Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa
File:                     a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa (raw, json)
Hash identifier:          7yk0wYqU2mr5AY9gpiBDEHtCbwSEAg6H49HPJGERUlE=
Subject key identifier:   67:E6:68:E1:A5:01:32:A7:FD:38:E1:CC:10:C2:44:D2:A6:8C:7B:63
Certificate issuer:       /CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
Certificate serial:       010D0C9F4328584902EBFD561A69761CFAFE8180
Authority key identifier: 0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa
Signing time:             Wed 26 Feb 2025 14:00:51 +0000
ROA not before:           Wed 26 Feb 2025 14:00:51 +0000
ROA not after:            Tue 27 May 2025 13:00:51 +0000
asID:                     1273
IP address blocks:        206.128.216.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:02:eb:fd:56:1a:69:76:1c:fa:fe:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ac2d3876-29e6-42f5-b76f-23bb48ba8582
        Validity
            Not Before: Feb 26 14:00:51 2025 GMT
            Not After : May 27 13:00:51 2025 GMT
        Subject: CN=14f58556-395a-4d32-938d-664906870fca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2a:a8:b6:69:c7:f3:be:4f:60:9a:82:71:f4:
                    be:f1:7a:7e:c8:6d:dd:d2:fa:66:bd:64:18:d5:62:
                    57:32:fa:59:cd:ec:3e:65:db:21:07:c9:da:7b:a1:
                    98:76:c4:3e:e3:19:fe:8f:3b:8c:d1:8a:1c:ed:8a:
                    5f:37:3b:da:31:b1:b2:63:bc:ba:4e:78:1e:2d:17:
                    67:57:ea:0f:b9:f7:01:0a:9f:d2:bb:27:fb:4f:28:
                    3f:91:57:ca:0f:54:f7:da:0e:5e:f6:ae:d6:51:ec:
                    1d:a4:70:50:c9:78:bd:19:3b:74:58:01:22:89:f4:
                    ad:24:1a:93:66:4d:e5:01:f8:17:cd:8b:fd:ac:0c:
                    61:6b:ed:2a:24:cf:50:fd:48:99:5d:15:5b:6c:9d:
                    b3:d1:b3:3b:7a:aa:67:72:ba:c9:35:08:28:79:dc:
                    0a:15:2e:71:09:1b:f7:6a:b1:fd:71:6d:e5:87:e2:
                    2a:85:f4:3e:1f:e6:14:af:6e:1a:f7:c3:83:67:8c:
                    f6:e5:1d:44:ad:73:c0:ed:33:b0:f6:14:f9:d8:39:
                    13:7e:f1:fb:8e:44:f0:d1:3e:df:25:82:71:90:bf:
                    19:66:10:14:e5:46:13:70:3c:21:06:58:3d:f6:37:
                    ba:69:05:c5:9c:df:ae:c8:ab:7b:d8:8e:ca:f9:8a:
                    ef:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:E6:68:E1:A5:01:32:A7:FD:38:E1:CC:10:C2:44:D2:A6:8C:7B:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/a34a0f9b-ae63-390c-9ef8-089624a1fb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582/ac2d3876-29e6-42f5-b76f-23bb48ba8582.crl

            X509v3 Authority Key Identifier:
                keyid:0C:49:24:45:E5:19:90:2C:B0:3F:1F:C1:63:BC:C1:B5:8E:D8:A4:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/ac2d3876-29e6-42f5-b76f-23bb48ba8582.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.128.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:77:64:6a:a5:46:04:fa:3c:25:87:57:92:c8:8c:c0:7a:b0:
         ab:3e:01:68:56:2d:4e:05:f8:e4:9b:b8:7c:9d:36:fc:f8:84:
         a6:c9:5c:7d:90:51:74:83:c9:b4:c6:e0:ce:fe:06:47:09:f1:
         0a:f1:76:5a:04:a0:eb:5a:42:dc:4c:a6:58:85:3c:1c:09:03:
         c7:f2:2e:15:7d:72:c3:b4:2c:ef:d5:3d:35:7e:f0:b4:ff:8a:
         51:fe:03:1d:ed:82:7e:8f:1d:c4:14:a3:09:e9:b4:55:e2:1d:
         24:85:5f:16:32:bc:22:fa:e8:40:f3:19:1a:75:0e:07:bc:11:
         7a:03:d8:5b:d5:70:82:c1:f8:35:6a:3c:ff:a3:00:bc:71:ce:
         7c:83:fc:67:c7:7b:99:e6:4a:57:2c:57:a5:2e:cc:a7:37:c7:
         e5:c8:22:69:33:ce:e9:85:2b:9e:82:ca:04:7d:db:c2:62:f5:
         36:8e:6e:90:b4:39:69:fe:7b:7c:4c:e1:71:1f:ca:5b:49:ed:
         5d:a5:34:60:87:34:e4:fd:86:e5:d6:66:0f:67:c2:9b:00:f1:
         24:19:f1:0b:72:0c:03:45:5e:78:4d:b3:2c:bd:35:d4:a0:90:
         f8:48:d5:0e:6f:43:50:5c:7f:bd:c1:2a:ff:a0:24:7f:9a:61:
         1b:22:7a:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkC6/1WGml2HPr+gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWMyZDM4NzYtMjllNi00MmY1LWI3NmYtMjNiYjQ4YmE4
NTgyMB4XDTI1MDIyNjE0MDA1MVoXDTI1MDUyNzEzMDA1MVowLzEtMCsGA1UEAxMk
MTRmNTg1NTYtMzk1YS00ZDMyLTkzOGQtNjY0OTA2ODcwZmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCqotmnH875PYJqCcfS+8Xp+yG3d0vpmvWQY
1WJXMvpZzew+ZdshB8nae6GYdsQ+4xn+jzuM0Yoc7YpfNzvaMbGyY7y6TngeLRdn
V+oPufcBCp/Suyf7Tyg/kVfKD1T32g5e9q7WUewdpHBQyXi9GTt0WAEiifStJBqT
Zk3lAfgXzYv9rAxha+0qJM9Q/UiZXRVbbJ2z0bM7eqpncrrJNQgoedwKFS5xCRv3
arH9cW3lh+IqhfQ+H+YUr24a98ODZ4z25R1ErXPA7TOw9hT52DkTfvH7jkTw0T7f
JYJxkL8ZZhAU5UYTcDwhBlg99je6aQXFnN+uyKt72I7K+YrvtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGfmaOGlATKn/TjhzBDCRNKmjHtjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJk
Mzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2JiNDhiYTg1ODIvYTM0YTBmOWItYWU2My0z
OTBjLTllZjgtMDg5NjI0YTFmYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYWMyZDM4NzYtMjllNi00MmY1LWI3
NmYtMjNiYjQ4YmE4NTgyL2FjMmQzODc2LTI5ZTYtNDJmNS1iNzZmLTIzYmI0OGJh
ODU4Mi5jcmwwHwYDVR0jBBgwFoAUDEkkReUZkCywPx/BY7zBtY7YpJ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hYzJkMzg3Ni0yOWU2LTQyZjUtYjc2Zi0yM2Ji
NDhiYTg1ODIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzoDYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAt3ZGqlRgT6PCWHV5LIjMB6sKs+AWhWLU4F+OSbuHydNvz4hKbJXH2Q
UXSDybTG4M7+BkcJ8QrxdloEoOtaQtxMpliFPBwJA8fyLhV9csO0LO/VPTV+8LT/
ilH+Ax3tgn6PHcQUownptFXiHSSFXxYyvCL66EDzGRp1Dge8EXoD2FvVcILB+DVq
PP+jALxxznyD/GfHe5nmSlcsV6UuzKc3x+XIImkzzumFK56CygR928Ji9TaObpC0
OWn+e3xM4XEfyltJ7V2lNGCHNOT9huXWZg9nwpsA8SQZ8QtyDANFXnhNsyy9NdSg
kPhI1Q5vQ1Bcf73BKv+gJH+aYRsieiE=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:25:22 2025 by rpki-client