Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa
File:                     85b18b62-aeab-38eb-af37-ca27cd92722d.roa (raw, json)
Hash identifier:          JnkS9fOSLwCnj/p043UI+rQltsoqpkC97FBU77ACqlQ=
Subject key identifier:   D5:FF:FA:5E:E0:5F:7D:AA:00:01:C8:0F:97:B8:7C:2E:EB:04:EB:D7
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F43285848100A961B83DD073409852240
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     16509
IP address blocks:        107.151.224.0/24 maxlen: 24
                          107.151.225.0/24 maxlen: 24
                          107.151.226.0/24 maxlen: 24
                          107.151.227.0/24 maxlen: 24
                          107.151.228.0/24 maxlen: 24
                          107.151.229.0/24 maxlen: 24
                          107.151.230.0/24 maxlen: 24
                          107.151.231.0/24 maxlen: 24
                          107.151.232.0/24 maxlen: 24
                          107.151.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:96:1b:83:dd:07:34:09:85:22:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=4e9e4437-1a3a-4ef7-8fda-486f3ae78bb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7d:8d:c3:65:ed:82:21:9d:8c:b7:62:db:49:
                    15:00:7f:68:2c:42:01:d0:38:74:07:b6:30:35:93:
                    d9:d0:4e:13:79:82:f1:8f:bc:3c:60:d7:8c:36:03:
                    db:fd:62:16:a3:1f:1f:c2:6e:9d:da:c3:b0:01:fd:
                    47:94:86:18:7b:b1:38:d1:38:8f:81:02:b7:67:19:
                    c6:8c:c0:72:ed:6a:2c:15:94:76:c9:c3:dd:ce:4f:
                    4a:8d:02:5b:28:38:46:b2:c9:e7:04:d7:b6:a2:85:
                    3d:e1:16:55:ad:12:24:c5:b1:3c:22:75:0c:78:0e:
                    62:c1:d2:d7:fc:05:5f:74:63:06:4c:06:8e:6f:78:
                    07:68:e8:01:bc:2f:29:fe:3c:d9:3b:2c:ac:53:51:
                    56:69:0b:e9:78:1b:54:e3:1a:fb:2b:d9:d7:4d:9c:
                    4b:6c:c9:31:31:49:9e:e1:4f:5e:4d:0a:2d:1d:66:
                    06:21:16:83:dc:11:95:78:3f:57:1c:d3:bf:58:c7:
                    5d:a7:4a:06:3d:95:04:21:7a:e9:b8:a3:fd:8b:85:
                    8e:ce:b8:42:f0:20:d6:14:3a:89:e0:82:8e:83:19:
                    07:6d:9c:d6:78:97:42:72:a2:16:d3:4e:6f:24:ae:
                    87:8f:d3:c4:af:63:d0:3b:e7:7a:cd:33:ff:c5:1d:
                    5e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:FF:FA:5E:E0:5F:7D:AA:00:01:C8:0F:97:B8:7C:2E:EB:04:EB:D7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/85b18b62-aeab-38eb-af37-ca27cd92722d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.224.0-107.151.233.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:8c:8b:f6:7b:1e:72:4d:88:54:d3:6b:e4:18:96:54:a4:97:
         6a:7b:1e:69:ea:b6:59:9d:27:68:3e:ab:3b:23:c2:50:aa:e7:
         a8:0e:b3:ac:bf:df:67:e6:05:0a:99:fa:0b:db:75:c7:7c:17:
         36:d3:89:bb:02:e1:4e:ed:ce:96:5e:02:60:a6:88:2b:53:9c:
         39:e1:16:f8:c7:f8:25:66:68:9d:af:77:36:85:57:f1:90:40:
         42:4e:04:61:bf:99:44:4b:b3:43:ba:c3:6a:0e:f7:aa:b7:3f:
         6a:ab:0c:70:63:e8:a0:86:ed:9e:0e:45:32:b9:38:9a:6a:a7:
         c9:ef:fb:a1:3e:a2:5f:00:2a:af:ad:2e:f0:59:1d:af:19:80:
         a9:51:5e:92:de:17:82:87:a1:0b:39:40:06:e8:2a:68:58:72:
         5f:9d:1f:60:c3:43:77:dd:54:73:d2:6d:ff:98:25:7d:36:49:
         3f:a3:6d:5b:e7:b5:32:a0:e5:48:a6:6b:c8:16:ad:da:b0:b1:
         40:b0:20:20:b5:48:d5:82:a4:da:fc:e9:70:a9:5c:7a:5b:f8:
         91:be:28:57:bd:31:8e:b9:83:2a:38:45:aa:6f:c5:be:eb:c6:
         95:90:b2:a7:18:15:d4:1a:6a:11:7c:1e:9a:db:c5:cb:7c:ff:
         90:64:1b:64
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgQCpYbg90HNAmFIkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
NGU5ZTQ0MzctMWEzYS00ZWY3LThmZGEtNDg2ZjNhZTc4YmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun2Nw2XtgiGdjLdi20kVAH9oLEIB0Dh0B7Yw
NZPZ0E4TeYLxj7w8YNeMNgPb/WIWox8fwm6d2sOwAf1HlIYYe7E40TiPgQK3ZxnG
jMBy7WosFZR2ycPdzk9KjQJbKDhGssnnBNe2ooU94RZVrRIkxbE8InUMeA5iwdLX
/AVfdGMGTAaOb3gHaOgBvC8p/jzZOyysU1FWaQvpeBtU4xr7K9nXTZxLbMkxMUme
4U9eTQotHWYGIRaD3BGVeD9XHNO/WMddp0oGPZUEIXrpuKP9i4WOzrhC8CDWFDqJ
4IKOgxkHbZzWeJdCcqIW005vJK6Hj9PEr2PQO+d6zTP/xR1e4QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFNX/+l7gX32qAAHID5e4fC7rBOvXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvODViMThiNjItYWVhYi0z
OGViLWFmMzctY2EyN2NkOTI3MjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAVrl+AD
BAFrl+gwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAPYyL9nseck2IVNNr5BiWVKSXanseaeq2WZ0naD6rOyPC
UKrnqA6zrL/fZ+YFCpn6C9t1x3wXNtOJuwLhTu3Oll4CYKaIK1OcOeEW+Mf4JWZo
na93NoVX8ZBAQk4EYb+ZREuzQ7rDag73qrc/aqsMcGPooIbtng5FMrk4mmqnye/7
oT6iXwAqr60u8FkdrxmAqVFekt4XgoehCzlABugqaFhyX50fYMNDd91Uc9Jt/5gl
fTZJP6NtW+e1MqDlSKZryBat2rCxQLAgILVI1YKk2vzpcKlcelv4kb4oV70xjrmD
KjhFqm/FvuvGlZCypxgV1BpqEXwemtvFy3z/kGQbZA==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:39 2025 by rpki-client