Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
File:                     34a15df3-ae78-372e-8160-e71d118b8d2e.roa (raw, json)
Hash identifier:          K56A5aaL2pry9ryKQtts6b0VuJcqtl9lIB31rKWLw6A=
Subject key identifier:   06:D7:6A:7E:F2:41:A6:3E:31:CA:88:FF:34:8E:39:FF:4A:A0:F9:98
Certificate issuer:       /CN=23ddb57b-8888-40f4-bf17-518b6a50512d
Certificate serial:       010D0C9F43285848E8665BEC6014CA7FFBA75EA0
Authority key identifier: 17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa
Signing time:             Mon 17 Feb 2025 02:00:38 +0000
ROA not before:           Mon 17 Feb 2025 02:00:38 +0000
ROA not after:            Sun 18 May 2025 01:00:38 +0000
asID:                     3356
IP address blocks:        209.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:66:5b:ec:60:14:ca:7f:fb:a7:5e:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23ddb57b-8888-40f4-bf17-518b6a50512d
        Validity
            Not Before: Feb 17 02:00:38 2025 GMT
            Not After : May 18 01:00:38 2025 GMT
        Subject: CN=e4390952-a684-4f10-aa64-b21af09d8a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c7:f8:5b:c1:ab:1d:f5:a5:b3:f2:66:59:26:
                    bb:25:24:4e:7f:c8:8b:19:82:bb:9f:8b:c5:5e:e3:
                    2a:37:2f:ea:d8:f9:39:ca:62:37:97:ae:d7:e9:2c:
                    e8:e5:96:dc:17:ef:5c:92:c2:c0:75:5e:79:96:e1:
                    16:41:71:08:b0:d3:ce:c6:92:34:ed:15:20:58:27:
                    99:83:d5:5f:27:e0:06:80:b2:af:7d:70:4d:15:70:
                    43:8c:33:3d:36:1e:1d:df:f6:57:cc:98:80:21:83:
                    cd:e8:06:10:53:8e:70:d3:0c:28:54:7c:2b:4b:5b:
                    51:58:29:c0:46:fb:93:bd:ab:14:e9:fc:07:86:4d:
                    f9:ac:0a:5e:2e:83:b4:7c:87:bd:93:18:7a:cd:31:
                    3f:a4:7a:1f:e9:a2:07:60:70:a1:6d:09:11:5b:8d:
                    4c:83:58:d1:f8:bd:fa:19:c3:92:f7:b5:fa:ac:50:
                    f8:40:b1:43:5d:60:d8:12:9d:9b:de:ce:a7:38:dd:
                    1f:de:a5:cd:0c:23:74:45:80:d7:ea:e2:61:5f:58:
                    b2:30:d3:45:b4:06:f6:1e:4f:5d:f9:e5:35:00:12:
                    c8:57:61:36:03:1b:e4:fc:b8:9b:3d:3b:aa:50:33:
                    95:cb:11:23:67:b2:3f:12:e3:ab:06:6c:a0:8e:76:
                    63:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:D7:6A:7E:F2:41:A6:3E:31:CA:88:FF:34:8E:39:FF:4A:A0:F9:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/34a15df3-ae78-372e-8160-e71d118b8d2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d/23ddb57b-8888-40f4-bf17-518b6a50512d.crl

            X509v3 Authority Key Identifier:
                keyid:17:88:7D:65:E8:CC:18:17:F2:EC:48:B8:91:53:8B:39:B3:F2:2D:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/23ddb57b-8888-40f4-bf17-518b6a50512d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:5f:37:6b:10:02:85:78:f6:28:6f:6a:32:33:86:37:dd:fe:
         f6:e4:3d:51:66:f3:d7:8b:6d:17:28:54:3b:b7:6d:16:94:0d:
         b8:d6:4e:6c:0b:5a:03:d4:84:58:1f:5f:d7:ba:63:8c:40:97:
         8e:38:1e:ae:97:60:d4:25:7b:5f:00:2f:6c:38:d6:85:fe:4a:
         d3:99:eb:60:86:30:d5:4f:12:07:4f:5e:40:d2:d5:7e:f9:73:
         c2:8f:08:21:d5:f4:b0:0c:34:1b:55:de:18:77:d8:17:59:b3:
         65:d7:5b:4d:00:b0:ea:79:4f:68:8c:fb:aa:7f:62:bf:53:0d:
         5b:b9:21:5a:25:3b:7e:a2:ae:29:73:d8:89:b1:89:67:7f:c8:
         02:db:27:b2:40:f9:fd:ea:67:13:2b:8f:a7:1c:3e:6a:cb:08:
         e5:70:00:68:e4:8b:a1:ab:45:0b:34:9e:8b:6e:0f:41:cf:79:
         37:47:b2:de:db:db:be:bb:02:4c:a2:ac:86:db:c5:27:4a:21:
         66:a7:f2:eb:04:ae:e0:80:7f:4b:fc:00:c8:d1:49:d5:62:0f:
         bb:10:67:33:5f:6e:b3:0a:48:a2:e2:61:38:fe:4c:09:84:29:
         d0:97:3d:5a:c8:a4:0d:66:86:b2:c3:e2:ae:bb:36:a7:52:c6:
         71:be:d0:17
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEjoZlvsYBTKf/unXqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNkZGI1N2ItODg4OC00MGY0LWJmMTctNTE4YjZhNTA1
MTJkMB4XDTI1MDIxNzAyMDAzOFoXDTI1MDUxODAxMDAzOFowLzEtMCsGA1UEAxMk
ZTQzOTA5NTItYTY4NC00ZjEwLWFhNjQtYjIxYWYwOWQ4YTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMf4W8GrHfWls/JmWSa7JSROf8iLGYK7n4vF
XuMqNy/q2Pk5ymI3l67X6Szo5ZbcF+9cksLAdV55luEWQXEIsNPOxpI07RUgWCeZ
g9VfJ+AGgLKvfXBNFXBDjDM9Nh4d3/ZXzJiAIYPN6AYQU45w0wwoVHwrS1tRWCnA
RvuTvasU6fwHhk35rApeLoO0fIe9kxh6zTE/pHof6aIHYHChbQkRW41Mg1jR+L36
GcOS97X6rFD4QLFDXWDYEp2b3s6nON0f3qXNDCN0RYDX6uJhX1iyMNNFtAb2Hk9d
+eU1ABLIV2E2Axvk/LibPTuqUDOVyxEjZ7I/EuOrBmygjnZjnQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAbXan7yQaY+McqI/zSOOf9KoPmYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2Rk
YjU3Yi04ODg4LTQwZjQtYmYxNy01MThiNmE1MDUxMmQvMzRhMTVkZjMtYWU3OC0z
NzJlLTgxNjAtZTcxZDExOGI4ZDJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjNkZGI1N2ItODg4OC00MGY0LWJm
MTctNTE4YjZhNTA1MTJkLzIzZGRiNTdiLTg4ODgtNDBmNC1iZjE3LTUxOGI2YTUw
NTEyZC5jcmwwHwYDVR0jBBgwFoAUF4h9ZejMGBfy7Ei4kVOLObPyLXQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yM2RkYjU3Yi04ODg4LTQwZjQtYmYxNy01MThi
NmE1MDUxMmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA0eAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEACF83axAChXj2KG9qMjOGN93+9uQ9UWbz14ttFyhUO7dtFpQNuNZObAta
A9SEWB9f17pjjECXjjgerpdg1CV7XwAvbDjWhf5K05nrYIYw1U8SB09eQNLVfvlz
wo8IIdX0sAw0G1XeGHfYF1mzZddbTQCw6nlPaIz7qn9iv1MNW7khWiU7fqKuKXPY
ibGJZ3/IAtsnskD5/epnEyuPpxw+assI5XAAaOSLoatFCzSei24PQc95N0ey3tvb
vrsCTKKshtvFJ0ohZqfy6wSu4IB/S/wAyNFJ1WIPuxBnM19uswpIouJhOP5MCYQp
0Jc9WsikDWaGssPirrs2p1LGcb7QFw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:17:16 2025 by rpki-client