Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de008c86-ee3d-3752-9b61-c2cac6258ec6.roa
File:                     de008c86-ee3d-3752-9b61-c2cac6258ec6.roa (raw, json)
Hash identifier:          eo+jW/HK7yhwJoOHSxyLViAXAwnzcJFWDyyIVSrMO8o=
Subject key identifier:   99:CD:6C:77:55:58:2D:39:3C:45:13:CC:88:52:B5:0F:F6:11:B5:3F
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858489E6CA8D1C7ECCD48AEADCB98
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de008c86-ee3d-3752-9b61-c2cac6258ec6.roa
Signing time:             Tue 21 Jan 2025 14:00:53 +0000
ROA not before:           Tue 21 Jan 2025 14:00:53 +0000
ROA not after:            Mon 21 Apr 2025 13:00:53 +0000
asID:                     33657
IP address blocks:        69.139.214.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 19 Feb 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9e:6c:a8:d1:c7:ec:cd:48:ae:ad:cb:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Jan 21 14:00:53 2025 GMT
            Not After : Apr 21 13:00:53 2025 GMT
        Subject: CN=74f92eb0-293b-44b8-89b2-127d85839672
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7d:fc:ea:6d:56:da:76:60:49:e0:d1:99:1d:
                    b9:91:48:42:19:2d:ad:7d:29:df:32:71:dd:a6:df:
                    62:a1:66:7f:6a:78:26:46:1f:39:cd:37:4a:a6:ee:
                    f9:40:21:e8:cc:a0:d7:1d:0b:55:af:c9:c4:e5:27:
                    af:f5:28:ca:1d:b5:01:9e:ea:c7:21:15:17:5a:0f:
                    83:35:7a:6d:e8:ca:49:fe:18:f1:4f:ae:4c:c1:82:
                    78:0e:95:8b:af:1b:67:31:66:17:f5:e2:94:be:4f:
                    88:fb:14:78:24:ff:f3:4b:2e:4d:30:b9:ad:68:1d:
                    e7:03:6d:9c:e4:ce:c8:a1:ba:1a:1c:ce:87:dd:25:
                    9a:f4:a4:23:6c:40:02:8a:35:70:fd:d3:d7:8c:ae:
                    0d:ff:1d:ee:73:b8:87:7f:e4:f0:a2:ca:92:51:b7:
                    ce:2f:c2:c5:3a:e3:fa:75:ad:ba:89:a9:57:ac:18:
                    21:76:c0:c8:52:36:7f:c0:59:83:ab:d5:f3:fe:74:
                    da:8a:50:da:ac:f6:f4:c5:2e:b2:98:c2:95:b5:3f:
                    8d:0a:48:4e:b7:f7:6c:25:fe:ea:13:42:0c:ea:16:
                    99:52:3e:da:1b:04:ec:49:d1:c5:98:eb:21:b9:10:
                    7b:f6:62:71:7c:d4:3d:6d:ea:9c:70:58:ec:92:d0:
                    8d:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CD:6C:77:55:58:2D:39:3C:45:13:CC:88:52:B5:0F:F6:11:B5:3F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/de008c86-ee3d-3752-9b61-c2cac6258ec6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.139.214.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:52:7e:85:fe:a2:84:3c:96:23:a0:1b:f9:a6:d8:ee:68:34:
         64:7f:6c:da:13:91:fd:67:25:4a:f7:24:17:c4:dd:c6:df:cd:
         ef:34:68:10:16:a4:4e:74:8b:76:8c:c3:d1:18:b3:8a:f8:0a:
         64:d6:6e:7d:04:71:54:7a:78:6f:ca:5d:8f:0f:8d:8a:8f:3b:
         c7:15:a9:77:16:20:29:a7:c0:3c:09:87:47:ac:14:95:e1:40:
         4b:de:ed:0a:ce:cd:0f:15:18:b5:ae:3e:dc:db:ab:d1:ac:bc:
         42:93:6f:fd:e8:86:d0:fd:e9:78:b5:4f:53:4d:7c:1a:94:8a:
         51:64:70:d5:41:cb:13:67:58:18:d6:61:2e:34:a2:9f:8c:08:
         08:75:b3:e7:cd:ed:c5:e7:4c:14:99:51:1b:cf:ac:59:22:bd:
         b2:8a:41:12:af:2e:62:fc:7d:bb:0e:54:46:27:a4:bd:e9:6a:
         91:1f:d7:d1:fe:77:4b:8d:55:2f:c7:57:40:80:ce:f8:ae:13:
         f4:57:dc:9c:71:23:e4:e2:c8:fd:01:85:92:7d:88:1a:32:90:
         1e:30:7c:2e:46:8e:19:c5:89:e3:4d:f8:0d:76:47:e4:8a:fe:
         50:f9:84:a0:ae:02:e4:f5:88:cb:e4:b5:fd:bd:2e:83:0f:0a:
         9c:47:cd:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiebKjRx+zNSK6ty5gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDEyMTE0MDA1M1oXDTI1MDQyMTEzMDA1M1owLzEtMCsGA1UEAxMk
NzRmOTJlYjAtMjkzYi00NGI4LTg5YjItMTI3ZDg1ODM5NjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0n386m1W2nZgSeDRmR25kUhCGS2tfSnfMnHd
pt9ioWZ/angmRh85zTdKpu75QCHozKDXHQtVr8nE5Sev9SjKHbUBnurHIRUXWg+D
NXpt6MpJ/hjxT65MwYJ4DpWLrxtnMWYX9eKUvk+I+xR4JP/zSy5NMLmtaB3nA22c
5M7IoboaHM6H3SWa9KQjbEACijVw/dPXjK4N/x3uc7iHf+TwosqSUbfOL8LFOuP6
da26ialXrBghdsDIUjZ/wFmDq9Xz/nTailDarPb0xS6ymMKVtT+NCkhOt/dsJf7q
E0IM6haZUj7aGwTsSdHFmOshuRB79mJxfNQ9beqccFjsktCNzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJnNbHdVWC05PEUTzIhStQ/2EbU/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZGUwMDhjODYtZWUzZC0z
NzUyLTliNjEtYzJjYWM2MjU4ZWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBRYvWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFSfoX+ooQ8liOgG/mm2O5oNGR/bNoTkf1nJUr3JBfE3cbfze80aBAW
pE50i3aMw9EYs4r4CmTWbn0EcVR6eG/KXY8PjYqPO8cVqXcWICmnwDwJh0esFJXh
QEve7QrOzQ8VGLWuPtzbq9GsvEKTb/3ohtD96Xi1T1NNfBqUilFkcNVByxNnWBjW
YS40op+MCAh1s+fN7cXnTBSZURvPrFkivbKKQRKvLmL8fbsOVEYnpL3papEf19H+
d0uNVS/HV0CAzviuE/RX3JxxI+TiyP0BhZJ9iBoykB4wfC5GjhnFieNN+A12R+SK
/lD5hKCuAuT1iMvktf29LoMPCpxHzbE=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:30:48 2025 by rpki-client