Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/febde059-84ac-3589-a076-6363ac81a72b.roa
File:                     febde059-84ac-3589-a076-6363ac81a72b.roa (raw, json)
Hash identifier:          6e1Nx0SByBJIlmyztjZkBB0QZKAySpl5Slj/CqAZDgU=
Subject key identifier:   A9:3B:7E:F6:E7:81:7B:BA:A8:F7:34:F0:80:4A:35:5C:F4:93:83:D2
Certificate issuer:       /CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
Certificate serial:       010D0C9F4328584875968DEE1952B3C312324280
Authority key identifier: 72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/febde059-84ac-3589-a076-6363ac81a72b.roa
Signing time:             Mon 06 Jan 2025 22:59:49 +0000
ROA not before:           Mon 06 Jan 2025 22:59:49 +0000
ROA not after:            Sun 06 Apr 2025 21:59:49 +0000
asID:                     21743
IP address blocks:        64.84.116.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Feb 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:75:96:8d:ee:19:52:b3:c3:12:32:42:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f0f46db-c9e6-4d47-9134-20963eb1dbbf
        Validity
            Not Before: Jan  6 22:59:49 2025 GMT
            Not After : Apr  6 21:59:49 2025 GMT
        Subject: CN=e187e15a-bb38-41ba-b0ef-4d32cf9393b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9c:80:0a:4a:1e:88:41:d8:d7:ae:c2:e9:05:
                    c5:7c:cc:45:7e:ac:35:e8:ac:df:ce:8c:e4:fc:50:
                    5d:c5:b9:9d:61:dc:4d:dd:60:ff:aa:9a:21:3e:b4:
                    81:83:04:73:34:f7:82:49:20:9d:d3:9b:2c:3a:ff:
                    bc:7b:db:32:29:1c:c8:2c:a1:c4:6b:65:e7:45:d0:
                    a6:a5:2b:35:14:bc:15:27:23:c4:7b:a0:e7:bf:ee:
                    0d:c9:6e:75:c8:d7:93:c3:90:66:ee:e6:d8:cb:57:
                    ab:c6:2e:8b:6c:03:df:c2:e1:16:73:d9:83:4d:58:
                    85:d9:93:ef:ac:fe:be:30:b1:66:88:07:25:0d:c1:
                    8f:72:39:d9:96:06:3a:2a:b7:1d:d8:60:7a:67:ba:
                    1d:57:bf:b3:e2:9b:26:6d:cf:48:67:b6:b3:9d:c6:
                    e2:8b:d0:f4:35:5e:6f:b4:b7:a2:31:4a:e9:ea:80:
                    6f:d9:4d:19:b1:d0:b7:bf:cc:d6:b8:cc:5a:34:df:
                    d5:fa:59:de:b7:69:e0:d1:1f:c9:c2:c4:82:d6:59:
                    ff:bc:8c:ab:6d:73:07:2b:10:53:c2:34:53:04:d9:
                    f0:63:c5:1f:9c:7f:24:3e:02:cc:54:6e:c1:1e:24:
                    76:b4:af:5b:27:f9:c5:12:8e:4a:6e:64:39:79:ea:
                    b4:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:3B:7E:F6:E7:81:7B:BA:A8:F7:34:F0:80:4A:35:5C:F4:93:83:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/febde059-84ac-3589-a076-6363ac81a72b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.crl

            X509v3 Authority Key Identifier:
                keyid:72:F3:A8:2E:01:18:63:F2:2C:BF:DB:58:E3:40:F7:3B:86:7A:97:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4f0f46db-c9e6-4d47-9134-20963eb1dbbf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.84.116.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:78:b6:cf:8c:3b:a9:b2:d6:0e:29:a9:fa:39:81:03:d8:ea:
         7a:43:da:52:3b:b8:de:96:08:47:9e:4c:64:bc:62:d8:ad:80:
         94:e1:7b:28:47:e1:84:d8:96:b1:ea:58:3c:63:da:66:44:1f:
         e1:89:4d:44:d6:f2:1a:cf:a1:a9:c9:e5:b7:c4:9a:67:b7:95:
         51:78:20:95:e9:5a:48:f6:d2:07:81:c9:79:dd:7d:af:31:66:
         c4:f7:f9:7a:cc:61:f2:a3:ab:57:ce:03:2f:32:df:65:e6:4f:
         b5:89:44:7d:45:7e:45:78:13:52:df:21:5f:0d:d6:37:9c:d5:
         f0:21:dc:34:6e:a8:35:04:29:9b:dd:06:5e:60:6d:93:59:7b:
         29:0c:c6:d0:b6:4c:83:15:72:87:cf:db:12:88:e5:24:40:da:
         bc:78:0d:6b:b0:3b:c8:c3:c8:76:af:83:1c:f2:f6:b5:5c:58:
         b7:a1:5a:e0:5c:6f:97:5b:97:c1:58:64:2d:33:d9:ea:df:f7:
         4e:48:4d:a4:ee:81:07:d4:00:86:c0:44:15:e8:67:db:ca:f1:
         5f:38:69:6e:3f:88:6f:99:54:ca:a7:da:ff:c8:66:d2:5f:27:
         61:c2:24:ad:99:f8:b5:44:8e:a5:fc:a5:59:0b:34:31:90:c2:
         fa:04:6f:f2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEh1lo3uGVKzwxIyQoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYwZjQ2ZGItYzllNi00ZDQ3LTkxMzQtMjA5NjNlYjFk
YmJmMB4XDTI1MDEwNjIyNTk0OVoXDTI1MDQwNjIxNTk0OVowLzEtMCsGA1UEAxMk
ZTE4N2UxNWEtYmIzOC00MWJhLWIwZWYtNGQzMmNmOTM5M2I0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwZyACkoeiEHY167C6QXFfMxFfqw16Kzfzozk
/FBdxbmdYdxN3WD/qpohPrSBgwRzNPeCSSCd05ssOv+8e9syKRzILKHEa2XnRdCm
pSs1FLwVJyPEe6Dnv+4NyW51yNeTw5Bm7ubYy1erxi6LbAPfwuEWc9mDTViF2ZPv
rP6+MLFmiAclDcGPcjnZlgY6Krcd2GB6Z7odV7+z4psmbc9IZ7azncbii9D0NV5v
tLeiMUrp6oBv2U0ZsdC3v8zWuMxaNN/V+lnet2ng0R/JwsSC1ln/vIyrbXMHKxBT
wjRTBNnwY8UfnH8kPgLMVG7BHiR2tK9bJ/nFEo5KbmQ5eeq0jwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKk7fvbngXu6qPc08IBKNVz0k4PSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBm
NDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2M2ViMWRiYmYvZmViZGUwNTktODRhYy0z
NTg5LWEwNzYtNjM2M2FjODFhNzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGYwZjQ2ZGItYzllNi00ZDQ3LTkx
MzQtMjA5NjNlYjFkYmJmLzRmMGY0NmRiLWM5ZTYtNGQ0Ny05MTM0LTIwOTYzZWIx
ZGJiZi5jcmwwHwYDVR0jBBgwFoAUcvOoLgEYY/Isv9tY40D3O4Z6l6kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80ZjBmNDZkYi1jOWU2LTRkNDctOTEzNC0yMDk2
M2ViMWRiYmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQFR0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAp4ts+MO6my1g4pqfo5gQPY6npD2lI7uN6WCEeeTGS8YtitgJTheyhH
4YTYlrHqWDxj2mZEH+GJTUTW8hrPoanJ5bfEmme3lVF4IJXpWkj20geByXndfa8x
ZsT3+XrMYfKjq1fOAy8y32XmT7WJRH1FfkV4E1LfIV8N1jec1fAh3DRuqDUEKZvd
Bl5gbZNZeykMxtC2TIMVcofP2xKI5SRA2rx4DWuwO8jDyHavgxzy9rVcWLehWuBc
b5dbl8FYZC0z2erf905ITaTugQfUAIbARBXoZ9vK8V84aW4/iG+ZVMqn2v/IZtJf
J2HCJK2Z+LVEjqX8pVkLNDGQwvoEb/I=
-----END CERTIFICATE-----
Generated at Wed Feb 5 17:04:09 2025 by rpki-client