Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
File:                     98cc5773-8af9-384a-950d-b09e46d6ef16.roa (raw, json)
Hash identifier:          bN+trsjhauUv+jFTrLz+z/7ejtaP5OtCStUn9WA1f+Q=
Subject key identifier:   67:14:CA:F2:4D:43:AE:7F:68:3D:44:2A:3B:69:33:72:C4:99:9E:F0
Certificate issuer:       /CN=6534ebb8-2490-4f36-a6d0-f7741019122a
Certificate serial:       010D0C9F432858493ED3C90D9DAE27D81C01CE00
Authority key identifier: 16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     19326
IP address blocks:        216.144.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:c9:0d:9d:ae:27:d8:1c:01:ce:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6534ebb8-2490-4f36-a6d0-f7741019122a
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=b3072bef-baa9-4fe6-a97e-e76b6be2c5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:c6:b6:d2:63:ab:83:1b:89:94:fb:f3:ae:7d:
                    dd:08:3f:9d:a8:3a:63:86:a2:2a:9c:23:3d:ae:a0:
                    f2:fc:4f:a0:16:c7:be:ee:dd:33:8d:a2:37:56:d1:
                    a6:07:f8:a4:0c:68:ef:aa:13:c5:41:3f:a1:ca:d8:
                    dc:3a:ea:9f:4f:d9:2a:9c:0e:60:52:22:72:15:2f:
                    65:61:6b:04:43:0b:a6:75:bc:99:0a:0a:83:bb:38:
                    d5:05:e9:f4:a5:2b:40:28:9b:d4:00:24:0b:3c:34:
                    6b:a5:81:9e:75:89:24:1d:32:62:63:8f:01:1f:73:
                    55:59:52:6f:ff:03:97:5d:16:01:80:43:9b:0d:ea:
                    ed:5f:b0:6b:e9:74:42:e3:fa:58:73:3c:7f:28:f1:
                    54:34:85:9b:e8:b4:fb:94:df:e8:d2:0c:1d:45:2b:
                    a6:43:f0:51:d7:59:76:c7:42:5b:f2:21:39:52:72:
                    ca:5a:5c:5a:df:0f:55:6d:0d:7a:1f:79:0a:fd:2b:
                    75:0f:1f:47:b4:73:5b:f6:0e:68:c9:ef:33:5f:67:
                    17:db:a1:06:ba:53:0a:c1:c4:45:f3:4b:fe:00:19:
                    2f:20:15:74:03:18:e8:02:84:4a:7c:2c:0b:d6:3c:
                    2b:cc:19:30:3d:32:ae:27:b6:92:65:5b:f1:e0:ea:
                    9c:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:14:CA:F2:4D:43:AE:7F:68:3D:44:2A:3B:69:33:72:C4:99:9E:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/98cc5773-8af9-384a-950d-b09e46d6ef16.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a/6534ebb8-2490-4f36-a6d0-f7741019122a.crl

            X509v3 Authority Key Identifier:
                keyid:16:04:FA:B3:29:29:39:B0:DD:77:0A:75:3F:C5:DC:BF:38:9A:5F:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/6534ebb8-2490-4f36-a6d0-f7741019122a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:61:80:54:1c:c4:0e:42:df:66:f7:16:1f:b0:ae:c0:43:e5:
         ee:bb:63:db:63:22:03:71:a7:40:a7:20:03:ed:45:16:e6:57:
         87:94:ca:10:23:64:7b:bd:17:d0:fe:d1:78:eb:3e:b8:f8:64:
         85:d1:9c:28:5a:da:a4:7c:be:71:82:86:6d:83:6e:05:27:5c:
         7c:54:44:04:03:28:c2:69:ca:39:41:61:f4:26:bc:ff:2f:1a:
         43:a6:74:cc:7c:2d:8d:df:15:19:47:af:35:95:8e:d3:cb:fa:
         cd:b1:91:e2:7b:89:98:11:8a:11:a8:6c:04:f0:0e:a7:16:9d:
         c5:41:8a:37:1f:88:de:b4:d8:cc:ae:c3:67:2f:4a:be:94:e9:
         31:cb:15:17:cd:c4:53:8d:3b:e6:b2:b7:1f:d3:cb:d7:81:03:
         06:77:dc:92:38:9d:65:d7:3d:6d:94:a6:36:9d:3e:e8:fa:83:
         ac:56:f8:33:5f:9c:72:10:8f:97:d4:75:4a:17:8f:98:0b:c9:
         7b:18:05:5e:27:a1:28:b0:66:90:39:a4:b0:a9:a4:f0:46:3c:
         99:e1:64:40:bf:98:e4:22:ed:f4:a2:30:b8:c3:77:ac:cb:d1:
         a4:4c:6e:5e:4c:44:e0:a9:eb:2a:3b:41:7f:eb:65:d4:24:e7:
         b3:94:97:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk+08kNna4n2BwBzgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUzNGViYjgtMjQ5MC00ZjM2LWE2ZDAtZjc3NDEwMTkx
MjJhMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
YjMwNzJiZWYtYmFhOS00ZmU2LWE5N2UtZTc2YjZiZTJjNWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA58a20mOrgxuJlPvzrn3dCD+dqDpjhqIqnCM9
rqDy/E+gFse+7t0zjaI3VtGmB/ikDGjvqhPFQT+hytjcOuqfT9kqnA5gUiJyFS9l
YWsEQwumdbyZCgqDuzjVBen0pStAKJvUACQLPDRrpYGedYkkHTJiY48BH3NVWVJv
/wOXXRYBgEObDertX7Br6XRC4/pYczx/KPFUNIWb6LT7lN/o0gwdRSumQ/BR11l2
x0Jb8iE5UnLKWlxa3w9VbQ16H3kK/St1Dx9HtHNb9g5oye8zX2cX26EGulMKwcRF
80v+ABkvIBV0AxjoAoRKfCwL1jwrzBkwPTKuJ7aSZVvx4OqcMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcUyvJNQ65/aD1EKjtpM3LEmZ7wMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0
ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0MTAxOTEyMmEvOThjYzU3NzMtOGFmOS0z
ODRhLTk1MGQtYjA5ZTQ2ZDZlZjE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjUzNGViYjgtMjQ5MC00ZjM2LWE2
ZDAtZjc3NDEwMTkxMjJhLzY1MzRlYmI4LTI0OTAtNGYzNi1hNmQwLWY3NzQxMDE5
MTIyYS5jcmwwHwYDVR0jBBgwFoAUFgT6sykpObDddwp1P8XcvziaX1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82NTM0ZWJiOC0yNDkwLTRmMzYtYTZkMC1mNzc0
MTAxOTEyMmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2JDAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVhgFQcxA5C32b3Fh+wrsBD5e67Y9tjIgNxp0CnIAPtRRbmV4eUyhAj
ZHu9F9D+0XjrPrj4ZIXRnCha2qR8vnGChm2DbgUnXHxURAQDKMJpyjlBYfQmvP8v
GkOmdMx8LY3fFRlHrzWVjtPL+s2xkeJ7iZgRihGobATwDqcWncVBijcfiN602Myu
w2cvSr6U6THLFRfNxFONO+aytx/Ty9eBAwZ33JI4nWXXPW2UpjadPuj6g6xW+DNf
nHIQj5fUdUoXj5gLyXsYBV4noSiwZpA5pLCppPBGPJnhZEC/mOQi7fSiMLjDd6zL
0aRMbl5MROCp6yo7QX/rZdQk57OUlw8=
-----END CERTIFICATE-----
Generated at Wed Apr 23 00:49:55 2025 by rpki-client