Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa
File:                     c42140bb-6b45-3666-ab69-b0e1171139f1.roa (raw, json)
Hash identifier:          IqMIPnoMy2A6SHpIrUJayJgqnBe2mfm9QSRG99i3qcA=
Subject key identifier:   98:3D:80:5E:D4:5A:58:5B:6B:4A:8E:5B:BA:06:F3:80:55:4E:E2:84
Certificate issuer:       /CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
Certificate serial:       010D0C9F43285848D210E3EECF1B5AA22A9157C0
Authority key identifier: 8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa
Signing time:             Sun 09 Feb 2025 02:00:39 +0000
ROA not before:           Sun 09 Feb 2025 02:00:39 +0000
ROA not after:            Sat 10 May 2025 01:00:39 +0000
asID:                     213122
IP address blocks:        161.129.32.0/24 maxlen: 24
                          161.129.33.0/24 maxlen: 24
                          161.129.36.0/24 maxlen: 24
                          161.129.37.0/24 maxlen: 24
                          161.129.38.0/24 maxlen: 24
                          161.129.40.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d2:10:e3:ee:cf:1b:5a:a2:2a:91:57:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8e00f673-2fe9-4dfa-9225-a8eab810175d
        Validity
            Not Before: Feb  9 02:00:39 2025 GMT
            Not After : May 10 01:00:39 2025 GMT
        Subject: CN=6ca36486-d2a3-4e47-a646-60439362c146
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:36:d0:13:3e:ba:5a:05:37:08:6c:69:30:33:
                    cc:b5:da:8d:75:94:ef:4e:57:02:c0:d8:9a:f8:00:
                    7e:4f:c1:d8:cc:69:6b:5a:75:cb:89:4b:cd:45:76:
                    91:ae:9a:b2:db:2f:c7:3f:e1:3b:98:19:87:0c:41:
                    3e:3c:54:8d:34:6a:ed:4d:73:e3:a4:41:be:04:a3:
                    b9:b2:6d:76:85:6c:38:2b:8a:c6:76:24:b0:20:b6:
                    31:63:03:6f:ff:c8:9e:59:45:2b:99:e7:1c:0f:e3:
                    98:45:54:90:30:49:5c:a5:99:2f:8a:8a:43:fc:03:
                    12:9d:93:e8:cc:d5:5a:7b:82:55:8a:75:30:0c:84:
                    b3:6d:e0:23:6c:fb:a5:3a:28:6d:91:27:2a:bd:9d:
                    71:6d:7f:ee:8b:16:e5:7d:56:ed:97:d2:61:48:2c:
                    e4:66:3a:6b:fa:a0:0b:ed:cb:fe:78:d7:b7:97:d6:
                    e4:54:92:46:43:58:4c:ed:3b:34:8e:68:4d:3a:fc:
                    1c:17:f7:74:a6:43:f8:42:37:88:9e:eb:3d:56:24:
                    02:67:28:f4:cd:ad:eb:1f:52:24:e7:ac:8e:b7:30:
                    c2:dc:37:06:63:ad:00:f7:c3:e8:2d:e4:2e:bf:69:
                    7b:f7:55:ff:ac:ac:a0:fb:2a:96:71:0c:23:28:18:
                    ec:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:3D:80:5E:D4:5A:58:5B:6B:4A:8E:5B:BA:06:F3:80:55:4E:E2:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/c42140bb-6b45-3666-ab69-b0e1171139f1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d/8e00f673-2fe9-4dfa-9225-a8eab810175d.crl

            X509v3 Authority Key Identifier:
                keyid:8C:D0:46:8E:0E:70:97:12:52:F8:03:95:A5:DE:42:D6:3F:B6:55:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/8e00f673-2fe9-4dfa-9225-a8eab810175d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.129.32.0/23
                  161.129.36.0-161.129.38.255
                  161.129.40.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:00:dc:d5:03:30:01:f0:5f:13:9f:14:fb:6e:21:09:72:90:
         85:04:eb:da:44:71:06:c2:e2:ab:73:01:a2:2c:bd:e6:a3:34:
         84:0d:df:e0:2c:c4:9f:3d:ca:e6:d7:3f:3e:34:2f:5e:04:46:
         34:d6:9f:0c:be:6f:b4:0c:76:ac:44:a5:b1:9d:63:7a:77:b9:
         15:41:1a:fa:17:b5:11:f7:e6:d8:12:53:1b:59:06:9a:99:35:
         f7:5f:a1:0e:b6:ef:48:7c:fe:33:24:21:ca:71:69:10:69:de:
         a5:cd:e7:50:6d:eb:f0:f1:42:83:27:8e:c1:03:b8:6f:3b:e1:
         b3:c8:68:ca:3c:ac:e3:24:3e:c1:9e:e8:99:82:c5:b3:9b:e0:
         7a:36:4c:c1:1a:86:d6:95:82:40:cf:08:97:a5:2d:4d:dc:85:
         d8:3c:51:5d:6a:ab:c4:f6:c1:62:69:f2:24:95:eb:8b:a6:41:
         df:30:cc:1a:da:b3:e1:b7:8f:1e:c2:e2:73:f8:64:12:e9:f6:
         68:5d:a4:6b:5a:50:1e:9d:40:a2:f9:38:ea:42:cf:31:2d:4f:
         72:1a:c7:82:f3:4c:c6:5c:66:a0:96:bc:21:57:25:db:23:83:
         1d:10:fd:33:ce:6a:6b:e5:f6:b2:5e:0b:20:39:a6:2d:be:b7:
         a7:41:6a:5a
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEjSEOPuzxtaoiqRV8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGUwMGY2NzMtMmZlOS00ZGZhLTkyMjUtYThlYWI4MTAx
NzVkMB4XDTI1MDIwOTAyMDAzOVoXDTI1MDUxMDAxMDAzOVowLzEtMCsGA1UEAxMk
NmNhMzY0ODYtZDJhMy00ZTQ3LWE2NDYtNjA0MzkzNjJjMTQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgjbQEz66WgU3CGxpMDPMtdqNdZTvTlcCwNia
+AB+T8HYzGlrWnXLiUvNRXaRrpqy2y/HP+E7mBmHDEE+PFSNNGrtTXPjpEG+BKO5
sm12hWw4K4rGdiSwILYxYwNv/8ieWUUrmeccD+OYRVSQMElcpZkviopD/AMSnZPo
zNVae4JVinUwDISzbeAjbPulOihtkScqvZ1xbX/uixblfVbtl9JhSCzkZjpr+qAL
7cv+eNe3l9bkVJJGQ1hM7Ts0jmhNOvwcF/d0pkP4QjeInus9ViQCZyj0za3rH1Ik
56yOtzDC3DcGY60A98PoLeQuv2l791X/rKyg+yqWcQwjKBjsOwIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFJg9gF7UWlhba0qOW7oG84BVTuKEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAw
ZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVhYjgxMDE3NWQvYzQyMTQwYmItNmI0NS0z
NjY2LWFiNjktYjBlMTE3MTEzOWYxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOGUwMGY2NzMtMmZlOS00ZGZhLTky
MjUtYThlYWI4MTAxNzVkLzhlMDBmNjczLTJmZTktNGRmYS05MjI1LWE4ZWFiODEw
MTc1ZC5jcmwwHwYDVR0jBBgwFoAUjNBGjg5wlxJS+AOVpd5C1j+2VWQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84ZTAwZjY3My0yZmU5LTRkZmEtOTIyNS1hOGVh
YjgxMDE3NWQuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBoYEgMAwD
BAKhgSQDBAChgSYDBAChgSgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEACADc1QMwAfBfE58U+24hCXKQhQTr
2kRxBsLiq3MBoiy95qM0hA3f4CzEnz3K5tc/PjQvXgRGNNafDL5vtAx2rESlsZ1j
ene5FUEa+he1Effm2BJTG1kGmpk191+hDrbvSHz+MyQhynFpEGnepc3nUG3r8PFC
gyeOwQO4bzvhs8hoyjys4yQ+wZ7omYLFs5vgejZMwRqG1pWCQM8Il6UtTdyF2DxR
XWqrxPbBYmnyJJXri6ZB3zDMGtqz4bePHsLic/hkEun2aF2ka1pQHp1Aovk46kLP
MS1PchrHgvNMxlxmoJa8IVcl2yODHRD9M85qa+X2sl4LIDmmLb63p0FqWg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:31:40 2025 by rpki-client