Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
File:                     8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa (raw, json)
Hash identifier:          BX2PLa3QqhGxUo7qItUEndn9qniDXtktBVr6SiNGsWA=
Subject key identifier:   21:64:27:BF:B9:5D:71:D0:DD:B6:10:ED:99:E4:EC:31:D5:24:D5:B6
Certificate issuer:       /CN=2267c34a-3a60-4747-b909-d82f8824f3ec
Certificate serial:       010D0C9F4328584921840788DAF39EF2819004B0
Authority key identifier: 96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa
Signing time:             Sun 09 Mar 2025 13:00:52 +0000
ROA not before:           Sun 09 Mar 2025 13:00:52 +0000
ROA not after:            Sat 07 Jun 2025 13:00:52 +0000
asID:                     3561
IP address blocks:        216.88.0.0/14 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:21:84:07:88:da:f3:9e:f2:81:90:04:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2267c34a-3a60-4747-b909-d82f8824f3ec
        Validity
            Not Before: Mar  9 13:00:52 2025 GMT
            Not After : Jun  7 13:00:52 2025 GMT
        Subject: CN=af81fb6d-f4e4-4323-8928-2271fb1498db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a2:6c:e7:14:39:08:2d:66:fa:3a:75:73:45:
                    8f:c0:fb:e9:dc:91:c7:41:a0:b7:25:17:4b:e6:5c:
                    58:d1:8c:8b:59:10:2d:d5:3d:8d:2d:f7:f6:37:f1:
                    7c:c9:8b:36:88:50:fe:0f:61:87:6e:de:d9:d0:92:
                    d6:83:cd:5c:97:45:50:b4:22:cf:6f:06:cc:26:b0:
                    6a:6b:23:e0:b7:6f:9e:70:e1:62:2b:85:20:81:74:
                    c6:ae:97:10:19:4b:ad:fc:1d:37:65:cc:73:9d:2f:
                    89:ce:a8:53:b9:cd:f9:b4:78:ae:ac:d1:56:e8:c0:
                    d8:0c:ff:27:1d:1e:b4:17:70:19:d4:74:c3:29:78:
                    06:22:78:af:88:af:d5:3b:cf:8b:f1:ff:a3:01:06:
                    df:82:e5:40:3f:c8:61:9e:91:2c:9d:46:5c:ff:aa:
                    0a:75:e6:ca:18:1e:f4:d5:74:a7:a2:95:1b:14:62:
                    fb:02:4c:a0:7a:ad:bc:81:e2:6e:ad:52:58:a8:d0:
                    02:bd:64:4a:f6:58:22:62:13:19:ae:e7:80:38:26:
                    fa:ad:8e:76:7b:47:59:e8:c8:32:b8:43:1c:95:13:
                    1c:d3:3a:55:3d:39:c7:60:62:f8:26:b2:53:e9:41:
                    a9:09:45:85:dd:2a:e5:3d:0f:63:b3:e9:51:e3:e4:
                    9a:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:64:27:BF:B9:5D:71:D0:DD:B6:10:ED:99:E4:EC:31:D5:24:D5:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/8be7d6b5-2a08-3651-af35-9b4259b08ee0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec/2267c34a-3a60-4747-b909-d82f8824f3ec.crl

            X509v3 Authority Key Identifier:
                keyid:96:5F:5E:89:D2:BB:29:40:E0:A2:D0:5F:F8:43:29:82:B8:ED:7D:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2267c34a-3a60-4747-b909-d82f8824f3ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.88.0.0/14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:03:76:14:61:1c:5c:ff:bc:e9:ed:3c:c7:4d:cd:97:a3:93:
         48:21:b4:34:73:e0:50:3c:78:31:07:ea:f9:97:1d:7c:71:ea:
         44:fa:4f:f8:7e:03:9f:cc:eb:63:20:20:f7:63:a9:e4:5d:90:
         a2:27:ae:fe:e6:42:26:88:8a:87:a9:7a:22:6b:4f:07:4d:5e:
         33:f5:11:f3:93:2b:87:76:45:05:65:47:f6:c1:ad:d4:b0:29:
         29:be:9e:fd:2d:b9:b3:91:2c:38:1b:38:5e:c5:60:92:03:05:
         90:83:c3:51:ce:67:d5:18:8c:9f:19:15:39:fe:64:e4:d5:5a:
         0b:56:3f:98:46:10:68:36:ec:ff:1b:65:d7:e7:c3:b3:fb:12:
         40:ad:88:5d:3f:db:77:4c:2a:86:e2:e2:15:44:db:10:49:bf:
         e7:d2:50:ea:3a:61:28:31:d2:9c:75:fe:bd:e0:d5:5c:c9:5f:
         04:b6:98:ea:68:fd:c7:9f:3e:17:09:68:66:5f:34:9b:89:4a:
         c5:79:78:67:a8:2b:94:30:d6:6a:30:5b:13:e2:67:5a:9a:7a:
         b4:df:73:71:26:f6:12:1d:97:67:20:3c:20:b7:00:bb:b4:c4:
         2c:b2:b2:f7:52:b0:40:f9:dd:9f:59:70:27:c9:46:81:cd:f0:
         bc:0c:9a:83
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkhhAeI2vOe8oGQBLAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2N2MzNGEtM2E2MC00NzQ3LWI5MDktZDgyZjg4MjRm
M2VjMB4XDTI1MDMwOTEzMDA1MloXDTI1MDYwNzEzMDA1MlowLzEtMCsGA1UEAxMk
YWY4MWZiNmQtZjRlNC00MzIzLTg5MjgtMjI3MWZiMTQ5OGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjaJs5xQ5CC1m+jp1c0WPwPvp3JHHQaC3JRdL
5lxY0YyLWRAt1T2NLff2N/F8yYs2iFD+D2GHbt7Z0JLWg81cl0VQtCLPbwbMJrBq
ayPgt2+ecOFiK4UggXTGrpcQGUut/B03ZcxznS+JzqhTuc35tHiurNFW6MDYDP8n
HR60F3AZ1HTDKXgGIniviK/VO8+L8f+jAQbfguVAP8hhnpEsnUZc/6oKdebKGB70
1XSnopUbFGL7Akygeq28geJurVJYqNACvWRK9lgiYhMZrueAOCb6rY52e0dZ6Mgy
uEMclRMc0zpVPTnHYGL4JrJT6UGpCUWF3SrlPQ9js+lR4+SaZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFCFkJ7+5XXHQ3bYQ7Znk7DHVJNW2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3
YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJmODgyNGYzZWMvOGJlN2Q2YjUtMmEwOC0z
NjUxLWFmMzUtOWI0MjU5YjA4ZWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjI2N2MzNGEtM2E2MC00NzQ3LWI5
MDktZDgyZjg4MjRmM2VjLzIyNjdjMzRhLTNhNjAtNDc0Ny1iOTA5LWQ4MmY4ODI0
ZjNlYy5jcmwwHwYDVR0jBBgwFoAUll9eidK7KUDgotBf+EMpgrjtfSUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yMjY3YzM0YS0zYTYwLTQ3NDctYjkwOS1kODJm
ODgyNGYzZWMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMC2FgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAdgN2FGEcXP+86e08x03Nl6OTSCG0NHPgUDx4MQfq+ZcdfHHqRPpP+H4D
n8zrYyAg92Op5F2Qoieu/uZCJoiKh6l6ImtPB01eM/UR85Mrh3ZFBWVH9sGt1LAp
Kb6e/S25s5EsOBs4XsVgkgMFkIPDUc5n1RiMnxkVOf5k5NVaC1Y/mEYQaDbs/xtl
1+fDs/sSQK2IXT/bd0wqhuLiFUTbEEm/59JQ6jphKDHSnHX+veDVXMlfBLaY6mj9
x58+FwloZl80m4lKxXl4Z6grlDDWajBbE+JnWpp6tN9zcSb2Eh2XZyA8ILcAu7TE
LLKy91KwQPndn1lwJ8lGgc3wvAyagw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 10:13:20 2025 by rpki-client