Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa
File:                     95c37dc5-4af1-35df-b43e-52d457c356c7.roa (raw, json)
Hash identifier:          Gv6kPqc/bn3bFuA1Wk4ChcSYILHw982Hc+dB8bDyRpI=
Subject key identifier:   35:F4:31:C0:46:6C:E5:20:4C:1B:0D:B6:1E:DB:F5:0F:38:8C:51:62
Certificate issuer:       /CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
Certificate serial:       010D0C9F43285848530AEB173CC27F6C05507440
Authority key identifier: E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa
Signing time:             Wed 25 Dec 2024 14:00:52 +0000
ROA not before:           Wed 25 Dec 2024 14:00:52 +0000
ROA not after:            Tue 25 Mar 2025 13:00:52 +0000
asID:                     1239
IP address blocks:        63.161.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:53:0a:eb:17:3c:c2:7f:6c:05:50:74:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d
        Validity
            Not Before: Dec 25 14:00:52 2024 GMT
            Not After : Mar 25 13:00:52 2025 GMT
        Subject: CN=48729e21-efb0-4d5f-9962-484c22702877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:a6:bd:33:20:49:64:42:fd:3c:4c:08:1c:9b:
                    85:42:89:9e:9c:00:7d:79:76:03:b8:08:7d:e9:b0:
                    c1:f8:a3:99:5d:93:08:3e:d8:99:4d:c1:c9:67:69:
                    71:73:4b:a0:b6:a7:94:5b:9d:ab:a5:6a:05:d3:8c:
                    fc:c8:06:ce:2f:d5:8b:85:cf:71:b7:c4:8b:94:55:
                    8b:09:f4:82:cd:47:3f:fc:35:e7:9e:7e:71:f7:8b:
                    bf:11:28:f5:f7:fe:f3:c0:0f:80:f9:18:a1:5b:0a:
                    9f:93:79:df:ac:09:01:a7:88:9b:8f:b2:bb:de:b8:
                    83:0c:7b:09:ee:89:e8:40:62:e8:19:20:fd:57:fa:
                    f7:ea:e9:de:1d:4f:47:86:72:fb:2c:a6:3f:0b:c9:
                    e0:e1:e2:0e:cc:d3:c1:07:6a:57:21:17:41:85:71:
                    67:88:53:b0:b2:24:05:fd:9d:23:68:b2:c7:e5:a6:
                    6a:80:33:dc:02:14:d8:6d:af:0f:65:a7:e3:61:7c:
                    9a:8f:ad:50:f1:f1:d8:1a:95:db:69:70:c2:84:2d:
                    fe:48:8d:4e:63:cf:00:97:b6:35:e7:86:dd:53:3a:
                    5c:e0:b3:0d:97:cc:cd:ec:f4:05:ab:5d:e7:67:c9:
                    08:7d:3e:4d:e7:95:62:bd:63:43:d6:97:c4:e3:3b:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F4:31:C0:46:6C:E5:20:4C:1B:0D:B6:1E:DB:F5:0F:38:8C:51:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/95c37dc5-4af1-35df-b43e-52d457c356c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.crl

            X509v3 Authority Key Identifier:
                keyid:E8:7E:CC:57:85:15:B4:F4:EA:59:98:60:9E:4F:65:FB:7B:A5:46:72

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9cdf1bdc-54fd-4634-b01d-c6b2eb22df6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  63.161.105.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:8e:bc:25:4f:06:e7:6f:f5:b5:3a:ad:44:02:f2:cd:0c:bc:
         b2:23:86:e1:c6:e3:83:66:fc:04:fa:3a:27:63:1e:ce:64:c9:
         9e:21:66:21:05:6d:3c:bc:b9:a3:5e:ef:d2:71:9e:2d:1e:96:
         7c:05:e8:6a:6a:7c:db:4c:cd:6f:9e:53:9e:71:9c:3a:0b:0d:
         eb:0f:32:5a:c4:83:60:26:35:fb:c1:df:8d:bb:a7:a2:b4:d8:
         03:3a:8b:70:b7:1a:77:3d:39:7f:41:21:69:2d:34:6a:b2:f1:
         c2:18:c8:cb:7d:c3:39:49:f3:9d:af:32:81:6d:f1:2b:b5:9c:
         ac:54:e1:e1:50:80:12:2e:ba:8e:ae:a0:26:c1:b3:13:02:a2:
         a1:4e:98:60:b6:59:f0:28:11:cb:34:b1:df:a5:dd:b0:6d:5f:
         f2:e8:87:89:fc:09:a6:b9:0d:b4:a1:d1:b5:0c:39:03:4a:6e:
         8b:f1:37:10:50:c7:92:14:19:56:c9:dc:f9:6e:bd:60:f5:d1:
         8d:19:c0:a2:61:ee:1b:01:f4:74:03:ab:a7:5c:7e:be:f2:79:
         4b:8d:45:56:eb:b0:ce:8c:27:7a:e0:21:0e:e1:eb:70:86:81:
         41:da:6a:60:2a:08:51:c7:90:b6:0f:a0:3d:4b:db:36:ac:04:
         4d:08:82:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhTCusXPMJ/bAVQdEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWNkZjFiZGMtNTRmZC00NjM0LWIwMWQtYzZiMmViMjJk
ZjZkMB4XDTI0MTIyNTE0MDA1MloXDTI1MDMyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NDg3MjllMjEtZWZiMC00ZDVmLTk5NjItNDg0YzIyNzAyODc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvqa9MyBJZEL9PEwIHJuFQomenAB9eXYDuAh9
6bDB+KOZXZMIPtiZTcHJZ2lxc0ugtqeUW52rpWoF04z8yAbOL9WLhc9xt8SLlFWL
CfSCzUc//DXnnn5x94u/ESj19/7zwA+A+RihWwqfk3nfrAkBp4ibj7K73riDDHsJ
7onoQGLoGSD9V/r36uneHU9HhnL7LKY/C8ng4eIOzNPBB2pXIRdBhXFniFOwsiQF
/Z0jaLLH5aZqgDPcAhTYba8PZafjYXyaj61Q8fHYGpXbaXDChC3+SI1OY88Al7Y1
54bdUzpc4LMNl8zN7PQFq13nZ8kIfT5N55VivWND1pfE4zvOBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDX0McBGbOUgTBsNth7b9Q84jFFiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2Rm
MWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIyZWIyMmRmNmQvOTVjMzdkYzUtNGFmMS0z
NWRmLWI0M2UtNTJkNDU3YzM1NmM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWNkZjFiZGMtNTRmZC00NjM0LWIw
MWQtYzZiMmViMjJkZjZkLzljZGYxYmRjLTU0ZmQtNDYzNC1iMDFkLWM2YjJlYjIy
ZGY2ZC5jcmwwHwYDVR0jBBgwFoAU6H7MV4UVtPTqWZhgnk9l+3ulRnIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85Y2RmMWJkYy01NGZkLTQ2MzQtYjAxZC1jNmIy
ZWIyMmRmNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAP6FpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIuOvCVPBudv9bU6rUQC8s0MvLIjhuHG44Nm/AT6OidjHs5kyZ4hZiEF
bTy8uaNe79Jxni0elnwF6GpqfNtMzW+eU55xnDoLDesPMlrEg2AmNfvB3427p6K0
2AM6i3C3Gnc9OX9BIWktNGqy8cIYyMt9wzlJ852vMoFt8Su1nKxU4eFQgBIuuo6u
oCbBsxMCoqFOmGC2WfAoEcs0sd+l3bBtX/Loh4n8Caa5DbSh0bUMOQNKbovxNxBQ
x5IUGVbJ3PluvWD10Y0ZwKJh7hsB9HQDq6dcfr7yeUuNRVbrsM6MJ3rgIQ7h63CG
gUHaamAqCFHHkLYPoD1L2zasBE0IggU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:06:11 2025 by rpki-client