Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa
File:                     81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa (raw, json)
Hash identifier:          UFLxnXo5u82LDWWmJF+8Z3GzgD38yTSEKEjW7ceean8=
Subject key identifier:   DF:CE:48:32:4E:C7:3A:01:39:80:08:1E:CB:09:53:EE:ED:59:16:AE
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F43285848E2D10821C3F889F41EAC5DC0
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa
Signing time:             Sat 15 Feb 2025 02:00:39 +0000
ROA not before:           Sat 15 Feb 2025 02:00:39 +0000
ROA not after:            Fri 16 May 2025 01:00:39 +0000
asID:                     32787
IP address blocks:        65.51.222.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e2:d1:08:21:c3:f8:89:f4:1e:ac:5d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Feb 15 02:00:39 2025 GMT
            Not After : May 16 01:00:39 2025 GMT
        Subject: CN=e39abc5c-5c10-43e6-8a42-4bb431c3dc31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:59:5b:99:b5:d9:a4:40:80:4b:de:cc:c4:f5:
                    e1:be:3c:73:c5:5f:09:e7:83:6e:73:86:f1:fc:9f:
                    f5:e6:a7:cb:9d:b9:7d:f4:3a:44:db:7d:42:c2:fa:
                    1b:c1:ec:2c:8e:5d:42:29:0a:f3:86:25:3e:59:f7:
                    b2:77:d3:9a:30:cf:8c:c0:4a:95:7f:1b:69:af:eb:
                    3b:00:ce:4b:1e:43:e0:35:89:88:35:a9:bc:11:ff:
                    38:36:75:63:9c:b4:e1:c1:5e:9f:9f:36:50:1e:66:
                    7b:d1:d5:b0:50:90:80:04:e5:f4:ae:dc:66:56:fc:
                    65:1d:c5:fb:58:98:0e:07:59:3d:9c:ce:50:92:d8:
                    e7:a2:22:a7:08:d3:27:73:09:af:59:56:f8:29:8a:
                    90:b7:13:e7:3d:d9:dd:f4:3f:0b:d7:e9:f9:7a:84:
                    39:b0:d5:39:e2:86:a2:df:6e:c8:9e:9f:d6:16:17:
                    53:27:33:9a:f1:78:49:ca:9e:85:98:86:e8:f9:5c:
                    9e:af:2d:6d:6f:06:d8:5d:23:eb:7b:e6:63:18:cd:
                    3a:f7:e6:0d:ae:3e:70:81:a1:74:b6:1c:a1:5a:86:
                    b2:a9:4a:4f:30:e3:97:20:25:89:5b:78:5b:6c:1a:
                    f0:f0:f6:5f:ce:20:ed:d3:85:5f:b3:a1:dd:8e:a4:
                    41:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:CE:48:32:4E:C7:3A:01:39:80:08:1E:CB:09:53:EE:ED:59:16:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/81d21e71-c5b7-3e95-b04f-c6dd9de90e8a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.222.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:9b:89:2d:73:66:cb:60:42:ea:00:06:b2:c6:85:ac:17:3f:
         91:4d:ef:ce:f4:cc:16:9f:db:c8:9d:a5:35:59:5b:ae:1a:71:
         ad:8b:2e:4e:80:63:4e:2e:ad:6c:b9:14:d0:12:1e:97:a8:51:
         ce:fd:cc:a8:e9:b1:96:ba:03:71:f0:22:41:3b:40:09:93:c2:
         7f:75:7a:93:04:d8:c8:cc:32:29:f8:13:ad:05:13:b0:96:9b:
         84:6f:2d:ce:2e:27:f0:76:8c:3b:1f:f7:7f:10:73:7a:7b:5e:
         04:ec:6d:79:39:da:50:ad:91:7a:51:11:82:b9:f3:55:be:45:
         b7:0f:a5:d0:98:96:ab:2f:48:d4:6c:cd:23:cb:8f:ec:a5:18:
         13:88:3c:dd:8d:fa:c9:7c:d2:5d:b8:95:2f:1b:b8:83:fb:81:
         60:76:06:06:43:af:d1:f1:fb:8d:16:7e:05:f3:9d:95:4a:d8:
         d5:16:67:33:16:1f:08:34:1b:91:29:a9:f2:1d:83:52:9f:d9:
         69:90:64:29:da:04:1d:f2:55:3b:21:00:37:ec:4c:97:47:7c:
         45:41:a0:c2:5f:c3:69:01:bd:a9:61:61:1d:20:cd:54:34:16:
         f8:2a:24:e9:2e:62:8e:99:eb:17:e9:e6:0d:6e:89:8c:36:0a:
         bd:18:1f:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEji0Qghw/iJ9B6sXcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDIxNTAyMDAzOVoXDTI1MDUxNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZTM5YWJjNWMtNWMxMC00M2U2LThhNDItNGJiNDMxYzNkYzMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkllbmbXZpECAS97MxPXhvjxzxV8J54Nuc4bx
/J/15qfLnbl99DpE231Cwvobwewsjl1CKQrzhiU+Wfeyd9OaMM+MwEqVfxtpr+s7
AM5LHkPgNYmINam8Ef84NnVjnLThwV6fnzZQHmZ70dWwUJCABOX0rtxmVvxlHcX7
WJgOB1k9nM5QktjnoiKnCNMncwmvWVb4KYqQtxPnPdnd9D8L1+n5eoQ5sNU54oai
327Inp/WFhdTJzOa8XhJyp6FmIbo+Vyery1tbwbYXSPre+ZjGM069+YNrj5wgaF0
thyhWoayqUpPMOOXICWJW3hbbBrw8PZfziDt04Vfs6HdjqRBOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/OSDJOxzoBOYAIHssJU+7tWRauMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvODFkMjFlNzEtYzViNy0z
ZTk1LWIwNGYtYzZkZDlkZTkwZThhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTPeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEebiS1zZstgQuoABrLGhawXP5FN7870zBaf28idpTVZW64aca2LLk6A
Y04urWy5FNASHpeoUc79zKjpsZa6A3HwIkE7QAmTwn91epME2MjMMin4E60FE7CW
m4RvLc4uJ/B2jDsf938Qc3p7XgTsbXk52lCtkXpREYK581W+RbcPpdCYlqsvSNRs
zSPLj+ylGBOIPN2N+sl80l24lS8buIP7gWB2BgZDr9Hx+40WfgXznZVK2NUWZzMW
Hwg0G5EpqfIdg1Kf2WmQZCnaBB3yVTshADfsTJdHfEVBoMJfw2kBvalhYR0gzVQ0
FvgqJOkuYo6Z6xfp5g1uiYw2Cr0YH9w=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:15:04 2025 by rpki-client