Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
File:                     1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa (raw, json)
Hash identifier:          xOzvVgRMICxtfOaimDm6FynbXEF1bsc9tPPBall8Wsg=
Subject key identifier:   B4:65:22:50:77:39:28:9C:40:DC:00:E5:9C:12:DA:A8:0F:54:D9:AC
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F43285849711431893DEE8AB8617FEF80
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa
Signing time:             Mon 07 Apr 2025 01:00:47 +0000
ROA not before:           Mon 07 Apr 2025 01:00:47 +0000
ROA not after:            Sun 06 Jul 2025 01:00:47 +0000
asID:                     22652
IP address blocks:        216.113.45.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:71:14:31:89:3d:ee:8a:b8:61:7f:ef:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Apr  7 01:00:47 2025 GMT
            Not After : Jul  6 01:00:47 2025 GMT
        Subject: CN=8c6959b8-baf5-4b0a-bed2-e83f5d486f20
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:0e:dc:76:e3:0c:8c:74:26:1a:5e:5e:33:74:
                    f2:25:77:ca:25:6f:df:1a:e7:9f:11:c5:5c:c9:a6:
                    78:f6:e0:5b:b4:20:33:b5:32:58:7f:f1:08:75:28:
                    35:fa:a2:57:6c:01:c0:60:f8:a4:88:45:1c:b1:9a:
                    c2:86:90:05:7c:9e:89:5f:80:68:ec:51:0d:5d:05:
                    0c:67:61:3a:e0:77:2e:cd:e3:c3:33:12:f0:22:2d:
                    a4:e4:4f:4b:30:ec:e1:5c:92:79:95:71:c5:82:ee:
                    e2:24:1c:ab:71:18:15:26:47:d9:ce:5b:ac:b2:ba:
                    2b:34:7f:c0:09:5c:1c:5d:c8:66:43:42:55:13:3a:
                    b9:67:39:89:c1:f0:c7:e2:7d:7b:39:15:17:17:d0:
                    37:29:ea:7c:32:d7:9e:82:5d:1f:f3:06:7b:d6:ae:
                    72:24:49:5c:61:df:55:68:34:3b:05:06:d1:6c:ee:
                    2c:f5:1e:f8:1d:4b:59:e9:de:ae:d7:5b:46:c0:7c:
                    89:db:de:bb:79:a4:97:4b:1c:bd:38:f3:a7:e9:44:
                    9d:c7:99:5a:ce:52:37:3d:27:35:85:5f:2f:40:0b:
                    78:d5:6e:9f:de:5f:b9:f2:34:76:82:04:64:67:be:
                    98:13:b1:f4:39:18:71:e2:98:67:1e:81:0b:2c:97:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:65:22:50:77:39:28:9C:40:DC:00:E5:9C:12:DA:A8:0F:54:D9:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/1cfe3a0a-25f7-385d-a687-a1486ca1ea26.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.113.45.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:b1:35:e6:12:92:c0:0e:45:29:82:5f:b7:3d:ea:48:b1:be:
         19:02:de:1b:73:a4:60:e2:bb:d6:f4:b4:6f:57:34:32:3b:85:
         96:9f:d2:58:cb:43:f7:f3:2c:72:99:0d:9b:29:05:58:cd:7f:
         43:56:e9:ae:a1:c7:6a:a4:30:2d:65:fe:76:f9:9f:c6:b0:d4:
         80:51:87:0d:c6:41:50:3a:13:c6:ec:ee:68:2c:42:3a:26:a3:
         1e:69:70:59:dd:4f:3c:56:53:1d:28:ee:79:6f:2b:1b:23:c7:
         47:fb:cf:c6:6f:e7:6a:f1:10:8e:c6:ec:90:4f:27:7c:69:e0:
         04:01:ea:51:36:0a:ad:c7:98:95:89:b7:ab:73:7b:42:4a:8c:
         e5:d2:83:82:f8:c9:af:57:63:03:46:f1:70:8c:de:71:94:99:
         91:16:19:f7:38:b3:f8:4a:a2:30:af:3a:e2:78:65:31:26:da:
         8c:cc:7c:2e:13:fd:58:4c:b1:e0:b4:34:48:55:20:37:77:7d:
         30:aa:e1:ed:a1:87:cd:60:91:23:6e:4d:8b:f6:8e:24:dc:bd:
         30:d2:be:c1:ca:01:f9:e2:7a:03:b1:35:4d:35:5c:2e:24:95:
         ec:a1:27:4a:5b:97:0d:5b:eb:4d:0a:eb:77:64:8d:57:cc:ed:
         29:84:e8:17
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElxFDGJPe6KuGF/74AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDQwNzAxMDA0N1oXDTI1MDcwNjAxMDA0N1owLzEtMCsGA1UEAxMk
OGM2OTU5YjgtYmFmNS00YjBhLWJlZDItZTgzZjVkNDg2ZjIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgA7cduMMjHQmGl5eM3TyJXfKJW/fGuefEcVc
yaZ49uBbtCAztTJYf/EIdSg1+qJXbAHAYPikiEUcsZrChpAFfJ6JX4Bo7FENXQUM
Z2E64HcuzePDMxLwIi2k5E9LMOzhXJJ5lXHFgu7iJByrcRgVJkfZzlussrorNH/A
CVwcXchmQ0JVEzq5ZzmJwfDH4n17ORUXF9A3Kep8Mteegl0f8wZ71q5yJElcYd9V
aDQ7BQbRbO4s9R74HUtZ6d6u11tGwHyJ2967eaSXSxy9OPOn6USdx5lazlI3PSc1
hV8vQAt41W6f3l+58jR2ggRkZ76YE7H0ORhx4phnHoELLJeFNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLRlIlB3OSicQNwA5ZwS2qgPVNmsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMWNmZTNhMGEtMjVmNy0z
ODVkLWE2ODctYTE0ODZjYTFlYTI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2HEtMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2xNeYSksAORSmCX7c96kixvhkC3htzpGDiu9b0tG9XNDI7hZaf0ljL
Q/fzLHKZDZspBVjNf0NW6a6hx2qkMC1l/nb5n8aw1IBRhw3GQVA6E8bs7mgsQjom
ox5pcFndTzxWUx0o7nlvKxsjx0f7z8Zv52rxEI7G7JBPJ3xp4AQB6lE2Cq3HmJWJ
t6tze0JKjOXSg4L4ya9XYwNG8XCM3nGUmZEWGfc4s/hKojCvOuJ4ZTEm2ozMfC4T
/VhMseC0NEhVIDd3fTCq4e2hh81gkSNuTYv2jiTcvTDSvsHKAfniegOxNU01XC4k
leyhJ0pblw1b600K63dkjVfM7SmE6Bc=
-----END CERTIFICATE-----
Generated at Sat Apr 12 01:12:39 2025 by rpki-client