Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa
File:                     85d3965e-91b9-3bd2-b44d-74bf32060798.roa (raw, json)
Hash identifier:          Dldo+HlzMm0c//qbAA+4J+b3/26ENbFM+dn6zMiyV1c=
Subject key identifier:   44:98:34:24:D5:1C:FD:66:A9:49:C2:57:1F:0E:D5:98:8E:5A:46:3C
Certificate issuer:       /CN=01664fbf-983f-4876-bc33-31a4d5aed031
Certificate serial:       010D0C9F43285848F65BD4DC23DC8EABAB73EA80
Authority key identifier: 95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     14618
IP address blocks:        65.110.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d4:dc:23:dc:8e:ab:ab:73:ea:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=01664fbf-983f-4876-bc33-31a4d5aed031
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=93860b04-4c60-4de9-9dcc-19720586e484
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:f1:19:9c:1f:30:36:bb:d1:7a:50:d2:52:a5:
                    86:28:a4:87:c9:e3:92:ec:81:db:e9:4c:b0:aa:3a:
                    08:3e:ea:a9:cb:26:46:d4:66:8f:c0:31:7e:29:bd:
                    3d:c9:79:6a:c7:34:ae:df:d8:b3:1a:fc:21:ec:f4:
                    e1:aa:4a:5a:bb:cf:f6:3c:4b:16:ef:77:52:f2:a1:
                    61:0a:68:3e:29:af:a0:85:51:26:28:7d:5f:59:87:
                    38:76:ba:9f:4f:fc:d1:1d:07:34:e2:5b:16:ad:5a:
                    32:67:17:b0:10:55:1b:32:6d:f5:fa:5c:69:e5:cd:
                    f7:98:a0:6f:64:8f:51:5c:6e:54:ea:8e:2f:df:47:
                    1c:01:18:15:f8:8b:97:58:ec:5d:17:79:e8:97:9e:
                    78:f5:7a:49:3f:7d:b9:f7:77:6b:e1:ca:a8:b2:87:
                    15:13:29:64:3b:d9:3c:e0:4b:27:96:63:0a:42:38:
                    19:1d:cc:0f:04:63:c3:fd:2b:00:68:8b:2e:dc:d7:
                    ba:0f:5c:80:fa:9b:d1:82:15:46:45:8a:f2:a5:06:
                    e9:b8:8d:3c:79:76:50:2e:9b:1b:63:03:4e:7d:e2:
                    bb:a9:09:96:70:dc:c9:55:c5:1b:51:c1:00:76:15:
                    8b:27:d4:ea:5f:c9:a8:f9:4e:de:d0:6f:a0:f2:c9:
                    5b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:98:34:24:D5:1C:FD:66:A9:49:C2:57:1F:0E:D5:98:8E:5A:46:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/85d3965e-91b9-3bd2-b44d-74bf32060798.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031/01664fbf-983f-4876-bc33-31a4d5aed031.crl

            X509v3 Authority Key Identifier:
                keyid:95:4A:A5:D9:F8:E6:3A:D1:5A:18:DC:1C:28:6C:38:83:F9:ED:B9:41

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/01664fbf-983f-4876-bc33-31a4d5aed031.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:12:de:cd:0f:35:4b:c9:d7:4c:20:a1:dd:76:ec:a9:f3:f2:
         a0:51:0f:28:b8:76:05:89:8a:03:c2:63:99:17:08:c1:2c:91:
         e5:13:23:17:9a:02:7b:01:6f:6b:ff:7e:0f:89:ec:eb:f9:e4:
         a9:62:f6:64:18:d5:84:77:1f:0e:5d:44:fa:93:79:54:cc:ff:
         b4:e7:97:33:05:d5:43:71:6f:30:55:4e:4a:18:2e:b9:0e:f1:
         4c:3c:23:0b:e6:fe:00:50:eb:72:96:08:eb:a6:6e:9e:b3:2c:
         99:f0:82:4b:c9:61:ab:c1:81:f6:c0:c3:df:d9:14:26:38:f6:
         44:b2:81:60:1f:9e:45:60:d3:b5:ff:aa:ab:06:1d:61:38:67:
         87:3e:ed:8f:40:ce:79:e1:94:fc:c0:7f:d0:71:b0:ca:c6:d5:
         48:55:fd:ac:86:22:9d:3f:21:d9:e7:3c:41:5b:a6:a4:12:bb:
         74:bf:ae:0f:a1:4a:f9:f8:ef:dd:1e:dc:38:e8:d8:f1:d3:aa:
         b6:fc:23:c8:a3:9e:cd:e2:9a:d6:36:26:9d:5a:97:86:b5:63:
         7f:60:14:80:71:f2:81:5d:2f:f9:8f:10:81:49:36:ed:f4:6a:
         7a:b4:95:9e:76:60:99:f0:ed:ca:47:2f:e3:2f:19:03:24:6b:
         95:50:f5:0b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9TcI9yOq6tz6oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDE2NjRmYmYtOTgzZi00ODc2LWJjMzMtMzFhNGQ1YWVk
MDMxMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
OTM4NjBiMDQtNGM2MC00ZGU5LTlkY2MtMTk3MjA1ODZlNDg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/EZnB8wNrvRelDSUqWGKKSHyeOS7IHb6Uyw
qjoIPuqpyyZG1GaPwDF+Kb09yXlqxzSu39izGvwh7PThqkpau8/2PEsW73dS8qFh
Cmg+Ka+ghVEmKH1fWYc4drqfT/zRHQc04lsWrVoyZxewEFUbMm31+lxp5c33mKBv
ZI9RXG5U6o4v30ccARgV+IuXWOxdF3nol5549XpJP32593dr4cqosocVEylkO9k8
4EsnlmMKQjgZHcwPBGPD/SsAaIsu3Ne6D1yA+pvRghVGRYrypQbpuI08eXZQLpsb
YwNOfeK7qQmWcNzJVcUbUcEAdhWLJ9TqX8mo+U7e0G+g8slbFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFESYNCTVHP1mqUnCVx8O1ZiOWkY8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTY2
NGZiZi05ODNmLTQ4NzYtYmMzMy0zMWE0ZDVhZWQwMzEvODVkMzk2NWUtOTFiOS0z
YmQyLWI0NGQtNzRiZjMyMDYwNzk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDE2NjRmYmYtOTgzZi00ODc2LWJj
MzMtMzFhNGQ1YWVkMDMxLzAxNjY0ZmJmLTk4M2YtNDg3Ni1iYzMzLTMxYTRkNWFl
ZDAzMS5jcmwwHwYDVR0jBBgwFoAUlUql2fjmOtFaGNwcKGw4g/ntuUEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMTY2NGZiZi05ODNmLTQ4NzYtYmMzMy0zMWE0
ZDVhZWQwMzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW43MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIIS3s0PNUvJ10wgod127Knz8qBRDyi4dgWJigPCY5kXCMEskeUTIxea
AnsBb2v/fg+J7Ov55Kli9mQY1YR3Hw5dRPqTeVTM/7TnlzMF1UNxbzBVTkoYLrkO
8Uw8Iwvm/gBQ63KWCOumbp6zLJnwgkvJYavBgfbAw9/ZFCY49kSygWAfnkVg07X/
qqsGHWE4Z4c+7Y9AznnhlPzAf9BxsMrG1UhV/ayGIp0/IdnnPEFbpqQSu3S/rg+h
Svn4790e3Djo2PHTqrb8I8ijns3imtY2Jp1al4a1Y39gFIBx8oFdL/mPEIFJNu30
anq0lZ52YJnw7cpHL+MvGQMka5VQ9Qs=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:12:15 2025 by rpki-client