Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa
File:                     5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa (raw, json)
Hash identifier:          RbRNpAwpz99BLDY5asuDlAlvR9T0Kxpr4AXY/wVwjNI=
Subject key identifier:   15:8F:E2:51:ED:6A:43:B3:F3:F3:E9:A7:5E:B7:5D:29:50:BD:F1:63
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285849244E786AE956AFFE7C121600
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        170.114.34.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:78:6a:e9:56:af:fe:7c:12:16:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=f8165c45-0903-489f-b839-4074990baf23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:1e:b6:dc:37:64:b5:e0:35:b1:6b:84:7a:
                    e3:c4:c4:23:01:ce:5e:2f:9c:fe:61:d1:d8:ed:88:
                    22:ac:d3:30:cd:d3:4b:85:2c:52:c7:e8:22:69:67:
                    86:62:39:9e:1d:37:64:b6:55:dd:b9:f8:d2:96:e6:
                    b6:f0:13:69:32:58:e1:86:16:c8:89:7a:2b:a6:16:
                    0d:be:2a:b6:bb:f4:0c:14:a8:1b:e3:36:55:4d:59:
                    41:b0:f6:65:cb:4b:4a:2d:9a:a5:9f:d4:21:b8:88:
                    57:77:40:26:b9:93:50:ab:04:36:37:8d:6b:ff:78:
                    81:b3:38:67:08:21:15:83:a1:bb:a5:16:82:b7:32:
                    91:09:ef:54:0d:9e:fb:9a:97:49:84:2e:6d:57:e4:
                    1c:88:c7:d0:9c:02:b0:91:d3:ab:6f:87:e2:24:ba:
                    3d:35:92:1b:85:a9:0c:39:e0:c5:e8:ab:7c:ce:dd:
                    af:59:15:36:33:f4:f0:1e:be:2e:20:2a:d8:66:9c:
                    a1:83:32:0d:52:b0:b6:15:de:9b:77:9a:c0:1f:1d:
                    98:5b:17:ce:27:d0:39:f6:ef:4d:17:91:75:fa:f1:
                    73:eb:e2:0d:9c:12:cb:6b:46:1f:4e:a7:31:4a:f3:
                    97:2b:b7:2b:5f:d1:52:26:57:b8:13:02:5f:25:f3:
                    02:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:8F:E2:51:ED:6A:43:B3:F3:F3:E9:A7:5E:B7:5D:29:50:BD:F1:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/5f7675da-0235-3ef7-b2db-fd87fff5c5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.34.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:09:9a:8b:b4:06:ee:de:69:e0:8f:f3:c6:c2:75:99:f5:61:
         7f:ed:3d:f3:cd:5b:3b:1c:98:4c:72:24:4f:15:09:d5:c1:ac:
         ba:6e:6b:65:10:7a:20:5f:8d:78:3b:aa:d2:57:f9:b1:eb:09:
         af:31:f5:c1:e7:a7:4d:93:fc:c7:0d:a0:5a:ad:39:88:31:be:
         90:c2:7b:89:2a:9b:ca:2c:37:8b:87:79:f6:c5:62:9d:1e:f7:
         19:47:f6:a9:ee:fa:46:64:2d:7d:bb:88:05:dd:a8:12:7d:80:
         f3:82:f0:fd:c5:06:28:d5:8b:e2:f8:73:3b:6d:55:0e:ed:13:
         63:1f:64:f4:3f:a6:2b:cc:95:a7:b7:6b:d9:cc:34:f9:73:01:
         1e:aa:03:d2:d6:ae:8c:34:c8:50:ec:29:5b:98:c8:b4:ee:79:
         a7:5b:b8:fb:92:8c:62:86:e9:82:c2:c9:d9:f8:aa:88:ee:16:
         52:64:b2:c2:c9:28:64:22:0b:56:58:45:a1:77:d9:54:77:e1:
         86:0e:c4:20:84:e2:97:23:7b:9c:67:6d:e7:f8:e4:82:d9:93:
         4a:33:b9:42:df:07:a6:4d:76:55:99:f2:3e:89:5a:16:13:d9:
         22:66:f0:11:36:68:9c:ab:29:d2:cf:a2:1f:aa:ab:29:af:4d:
         92:6e:6e:1d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkkTnhq6Vav/nwSFgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
ZjgxNjVjNDUtMDkwMy00ODlmLWI4MzktNDA3NDk5MGJhZjIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI0ettw3ZLXgNbFrhHrjxMQjAc5eL5z+YdHY
7YgirNMwzdNLhSxSx+giaWeGYjmeHTdktlXdufjSlua28BNpMljhhhbIiXorphYN
viq2u/QMFKgb4zZVTVlBsPZly0tKLZqln9QhuIhXd0AmuZNQqwQ2N41r/3iBszhn
CCEVg6G7pRaCtzKRCe9UDZ77mpdJhC5tV+QciMfQnAKwkdOrb4fiJLo9NZIbhakM
OeDF6Kt8zt2vWRU2M/TwHr4uICrYZpyhgzINUrC2Fd6bd5rAHx2YWxfOJ9A59u9N
F5F1+vFz6+INnBLLa0YfTqcxSvOXK7crX9FSJle4EwJfJfMCHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWP4lHtakOz8/Ppp163XSlQvfFjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNWY3Njc1ZGEtMDIzNS0z
ZWY3LWIyZGItZmQ4N2ZmZjVjNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnIiMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGEJmou0Bu7eaeCP88bCdZn1YX/tPfPNWzscmExyJE8VCdXBrLpua2UQ
eiBfjXg7qtJX+bHrCa8x9cHnp02T/McNoFqtOYgxvpDCe4kqm8osN4uHefbFYp0e
9xlH9qnu+kZkLX27iAXdqBJ9gPOC8P3FBijVi+L4czttVQ7tE2MfZPQ/pivMlae3
a9nMNPlzAR6qA9LWrow0yFDsKVuYyLTueadbuPuSjGKG6YLCydn4qojuFlJkssLJ
KGQiC1ZYRaF32VR34YYOxCCE4pcje5xnbef45ILZk0ozuULfB6ZNdlWZ8j6JWhYT
2SJm8BE2aJyrKdLPoh+qqymvTZJubh0=
-----END CERTIFICATE-----
Generated at Sat Apr 5 12:14:53 2025 by rpki-client