Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
File:                     b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa (raw, json)
Hash identifier:          OInjNkU72utHfvi6LXRBYVODb0PbwIOgnQ9obMyX1yk=
Subject key identifier:   9C:EB:7B:CD:BA:F2:DE:17:6E:45:49:1A:F1:B3:7E:54:85:CD:6B:77
Certificate issuer:       /CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
Certificate serial:       010D0C9F43285848E16BDADD2A84FB764866C180
Authority key identifier: 6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa
Signing time:             Fri 14 Feb 2025 14:00:52 +0000
ROA not before:           Fri 14 Feb 2025 14:00:52 +0000
ROA not after:            Thu 15 May 2025 13:00:52 +0000
asID:                     53334
IP address blocks:        216.59.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e1:6b:da:dd:2a:84:fb:76:48:66:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e4fdf8c6-f91a-494f-99e5-526e6fffeebe
        Validity
            Not Before: Feb 14 14:00:52 2025 GMT
            Not After : May 15 13:00:52 2025 GMT
        Subject: CN=4adbf1e5-0b87-4905-9a79-af2ea984b7e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:8e:30:0f:21:35:7b:75:42:87:77:a5:56:f1:
                    6f:d0:99:66:ed:46:8d:c3:66:54:1b:8b:38:56:27:
                    b2:73:71:4c:1c:2b:b1:32:c1:f9:38:b6:e3:8e:ee:
                    29:ae:94:fd:c6:df:ce:b8:18:b2:f6:28:88:20:69:
                    8f:b4:4a:35:f0:f0:72:04:88:de:e5:c9:80:b9:0e:
                    9b:6c:81:4c:30:4b:e4:af:2a:86:8b:3a:2d:d7:8b:
                    5f:63:27:7b:68:90:9d:ef:3f:9c:7d:a9:e4:17:c0:
                    4d:2d:9a:83:3e:a7:74:de:82:bf:2d:71:bf:78:20:
                    f2:1a:c4:ce:78:48:16:48:5a:9d:fb:78:0e:e3:bd:
                    96:83:0c:34:50:ad:af:70:bc:3a:c6:84:fa:e2:95:
                    b1:9e:7a:73:47:67:38:ea:dc:32:10:ca:27:ca:3f:
                    0a:5c:04:75:2d:20:93:66:25:96:44:ae:4a:4f:4a:
                    ad:30:b1:2f:a4:b3:6c:bb:2a:1b:84:50:2b:03:e0:
                    6e:22:68:a9:e0:ae:05:1d:f4:47:d9:62:31:59:3c:
                    c8:82:e6:48:35:54:ad:97:f3:45:da:79:be:24:da:
                    2a:3c:b2:50:51:65:cb:5d:b2:db:77:36:5c:7e:5e:
                    35:91:a2:e9:cd:eb:d4:65:13:dd:23:3f:e6:21:b7:
                    28:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EB:7B:CD:BA:F2:DE:17:6E:45:49:1A:F1:B3:7E:54:85:CD:6B:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/b7e61ddd-dc6e-3ce2-8c5b-32cb2729ab67.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.crl

            X509v3 Authority Key Identifier:
                keyid:6A:7D:86:AE:89:46:EB:FC:95:A3:31:31:15:03:35:D5:52:C0:41:73

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e4fdf8c6-f91a-494f-99e5-526e6fffeebe.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.59.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:f7:ee:1d:c5:fb:08:53:db:d2:d5:a0:ff:83:27:33:1e:93:
         26:58:78:7c:67:1b:b6:fa:d8:fb:54:33:b5:3c:f7:7c:7e:11:
         ea:31:ce:71:46:75:e6:22:1b:4c:d3:cf:a5:89:1b:08:9f:78:
         94:64:32:af:0b:2a:80:bc:5b:03:4d:7a:a2:d8:92:16:bc:95:
         ad:52:6e:3f:a8:9b:44:af:7e:1d:3c:89:bf:3e:7e:a6:e2:c6:
         97:bc:66:93:51:d9:7a:35:3f:d1:d8:a6:0f:df:8e:11:b4:1b:
         6b:64:90:1c:75:a2:db:83:a0:07:d4:1a:9a:b2:db:c4:68:86:
         76:72:9b:d4:a3:d0:6e:14:ae:f6:81:a9:56:73:53:e9:c4:ce:
         9a:bc:43:92:c4:56:81:d2:c7:5d:6d:1e:bc:40:c4:8d:09:14:
         1d:ff:0d:72:aa:b4:d6:2c:c2:1d:46:ec:a4:ae:81:1e:b8:6c:
         de:8c:33:90:d6:0e:65:b2:5a:1a:93:f8:09:72:58:e7:6c:e8:
         67:d0:a7:41:ad:78:09:d2:54:8e:72:5d:a8:5f:89:7d:20:db:
         7b:dc:b2:3c:b8:c2:4d:de:13:02:15:8f:11:59:8a:db:e3:a8:
         c0:ca:88:61:2d:e8:ab:61:ba:46:b4:50:39:74:b6:c1:a3:83:
         3b:dc:c2:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjha9rdKoT7dkhmwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTRmZGY4YzYtZjkxYS00OTRmLTk5ZTUtNTI2ZTZmZmZl
ZWJlMB4XDTI1MDIxNDE0MDA1MloXDTI1MDUxNTEzMDA1MlowLzEtMCsGA1UEAxMk
NGFkYmYxZTUtMGI4Ny00OTA1LTlhNzktYWYyZWE5ODRiN2UyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0I4wDyE1e3VCh3elVvFv0Jlm7UaNw2ZUG4s4
Vieyc3FMHCuxMsH5OLbjju4prpT9xt/OuBiy9iiIIGmPtEo18PByBIje5cmAuQ6b
bIFMMEvkryqGizot14tfYyd7aJCd7z+cfankF8BNLZqDPqd03oK/LXG/eCDyGsTO
eEgWSFqd+3gO472Wgww0UK2vcLw6xoT64pWxnnpzR2c46twyEMonyj8KXAR1LSCT
ZiWWRK5KT0qtMLEvpLNsuyobhFArA+BuImip4K4FHfRH2WIxWTzIguZINVStl/NF
2nm+JNoqPLJQUWXLXbLbdzZcfl41kaLpzevUZRPdIz/mIbcoywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJzre8268t4XbkVJGvGzflSFzWt3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGZk
ZjhjNi1mOTFhLTQ5NGYtOTllNS01MjZlNmZmZmVlYmUvYjdlNjFkZGQtZGM2ZS0z
Y2UyLThjNWItMzJjYjI3MjlhYjY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTRmZGY4YzYtZjkxYS00OTRmLTk5
ZTUtNTI2ZTZmZmZlZWJlL2U0ZmRmOGM2LWY5MWEtNDk0Zi05OWU1LTUyNmU2ZmZm
ZWViZS5jcmwwHwYDVR0jBBgwFoAUan2GrolG6/yVozExFQM11VLAQXMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lNGZkZjhjNi1mOTFhLTQ5NGYtOTllNS01MjZl
NmZmZmVlYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Ds6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIT37h3F+whT29LVoP+DJzMekyZYeHxnG7b62PtUM7U893x+EeoxznFG
deYiG0zTz6WJGwifeJRkMq8LKoC8WwNNeqLYkha8la1Sbj+om0Svfh08ib8+fqbi
xpe8ZpNR2Xo1P9HYpg/fjhG0G2tkkBx1otuDoAfUGpqy28RohnZym9Sj0G4UrvaB
qVZzU+nEzpq8Q5LEVoHSx11tHrxAxI0JFB3/DXKqtNYswh1G7KSugR64bN6MM5DW
DmWyWhqT+AlyWOds6GfQp0GteAnSVI5yXahfiX0g23vcsjy4wk3eEwIVjxFZitvj
qMDKiGEt6Kthuka0UDl0tsGjgzvcwlY=
-----END CERTIFICATE-----
Generated at Sat Apr 12 14:10:29 2025 by rpki-client