Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff2bcc2-a856-375a-85a3-388e4dbb6352.roa
File:                     0ff2bcc2-a856-375a-85a3-388e4dbb6352.roa (raw, json)
Hash identifier:          eQC622jd76L7TnG9we1j4IbxIg3UqO05+9Cs6jKz3Xs=
Subject key identifier:   56:B0:52:4E:5A:A7:FD:12:3D:22:7B:89:D2:C9:A5:69:3C:C4:0A:B4
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6DFB0CE4104B2FF33DFF40
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff2bcc2-a856-375a-85a3-388e4dbb6352.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33491
IP address blocks:        69.241.116.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6d:fb:0c:e4:10:4b:2f:f3:3d:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=22b09199-4bd1-4711-ae7e-eb0856e98ad8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:9f:18:87:ce:b0:88:75:44:7e:30:39:c7:
                    77:4f:c0:9c:15:cd:9a:19:2a:a8:7e:bf:05:5d:45:
                    3e:bd:66:8f:48:6f:63:09:71:7c:47:88:e2:28:5d:
                    db:2b:f2:f5:f5:09:9b:d7:06:6e:a1:3b:40:18:b1:
                    ac:8b:38:14:17:dc:e6:bc:28:03:50:7d:12:51:cc:
                    39:26:66:1a:90:17:c0:b1:4f:97:af:8c:af:4a:1a:
                    ae:3e:5d:11:d8:3a:e2:73:64:6f:48:83:91:7c:9c:
                    d3:54:c1:1d:3f:49:98:3d:59:37:33:a7:ca:32:a9:
                    2b:bc:a5:2b:ac:81:af:a3:1d:01:f5:32:34:f1:a2:
                    f0:51:fa:88:62:7c:cf:60:1d:82:a3:48:2d:f8:8e:
                    8f:59:a4:ad:31:a7:22:5a:1f:89:67:c9:6c:37:1a:
                    62:89:51:46:11:de:a1:a5:e9:b2:45:41:79:6c:4b:
                    33:f8:fd:89:87:87:08:d2:03:8b:98:00:21:47:a0:
                    d6:56:d6:47:e2:1b:d3:e3:3a:33:ce:ac:a9:87:6e:
                    fe:c9:47:d9:95:5a:98:89:65:90:cb:1e:5a:d8:db:
                    a7:e7:2d:ce:a5:31:e7:20:0a:4c:b7:8a:f3:86:3a:
                    2f:8d:6e:51:9f:28:16:78:03:97:5c:8c:38:89:63:
                    5e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:B0:52:4E:5A:A7:FD:12:3D:22:7B:89:D2:C9:A5:69:3C:C4:0A:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/0ff2bcc2-a856-375a-85a3-388e4dbb6352.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.241.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:7d:14:c8:b8:77:83:cd:b0:5c:87:74:87:be:d3:d1:3d:ea:
         ff:6d:e6:bc:d0:69:9b:a8:2d:c1:08:3c:6b:a9:3d:d2:07:50:
         df:e8:37:af:fb:ba:50:0f:ba:a7:8d:94:15:82:5d:33:e0:10:
         28:1f:af:11:cd:ea:9f:1d:d6:d0:7c:4f:3e:8b:48:4c:56:5e:
         2b:bb:c8:38:e0:4d:da:a5:bc:af:cd:7a:d4:b1:24:ae:5c:ae:
         c4:86:c3:77:2e:68:4b:6b:e1:c8:3f:a9:0e:70:1c:33:83:23:
         53:d9:d2:7d:4c:31:08:b5:98:cb:8c:ae:df:c6:fd:37:68:86:
         47:dd:cd:9d:f0:fd:a3:0c:01:e2:a0:a8:d0:ac:5d:12:d9:8e:
         a8:9c:e2:84:9a:6d:d3:93:ba:fe:b5:08:3e:bd:61:4f:71:f3:
         e1:54:82:2b:ec:76:70:3e:a6:82:a2:cf:c1:cd:b5:b6:1b:1b:
         02:fb:79:26:2b:d7:b9:82:b0:42:01:bf:c1:d4:96:d7:24:ef:
         89:c9:6e:13:fc:2e:e2:d0:ff:65:77:45:65:4e:30:a4:3e:fc:
         f3:9a:28:3d:5e:19:59:b1:09:41:0b:d8:d7:44:30:2a:57:86:
         2b:f4:29:74:5c:20:2c:7a:43:d0:95:5c:6b:2b:ab:ca:9d:36:
         d4:f3:0d:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebfsM5BBLL/M9/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
MjJiMDkxOTktNGJkMS00NzExLWFlN2UtZWIwODU2ZTk4YWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoU+fGIfOsIh1RH4wOcd3T8CcFc2aGSqofr8F
XUU+vWaPSG9jCXF8R4jiKF3bK/L19Qmb1wZuoTtAGLGsizgUF9zmvCgDUH0SUcw5
JmYakBfAsU+Xr4yvShquPl0R2Dric2RvSIORfJzTVMEdP0mYPVk3M6fKMqkrvKUr
rIGvox0B9TI08aLwUfqIYnzPYB2Co0gt+I6PWaStMaciWh+JZ8lsNxpiiVFGEd6h
pemyRUF5bEsz+P2Jh4cI0gOLmAAhR6DWVtZH4hvT4zozzqyph27+yUfZlVqYiWWQ
yx5a2Nun5y3OpTHnIApMt4rzhjovjW5RnygWeAOXXIw4iWNeuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFawUk5ap/0SPSJ7idLJpWk8xAq0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvMGZmMmJjYzItYTg1Ni0z
NzVhLTg1YTMtMzg4ZTRkYmI2MzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRfF0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKF9FMi4d4PNsFyHdIe+09E96v9t5rzQaZuoLcEIPGupPdIHUN/oN6/7
ulAPuqeNlBWCXTPgECgfrxHN6p8d1tB8Tz6LSExWXiu7yDjgTdqlvK/NetSxJK5c
rsSGw3cuaEtr4cg/qQ5wHDODI1PZ0n1MMQi1mMuMrt/G/TdohkfdzZ3w/aMMAeKg
qNCsXRLZjqic4oSabdOTuv61CD69YU9x8+FUgivsdnA+poKiz8HNtbYbGwL7eSYr
17mCsEIBv8HUltck74nJbhP8LuLQ/2V3RWVOMKQ+/POaKD1eGVmxCUEL2NdEMCpX
hiv0KXRcICx6Q9CVXGsrq8qdNtTzDTk=
-----END CERTIFICATE-----
Generated at Mon Apr 7 06:12:51 2025 by rpki-client