Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa
File:                     e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa (raw, json)
Hash identifier:          IEA7Eznwrx0h30WgceZwU7XCoAqrpy0kiMYbDQNUR3k=
Subject key identifier:   55:A9:2D:BE:37:82:8C:5A:4C:06:E2:C0:52:15:90:DA:FB:46:97:B2
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285848451580CE484A0164D2FDD240
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa
Signing time:             Fri 20 Dec 2024 14:00:51 +0000
ROA not before:           Fri 20 Dec 2024 14:00:51 +0000
ROA not after:            Thu 20 Mar 2025 13:00:51 +0000
asID:                     14061
IP address blocks:        143.244.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:45:15:80:ce:48:4a:01:64:d2:fd:d2:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Dec 20 14:00:51 2024 GMT
            Not After : Mar 20 13:00:51 2025 GMT
        Subject: CN=1baa59ae-18b5-4f29-9df6-e008c32e5b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:1f:92:c2:87:ca:97:1a:7f:97:fa:8b:61:
                    60:59:c1:96:3f:d0:d0:05:9c:51:41:b3:f8:17:e6:
                    ef:a5:07:5d:7a:48:04:b7:8e:f3:06:d3:b5:cd:f3:
                    8b:04:e4:33:5b:cf:79:75:2a:df:4f:1e:9a:bd:99:
                    49:7c:72:b9:e2:15:f6:9f:67:27:3a:f2:6b:cb:c9:
                    86:33:e2:07:2d:79:f7:92:1b:2f:7e:5a:88:a1:a7:
                    e0:10:48:8f:2a:2f:71:55:32:36:43:35:10:b3:63:
                    0e:b2:1e:da:f9:17:9a:d2:b9:ab:1f:fb:39:a7:32:
                    e3:80:61:36:3b:86:0e:eb:51:e1:3a:c6:b5:a7:f2:
                    41:61:f8:22:9a:6b:49:e2:17:57:f7:c2:ac:7a:86:
                    94:d4:9d:d8:95:53:52:aa:83:7d:7a:35:52:d7:7f:
                    d1:6c:61:79:f9:cd:70:f9:8e:b3:83:86:69:94:20:
                    a8:01:4f:2b:cc:97:df:c9:c9:61:a8:d3:61:09:0a:
                    f0:48:90:d7:c8:40:35:17:d2:71:2d:e5:3f:df:3e:
                    8d:f2:bc:a3:14:88:10:6f:ec:05:bb:4c:2d:90:3e:
                    8f:a6:a4:3c:84:69:dd:16:85:48:81:a4:83:5f:5b:
                    02:59:e9:bf:fe:93:6e:9d:89:9b:79:8b:18:96:bd:
                    79:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:A9:2D:BE:37:82:8C:5A:4C:06:E2:C0:52:15:90:DA:FB:46:97:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/e37a9c90-c4ea-3097-aeb1-82f6f4dcf0fa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.244.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:1f:44:da:14:9b:b8:5d:2a:3e:5c:59:a1:e9:2a:6a:8a:43:
         cd:2f:8c:59:86:78:64:0d:b8:f2:e4:37:04:80:5a:13:b0:98:
         d9:68:80:7c:1a:de:95:73:ea:bf:ed:f7:60:9f:e5:6e:49:67:
         cf:1e:dc:53:a8:b2:5d:e9:71:73:a7:f1:da:95:f4:e2:5a:0d:
         44:cc:21:a7:ef:dd:2d:77:aa:f1:08:e0:2f:61:f6:23:57:b8:
         46:5d:ca:5d:94:b0:35:86:c5:08:e0:b2:47:b8:25:ac:9a:54:
         d0:55:5a:bb:5e:0d:8c:38:df:c3:02:63:75:b2:84:5e:b8:00:
         4e:9f:eb:ba:81:3f:e0:0a:df:0f:08:1a:1d:07:81:a0:1b:d3:
         5d:64:5c:7f:43:c1:f4:79:3b:5e:f6:6e:bc:8a:57:e5:36:18:
         8f:a0:3a:64:3b:d9:e6:bf:4c:87:c1:e2:c3:02:b1:4f:77:bb:
         ca:8b:4e:51:f9:13:e5:52:db:c6:ab:1e:62:2e:31:41:8f:1b:
         df:13:03:d1:9f:26:7d:4c:1f:f1:c3:2b:4f:57:d8:5e:88:a4:
         b3:cc:23:ef:a4:9d:77:9f:a6:8c:7a:a5:0a:4d:b4:3d:4e:cc:
         e5:78:f5:23:96:40:6e:b2:97:04:81:13:0c:80:81:06:6e:6a:
         64:df:65:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhFFYDOSEoBZNL90kAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI0MTIyMDE0MDA1MVoXDTI1MDMyMDEzMDA1MVowLzEtMCsGA1UEAxMk
MWJhYTU5YWUtMThiNS00ZjI5LTlkZjYtZTAwOGMzMmU1YjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqqwfksKHypcaf5f6i2FgWcGWP9DQBZxRQbP4
F+bvpQddekgEt47zBtO1zfOLBOQzW895dSrfTx6avZlJfHK54hX2n2cnOvJry8mG
M+IHLXn3khsvflqIoafgEEiPKi9xVTI2QzUQs2MOsh7a+Rea0rmrH/s5pzLjgGE2
O4YO61HhOsa1p/JBYfgimmtJ4hdX98KseoaU1J3YlVNSqoN9ejVS13/RbGF5+c1w
+Y6zg4ZplCCoAU8rzJffyclhqNNhCQrwSJDXyEA1F9JxLeU/3z6N8ryjFIgQb+wF
u0wtkD6PpqQ8hGndFoVIgaSDX1sCWem//pNunYmbeYsYlr15UwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFWpLb43goxaTAbiwFIVkNr7RpeyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvZTM3YTljOTAtYzRlYS0z
MDk3LWFlYjEtODJmNmY0ZGNmMGZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHj/SAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG0fRNoUm7hdKj5cWaHpKmqKQ80vjFmGeGQNuPLkNwSAWhOwmNlogHwa
3pVz6r/t92Cf5W5JZ88e3FOosl3pcXOn8dqV9OJaDUTMIafv3S13qvEI4C9h9iNX
uEZdyl2UsDWGxQjgske4JayaVNBVWrteDYw438MCY3WyhF64AE6f67qBP+AK3w8I
Gh0HgaAb011kXH9DwfR5O172bryKV+U2GI+gOmQ72ea/TIfB4sMCsU93u8qLTlH5
E+VS28arHmIuMUGPG98TA9GfJn1MH/HDK09X2F6IpLPMI++knXefpox6pQpNtD1O
zOV49SOWQG6ylwSBEwyAgQZuamTfZYk=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:26 2025 by rpki-client