6b:b6:a1:f5:96:49:a4:8d:0e:fd:c8:fb:f6:4a:
                    7f:02:d8:c2:69:72:9c:56:5e:28:6d:d5:5f:53:f9:
                    81:3e:8f:07:dc:75:1c:13:1c:89:64:5e:a1:b6:4b:
                    a5:45:be:61:f0:9c:82:5a:6a:1c:7c:20:e2:af:26:
                    82:6a:a4:cf:ac:20:b5:aa:d8:2a:a3:33:6d:bb:06:
                    ae:51:39:68:9b:ff:86:3e:29:2b:d1:3f:d8:63:51:
                    eb:ca:de:33:50:fa:81:04:35:0c:fe:fb:a5:e9:56:
                    4d:e5:52:99:a7:17:d7:72:79:f9:b9:39:97:22:21:
                    c3:08:94:cd:bd:75:8f:6b:73:d1:11:94:85:22:91:
                    ad:07:78:2a:8b:0b:c0:f1:f2:7e:8a:0a:da:eb:2e:
                    63:bf:b3:90:31:24:72:bb:62:1a:71:d7:e1:06:80:
                    d0:37:1e:dd:27:c5:ba:a7:11:7b:b2:ef:4e:1d:e8:
                    0c:dc:fd:bf:07:8a:90:be:62:09:44:5a:59:30:8f:
                    5e:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:D7:69:D1:26:B9:7B:8E:92:07:CC:A9:88:5D:D1:86:49:4F:27:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/e794aea3-f437-345c-8083-16f17d59d2ad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.124.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:de:fd:01:bc:c8:f2:a4:2c:26:07:cd:28:a8:b5:75:77:eb:
         1f:2f:21:af:41:40:41:d9:98:ec:f9:4e:83:27:99:94:21:a1:
         ac:64:fc:56:89:4d:7e:47:a1:0d:4d:66:b2:f0:cd:60:25:a9:
         ca:f8:6c:8b:94:2d:12:f3:4e:d8:da:d9:7a:00:66:aa:24:5a:
         43:2e:fa:6c:ba:10:44:75:a1:a5:e5:99:e5:34:71:e1:97:f8:
         2b:9f:62:d0:6b:b1:7f:7e:63:86:66:50:76:5e:16:86:3a:82:
         48:7f:ee:e4:a7:59:5c:4f:76:40:7f:a6:b5:f7:70:22:3d:af:
         38:23:74:15:2f:be:b0:be:d2:37:85:ac:c2:c1:15:a7:bb:d1:
         66:95:cb:ba:3c:00:0b:ef:8c:6f:6b:bc:72:72:70:ff:db:d0:
         e3:7b:8c:d6:46:ce:e9:69:dd:5a:b0:7d:33:27:df:53:76:67:
         91:02:d8:d9:cc:fc:14:4c:28:8d:21:ef:46:e3:0d:57:c1:92:
         42:ca:d6:d2:e1:94:cd:f1:cd:96:40:9b:d9:d9:f9:f8:02:76:
         42:50:ea:63:6e:47:be:e2:21:33:f2:1d:c0:50:63:dd:51:71:
         1e:67:0b:b8:8a:b6:d2:5c:d7:58:b2:d0:8b:d8:e6:a4:fe:f3:
         59:12:4c:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElavsn/yABZ+IAjwMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDMzMDAxMDA0N1oXDTI1MDYyODAxMDA0N1owLzEtMCsGA1UEAxMk
OTBlZTA4ZDktNzE1ZC00NzJmLWJkNjktOWE4Mjg1YjU4MTA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5TuSqM/QHt7dQgnVUz0Y7mwUzq1QXXqdTHEc
txiBh7vEU36wN2Wk+GXg8jqzaDlF79yv3kvxYtYb9g/ha7ah9ZZJpI0O/cj79kp/
AtjCaXKcVl4obdVfU/mBPo8H3HUcExyJZF6htkulRb5h8JyCWmocfCDiryaCaqTP
rCC1qtgqozNtuwauUTlom/+GPikr0T/YY1Hryt4zUPqBBDUM/vul6VZN5VKZpxfX
cnn5uTmXIiHDCJTNvXWPa3PREZSFIpGtB3gqiwvA8fJ+igra6y5jv7OQMSRyu2Ia
cdfhBoDQNx7dJ8W6pxF7su9OHegM3P2/B4qQvmIJRFpZMI9ehwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnXadEmuXuOkgfMqYhd0YZJTycrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvZTc5NGFlYTMtZjQzNy0z
NDVjLTgwODMtMTZmMTdkNTlkMmFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFn3wAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGbe/QG8yPKkLCYHzSiotXV36x8vIa9BQEHZmOz5ToMnmZQhoaxk/FaJ
TX5HoQ1NZrLwzWAlqcr4bIuULRLzTtja2XoAZqokWkMu+my6EER1oaXlmeU0ceGX
+CufYtBrsX9+Y4ZmUHZeFoY6gkh/7uSnWVxPdkB/prX3cCI9rzgjdBUvvrC+0jeF
rMLBFae70WaVy7o8AAvvjG9rvHJycP/b0ON7jNZGzulp3VqwfTMn31N2Z5EC2NnM
/BRMKI0h70bjDVfBkkLK1tLhlM3xzZZAm9nZ+fgCdkJQ6mNuR77iITPyHcBQY91R
cR5nC7iKttJc11iy0IvY5qT+81kSTJ4=
-----END CERTIFICATE-----
Generated at Sat Apr 26 15:59:45 2025 by rpki-client