Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa
File:                     a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa (raw, json)
Hash identifier:          pD1YmB/5kE0yh5L1L4E4/aLe8hddm6VPAwZk0CUnTys=
Subject key identifier:   4A:03:5B:D2:9E:18:CC:92:6E:99:01:5E:2E:F6:EF:44:92:54:F6:0C
Certificate issuer:       /CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
Certificate serial:       010D0C9F432858483E1ABE8AAC572F3D5E6626C0
Authority key identifier: 92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa
Signing time:             Wed 18 Dec 2024 02:00:39 +0000
ROA not before:           Wed 18 Dec 2024 02:00:39 +0000
ROA not after:            Tue 18 Mar 2025 01:00:39 +0000
asID:                     6509
IP address blocks:        208.75.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3e:1a:be:8a:ac:57:2f:3d:5e:66:26:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5
        Validity
            Not Before: Dec 18 02:00:39 2024 GMT
            Not After : Mar 18 01:00:39 2025 GMT
        Subject: CN=a706e9c7-59a4-405c-8180-3abea093c6c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:22:62:98:76:2c:19:26:51:ff:a5:71:1a:38:
                    f0:05:cc:08:b8:6a:23:54:02:c7:7c:3b:44:2a:ab:
                    b5:1d:15:e9:ee:e7:2b:65:3b:e6:96:84:c3:82:5e:
                    84:8b:77:6d:3c:51:07:73:ef:eb:b4:31:3a:5b:6e:
                    45:6e:3f:ee:9f:3f:7a:4d:7b:a9:be:89:82:37:f3:
                    1a:8d:ba:a6:2b:97:91:2f:c2:e3:78:6b:ac:7c:5a:
                    de:54:9c:7f:3e:7f:7c:c0:94:2b:81:b4:cf:49:f2:
                    58:f2:f4:1a:bc:6e:c2:6c:6b:a8:4f:98:c8:2b:75:
                    dd:7b:8b:43:23:37:9f:b9:4b:66:3d:a9:27:58:92:
                    cc:54:60:16:f4:23:e6:31:fe:db:7b:fa:2f:ef:90:
                    2f:58:63:a9:15:0b:17:9d:3a:8e:d9:6d:96:31:94:
                    97:ff:98:c7:c1:9a:1e:f5:b1:73:90:7f:a4:f7:9b:
                    4a:5a:d3:bf:84:99:1b:7f:29:8b:87:29:61:f7:34:
                    bd:f4:fe:27:92:52:4a:77:69:2f:d3:38:20:f1:0e:
                    a5:3d:07:16:e9:eb:12:3e:fc:cf:df:dc:b2:fe:f7:
                    53:d5:35:40:12:4b:78:e6:60:52:35:72:10:99:c7:
                    57:13:69:22:70:98:6b:d7:04:86:66:29:8d:eb:da:
                    07:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:03:5B:D2:9E:18:CC:92:6E:99:01:5E:2E:F6:EF:44:92:54:F6:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/a0a1273c-2f6d-300c-a5ce-7d83dce91f71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.crl

            X509v3 Authority Key Identifier:
                keyid:92:04:3A:A3:CA:F8:0F:3C:8D:45:A1:49:B5:5F:4B:AD:F5:C3:D9:0E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8c9f53c7-e64d-4f14-a5e1-c14e8b1e38b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:2d:47:12:18:82:ce:d5:d1:ce:14:cf:35:af:fa:8f:fe:6a:
         28:c7:8f:31:48:87:15:02:5b:8e:87:ee:25:97:41:2a:a8:1f:
         df:92:e5:7f:fa:b1:77:a8:4b:3b:d8:4b:6c:e7:92:0b:bb:14:
         3a:a9:e8:bb:c2:78:bb:d8:9a:b5:91:cb:26:04:a6:6d:ec:5b:
         e4:c0:4d:1f:82:77:7c:da:90:0d:6f:6a:37:af:11:5a:e6:70:
         26:cb:5e:55:02:cb:4f:bb:95:af:39:f5:7b:0f:11:cd:d1:6c:
         b0:89:37:5f:69:c3:04:7b:ba:3e:6a:be:f4:3a:36:b7:5e:21:
         f5:37:f0:70:8f:03:8b:74:d9:88:03:86:16:8f:82:f3:01:0b:
         11:61:8d:3c:8f:cc:d5:80:40:74:e2:02:73:9a:48:93:d4:f0:
         47:2a:bc:b3:8c:dd:52:79:19:79:9f:f7:d3:7c:e0:51:4f:96:
         89:8f:47:34:0b:c7:ad:b1:00:6e:a6:07:78:73:25:a6:a5:55:
         ee:94:2b:b7:b7:42:fd:dc:96:a1:7b:22:e3:2f:c3:72:15:ba:
         da:2a:c3:0f:66:14:ab:a8:f9:f2:04:c4:fa:f6:0b:c6:12:b3:
         81:f4:ab:f6:5a:3f:b9:02:aa:fc:77:c2:bf:f3:57:55:62:57:
         03:53:15:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg+Gr6KrFcvPV5mJsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGM5ZjUzYzctZTY0ZC00ZjE0LWE1ZTEtYzE0ZThiMWUz
OGI1MB4XDTI0MTIxODAyMDAzOVoXDTI1MDMxODAxMDAzOVowLzEtMCsGA1UEAxMk
YTcwNmU5YzctNTlhNC00MDVjLTgxODAtM2FiZWEwOTNjNmM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArSJimHYsGSZR/6VxGjjwBcwIuGojVALHfDtE
Kqu1HRXp7ucrZTvmloTDgl6Ei3dtPFEHc+/rtDE6W25Fbj/unz96TXupvomCN/Ma
jbqmK5eRL8LjeGusfFreVJx/Pn98wJQrgbTPSfJY8vQavG7CbGuoT5jIK3Xde4tD
IzefuUtmPaknWJLMVGAW9CPmMf7be/ov75AvWGOpFQsXnTqO2W2WMZSX/5jHwZoe
9bFzkH+k95tKWtO/hJkbfymLhylh9zS99P4nklJKd2kv0zgg8Q6lPQcW6esSPvzP
39yy/vdT1TVAEkt45mBSNXIQmcdXE2kicJhr1wSGZimN69oHMwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEoDW9KeGMySbpkBXi7270SSVPYMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84Yzlm
NTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRlOGIxZTM4YjUvYTBhMTI3M2MtMmY2ZC0z
MDBjLWE1Y2UtN2Q4M2RjZTkxZjcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGM5ZjUzYzctZTY0ZC00ZjE0LWE1
ZTEtYzE0ZThiMWUzOGI1LzhjOWY1M2M3LWU2NGQtNGYxNC1hNWUxLWMxNGU4YjFl
MzhiNS5jcmwwHwYDVR0jBBgwFoAUkgQ6o8r4DzyNRaFJtV9LrfXD2Q4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84YzlmNTNjNy1lNjRkLTRmMTQtYTVlMS1jMTRl
OGIxZTM4YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EtLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYtRxIYgs7V0c4UzzWv+o/+aijHjzFIhxUCW46H7iWXQSqoH9+S5X/6
sXeoSzvYS2znkgu7FDqp6LvCeLvYmrWRyyYEpm3sW+TATR+Cd3zakA1vajevEVrm
cCbLXlUCy0+7la859XsPEc3RbLCJN19pwwR7uj5qvvQ6NrdeIfU38HCPA4t02YgD
hhaPgvMBCxFhjTyPzNWAQHTiAnOaSJPU8EcqvLOM3VJ5GXmf99N84FFPlomPRzQL
x62xAG6mB3hzJaalVe6UK7e3Qv3clqF7IuMvw3IVutoqww9mFKuo+fIExPr2C8YS
s4H0q/ZaP7kCqvx3wr/zV1ViVwNTFeU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:29 2025 by rpki-client