Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e6c5a045-cb81-3209-8820-b10dcb97de39.roa
File:                     e6c5a045-cb81-3209-8820-b10dcb97de39.roa (raw, json)
Hash identifier:          iorfoKlGuXFOJoIYUpVfztp/kK9emcDVE1Rjb+qxlX0=
Subject key identifier:   33:68:EF:BC:EA:B1:1B:CD:9B:71:36:3F:CF:65:54:B7:03:39:C8:42
Certificate issuer:       /CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
Certificate serial:       010D0C9F43285848E8F003CE53669B3781408300
Authority key identifier: 79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e6c5a045-cb81-3209-8820-b10dcb97de39.roa
Signing time:             Mon 17 Feb 2025 06:38:01 +0000
ROA not before:           Mon 17 Feb 2025 06:38:01 +0000
ROA not after:            Sun 18 May 2025 05:38:01 +0000
asID:                     213676
IP address blocks:        172.111.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 23 Feb 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e8:f0:03:ce:53:66:9b:37:81:40:83:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8
        Validity
            Not Before: Feb 17 06:38:01 2025 GMT
            Not After : May 18 05:38:01 2025 GMT
        Subject: CN=f04b7039-eb6f-4d05-9d98-2ca839682864
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e2:a7:60:55:50:2b:42:a4:1a:2e:04:49:3b:
                    31:68:d5:2d:e3:32:a3:4f:d6:e2:c9:9e:4f:f1:40:
                    86:fa:94:c1:f1:c6:25:71:66:39:8f:55:76:7e:4f:
                    db:c0:62:e0:e9:e6:d0:ac:e8:d7:dd:f2:43:ad:e3:
                    24:d0:b3:f7:ea:b9:a0:6a:cb:c3:4a:b4:64:d2:4a:
                    c0:59:db:d7:6c:3e:3c:f1:84:89:75:e9:fa:87:16:
                    8b:d0:5f:bb:28:19:07:99:b0:e5:f0:26:f5:bf:34:
                    db:aa:63:8f:c5:9b:27:e7:93:37:1e:79:cb:5c:e1:
                    71:3b:09:8c:5b:ad:7c:c1:ef:83:44:3f:99:ec:00:
                    1c:9c:8d:64:98:3e:3d:0f:ab:46:cd:51:d7:af:76:
                    44:bb:08:28:51:14:53:da:68:94:17:c0:e5:ac:5c:
                    0e:2b:d5:6f:f1:9a:53:c0:96:51:89:b1:22:d0:0d:
                    6b:73:4c:83:b2:01:99:b9:a0:f7:1b:34:a3:14:04:
                    3c:09:df:6b:d4:a3:4e:fb:61:e7:8a:15:15:a5:4f:
                    27:a3:25:d7:67:0d:5b:10:e9:9a:36:30:3a:20:e9:
                    2b:51:3a:74:25:ef:6e:f3:81:20:f9:d0:6b:21:93:
                    4f:d6:78:39:66:f9:4f:5b:6a:f0:20:17:c0:32:30:
                    56:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:68:EF:BC:EA:B1:1B:CD:9B:71:36:3F:CF:65:54:B7:03:39:C8:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/e6c5a045-cb81-3209-8820-b10dcb97de39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.crl

            X509v3 Authority Key Identifier:
                keyid:79:3F:09:5A:31:A3:25:A4:40:91:6E:51:4D:CD:AD:D9:75:0B:A8:B4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/5c5aa4b4-e30d-468f-bb68-bf7fe133b1b8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.111.219.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:25:80:68:6c:8c:59:0f:89:73:80:f0:82:85:b4:3e:98:0b:
         29:18:69:79:3b:00:b8:2e:52:7c:24:b0:ac:86:54:55:80:12:
         1e:2c:6c:8d:9f:8c:ef:c9:86:ef:c8:ee:7b:19:a8:bc:67:44:
         50:a7:7b:54:b1:da:a2:53:1b:8c:cd:84:b7:5e:0b:eb:14:d7:
         47:be:ba:79:de:86:d8:45:ec:b7:13:d6:13:9f:73:b5:8b:fc:
         45:bc:51:e4:86:d2:05:a3:a4:f3:5f:85:41:e2:ec:cd:c5:bc:
         ab:85:06:f4:a0:b4:57:24:d2:df:6f:7d:b3:65:23:f1:f1:c1:
         a7:63:2b:c2:b3:2e:84:c4:e9:5a:1f:28:cf:f1:29:24:b1:28:
         eb:9b:aa:95:ae:6e:f7:4b:8c:28:79:c3:47:59:27:fd:6a:cd:
         8c:54:ff:46:b7:28:57:99:b1:32:6d:2d:5d:11:cb:14:16:ff:
         dc:d7:93:27:f2:c6:5d:a3:62:cc:36:a2:fd:b6:65:27:e9:87:
         44:5e:4e:15:fa:d4:d9:3a:3c:c7:ed:f3:9c:2e:93:60:78:bf:
         a6:9c:16:de:bc:34:49:7f:29:37:d2:a7:0a:22:1b:8f:f9:a7:
         ab:7b:b8:5a:5f:e1:05:05:34:33:bc:d2:07:bc:31:0c:ff:f4:
         e4:4c:1e:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjo8APOU2abN4FAgwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWM1YWE0YjQtZTMwZC00NjhmLWJiNjgtYmY3ZmUxMzNi
MWI4MB4XDTI1MDIxNzA2MzgwMVoXDTI1MDUxODA1MzgwMVowLzEtMCsGA1UEAxMk
ZjA0YjcwMzktZWI2Zi00ZDA1LTlkOTgtMmNhODM5NjgyODY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuKnYFVQK0KkGi4ESTsxaNUt4zKjT9biyZ5P
8UCG+pTB8cYlcWY5j1V2fk/bwGLg6ebQrOjX3fJDreMk0LP36rmgasvDSrRk0krA
WdvXbD488YSJden6hxaL0F+7KBkHmbDl8Cb1vzTbqmOPxZsn55M3HnnLXOFxOwmM
W618we+DRD+Z7AAcnI1kmD49D6tGzVHXr3ZEuwgoURRT2miUF8DlrFwOK9Vv8ZpT
wJZRibEi0A1rc0yDsgGZuaD3GzSjFAQ8Cd9r1KNO+2HnihUVpU8noyXXZw1bEOma
NjA6IOkrUTp0Je9u84Eg+dBrIZNP1ng5ZvlPW2rwIBfAMjBWsQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDNo77zqsRvNm3E2P89lVLcDOchCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81YzVh
YTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdmZTEzM2IxYjgvZTZjNWEwNDUtY2I4MS0z
MjA5LTg4MjAtYjEwZGNiOTdkZTM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNWM1YWE0YjQtZTMwZC00NjhmLWJi
NjgtYmY3ZmUxMzNiMWI4LzVjNWFhNGI0LWUzMGQtNDY4Zi1iYjY4LWJmN2ZlMTMz
YjFiOC5jcmwwHwYDVR0jBBgwFoAUeT8JWjGjJaRAkW5RTc2t2XULqLQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81YzVhYTRiNC1lMzBkLTQ2OGYtYmI2OC1iZjdm
ZTEzM2IxYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG/bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFglgGhsjFkPiXOA8IKFtD6YCykYaXk7ALguUnwksKyGVFWAEh4sbI2f
jO/Jhu/I7nsZqLxnRFCne1Sx2qJTG4zNhLdeC+sU10e+unnehthF7LcT1hOfc7WL
/EW8UeSG0gWjpPNfhUHi7M3FvKuFBvSgtFck0t9vfbNlI/HxwadjK8KzLoTE6Vof
KM/xKSSxKOubqpWubvdLjCh5w0dZJ/1qzYxU/0a3KFeZsTJtLV0RyxQW/9zXkyfy
xl2jYsw2ov22ZSfph0ReThX61Nk6PMft85wuk2B4v6acFt68NEl/KTfSpwoiG4/5
p6t7uFpf4QUFNDO80ge8MQz/9ORMHng=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:31:55 2025 by rpki-client