Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa
File:                     da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa (raw, json)
Hash identifier:          7lQIxoETx+jwkzCw591vMLnCSrSJ9kN+hFbkZBqsPY8=
Subject key identifier:   15:68:F7:C2:13:05:7A:56:04:E5:45:54:F8:99:C5:1A:86:A8:27:DE
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F43285848A830A68CB6532480A0C15FC0
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa
Signing time:             Sat 25 Jan 2025 02:00:39 +0000
ROA not before:           Sat 25 Jan 2025 02:00:39 +0000
ROA not after:            Fri 25 Apr 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        216.115.212.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a8:30:a6:8c:b6:53:24:80:a0:c1:5f:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Jan 25 02:00:39 2025 GMT
            Not After : Apr 25 01:00:39 2025 GMT
        Subject: CN=f9f39fcf-df7c-4449-9ff4-3712a1ce77fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c2:60:bf:b4:f9:68:5d:c7:73:f2:7e:5a:a7:
                    26:1c:20:09:9a:d6:6b:1a:74:08:18:31:7b:4a:ed:
                    21:b1:66:b3:d7:57:95:69:99:c6:75:cc:6f:7a:5c:
                    8e:38:e5:1d:ed:db:dc:2b:88:5c:55:ba:ea:b4:5d:
                    15:0f:1d:75:46:48:40:95:c5:4f:2c:9f:d8:0c:bf:
                    8e:f5:f1:06:c5:ca:24:11:13:f6:63:c9:c6:c8:5a:
                    7b:a2:67:d3:95:e3:37:80:e3:60:a1:94:04:e6:43:
                    cc:4f:7a:68:fd:a8:3d:92:20:b7:d0:c7:40:45:e1:
                    d5:41:09:ca:dc:66:62:52:2c:82:7c:83:63:18:fa:
                    6c:fc:6b:cb:2b:10:d4:5c:96:db:06:fc:61:34:ec:
                    f8:c4:0c:bc:b8:53:92:9b:e2:e2:c2:8a:23:95:be:
                    f2:af:64:fc:40:3b:59:34:dc:52:a1:b8:d0:2f:54:
                    6a:9d:ef:dc:39:7c:9b:45:28:4f:df:a2:79:a1:8e:
                    b3:19:cc:25:c0:dc:68:f8:c9:d5:4b:c7:2e:cc:5e:
                    61:ca:54:a6:7b:d0:38:7a:e3:23:df:a5:9a:89:5a:
                    5b:d1:db:e8:ae:d2:f5:fb:3c:32:5d:93:ef:aa:57:
                    0f:d4:ad:0a:8b:a7:d0:92:e1:03:d1:ef:d8:5e:9c:
                    18:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:68:F7:C2:13:05:7A:56:04:E5:45:54:F8:99:C5:1A:86:A8:27:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/da1c77da-37f9-38f2-818a-c7e7fd2ecacc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.212.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:c5:a3:b3:b9:e8:0e:0b:c9:de:38:e6:78:6c:68:3b:0d:d3:
         c6:e0:56:56:54:cf:64:3a:4d:bd:58:dc:e2:7b:8d:e8:bd:64:
         ac:2a:7a:2f:cf:08:6a:5c:cf:2a:86:e0:df:1c:b2:cf:af:8d:
         d9:d0:f3:52:14:f3:43:35:1d:f4:91:b2:79:65:1c:1a:8e:d1:
         77:c6:0d:20:0d:bd:0a:45:0e:27:91:5c:76:9c:d9:6e:7a:8e:
         07:cc:5e:73:89:47:c9:99:d9:26:9c:99:1c:c8:0a:9c:d8:96:
         30:51:ad:b5:ef:9b:58:1d:7f:f8:3c:47:b3:15:1a:07:55:ee:
         a3:18:3e:8b:ce:38:b4:47:39:65:bd:a2:e8:20:e3:ba:37:59:
         ec:a2:09:66:90:02:1e:68:17:be:fe:f0:45:d4:1a:58:38:0f:
         2c:bc:de:b9:8f:ce:a0:d2:37:f6:07:6f:b7:db:ed:d4:0c:c7:
         46:d4:82:cb:42:ca:4d:89:28:b5:c5:4d:7b:43:50:cb:db:f8:
         85:bb:7e:54:54:fc:fe:56:d2:66:92:36:20:17:b8:91:45:36:
         63:62:69:d2:93:35:bc:64:72:2c:c6:06:c0:8c:e8:d6:6c:a9:
         ee:fa:5a:a8:a9:e4:d8:10:a6:5f:1f:ad:32:0b:dd:10:16:5d:
         cf:6b:62:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEioMKaMtlMkgKDBX8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI1MDEyNTAyMDAzOVoXDTI1MDQyNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZjlmMzlmY2YtZGY3Yy00NDQ5LTlmZjQtMzcxMmExY2U3N2ZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwcJgv7T5aF3Hc/J+WqcmHCAJmtZrGnQIGDF7
Su0hsWaz11eVaZnGdcxvelyOOOUd7dvcK4hcVbrqtF0VDx11RkhAlcVPLJ/YDL+O
9fEGxcokERP2Y8nGyFp7omfTleM3gONgoZQE5kPMT3po/ag9kiC30MdAReHVQQnK
3GZiUiyCfINjGPps/GvLKxDUXJbbBvxhNOz4xAy8uFOSm+Liwoojlb7yr2T8QDtZ
NNxSobjQL1Rqne/cOXybRShP36J5oY6zGcwlwNxo+MnVS8cuzF5hylSme9A4euMj
36WaiVpb0dvortL1+zwyXZPvqlcP1K0Ki6fQkuED0e/YXpwYdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBVo98ITBXpWBOVFVPiZxRqGqCfeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvZGExYzc3ZGEtMzdmOS0z
OGYyLTgxOGEtYzdlN2ZkMmVjYWNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HPUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE/Fo7O56A4Lyd445nhsaDsN08bgVlZUz2Q6Tb1Y3OJ7jei9ZKwqei/P
CGpczyqG4N8css+vjdnQ81IU80M1HfSRsnllHBqO0XfGDSANvQpFDieRXHac2W56
jgfMXnOJR8mZ2SacmRzICpzYljBRrbXvm1gdf/g8R7MVGgdV7qMYPovOOLRHOWW9
ougg47o3WeyiCWaQAh5oF77+8EXUGlg4Dyy83rmPzqDSN/YHb7fb7dQMx0bUgstC
yk2JKLXFTXtDUMvb+IW7flRU/P5W0maSNiAXuJFFNmNiadKTNbxkcizGBsCM6NZs
qe76Wqip5NgQpl8frTIL3RAWXc9rYjY=
-----END CERTIFICATE-----
Generated at Sat Apr 5 11:17:53 2025 by rpki-client