Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa
File:                     c09c5198-1f5a-3969-84df-5ab660b7c938.roa (raw, json)
Hash identifier:          5x9XXfGK5yGY5ZQazxP1CPoHGFymJbra8guLawXd2Uw=
Subject key identifier:   9B:6D:9C:54:94:3B:F2:DF:41:4A:74:4A:D0:C2:08:DD:C1:62:99:52
Certificate issuer:       /CN=656bb562-ba73-4cab-b885-ab843b4308c4
Certificate serial:       010D0C9F432858489340A6E91098370AE6E3D300
Authority key identifier: 33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa
Signing time:             Fri 17 Jan 2025 14:00:53 +0000
ROA not before:           Fri 17 Jan 2025 14:00:53 +0000
ROA not after:            Thu 17 Apr 2025 13:00:53 +0000
asID:                     14618
IP address blocks:        66.51.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:93:40:a6:e9:10:98:37:0a:e6:e3:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=656bb562-ba73-4cab-b885-ab843b4308c4
        Validity
            Not Before: Jan 17 14:00:53 2025 GMT
            Not After : Apr 17 13:00:53 2025 GMT
        Subject: CN=8d1c0dbb-2d5a-4dfe-b101-5aa3df7443cf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:29:ce:27:18:95:3e:b3:14:55:19:a8:7c:b7:
                    70:6e:09:e6:3b:ab:93:35:9e:47:31:2c:5a:88:f0:
                    a8:ae:7d:2f:0a:97:61:5b:9f:c7:ba:e9:56:13:47:
                    9b:3a:08:62:b7:ce:16:be:6a:aa:07:cb:7e:1e:03:
                    15:5b:47:8e:87:6b:94:4a:0c:72:38:50:4d:3d:57:
                    f7:88:39:fe:be:f4:14:6e:fa:7f:47:97:81:fe:56:
                    7a:a7:b9:4b:00:2d:83:36:bf:fb:f2:16:b9:95:e6:
                    2b:c7:b0:65:21:8e:cd:f4:6a:de:05:35:eb:97:07:
                    bb:19:b8:22:79:7a:dc:2e:35:b4:e1:63:75:f3:48:
                    c5:e5:e0:15:3e:f3:57:d6:9b:5e:97:3c:12:da:84:
                    fc:50:7d:e3:1f:31:1f:8c:4b:8a:08:a7:55:c2:40:
                    ea:78:c7:84:55:cc:85:bc:22:46:9b:a9:38:58:c2:
                    50:45:0f:06:6b:1b:34:eb:f4:ee:97:0a:1e:42:08:
                    23:13:90:14:50:10:62:a7:4c:f7:e0:09:10:cc:fa:
                    3d:b8:fd:46:d0:5a:f7:2d:33:cf:59:df:24:ae:ff:
                    3d:66:5a:ba:42:06:34:d3:b1:e7:47:0b:e5:7f:4c:
                    7d:84:d9:dd:75:ed:3d:06:8c:13:16:df:3b:05:8e:
                    49:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:6D:9C:54:94:3B:F2:DF:41:4A:74:4A:D0:C2:08:DD:C1:62:99:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/c09c5198-1f5a-3969-84df-5ab660b7c938.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4/656bb562-ba73-4cab-b885-ab843b4308c4.crl

            X509v3 Authority Key Identifier:
                keyid:33:80:9E:78:51:88:CD:E8:F5:1C:8F:C4:EB:93:46:C8:68:50:89:E9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/656bb562-ba73-4cab-b885-ab843b4308c4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.51.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:b7:0e:e3:11:cd:57:22:a9:8b:40:7f:2d:9f:05:c1:49:5a:
         ca:05:f8:5d:cc:6c:d6:77:19:a9:2e:c4:5b:f5:cb:0b:b3:a3:
         0b:22:34:d7:65:d4:7c:f6:d9:a9:29:84:41:fc:3b:92:e5:b6:
         9f:7b:6c:92:ec:43:ae:97:80:2f:55:78:96:57:61:8e:65:ca:
         9e:27:3f:04:54:03:dd:2c:cd:34:ce:82:e7:58:1d:f1:c6:42:
         47:da:9e:af:e2:3d:bd:72:9b:65:d1:5f:51:2a:7e:5d:4b:95:
         cb:97:ca:9d:8c:b7:5d:fc:6f:f8:8e:e5:4d:86:7c:d6:96:c4:
         43:0c:44:4e:cf:0f:94:f2:02:fc:35:8f:bd:49:5b:c3:05:8d:
         f1:ce:a3:88:b0:69:b9:9c:60:d0:6a:db:0d:2e:98:3f:e5:3d:
         6c:b5:f0:32:3e:d4:03:25:ba:17:4d:95:00:8d:8f:58:0c:63:
         07:2a:be:de:23:3b:ec:5a:68:d4:10:07:5c:a0:88:db:a1:a6:
         1e:be:e5:9a:eb:6c:46:a4:1d:48:37:a7:5c:7e:39:bd:1f:75:
         3d:fb:ec:32:34:f0:a1:06:b8:7d:d1:09:61:59:6b:e2:c4:a4:
         01:41:5f:d1:65:03:e5:32:df:14:cf:fa:79:f8:cd:7d:d0:c1:
         7c:a1:af:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiTQKbpEJg3Cubj0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjU2YmI1NjItYmE3My00Y2FiLWI4ODUtYWI4NDNiNDMw
OGM0MB4XDTI1MDExNzE0MDA1M1oXDTI1MDQxNzEzMDA1M1owLzEtMCsGA1UEAxMk
OGQxYzBkYmItMmQ1YS00ZGZlLWIxMDEtNWFhM2RmNzQ0M2NmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCnOJxiVPrMUVRmofLdwbgnmO6uTNZ5HMSxa
iPCorn0vCpdhW5/HuulWE0ebOghit84WvmqqB8t+HgMVW0eOh2uUSgxyOFBNPVf3
iDn+vvQUbvp/R5eB/lZ6p7lLAC2DNr/78ha5leYrx7BlIY7N9GreBTXrlwe7Gbgi
eXrcLjW04WN180jF5eAVPvNX1ptelzwS2oT8UH3jHzEfjEuKCKdVwkDqeMeEVcyF
vCJGm6k4WMJQRQ8Gaxs06/TulwoeQggjE5AUUBBip0z34AkQzPo9uP1G0Fr3LTPP
Wd8krv89Zlq6QgY007HnRwvlf0x9hNndde09BowTFt87BY5JlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJttnFSUO/LfQUp0StDCCN3BYplSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy82NTZi
YjU2Mi1iYTczLTRjYWItYjg4NS1hYjg0M2I0MzA4YzQvYzA5YzUxOTgtMWY1YS0z
OTY5LTg0ZGYtNWFiNjYwYjdjOTM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNjU2YmI1NjItYmE3My00Y2FiLWI4
ODUtYWI4NDNiNDMwOGM0LzY1NmJiNTYyLWJhNzMtNGNhYi1iODg1LWFiODQzYjQz
MDhjNC5jcmwwHwYDVR0jBBgwFoAUM4CeeFGIzej1HI/E65NGyGhQiekwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy82NTZiYjU2Mi1iYTczLTRjYWItYjg4NS1hYjg0
M2I0MzA4YzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQjPQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIa3DuMRzVciqYtAfy2fBcFJWsoF+F3MbNZ3GakuxFv1ywuzowsiNNdl
1Hz22akphEH8O5Lltp97bJLsQ66XgC9VeJZXYY5lyp4nPwRUA90szTTOgudYHfHG
Qkfanq/iPb1ym2XRX1Eqfl1LlcuXyp2Mt138b/iO5U2GfNaWxEMMRE7PD5TyAvw1
j71JW8MFjfHOo4iwabmcYNBq2w0umD/lPWy18DI+1AMluhdNlQCNj1gMYwcqvt4j
O+xaaNQQB1ygiNuhph6+5ZrrbEakHUg3p1x+Ob0fdT377DI08KEGuH3RCWFZa+LE
pAFBX9FlA+Uy3xTP+nn4zX3QwXyhr1s=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:53 2025 by rpki-client