Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa
File:                     31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa (raw, json)
Hash identifier:          nUyF0jUUZ58fSsCSlHfAut2Bl7An4jPezaLdiOluCUE=
Subject key identifier:   7E:8E:7C:94:EA:00:32:27:0D:36:16:6F:D6:6E:E3:1B:79:B9:DF:CC
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F43285849213468FC20C5C84B803D5E80
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa
Signing time:             Sun 09 Mar 2025 10:21:06 +0000
ROA not before:           Sun 09 Mar 2025 10:21:06 +0000
ROA not after:            Sat 07 Jun 2025 10:21:06 +0000
asID:                     14112
IP address blocks:        216.18.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:34:68:fc:20:c5:c8:4b:80:3d:5e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Mar  9 10:21:06 2025 GMT
            Not After : Jun  7 10:21:06 2025 GMT
        Subject: CN=d5b24d6f-71fc-4503-9ecd-fc94e56d8528
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:5d:9e:80:22:62:b0:cc:f7:72:4d:7c:44:40:
                    31:88:4e:4a:72:c7:ff:bb:a0:f2:7e:70:b5:34:ec:
                    cf:3e:22:df:35:fc:64:92:33:ee:49:f8:23:1d:43:
                    8f:90:8e:ce:04:4b:20:4e:30:c8:de:2b:e2:63:e2:
                    b0:f3:9e:8d:a8:0f:39:49:2f:cf:af:21:e7:ad:8e:
                    8f:d0:cb:d2:88:4a:58:b6:d3:1b:8d:9f:23:63:18:
                    12:86:89:7e:50:08:bd:0f:7b:d7:d8:fd:97:e1:01:
                    c3:cb:25:65:c1:46:53:47:20:33:39:34:8b:b0:cf:
                    53:8e:64:1d:bf:83:64:ad:54:be:fa:aa:e1:a1:f2:
                    d3:31:67:2f:76:fa:f0:48:85:ca:7c:95:0b:5e:04:
                    f0:0a:a8:04:82:ed:63:92:f8:aa:e8:59:c6:d7:7f:
                    a9:48:d4:92:4a:62:4f:18:18:a5:b3:af:0a:e9:4d:
                    12:1f:d7:3f:54:f2:09:ec:f1:70:e9:e8:18:4a:9b:
                    fc:f8:c5:69:67:ab:c9:f9:02:aa:eb:b0:21:b0:36:
                    69:ea:58:d1:40:af:a8:7d:de:85:21:6a:25:32:c6:
                    a3:d8:65:42:5a:17:34:59:cf:2c:11:ab:b9:04:4b:
                    b8:f0:66:67:34:18:cc:3c:a5:58:4d:5d:2d:08:c6:
                    07:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:8E:7C:94:EA:00:32:27:0D:36:16:6F:D6:6E:E3:1B:79:B9:DF:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/31ea8ba1-2a5a-3473-bd6e-412d222170ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.18.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:b3:ad:98:a0:10:27:b4:6b:9e:3e:18:e2:c4:5a:3b:52:e8:
         ef:d1:06:80:bb:50:2d:af:54:42:fc:ba:68:34:2e:56:7d:7e:
         d2:1b:00:51:c1:50:71:3e:c2:10:ad:cf:c4:78:fd:9e:d6:54:
         bf:2b:c7:19:09:ca:4e:41:e5:9d:55:f1:9d:0e:44:4a:ce:55:
         66:8e:58:1a:5e:09:8a:39:7d:37:fe:32:05:10:a1:e0:7f:03:
         9d:06:5f:7f:56:0c:18:58:1a:1f:22:3b:d1:cc:83:9d:db:36:
         70:8a:de:fa:37:8b:08:5b:96:3f:53:a0:32:b9:45:41:db:ca:
         24:e8:f0:7a:a4:bb:0e:b4:2b:d9:68:2e:02:4e:2f:81:43:85:
         80:53:29:de:fb:36:21:8d:7f:73:31:89:c0:3e:b7:c2:16:7c:
         5c:cb:a7:34:69:a5:9c:cd:e5:81:fd:53:25:b0:f2:60:88:a5:
         70:03:40:96:60:e8:6a:c2:ca:f8:3f:84:c4:91:27:fa:79:b1:
         bb:2d:02:43:ad:fe:ca:80:dd:d5:19:6a:f2:a6:9b:8e:dc:c5:
         31:45:99:1f:ff:b6:d9:32:6b:44:93:95:0e:f7:ae:e2:7f:81:
         ec:a7:21:b9:f0:28:93:e6:4e:e7:7f:ab:38:4b:68:21:62:77:
         0c:58:cc:5a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkhNGj8IMXIS4A9XoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDMwOTEwMjEwNloXDTI1MDYwNzEwMjEwNlowLzEtMCsGA1UEAxMk
ZDViMjRkNmYtNzFmYy00NTAzLTllY2QtZmM5NGU1NmQ4NTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxl2egCJisMz3ck18REAxiE5Kcsf/u6DyfnC1
NOzPPiLfNfxkkjPuSfgjHUOPkI7OBEsgTjDI3iviY+Kw856NqA85SS/PryHnrY6P
0MvSiEpYttMbjZ8jYxgShol+UAi9D3vX2P2X4QHDyyVlwUZTRyAzOTSLsM9TjmQd
v4NkrVS++qrhofLTMWcvdvrwSIXKfJULXgTwCqgEgu1jkviq6FnG13+pSNSSSmJP
GBils68K6U0SH9c/VPIJ7PFw6egYSpv8+MVpZ6vJ+QKq67AhsDZp6ljRQK+ofd6F
IWolMsaj2GVCWhc0Wc8sEau5BEu48GZnNBjMPKVYTV0tCMYHawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH6OfJTqADInDTYWb9Zu4xt5ud/MMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMzFlYThiYTEtMmE1YS0z
NDczLWJkNmUtNDEyZDIyMjE3MGVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2BJ0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEuzrZigECe0a54+GOLEWjtS6O/RBoC7UC2vVEL8umg0LlZ9ftIbAFHB
UHE+whCtz8R4/Z7WVL8rxxkJyk5B5Z1V8Z0ORErOVWaOWBpeCYo5fTf+MgUQoeB/
A50GX39WDBhYGh8iO9HMg53bNnCK3vo3iwhblj9ToDK5RUHbyiTo8Hqkuw60K9lo
LgJOL4FDhYBTKd77NiGNf3MxicA+t8IWfFzLpzRppZzN5YH9UyWw8mCIpXADQJZg
6GrCyvg/hMSRJ/p5sbstAkOt/sqA3dUZavKmm47cxTFFmR//ttkya0STlQ73ruJ/
geynIbnwKJPmTud/qzhLaCFidwxYzFo=
-----END CERTIFICATE-----
Generated at Mon Apr 7 17:01:08 2025 by rpki-client