Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/181299bc-689a-3c21-b1d0-a1b402acbcd1.roa
File:                     181299bc-689a-3c21-b1d0-a1b402acbcd1.roa (raw, json)
Hash identifier:          oO0uVXkNjUU4M283U53YZtFPtD6Eqt6UBCSzA6xMG5A=
Subject key identifier:   6C:00:88:28:3A:C3:85:90:1D:7C:06:3B:78:FB:AA:7D:68:98:BC:5C
Certificate issuer:       /CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
Certificate serial:       010D0C9F432858491D717D7CFB616C1F2F292DC0
Authority key identifier: EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/181299bc-689a-3c21-b1d0-a1b402acbcd1.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        162.246.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7d:7c:fb:61:6c:1f:2f:29:2d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85f6c3f1-956c-47fe-badb-d8e0bd20e47d
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=c5691e13-bf21-407e-b424-92c47ccbc707
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8d:96:0b:40:41:37:a4:de:5b:e9:1e:72:25:
                    18:2c:57:81:6e:ae:fe:44:16:21:14:9d:e3:52:e5:
                    34:d3:ca:d4:49:62:14:84:69:55:7d:f6:3a:e4:c5:
                    2f:62:f3:ae:64:b3:3f:7d:fa:00:4e:f7:1f:e0:66:
                    b7:00:df:f1:9f:73:3a:6c:e1:9d:76:bc:4a:87:36:
                    43:4d:e2:14:c2:3c:12:2d:c5:dc:23:d7:42:05:69:
                    ad:2a:7b:eb:91:5b:4c:3e:fa:e6:e5:72:eb:7d:e9:
                    26:d9:c4:e6:b6:98:74:7f:a8:2b:a0:01:ed:0f:a2:
                    62:9a:88:3b:65:71:e6:9e:28:cd:01:00:b5:bb:26:
                    c3:87:99:fc:b3:80:0a:d5:34:67:e4:80:05:52:f2:
                    d4:0d:ed:1b:29:fa:6e:cb:67:a9:05:6b:32:15:de:
                    4c:06:53:d6:76:f5:c9:c8:c6:0a:19:3b:e6:95:da:
                    25:30:84:b9:01:f8:ac:fa:18:8b:3f:57:d3:8c:29:
                    54:4f:df:f6:d5:2f:e0:01:9c:9c:d4:29:70:cc:a8:
                    9b:2c:3a:51:66:16:6e:c9:96:1a:70:54:73:a0:20:
                    d7:71:27:4f:dd:cd:81:87:8e:e5:99:3b:5d:c9:a4:
                    80:45:42:46:a6:a5:8c:5b:d3:49:b1:84:95:4a:70:
                    d1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:00:88:28:3A:C3:85:90:1D:7C:06:3B:78:FB:AA:7D:68:98:BC:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/181299bc-689a-3c21-b1d0-a1b402acbcd1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.crl

            X509v3 Authority Key Identifier:
                keyid:EE:AA:F6:50:8E:81:06:BD:8F:F3:55:15:64:A8:FF:1C:78:9F:E7:E8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/85f6c3f1-956c-47fe-badb-d8e0bd20e47d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.246.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:6a:ff:49:cd:fd:7a:99:da:f3:3b:9a:7d:07:21:c3:d9:47:
         35:d4:e1:ea:18:27:5a:c1:bd:df:4a:0b:be:dc:b6:11:db:54:
         88:06:55:93:52:a9:1e:6b:9f:91:b0:84:fb:ad:77:59:59:c0:
         aa:a0:13:fa:a8:37:99:82:77:b6:8f:0d:0c:cf:60:9b:d1:ab:
         81:00:b9:e8:0c:25:d2:37:2f:16:9d:1a:0a:04:2d:65:fc:46:
         c0:bf:6e:02:24:39:d1:01:2c:60:e4:2d:0a:1c:e8:9c:83:ca:
         ff:cc:80:2a:3d:fc:1e:5f:38:ec:92:cb:cb:5a:15:ff:3a:30:
         b9:d1:ac:89:4e:a5:42:3a:3a:e9:1b:56:aa:51:d0:ab:af:a5:
         a7:18:a7:fc:8f:45:32:b6:22:df:98:08:16:9d:2f:d6:9b:26:
         7c:56:b6:74:0a:9c:6b:11:3e:aa:02:4e:b3:6d:69:9f:92:c7:
         f2:c1:04:f6:63:1d:8d:ec:cb:2a:35:ed:72:8c:a0:ae:4b:c8:
         09:73:db:ff:68:77:78:3a:42:15:7f:03:61:f1:8f:25:5c:c2:
         a7:b3:13:d6:4b:6c:31:43:46:f5:9c:a7:0f:e0:37:4e:36:f7:
         2b:1e:d8:45:1d:ec:e4:ee:66:90:69:35:89:e5:07:cc:7b:08:
         aa:24:00:01
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcX18+2FsHy8pLcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODVmNmMzZjEtOTU2Yy00N2ZlLWJhZGItZDhlMGJkMjBl
NDdkMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzU2OTFlMTMtYmYyMS00MDdlLWI0MjQtOTJjNDdjY2JjNzA3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY2WC0BBN6TeW+keciUYLFeBbq7+RBYhFJ3j
UuU008rUSWIUhGlVffY65MUvYvOuZLM/ffoATvcf4Ga3AN/xn3M6bOGddrxKhzZD
TeIUwjwSLcXcI9dCBWmtKnvrkVtMPvrm5XLrfekm2cTmtph0f6groAHtD6Jimog7
ZXHmnijNAQC1uybDh5n8s4AK1TRn5IAFUvLUDe0bKfpuy2epBWsyFd5MBlPWdvXJ
yMYKGTvmldolMIS5Afis+hiLP1fTjClUT9/21S/gAZyc1ClwzKibLDpRZhZuyZYa
cFRzoCDXcSdP3c2Bh47lmTtdyaSARUJGpqWMW9NJsYSVSnDRvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGwAiCg6w4WQHXwGO3j7qn1omLxcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC84NWY2
YzNmMS05NTZjLTQ3ZmUtYmFkYi1kOGUwYmQyMGU0N2QvMTgxMjk5YmMtNjg5YS0z
YzIxLWIxZDAtYTFiNDAyYWNiY2QxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvODVmNmMzZjEtOTU2Yy00N2ZlLWJh
ZGItZDhlMGJkMjBlNDdkLzg1ZjZjM2YxLTk1NmMtNDdmZS1iYWRiLWQ4ZTBiZDIw
ZTQ3ZC5jcmwwHwYDVR0jBBgwFoAU7qr2UI6BBr2P81UVZKj/HHif5+gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC84NWY2YzNmMS05NTZjLTQ3ZmUtYmFkYi1kOGUw
YmQyMGU0N2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAovawMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEBq/0nN/XqZ2vM7mn0HIcPZRzXU4eoYJ1rBvd9KC77cthHbVIgGVZNS
qR5rn5GwhPutd1lZwKqgE/qoN5mCd7aPDQzPYJvRq4EAuegMJdI3LxadGgoELWX8
RsC/bgIkOdEBLGDkLQoc6JyDyv/MgCo9/B5fOOySy8taFf86MLnRrIlOpUI6Oukb
VqpR0KuvpacYp/yPRTK2It+YCBadL9abJnxWtnQKnGsRPqoCTrNtaZ+Sx/LBBPZj
HY3syyo17XKMoK5LyAlz2/9od3g6QhV/A2HxjyVcwqezE9ZLbDFDRvWcpw/gN042
9yse2EUd7OTuZpBpNYnlB8x7CKokAAE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:12:54 2025 by rpki-client