Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa
File:                     bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa (raw, json)
Hash identifier:          HqJzkQglekudF11T3ragxOS58SupUrfQe63wxsHbdjg=
Subject key identifier:   AF:FF:21:AC:3D:6B:7E:33:F0:2A:34:3C:8F:83:41:FA:C5:8C:6A:D8
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E7DB14BCDF576EF03B8C0
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        157.230.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:7d:b1:4b:cd:f5:76:ef:03:b8:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=8a80cbb6-edc7-47e5-89d5-594455526a09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:cb:d8:1a:bc:be:9d:b6:df:b8:c6:5b:a0:55:
                    a7:d9:c9:f9:69:c3:00:85:48:c1:52:6f:77:86:12:
                    ed:8c:e4:13:69:17:b5:d2:a1:d6:5f:9e:06:ec:b8:
                    d1:ed:55:d8:c7:79:64:16:81:41:e1:d0:0b:3a:f8:
                    ec:60:55:b4:6a:e9:ae:1b:27:fa:9e:5e:49:5c:e2:
                    29:89:25:ef:bd:0a:1a:60:c6:1c:cc:35:70:65:22:
                    38:0a:6d:59:0d:fb:1e:e8:60:11:16:8b:85:dd:c6:
                    d7:f2:ef:bd:1d:82:49:b5:d3:b3:96:0c:67:52:5c:
                    22:27:38:cc:95:9f:e9:e1:57:4a:5e:f4:34:8a:2d:
                    46:31:0a:c7:07:59:a5:36:13:a1:bc:0c:9d:c7:d4:
                    bb:e4:b6:d0:30:2d:2b:04:5f:4b:13:81:5b:90:61:
                    26:49:a5:43:e1:28:45:da:04:dc:5e:f1:6b:d1:b4:
                    af:78:a2:7b:19:40:ad:ee:03:94:7c:84:5c:fc:dc:
                    5f:02:fe:5b:6c:88:12:0a:77:6b:99:42:8e:26:74:
                    12:b7:bd:41:4c:16:98:4e:bb:0e:85:d9:4e:e6:dc:
                    8b:0f:cd:30:9b:11:3c:b6:c0:da:8c:1d:23:be:7d:
                    fb:48:94:94:31:a5:03:b7:26:e4:1e:47:f5:dd:aa:
                    bf:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:FF:21:AC:3D:6B:7E:33:F0:2A:34:3C:8F:83:41:FA:C5:8C:6A:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/bde956a1-6e2e-3242-be5c-cd2e2f445e7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.230.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:0c:31:c1:00:b6:0d:cf:d7:98:c3:8f:88:5a:35:b3:5a:38:
         22:60:a7:f4:e5:c5:a0:ca:71:86:85:22:27:eb:cf:49:21:c8:
         ff:a5:99:de:a4:ca:cd:ae:2f:f7:10:2b:57:41:89:a5:c4:d1:
         0b:10:f2:65:a2:a5:b3:f9:d1:d5:1c:07:73:d0:6a:72:27:b5:
         e8:25:c1:64:6e:37:db:c7:30:74:5f:62:21:70:10:d1:8d:5f:
         31:cc:a3:42:7b:e9:2b:4e:1d:6b:f8:63:4c:57:e7:4a:82:d2:
         a9:cb:c8:a6:76:8c:62:06:81:1e:38:bb:d2:71:6a:fc:97:66:
         6c:1a:e2:88:34:f4:fa:71:0b:04:27:eb:9f:b2:27:67:d7:5b:
         99:61:e5:09:14:70:18:36:04:cc:b2:e8:85:52:c2:ac:f9:76:
         4d:5b:94:65:e5:b1:b0:b0:d8:1c:1e:a5:8f:87:eb:da:8a:74:
         2f:ba:97:28:92:56:22:4f:24:c6:50:b3:78:b5:93:f5:d3:18:
         e9:36:ef:38:d4:c0:b7:85:83:dd:84:35:1e:15:65:4d:ef:e4:
         14:bd:33:08:db:b2:84:86:d5:5c:da:21:6f:56:18:9e:f6:16:
         66:96:3b:da:73:7e:0f:ec:10:13:b6:d2:65:ce:1f:e4:af:2e:
         f9:e7:e1:09
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkkTn2xS831du8DuMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
OGE4MGNiYjYtZWRjNy00N2U1LTg5ZDUtNTk0NDU1NTI2YTA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08vYGry+nbbfuMZboFWn2cn5acMAhUjBUm93
hhLtjOQTaRe10qHWX54G7LjR7VXYx3lkFoFB4dALOvjsYFW0aumuGyf6nl5JXOIp
iSXvvQoaYMYczDVwZSI4Cm1ZDfse6GARFouF3cbX8u+9HYJJtdOzlgxnUlwiJzjM
lZ/p4VdKXvQ0ii1GMQrHB1mlNhOhvAydx9S75LbQMC0rBF9LE4FbkGEmSaVD4ShF
2gTcXvFr0bSveKJ7GUCt7gOUfIRc/NxfAv5bbIgSCndrmUKOJnQSt71BTBaYTrsO
hdlO5tyLD80wmxE8tsDajB0jvn37SJSUMaUDtybkHkf13aq/PQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFK//Iaw9a34z8Co0PI+DQfrFjGrYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvYmRlOTU2YTEtNmUyZS0z
MjQyLWJlNWMtY2QyZTJmNDQ1ZTdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAneYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAbAwxwQC2Dc/XmMOPiFo1s1o4ImCn9OXFoMpxhoUiJ+vPSSHI/6WZ3qTK
za4v9xArV0GJpcTRCxDyZaKls/nR1RwHc9Bqcie16CXBZG4328cwdF9iIXAQ0Y1f
McyjQnvpK04da/hjTFfnSoLSqcvIpnaMYgaBHji70nFq/JdmbBriiDT0+nELBCfr
n7InZ9dbmWHlCRRwGDYEzLLohVLCrPl2TVuUZeWxsLDYHB6lj4fr2op0L7qXKJJW
Ik8kxlCzeLWT9dMY6TbvONTAt4WD3YQ1HhVlTe/kFL0zCNuyhIbVXNohb1YYnvYW
ZpY72nN+D+wQE7bSZc4f5K8u+efhCQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:42:51 2025 by rpki-client