Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa
File:                     57a34478-7668-3c41-9e9a-6624f2728938.roa (raw, json)
Hash identifier:          Mz7OZgLmZQVDqaEVAuvrmebbfvJJKxxtBs/jHGBmb5I=
Subject key identifier:   F1:21:54:8A:C9:1E:75:2B:81:57:3C:DC:66:EF:17:A0:AC:CC:39:0B
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F43285848F926AA39F42F8D6ECBF0CD00
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        69.64.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:aa:39:f4:2f:8d:6e:cb:f0:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4ee62711-e5e1-40a1-b7cc-391e7d85f3a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c6:c2:47:a9:a2:fb:76:5d:1a:82:e7:9a:65:
                    19:ce:ab:16:9c:4f:21:58:41:62:02:1e:a9:f3:8a:
                    2d:ee:dd:cf:36:31:61:55:9c:de:bc:96:80:b4:db:
                    f4:7e:59:4c:e8:b7:66:0a:76:81:dd:40:0e:71:25:
                    68:87:fb:f1:09:ed:34:b8:1c:03:19:9a:eb:0a:0e:
                    1a:0c:09:e2:98:68:77:6f:03:b7:62:9d:cf:cf:e5:
                    8b:d3:a1:3a:e2:53:0b:b9:ea:ea:59:6c:22:17:ad:
                    9e:9b:e6:1a:7e:ce:01:a1:5e:e7:05:81:9e:6d:7c:
                    6d:dc:3d:ef:4c:bf:6e:8c:bb:0b:c3:13:e3:c7:b9:
                    93:90:f0:96:b2:c7:0e:c0:bc:e4:ab:26:b4:2e:ed:
                    96:d9:58:03:1c:cd:99:e1:58:46:ef:d8:8c:d0:fd:
                    d9:f3:9c:d9:0d:88:e5:01:e3:8a:80:c9:fd:ff:37:
                    44:39:71:7c:66:bb:60:dd:53:49:cc:0e:61:d5:87:
                    2a:e8:82:c5:9f:6a:e8:81:19:b9:76:3d:99:6f:7f:
                    31:fa:a6:b7:31:6c:ed:e9:1e:ef:29:9a:09:29:d3:
                    57:1d:3b:6f:15:03:69:b0:44:27:83:b5:bd:1c:58:
                    d2:94:4d:71:cb:20:95:31:45:88:9d:67:11:17:7d:
                    be:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:21:54:8A:C9:1E:75:2B:81:57:3C:DC:66:EF:17:A0:AC:CC:39:0B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/57a34478-7668-3c41-9e9a-6624f2728938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:82:94:60:32:7f:d1:83:7e:63:6d:f5:cc:5a:1c:ef:54:cf:
         75:c8:25:f8:10:29:31:a6:29:27:b5:aa:22:88:58:35:82:fd:
         cc:94:6e:6f:8e:8f:98:52:51:c1:fe:66:68:4d:46:11:93:ae:
         4e:4f:a1:55:08:2f:6c:ce:44:6e:ec:e8:4b:0a:0b:bb:bc:8d:
         f6:91:de:f4:95:f4:cc:d1:28:86:b6:ad:41:a9:a2:d2:28:80:
         92:0c:3b:2e:41:a3:1e:f2:24:03:59:fe:1c:70:9e:e7:77:5b:
         7e:db:e0:e0:77:32:98:64:a2:da:2c:51:9b:25:c4:0a:15:8a:
         05:88:35:a4:68:10:e0:03:83:4e:52:af:bf:88:2f:92:d3:60:
         fe:99:0c:21:dc:29:5a:b7:1f:db:46:49:e8:9e:0b:cf:8c:b7:
         14:cd:aa:45:ca:b9:ed:ad:04:60:83:c7:4e:60:29:22:8e:58:
         ca:11:ba:4f:46:e6:75:dc:7f:13:8e:ed:21:f8:f1:83:28:00:
         75:95:2b:a1:7c:57:0b:80:67:2d:c3:1f:64:6c:0f:da:c3:d8:
         ca:ee:8a:6d:97:cb:a8:49:18:bc:5b:f0:f2:a5:eb:2a:47:51:
         00:fd:d9:c4:c5:85:b2:55:19:62:6b:fc:93:b1:b7:5a:74:7c:
         c7:c7:90:d3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5Jqo59C+NbsvwzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NGVlNjI3MTEtZTVlMS00MGExLWI3Y2MtMzkxZTdkODVmM2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3cbCR6mi+3ZdGoLnmmUZzqsWnE8hWEFiAh6p
84ot7t3PNjFhVZzevJaAtNv0fllM6LdmCnaB3UAOcSVoh/vxCe00uBwDGZrrCg4a
DAnimGh3bwO3Yp3Pz+WL06E64lMLuerqWWwiF62em+Yafs4BoV7nBYGebXxt3D3v
TL9ujLsLwxPjx7mTkPCWsscOwLzkqya0Lu2W2VgDHM2Z4VhG79iM0P3Z85zZDYjl
AeOKgMn9/zdEOXF8Zrtg3VNJzA5h1Ycq6ILFn2rogRm5dj2Zb38x+qa3MWzt6R7v
KZoJKdNXHTtvFQNpsEQng7W9HFjSlE1xyyCVMUWInWcRF32+6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEhVIrJHnUrgVc83GbvF6CszDkLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvNTdhMzQ0NzgtNzY2OC0z
YzQxLTllOWEtNjYyNGYyNzI4OTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKClGAyf9GDfmNt9cxaHO9Uz3XIJfgQKTGmKSe1qiKIWDWC/cyUbm+O
j5hSUcH+ZmhNRhGTrk5PoVUIL2zORG7s6EsKC7u8jfaR3vSV9MzRKIa2rUGpotIo
gJIMOy5Box7yJANZ/hxwnud3W37b4OB3MphkotosUZslxAoVigWINaRoEOADg05S
r7+IL5LTYP6ZDCHcKVq3H9tGSeieC8+MtxTNqkXKue2tBGCDx05gKSKOWMoRuk9G
5nXcfxOO7SH48YMoAHWVK6F8VwuAZy3DH2RsD9rD2Mruim2Xy6hJGLxb8PKl6ypH
UQD92cTFhbJVGWJr/JOxt1p0fMfHkNM=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:15:42 2025 by rpki-client