Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
File:                     40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa (raw, json)
Hash identifier:          ehQ1lt04dlb+drhqLgLc/xWKmKVivhJctJseWBlUSNE=
Subject key identifier:   19:E7:6B:26:53:44:C0:70:5C:8A:DE:BE:E2:09:81:F5:77:7C:F4:0F
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F43285848222FEFA738606615002CBB40
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa
Signing time:             Sun 08 Dec 2024 02:00:39 +0000
ROA not before:           Sun 08 Dec 2024 02:00:39 +0000
ROA not after:            Sat 08 Mar 2025 02:00:39 +0000
asID:                     13781
IP address blocks:        63.151.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:22:2f:ef:a7:38:60:66:15:00:2c:bb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Dec  8 02:00:39 2024 GMT
            Not After : Mar  8 02:00:39 2025 GMT
        Subject: CN=086cd910-0a9d-4454-810b-4a99df8505d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:8b:64:a9:5b:fe:b6:29:96:73:dc:97:0e:1d:
                    dc:49:bf:1a:31:80:eb:c7:f3:e4:69:3f:7d:3b:21:
                    5b:12:5b:a3:8e:4b:0c:93:c4:12:9f:93:3e:a9:07:
                    85:c3:0d:bd:ba:8c:ae:d1:a5:cc:49:e1:dd:3b:56:
                    e0:43:47:ec:be:39:91:74:b2:f5:e5:d3:21:57:18:
                    8d:c0:69:f8:f3:94:d9:4f:28:bc:68:06:81:d6:2d:
                    09:38:b0:91:dc:06:3d:4c:ac:cb:75:1a:52:f7:a2:
                    d1:51:fd:88:4b:48:b6:87:55:29:af:3e:05:99:00:
                    09:7f:07:0f:54:48:d0:ad:02:d5:85:e6:7b:a8:10:
                    bf:2f:b9:70:29:e6:53:9f:34:66:96:92:18:0e:da:
                    25:e3:37:68:ad:f3:f9:e0:94:e4:46:58:d0:80:f7:
                    23:21:85:e2:74:22:03:9e:5c:02:7f:18:d2:e6:b2:
                    cb:91:4a:ce:4d:24:92:95:d5:3f:92:66:0d:b3:6e:
                    64:19:ea:b0:f2:c9:fa:c0:30:20:b0:74:b7:d9:32:
                    83:72:81:58:58:03:d5:7e:5a:54:31:cb:af:da:fe:
                    6e:cb:bd:78:75:56:d8:1f:4b:02:1b:2b:be:ef:b2:
                    e4:8a:97:d9:a5:7c:91:44:f2:9a:ff:91:cf:ff:3d:
                    a8:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:E7:6B:26:53:44:C0:70:5C:8A:DE:BE:E2:09:81:F5:77:7C:F4:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/40b9613f-2bd8-3a84-9b06-d53cd5553ec1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.151.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:99:da:2d:d9:72:0c:95:06:bf:1c:56:5d:df:a1:b1:dd:10:
         1b:69:3b:a0:2b:72:5c:21:49:5c:8d:66:38:36:0d:83:39:99:
         65:1f:86:ee:26:b9:06:79:01:04:4e:5f:25:69:82:71:7d:b6:
         19:de:30:0a:3f:ee:4c:12:67:e2:8c:54:fe:a5:8c:97:47:9d:
         8a:4b:61:5f:c3:80:66:89:33:74:f7:95:5a:4c:81:c9:fc:4c:
         84:83:cc:b0:52:39:13:26:be:33:af:2d:b8:1e:ad:83:e5:f7:
         77:fb:4c:95:dc:49:a6:d4:f1:7d:9a:03:ed:6b:14:5f:6c:c5:
         cc:88:f3:54:6b:f4:bc:ab:3e:59:f3:c9:72:30:ad:3f:2c:41:
         77:d0:8b:86:4d:4a:8b:94:05:af:ed:a1:cd:8d:18:0a:5a:fa:
         30:95:6e:78:6d:60:4d:12:35:2e:1c:69:ec:5c:11:4a:49:18:
         b6:b6:e3:7d:22:1e:27:d8:1e:9d:cc:b2:f3:fd:92:de:d5:42:
         74:72:00:93:c5:f5:08:f5:ed:41:74:04:fd:7b:64:13:f5:93:
         0c:8e:2e:9b:69:cd:d1:9f:3b:f6:3b:30:1f:92:f8:48:14:27:
         e5:8b:02:9c:6d:2b:0e:21:33:a5:2b:4d:9a:94:19:4c:4d:f6:
         e3:1a:2f:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgiL++nOGBmFQAsu0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI0MTIwODAyMDAzOVoXDTI1MDMwODAyMDAzOVowLzEtMCsGA1UEAxMk
MDg2Y2Q5MTAtMGE5ZC00NDU0LTgxMGItNGE5OWRmODUwNWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqotkqVv+timWc9yXDh3cSb8aMYDrx/PkaT99
OyFbElujjksMk8QSn5M+qQeFww29uoyu0aXMSeHdO1bgQ0fsvjmRdLL15dMhVxiN
wGn485TZTyi8aAaB1i0JOLCR3AY9TKzLdRpS96LRUf2IS0i2h1Uprz4FmQAJfwcP
VEjQrQLVheZ7qBC/L7lwKeZTnzRmlpIYDtol4zdorfP54JTkRljQgPcjIYXidCID
nlwCfxjS5rLLkUrOTSSSldU/kmYNs25kGeqw8sn6wDAgsHS32TKDcoFYWAPVflpU
Mcuv2v5uy714dVbYH0sCGyu+77LkipfZpXyRRPKa/5HP/z2olwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBnnayZTRMBwXIrevuIJgfV3fPQPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvNDBiOTYxM2YtMmJkOC0z
YTg0LTliMDYtZDUzY2Q1NTUzZWMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP5d0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWZ2i3ZcgyVBr8cVl3fobHdEBtpO6ArclwhSVyNZjg2DYM5mWUfhu4m
uQZ5AQROXyVpgnF9thneMAo/7kwSZ+KMVP6ljJdHnYpLYV/DgGaJM3T3lVpMgcn8
TISDzLBSORMmvjOvLbgerYPl93f7TJXcSabU8X2aA+1rFF9sxcyI81Rr9LyrPlnz
yXIwrT8sQXfQi4ZNSouUBa/toc2NGApa+jCVbnhtYE0SNS4caexcEUpJGLa2430i
HifYHp3MsvP9kt7VQnRyAJPF9Qj17UF0BP17ZBP1kwyOLptpzdGfO/Y7MB+S+EgU
J+WLApxtKw4hM6UrTZqUGUxN9uMaL5c=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:56 2025 by rpki-client