Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa
File:                     eb81d8e8-a132-32c2-bc7d-376e5450e238.roa (raw, json)
Hash identifier:          8eOhoZ5TESrdb8uddhnMA+uLTolkz+iYr3zlZWeNmU8=
Subject key identifier:   69:B9:80:C0:61:A5:F0:4A:06:92:E9:44:49:32:36:84:1A:4A:D6:90
Certificate issuer:       /CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
Certificate serial:       010D0C9F432858491ED6E1882571F3F565682A80
Authority key identifier: DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa
Signing time:             Sat 08 Mar 2025 14:00:52 +0000
ROA not before:           Sat 08 Mar 2025 14:00:52 +0000
ROA not after:            Fri 06 Jun 2025 13:00:52 +0000
asID:                     12216
IP address blocks:        65.51.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1e:d6:e1:88:25:71:f3:f5:65:68:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8f8c411-fa5c-428c-8ac1-e08e8a00ad15
        Validity
            Not Before: Mar  8 14:00:52 2025 GMT
            Not After : Jun  6 13:00:52 2025 GMT
        Subject: CN=5296788c-45e5-4470-835b-8b5a96646b63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:0d:02:93:71:90:c4:51:77:9a:9a:ee:53:
                    2a:34:86:63:32:10:9e:83:eb:11:4c:75:5b:83:b9:
                    2b:79:7f:20:38:3f:2f:a3:a5:57:72:51:22:c5:ab:
                    c2:b1:84:09:07:2d:1b:4b:43:f2:d6:5f:aa:eb:2b:
                    29:e3:da:e2:19:af:be:5d:84:f2:a3:8a:ca:a9:d1:
                    a4:4e:46:4e:c6:8b:50:da:8a:b8:31:dd:10:f1:e1:
                    dc:3e:ba:83:85:0e:b7:67:c8:50:cd:cb:8f:48:9a:
                    cc:81:6a:45:cc:21:8b:6e:fc:5f:04:3b:b5:52:88:
                    e9:1b:bf:11:c6:66:b1:03:d9:45:3e:03:2c:26:45:
                    a1:c5:89:05:95:ca:0b:bf:54:6f:40:ed:20:cb:a9:
                    d2:cc:23:83:8d:b6:cd:61:76:9d:de:1e:06:14:29:
                    de:c7:b7:16:2f:9f:11:92:c5:fa:07:c8:42:c5:32:
                    0a:e9:53:a6:84:fe:f7:43:fa:37:b4:7b:14:7a:2d:
                    dc:fc:2d:53:58:ad:78:a9:82:74:c9:36:40:a2:6e:
                    75:0b:05:22:4f:31:8c:83:37:17:60:5d:15:dd:b5:
                    28:5e:ea:f6:f9:da:1e:09:e8:40:a9:e6:10:11:f7:
                    ef:b1:f0:9c:95:a5:f0:de:ba:a4:4b:d0:7e:7d:a8:
                    c3:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:B9:80:C0:61:A5:F0:4A:06:92:E9:44:49:32:36:84:1A:4A:D6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/eb81d8e8-a132-32c2-bc7d-376e5450e238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.crl

            X509v3 Authority Key Identifier:
                keyid:DA:63:8F:4B:77:0D:71:EA:BA:22:00:39:B5:01:FF:B5:25:71:AB:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e8f8c411-fa5c-428c-8ac1-e08e8a00ad15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.51.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:0e:9c:ed:71:3c:83:c0:56:86:68:6f:6c:d0:c4:68:ef:e9:
         b7:dc:c5:dd:ac:a6:4e:e7:b4:e7:16:6c:1a:79:0d:05:4a:ac:
         53:c8:ff:b0:48:af:da:8e:bc:90:c4:d6:59:16:f6:b7:c7:f5:
         ea:59:d0:e9:fa:f5:ab:d2:87:43:7a:85:e9:41:c5:cb:bc:f1:
         17:23:ac:7a:02:5d:99:12:29:f7:5a:22:a9:47:c2:51:52:a3:
         2d:a8:0a:1f:75:87:e9:e9:0b:e8:07:bf:89:1e:07:02:59:78:
         75:05:f7:95:69:53:c6:5f:e0:89:dc:09:86:d8:88:8b:cb:70:
         ae:e3:bc:b1:74:30:fe:7a:87:47:e4:bd:9f:6f:e8:72:7d:59:
         f3:d7:1b:78:8c:3b:02:5b:aa:3e:e5:45:bd:8d:ec:40:bb:90:
         12:96:c1:88:dd:40:f4:61:75:38:d9:bc:a4:9a:16:46:01:0c:
         76:1b:5b:a4:63:49:98:f5:35:26:0c:50:b3:6e:f8:33:0f:60:
         2c:b9:26:28:16:45:2a:6e:33:86:35:19:8f:30:b6:31:46:00:
         ee:ad:7d:cc:ab:93:e4:65:59:19:16:a1:96:ef:88:00:19:b8:
         cb:15:ea:c9:a3:9e:98:e1:a0:06:f2:21:a4:96:03:c0:35:31:
         53:ce:4d:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEke1uGIJXHz9WVoKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZThmOGM0MTEtZmE1Yy00MjhjLThhYzEtZTA4ZThhMDBh
ZDE1MB4XDTI1MDMwODE0MDA1MloXDTI1MDYwNjEzMDA1MlowLzEtMCsGA1UEAxMk
NTI5Njc4OGMtNDVlNS00NDcwLTgzNWItOGI1YTk2NjQ2YjYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc8NApNxkMRRd5qa7lMqNIZjMhCeg+sRTHVb
g7kreX8gOD8vo6VXclEixavCsYQJBy0bS0Py1l+q6ysp49riGa++XYTyo4rKqdGk
TkZOxotQ2oq4Md0Q8eHcPrqDhQ63Z8hQzcuPSJrMgWpFzCGLbvxfBDu1UojpG78R
xmaxA9lFPgMsJkWhxYkFlcoLv1RvQO0gy6nSzCODjbbNYXad3h4GFCnex7cWL58R
ksX6B8hCxTIK6VOmhP73Q/o3tHsUei3c/C1TWK14qYJ0yTZAom51CwUiTzGMgzcX
YF0V3bUoXur2+doeCehAqeYQEffvsfCclaXw3rqkS9B+fajD+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGm5gMBhpfBKBpLpREkyNoQaStaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4
YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhlOGEwMGFkMTUvZWI4MWQ4ZTgtYTEzMi0z
MmMyLWJjN2QtMzc2ZTU0NTBlMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZThmOGM0MTEtZmE1Yy00MjhjLThh
YzEtZTA4ZThhMDBhZDE1L2U4ZjhjNDExLWZhNWMtNDI4Yy04YWMxLWUwOGU4YTAw
YWQxNS5jcmwwHwYDVR0jBBgwFoAU2mOPS3cNceq6IgA5tQH/tSVxq18wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOGY4YzQxMS1mYTVjLTQyOGMtOGFjMS1lMDhl
OGEwMGFkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQTOoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJsOnO1xPIPAVoZob2zQxGjv6bfcxd2spk7ntOcWbBp5DQVKrFPI/7BI
r9qOvJDE1lkW9rfH9epZ0On69avSh0N6helBxcu88RcjrHoCXZkSKfdaIqlHwlFS
oy2oCh91h+npC+gHv4keBwJZeHUF95VpU8Zf4IncCYbYiIvLcK7jvLF0MP56h0fk
vZ9v6HJ9WfPXG3iMOwJbqj7lRb2N7EC7kBKWwYjdQPRhdTjZvKSaFkYBDHYbW6Rj
SZj1NSYMULNu+DMPYCy5JigWRSpuM4Y1GY8wtjFGAO6tfcyrk+RlWRkWoZbviAAZ
uMsV6smjnpjhoAbyIaSWA8A1MVPOTQs=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:13:13 2025 by rpki-client