Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87caaa16-1f79-3e69-926a-5d70ef3036cd.roa
File:                     87caaa16-1f79-3e69-926a-5d70ef3036cd.roa (raw, json)
Hash identifier:          AzHn83KcMxqXeu3/gx1nwWFjMCN93ZVkBH9FDFhAZ6E=
Subject key identifier:   54:29:2B:DD:99:7E:57:70:AF:0D:94:8A:D0:75:A7:47:7B:FF:CB:ED
Certificate issuer:       /CN=2bc601f7-daff-4d8b-8556-b61503268309
Certificate serial:       010D0C9F43285848C5814699CC782024E9726200
Authority key identifier: DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87caaa16-1f79-3e69-926a-5d70ef3036cd.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     7155
IP address blocks:        172.242.160.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:46:99:cc:78:20:24:e9:72:62:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bc601f7-daff-4d8b-8556-b61503268309
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c00fc763-4af8-4daa-9cf2-fa3c47988f3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:cf:7d:3d:64:ef:79:30:53:d0:cc:3a:65:dd:
                    89:1d:24:62:af:5c:b3:70:57:42:3a:88:38:de:d6:
                    8b:a8:67:bf:c7:f9:6e:2a:26:26:c7:bc:a5:42:0f:
                    ef:6b:6f:91:d1:c2:f9:7d:84:82:e2:6b:1a:9d:8b:
                    78:3f:bf:89:e3:fb:30:87:25:96:8c:53:91:72:4d:
                    b6:c7:10:28:4c:a6:af:a0:f5:3f:5c:a5:48:46:3f:
                    8b:85:88:8d:e7:45:39:26:48:d9:fa:c1:be:ea:57:
                    d5:8e:af:3b:ca:93:df:7b:e9:65:4f:0f:bf:70:9c:
                    07:18:23:52:3a:a0:23:96:04:59:1a:df:5c:b3:bb:
                    0d:f8:b8:e0:f2:be:1d:61:7e:83:55:94:a9:fc:4d:
                    e3:b1:91:89:bf:42:2c:96:ce:1f:35:28:82:4b:a2:
                    2b:9e:87:e6:1f:85:89:ed:87:24:eb:26:74:0e:21:
                    1a:33:59:12:95:f6:09:ac:94:ed:35:0e:ac:1c:d5:
                    ac:a8:4a:d1:4f:a7:c7:ba:f1:73:9d:58:d9:15:09:
                    95:80:93:6e:7a:09:27:a0:31:bb:e0:51:bb:52:e9:
                    31:34:7e:26:0a:9b:22:81:70:89:27:c5:05:7f:04:
                    2d:d7:f0:da:ec:6d:9b:98:4b:5b:b8:a8:34:52:42:
                    11:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:29:2B:DD:99:7E:57:70:AF:0D:94:8A:D0:75:A7:47:7B:FF:CB:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/87caaa16-1f79-3e69-926a-5d70ef3036cd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309/2bc601f7-daff-4d8b-8556-b61503268309.crl

            X509v3 Authority Key Identifier:
                keyid:DA:C8:EF:29:AA:E9:B3:92:63:83:42:2B:DF:24:7A:85:A5:4E:83:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2bc601f7-daff-4d8b-8556-b61503268309.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.242.160.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         44:7b:c5:9e:e1:8c:38:91:29:6b:42:a0:be:5c:c5:e7:24:ab:
         74:00:3e:d1:28:e6:3d:69:33:da:65:88:ee:7b:95:9c:c5:ad:
         29:01:0d:41:61:42:e7:b5:2c:4a:d9:d0:f5:8c:65:42:65:f0:
         b8:0b:fd:6c:f3:67:a6:f5:79:34:0b:3d:df:b3:71:21:97:44:
         4a:48:58:bf:23:41:51:2d:e3:3b:86:01:98:b8:3f:67:0c:64:
         7f:8b:51:e6:9a:18:d3:4d:70:b0:bd:58:e5:31:c7:8e:bc:89:
         60:94:50:78:f6:0f:59:8e:d8:93:c6:67:8f:9f:f9:f7:f4:ac:
         d7:2e:81:12:85:50:2b:ae:a7:0b:66:27:70:1c:da:31:cf:75:
         90:35:b8:22:72:cf:92:d4:f1:81:bd:43:ca:f4:b0:60:6b:a7:
         f1:8a:e5:26:93:51:1f:2a:4b:f6:a7:dd:77:c7:eb:14:ea:26:
         8b:e2:04:5b:ee:b7:23:e6:f2:a7:e9:f3:01:8f:fa:00:ba:93:
         db:45:5e:61:f5:c4:cf:93:4d:e6:06:6b:2c:c0:4e:22:10:d6:
         b1:fc:ac:04:4d:8b:a1:b9:36:9e:4a:a3:ea:92:fb:92:3d:58:
         53:91:c8:d7:04:eb:ea:a6:26:00:56:cb:1d:75:4e:b4:d8:15:
         e7:f3:9f:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgUaZzHggJOlyYgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJjNjAxZjctZGFmZi00ZDhiLTg1NTYtYjYxNTAzMjY4
MzA5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzAwZmM3NjMtNGFmOC00ZGFhLTljZjItZmEzYzQ3OTg4ZjNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAos99PWTveTBT0Mw6Zd2JHSRir1yzcFdCOog4
3taLqGe/x/luKiYmx7ylQg/va2+R0cL5fYSC4msanYt4P7+J4/swhyWWjFORck22
xxAoTKavoPU/XKVIRj+LhYiN50U5JkjZ+sG+6lfVjq87ypPfe+llTw+/cJwHGCNS
OqAjlgRZGt9cs7sN+Ljg8r4dYX6DVZSp/E3jsZGJv0Isls4fNSiCS6IrnofmH4WJ
7Yck6yZ0DiEaM1kSlfYJrJTtNQ6sHNWsqErRT6fHuvFznVjZFQmVgJNuegknoDG7
4FG7UukxNH4mCpsigXCJJ8UFfwQt1/Da7G2bmEtbuKg0UkIRWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFQpK92Zfldwrw2UitB1p0d7/8vtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2
MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1MDMyNjgzMDkvODdjYWFhMTYtMWY3OS0z
ZTY5LTkyNmEtNWQ3MGVmMzAzNmNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmJjNjAxZjctZGFmZi00ZDhiLTg1
NTYtYjYxNTAzMjY4MzA5LzJiYzYwMWY3LWRhZmYtNGQ4Yi04NTU2LWI2MTUwMzI2
ODMwOS5jcmwwHwYDVR0jBBgwFoAU2sjvKarps5Jjg0Ir3yR6haVOgxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYmM2MDFmNy1kYWZmLTRkOGItODU1Ni1iNjE1
MDMyNjgzMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArPKgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAER7xZ7hjDiRKWtCoL5cxeckq3QAPtEo5j1pM9pliO57lZzFrSkBDUFh
Que1LErZ0PWMZUJl8LgL/WzzZ6b1eTQLPd+zcSGXREpIWL8jQVEt4zuGAZi4P2cM
ZH+LUeaaGNNNcLC9WOUxx468iWCUUHj2D1mO2JPGZ4+f+ff0rNcugRKFUCuupwtm
J3Ac2jHPdZA1uCJyz5LU8YG9Q8r0sGBrp/GK5SaTUR8qS/an3XfH6xTqJoviBFvu
tyPm8qfp8wGP+gC6k9tFXmH1xM+TTeYGayzATiIQ1rH8rARNi6G5Np5Ko+qS+5I9
WFORyNcE6+qmJgBWyx11TrTYFefzn3M=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:50:38 2025 by rpki-client