Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa
File:                     e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa (raw, json)
Hash identifier:          OcNYnuaFSWCVKzNkm0PwD5W4iAHg0GjvxfSC2QLu6Oo=
Subject key identifier:   4B:93:EC:9B:56:29:54:38:6A:8B:9C:8C:5D:6B:CC:06:FE:61:E9:7F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584986046CED601E6BBF4AFA3600
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     21700
IP address blocks:        216.74.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 17 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:6c:ed:60:1e:6b:bf:4a:fa:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=7e5be2df-870d-48f9-81a0-2d3412148791
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:67:5e:de:ce:a6:70:8b:14:2c:9f:f1:71:bd:
                    41:4d:be:88:a6:1f:a6:c1:6e:6a:c1:17:75:79:50:
                    96:42:ac:5f:40:47:6f:e1:8b:3e:6d:13:b0:ee:03:
                    ae:41:31:33:b0:96:05:a9:0e:ce:de:cb:25:5b:42:
                    ba:1f:a4:05:28:a7:e3:cb:97:8e:87:e8:bf:cd:61:
                    a7:3e:40:c4:85:59:b5:9f:c4:0b:bc:e6:1a:0f:e3:
                    f5:44:06:33:cb:71:06:b5:04:66:7b:4d:3f:9a:82:
                    0a:56:8d:ed:17:51:4b:65:e6:38:de:44:ec:4a:85:
                    35:d5:0b:0c:ea:51:8e:d9:0f:c9:15:e0:57:9e:a4:
                    96:dc:87:6e:26:e4:1c:01:8c:43:aa:7e:2b:e8:b1:
                    ce:fe:1d:ac:e7:35:23:3a:87:0d:d3:b3:4d:9b:3a:
                    b9:fa:70:5e:03:0c:ca:1d:01:28:72:36:6f:89:a0:
                    b7:e9:0b:95:76:88:5c:85:0f:38:a6:0f:c7:9b:ed:
                    dc:81:18:2e:23:72:4a:5a:25:ba:c9:ab:41:0c:74:
                    f9:69:fb:34:6e:ed:c5:f3:19:40:17:42:3e:1b:8f:
                    8f:c0:51:77:f3:13:4d:eb:9b:78:08:ba:43:99:26:
                    d5:f3:9c:af:ed:24:9c:ac:2b:af:74:a5:6b:5f:80:
                    9e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:93:EC:9B:56:29:54:38:6A:8B:9C:8C:5D:6B:CC:06:FE:61:E9:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e3d3bd02-3d54-38e0-954d-d3e9a3606ece.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.74.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:77:43:9b:5d:69:d3:08:cf:a8:e4:f1:28:4a:ff:70:4b:24:
         6a:4c:69:e2:07:f0:6c:4c:68:5f:0d:4a:f4:ac:b4:5a:aa:8a:
         45:92:5c:e5:87:a3:cd:56:f4:45:3d:19:54:21:00:44:a0:e7:
         bc:33:65:1c:bd:e6:be:dd:78:8b:f6:bb:bc:3f:a5:8f:6f:73:
         fd:b6:67:2e:92:ba:f9:eb:72:09:e8:af:77:a6:c6:78:01:4f:
         50:ed:6b:4c:a4:4a:cb:b7:54:1d:14:b0:fc:a5:85:43:a7:44:
         1f:02:6b:9e:b1:ec:77:3b:b2:b0:e8:60:40:cc:be:89:74:79:
         6e:f6:e3:09:fc:3a:e0:b4:c8:20:09:ba:ae:11:a8:26:0e:8a:
         f0:5f:11:30:42:22:0a:d6:ba:e3:9e:cb:d3:26:3e:6d:e4:53:
         b8:b7:d2:48:d7:34:48:3d:55:3d:e7:73:07:bf:fa:93:8b:63:
         ff:80:86:d2:7c:ac:10:a8:03:9b:35:70:37:20:d0:6d:7c:c2:
         f1:af:18:42:4d:ac:79:60:e0:33:b8:36:53:1f:69:ee:7a:73:
         a8:c8:99:4d:0b:28:97:6e:12:9c:79:da:31:2d:be:a5:77:27:
         2d:06:97:fa:c8:74:88:8d:a3:9d:b3:15:7c:c9:31:20:35:ec:
         9d:70:b9:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmGBGztYB5rv0r6NgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk
N2U1YmUyZGYtODcwZC00OGY5LTgxYTAtMmQzNDEyMTQ4NzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApGde3s6mcIsULJ/xcb1BTb6Iph+mwW5qwRd1
eVCWQqxfQEdv4Ys+bROw7gOuQTEzsJYFqQ7O3sslW0K6H6QFKKfjy5eOh+i/zWGn
PkDEhVm1n8QLvOYaD+P1RAYzy3EGtQRme00/moIKVo3tF1FLZeY43kTsSoU11QsM
6lGO2Q/JFeBXnqSW3IduJuQcAYxDqn4r6LHO/h2s5zUjOocN07NNmzq5+nBeAwzK
HQEocjZviaC36QuVdohchQ84pg/Hm+3cgRguI3JKWiW6yatBDHT5afs0bu3F8xlA
F0I+G4+PwFF38xNN65t4CLpDmSbV85yv7SScrCuvdKVrX4CeswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEuT7JtWKVQ4aoucjF1rzAb+Yel/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvZTNkM2JkMDItM2Q1NC0z
OGUwLTk1NGQtZDNlOWEzNjA2ZWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ep5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABV3Q5tdadMIz6jk8ShK/3BLJGpMaeIH8GxMaF8NSvSstFqqikWSXOWH
o81W9EU9GVQhAESg57wzZRy95r7deIv2u7w/pY9vc/22Zy6Suvnrcgnor3emxngB
T1Dta0ykSsu3VB0UsPylhUOnRB8Ca56x7Hc7srDoYEDMvol0eW724wn8OuC0yCAJ
uq4RqCYOivBfETBCIgrWuuOey9MmPm3kU7i30kjXNEg9VT3ncwe/+pOLY/+AhtJ8
rBCoA5s1cDcg0G18wvGvGEJNrHlg4DO4NlMfae56c6jImU0LKJduEpx52jEtvqV3
Jy0Gl/rIdIiNo52zFXzJMSA17J1wuW0=
-----END CERTIFICATE-----
Generated at Wed Apr 16 14:52:32 2025 by rpki-client