Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa
File:                     ad2513a9-06a9-3695-892c-eec8ede4fe26.roa (raw, json)
Hash identifier:          9TGm4n6AATH3Ctrygy2J6y/omEUVNRudJecI2eYtJ4I=
Subject key identifier:   C2:AD:1B:C9:F9:64:8E:BB:77:3E:15:4C:A7:4F:99:D8:8C:F9:C6:C9
Certificate issuer:       /CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
Certificate serial:       010D0C9F432858491AA6B9C7BBB9C75D38B27080
Authority key identifier: CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     394708
IP address blocks:        216.201.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:b9:c7:bb:b9:c7:5d:38:b2:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ab6e38e-48e4-4390-8eec-2135ac35d7fb
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=b7e8c705-90d8-45c5-af75-4ebece5fe76c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:05:30:37:fd:6a:fb:47:8f:f1:d6:c6:a7:e3:
                    18:d2:1d:ed:2d:1e:03:ea:e9:78:d5:64:be:e5:a4:
                    0b:81:e8:03:1e:90:7d:d1:6e:04:56:41:07:98:02:
                    66:bd:39:48:84:06:be:ba:f3:42:e7:2e:7a:d1:e8:
                    f5:7d:ef:04:06:91:ac:e5:8b:ae:25:98:df:d5:b0:
                    35:96:df:e4:58:60:d5:68:43:b0:fc:ed:00:84:36:
                    43:a9:db:83:dd:f1:b7:2c:48:b7:af:80:c8:96:ed:
                    70:62:f7:79:ad:de:b4:5e:2a:11:ca:07:60:ea:7b:
                    ca:8e:91:f6:39:f2:e3:6a:c9:af:a5:c4:62:2e:85:
                    8a:5d:33:85:9d:a8:b2:b1:45:d1:e3:53:0b:25:fe:
                    ee:e8:19:b3:cd:d2:36:6a:75:7c:c4:a3:a0:f9:f2:
                    af:6c:24:66:b1:f2:e2:b3:7e:a0:17:b9:bc:f5:11:
                    96:9c:15:b6:4a:67:aa:f6:b3:fb:14:cc:02:c7:ce:
                    33:e8:b4:90:44:a6:18:18:23:ae:51:b4:d6:37:85:
                    cb:82:d4:dc:12:7b:01:90:6a:01:0b:28:51:f9:66:
                    fb:56:97:2b:94:a1:df:32:8b:e2:ec:cb:b6:64:d0:
                    64:d2:a3:7e:82:78:e6:04:27:c7:c1:ce:5f:1a:16:
                    b6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:AD:1B:C9:F9:64:8E:BB:77:3E:15:4C:A7:4F:99:D8:8C:F9:C6:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/ad2513a9-06a9-3695-892c-eec8ede4fe26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.crl

            X509v3 Authority Key Identifier:
                keyid:CF:74:AA:8F:1C:C5:88:83:72:7E:1A:B4:38:FF:A5:27:76:F8:96:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/3ab6e38e-48e4-4390-8eec-2135ac35d7fb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.201.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:79:cb:ef:f5:b7:c8:87:d9:e5:5e:f8:b8:26:7c:cf:61:0b:
         9d:ac:79:4c:08:25:54:56:96:3a:0c:77:71:f6:25:90:cb:6c:
         6d:0c:9d:47:39:54:cf:4b:93:2b:9f:61:87:05:76:1a:7e:71:
         e8:85:62:d3:64:e4:a7:47:2f:de:4a:6d:07:16:11:8c:31:a1:
         32:2e:e6:21:2b:20:39:11:4a:89:02:d8:86:ab:84:2f:eb:0c:
         f6:5d:49:15:aa:5a:9c:13:c2:82:7f:4b:df:4a:2d:ed:2b:1a:
         b2:97:69:75:22:78:30:2e:f4:a7:ae:e7:2b:2c:d0:ae:0b:32:
         5f:e1:ae:a1:7a:8a:24:55:a2:f9:9f:04:36:3e:c5:9a:20:0f:
         a7:1a:c2:3e:29:b3:82:71:ac:cb:8f:19:14:c3:9a:0a:06:94:
         b2:1c:e2:0a:5c:09:90:19:f2:ac:71:82:5b:65:17:e9:22:e2:
         3d:35:0f:90:c5:b9:80:4c:a0:3b:ff:2f:23:9e:6b:a8:1b:2e:
         55:99:62:03:80:96:e0:86:09:b7:b0:cb:fe:c6:68:96:29:45:
         40:7d:ba:1c:93:b0:db:6d:f9:62:93:9d:4f:f6:89:02:3c:8e:
         7f:f3:1f:67:a6:aa:51:e0:3a:7e:a5:0a:08:a9:af:7c:29:dc:
         0e:47:d0:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaprnHu7nHXTiycIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2FiNmUzOGUtNDhlNC00MzkwLThlZWMtMjEzNWFjMzVk
N2ZiMB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
YjdlOGM3MDUtOTBkOC00NWM1LWFmNzUtNGViZWNlNWZlNzZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzAUwN/1q+0eP8dbGp+MY0h3tLR4D6ul41WS+
5aQLgegDHpB90W4EVkEHmAJmvTlIhAa+uvNC5y560ej1fe8EBpGs5YuuJZjf1bA1
lt/kWGDVaEOw/O0AhDZDqduD3fG3LEi3r4DIlu1wYvd5rd60XioRygdg6nvKjpH2
OfLjasmvpcRiLoWKXTOFnaiysUXR41MLJf7u6BmzzdI2anV8xKOg+fKvbCRmsfLi
s36gF7m89RGWnBW2Smeq9rP7FMwCx84z6LSQRKYYGCOuUbTWN4XLgtTcEnsBkGoB
CyhR+Wb7VpcrlKHfMovi7Mu2ZNBk0qN+gnjmBCfHwc5fGha2WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMKtG8n5ZI67dz4VTKdPmdiM+cbJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8zYWI2
ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1YWMzNWQ3ZmIvYWQyNTEzYTktMDZhOS0z
Njk1LTg5MmMtZWVjOGVkZTRmZTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvM2FiNmUzOGUtNDhlNC00MzkwLThl
ZWMtMjEzNWFjMzVkN2ZiLzNhYjZlMzhlLTQ4ZTQtNDM5MC04ZWVjLTIxMzVhYzM1
ZDdmYi5jcmwwHwYDVR0jBBgwFoAUz3SqjxzFiINyfhq0OP+lJ3b4lkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8zYWI2ZTM4ZS00OGU0LTQzOTAtOGVlYy0yMTM1
YWMzNWQ3ZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2MkqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGh5y+/1t8iH2eVe+LgmfM9hC52seUwIJVRWljoMd3H2JZDLbG0MnUc5
VM9LkyufYYcFdhp+ceiFYtNk5KdHL95KbQcWEYwxoTIu5iErIDkRSokC2IarhC/r
DPZdSRWqWpwTwoJ/S99KLe0rGrKXaXUieDAu9Keu5yss0K4LMl/hrqF6iiRVovmf
BDY+xZogD6cawj4ps4JxrMuPGRTDmgoGlLIc4gpcCZAZ8qxxgltlF+ki4j01D5DF
uYBMoDv/LyOea6gbLlWZYgOAluCGCbewy/7GaJYpRUB9uhyTsNtt+WKTnU/2iQI8
jn/zH2emqlHgOn6lCgipr3wp3A5H0Mk=
-----END CERTIFICATE-----
Generated at Fri Apr 4 19:50:41 2025 by rpki-client