Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa
File:                     6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa (raw, json)
Hash identifier:          5f3qWhA5DS4ajNXrvEVGKNOLpQ1Dw6Kcj3DmlIN7Hn4=
Subject key identifier:   B2:14:FE:2B:C4:A1:6A:AE:B6:7B:07:FB:2E:8E:FC:2A:26:C5:E8:71
Certificate issuer:       /CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
Certificate serial:       010D0C9F43285848CC7B9D14726FE6CDB5B68180
Authority key identifier: 40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     11090
IP address blocks:        216.137.208.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:9d:14:72:6f:e6:cd:b5:b6:81:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8d6baa-d4d5-415c-a024-00343e5a69d1
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=af111abb-81f6-477d-b890-28a3f0e1e133
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:ac:a4:fc:ff:7a:35:77:d4:50:2f:d8:ad:ca:
                    35:00:7d:b7:17:a1:bd:4e:c5:01:af:be:bf:90:07:
                    a1:4f:b6:e0:e4:28:9c:d0:ae:ed:f6:0e:42:52:a9:
                    78:2a:44:13:88:58:33:ac:80:60:ed:ff:e3:ec:15:
                    32:e7:67:10:40:ef:2d:ac:56:4a:eb:e0:eb:3b:01:
                    39:09:b3:14:ad:54:f6:78:8e:d1:0f:76:da:a8:33:
                    9e:b6:f6:e5:d1:f2:d9:75:db:6e:0b:c0:d6:c3:26:
                    7c:b6:9d:28:45:31:fa:6b:9c:53:37:fa:b3:29:07:
                    17:88:e1:fc:77:23:cc:ef:4e:1a:61:ee:71:5f:63:
                    fa:d4:11:a9:be:3f:d1:a2:2d:09:32:6e:3d:71:c0:
                    7c:ea:23:5c:55:d7:fd:e4:1b:e9:5d:4f:27:70:d7:
                    fa:50:c6:18:21:4e:c8:31:21:3a:00:e7:b0:d0:c9:
                    30:e9:05:5d:f4:21:89:b5:75:a2:a5:8a:b3:37:01:
                    10:94:14:bc:75:a5:d1:dd:7d:4b:cd:83:c8:fc:71:
                    54:59:d2:7d:ba:03:e9:91:9e:4c:71:14:da:47:1d:
                    94:a5:9c:70:48:bd:ab:66:c8:a7:8d:7d:db:03:b3:
                    cb:ae:ea:f1:22:03:4e:2f:3e:37:1d:f0:dd:51:cc:
                    fe:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:14:FE:2B:C4:A1:6A:AE:B6:7B:07:FB:2E:8E:FC:2A:26:C5:E8:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/6d191f16-cf5e-354f-a8c8-648506f1b5b8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1/3f8d6baa-d4d5-415c-a024-00343e5a69d1.crl

            X509v3 Authority Key Identifier:
                keyid:40:99:74:B4:C0:F6:6C:EC:3E:BA:50:F8:B3:40:34:15:D8:1C:87:FB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3f8d6baa-d4d5-415c-a024-00343e5a69d1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.137.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:ba:98:c6:5f:28:ca:ad:7a:88:35:28:cc:95:cf:33:f2:2d:
         0b:f9:1b:e4:23:18:58:6b:cc:c6:1f:6e:a2:30:0e:e6:44:a6:
         cd:66:9d:db:4f:6e:19:c3:86:04:b4:e0:77:ab:3e:66:eb:af:
         9c:5f:cc:73:a4:23:29:bb:36:8a:69:50:7f:44:93:d7:24:32:
         84:fa:9c:ff:32:9c:60:c5:a2:4e:b2:18:6a:fe:27:3f:97:d8:
         59:c9:bc:ca:48:1a:a3:f9:d3:7a:f7:a0:8d:f0:2c:e4:06:32:
         a5:55:10:47:2f:c6:72:a5:91:18:5e:2c:68:fe:49:d3:75:ec:
         e3:47:e1:a4:ce:bf:8d:50:2d:43:97:2c:21:ce:ec:86:7b:9d:
         b2:29:e9:3d:4c:89:f5:f1:a7:a2:13:64:29:d2:50:e3:b3:a4:
         2c:70:2d:92:a6:64:25:f6:5b:82:9d:62:63:64:7b:cd:8a:0f:
         bb:25:45:73:30:0a:65:53:ba:d7:1c:f6:98:68:26:90:a6:9b:
         f6:31:8f:39:61:6e:49:d2:b8:45:79:9f:c2:37:7c:97:df:26:
         66:1a:45:c0:c3:9a:78:76:df:75:79:f7:4c:1f:cd:e9:39:61:
         94:83:c9:b5:1f:0e:b6:ef:4d:5e:77:ab:6e:b5:3e:3b:ca:c2:
         c3:89:02:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe50Ucm/mzbW2gYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZDZiYWEtZDRkNS00MTVjLWEwMjQtMDAzNDNlNWE2
OWQxMB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
YWYxMTFhYmItODFmNi00NzdkLWI4OTAtMjhhM2YwZTFlMTMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtqyk/P96NXfUUC/Yrco1AH23F6G9TsUBr76/
kAehT7bg5Cic0K7t9g5CUql4KkQTiFgzrIBg7f/j7BUy52cQQO8trFZK6+DrOwE5
CbMUrVT2eI7RD3baqDOetvbl0fLZddtuC8DWwyZ8tp0oRTH6a5xTN/qzKQcXiOH8
dyPM704aYe5xX2P61BGpvj/Roi0JMm49ccB86iNcVdf95BvpXU8ncNf6UMYYIU7I
MSE6AOew0Mkw6QVd9CGJtXWipYqzNwEQlBS8daXR3X1LzYPI/HFUWdJ9ugPpkZ5M
cRTaRx2UpZxwSL2rZsinjX3bA7PLrurxIgNOLz43HfDdUcz+NQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLIU/ivEoWqutnsH+y6O/ComxehxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhk
NmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0M2U1YTY5ZDEvNmQxOTFmMTYtY2Y1ZS0z
NTRmLWE4YzgtNjQ4NTA2ZjFiNWI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2Y4ZDZiYWEtZDRkNS00MTVjLWEw
MjQtMDAzNDNlNWE2OWQxLzNmOGQ2YmFhLWQ0ZDUtNDE1Yy1hMDI0LTAwMzQzZTVh
NjlkMS5jcmwwHwYDVR0jBBgwFoAUQJl0tMD2bOw+ulD4s0A0Fdgch/swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZjhkNmJhYS1kNGQ1LTQxNWMtYTAyNC0wMDM0
M2U1YTY5ZDEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2InQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFG6mMZfKMqteog1KMyVzzPyLQv5G+QjGFhrzMYfbqIwDuZEps1mndtP
bhnDhgS04HerPmbrr5xfzHOkIym7NoppUH9Ek9ckMoT6nP8ynGDFok6yGGr+Jz+X
2FnJvMpIGqP503r3oI3wLOQGMqVVEEcvxnKlkRheLGj+SdN17ONH4aTOv41QLUOX
LCHO7IZ7nbIp6T1MifXxp6ITZCnSUOOzpCxwLZKmZCX2W4KdYmNke82KD7slRXMw
CmVTutcc9phoJpCmm/YxjzlhbknSuEV5n8I3fJffJmYaRcDDmnh233V590wfzek5
YZSDybUfDrbvTV53q261PjvKwsOJAoI=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:20 2025 by rpki-client