Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85d4a7e4-5a68-34dd-8e9f-efe7b398466c.roa
File:                     85d4a7e4-5a68-34dd-8e9f-efe7b398466c.roa (raw, json)
Hash identifier:          h62+Yu2LbkRBDxnVvDXd4RdMJuoD93y/92zthj+T2w8=
Subject key identifier:   02:40:11:0E:4C:E2:16:8B:FB:4A:1C:20:F6:2D:A8:2A:E3:6C:4F:F9
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858492E13C2DCC90F84381A908080
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85d4a7e4-5a68-34dd-8e9f-efe7b398466c.roa
Signing time:             Fri 14 Mar 2025 01:00:39 +0000
ROA not before:           Fri 14 Mar 2025 01:00:39 +0000
ROA not after:            Thu 12 Jun 2025 01:00:39 +0000
asID:                     376
IP address blocks:        207.162.51.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:2e:13:c2:dc:c9:0f:84:38:1a:90:80:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Mar 14 01:00:39 2025 GMT
            Not After : Jun 12 01:00:39 2025 GMT
        Subject: CN=d353bdca-d219-4c3c-b9e0-7d9bd0730c5e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:69:9a:f5:cd:02:fb:e8:d8:a2:28:22:ff:
                    7f:f8:32:71:e2:5f:9a:c3:b9:15:db:d8:ba:62:86:
                    f1:5e:0e:a2:94:4a:9b:19:23:3a:cc:1e:a9:51:81:
                    41:c5:71:53:a9:41:1f:94:92:02:55:cc:38:78:63:
                    e6:7d:92:65:d6:58:56:43:b7:b8:18:86:23:92:c1:
                    dc:27:5e:fd:4f:79:3c:45:81:77:58:61:d7:62:a6:
                    70:a2:60:51:4b:53:68:b2:be:04:68:d8:e8:51:23:
                    81:be:46:7b:96:05:5b:c5:ca:15:e7:fe:03:69:bf:
                    e8:d6:bd:b3:c2:07:0b:c3:9b:83:48:ce:fb:04:14:
                    fa:34:71:09:db:7c:81:23:20:c5:5c:a8:25:7a:23:
                    07:c2:de:9c:48:46:1e:ed:44:f8:15:5e:17:93:33:
                    20:e1:72:27:65:22:fa:07:46:5d:9a:ea:09:e1:94:
                    55:b5:43:db:9f:73:45:96:f4:a5:b1:fe:05:96:00:
                    7d:4c:42:e4:01:db:a7:14:a1:6a:a9:0a:69:f7:bb:
                    71:02:0f:6a:16:2e:08:a8:b0:7d:47:19:aa:7a:5c:
                    aa:fb:b4:c8:d4:3f:b9:04:ed:34:25:f0:e6:7d:51:
                    c0:1b:5a:f4:38:2c:b6:31:dd:f8:0d:d9:67:8e:a9:
                    82:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:40:11:0E:4C:E2:16:8B:FB:4A:1C:20:F6:2D:A8:2A:E3:6C:4F:F9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/85d4a7e4-5a68-34dd-8e9f-efe7b398466c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.51.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:e7:88:1b:2d:72:38:68:db:2a:87:45:f6:03:68:2c:15:98:
         93:a1:0a:eb:14:58:48:8c:4c:9d:90:86:eb:46:87:23:58:b5:
         da:f2:31:9d:20:2c:79:b3:a2:61:b0:88:50:0a:b2:20:af:aa:
         b5:5b:40:06:da:57:3c:a4:3f:72:00:4e:31:86:cb:a0:90:db:
         c7:4b:9f:60:94:8a:be:19:0f:b4:c0:d7:c6:68:ef:80:b6:3c:
         4a:53:0b:36:1c:e3:2e:1c:78:c8:c7:85:12:42:45:2a:4e:c7:
         6d:66:06:f1:06:2d:18:00:83:d2:0e:bc:e8:a0:7e:44:f7:d9:
         f2:70:d7:5d:5b:f9:06:1c:b9:81:19:6d:33:bd:70:20:b7:4e:
         73:bc:75:9d:0c:97:5a:55:6d:4e:fe:3b:49:03:1b:9a:dc:95:
         c2:e9:5f:46:ad:ec:3d:ff:e7:93:4d:d7:f6:f8:46:54:20:f2:
         d7:c9:6d:d8:1f:f0:ec:82:ad:c2:72:89:d5:0f:7f:1d:51:03:
         1e:6a:4b:f4:ff:b0:18:88:4e:29:a2:50:3b:55:6c:fe:53:14:
         f8:a8:78:27:9c:af:12:a7:50:17:b0:b5:ff:22:76:bd:4f:92:
         ad:fa:07:e6:fb:59:26:e3:3d:a7:2f:ff:9d:41:67:9b:dc:c4:
         01:00:f3:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkuE8LcyQ+EOBqQgIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDMxNDAxMDAzOVoXDTI1MDYxMjAxMDAzOVowLzEtMCsGA1UEAxMk
ZDM1M2JkY2EtZDIxOS00YzNjLWI5ZTAtN2Q5YmQwNzMwYzVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4LdpmvXNAvvo2KIoIv9/+DJx4l+aw7kV29i6
YobxXg6ilEqbGSM6zB6pUYFBxXFTqUEflJICVcw4eGPmfZJl1lhWQ7e4GIYjksHc
J179T3k8RYF3WGHXYqZwomBRS1Nosr4EaNjoUSOBvkZ7lgVbxcoV5/4Dab/o1r2z
wgcLw5uDSM77BBT6NHEJ23yBIyDFXKgleiMHwt6cSEYe7UT4FV4XkzMg4XInZSL6
B0ZdmuoJ4ZRVtUPbn3NFlvSlsf4FlgB9TELkAdunFKFqqQpp97txAg9qFi4IqLB9
Rxmqelyq+7TI1D+5BO00JfDmfVHAG1r0OCy2Md34DdlnjqmCtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAJAEQ5M4haL+0ocIPYtqCrjbE/5MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvODVkNGE3ZTQtNWE2OC0z
NGRkLThlOWYtZWZlN2IzOTg0NjZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzniBstcjho2yqHRfYDaCwVmJOhCusUWEiMTJ2QhutGhyNYtdryMZ0g
LHmzomGwiFAKsiCvqrVbQAbaVzykP3IATjGGy6CQ28dLn2CUir4ZD7TA18Zo74C2
PEpTCzYc4y4ceMjHhRJCRSpOx21mBvEGLRgAg9IOvOigfkT32fJw111b+QYcuYEZ
bTO9cCC3TnO8dZ0Ml1pVbU7+O0kDG5rclcLpX0at7D3/55NN1/b4RlQg8tfJbdgf
8OyCrcJyidUPfx1RAx5qS/T/sBiITimiUDtVbP5TFPioeCecrxKnUBewtf8idr1P
kq36B+b7WSbjPacv/51BZ5vcxAEA888=
-----END CERTIFICATE-----
Generated at Sun Apr 6 10:30:01 2025 by rpki-client