Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
File:                     951f03da-99ef-3fc4-81ff-16ac192a1586.roa (raw, json)
Hash identifier:          ACwKUzoV4Yu28UvdbANvGY9uWFSYm1z3UEiXtvqmsbY=
Subject key identifier:   C2:7E:D3:B9:1D:27:05:1E:FF:86:E8:14:66:CD:C3:50:B8:B9:11:45
Certificate issuer:       /CN=c0094aab-7ad1-4889-853f-ce946552206b
Certificate serial:       010D0C9F4328584917DC391DF04E84734D123F40
Authority key identifier: 8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa
Signing time:             Thu 06 Mar 2025 02:00:39 +0000
ROA not before:           Thu 06 Mar 2025 02:00:39 +0000
ROA not after:            Wed 04 Jun 2025 01:00:39 +0000
asID:                     36519
IP address blocks:        172.98.16.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:17:dc:39:1d:f0:4e:84:73:4d:12:3f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c0094aab-7ad1-4889-853f-ce946552206b
        Validity
            Not Before: Mar  6 02:00:39 2025 GMT
            Not After : Jun  4 01:00:39 2025 GMT
        Subject: CN=fccb797d-9fe7-474c-a71e-f140ebb5738d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:79:c4:e8:4b:13:19:3c:7b:f3:b6:81:2f:9e:
                    5a:76:bb:65:29:99:1b:11:4a:b0:da:2f:cf:1d:5f:
                    ed:8e:e9:80:1a:aa:6c:f6:ae:df:19:4b:e5:d6:d6:
                    f6:fc:b3:ef:5e:f9:5b:6f:7e:f5:44:25:90:a7:22:
                    52:12:77:e0:7f:3a:ae:03:49:44:96:bd:1d:c6:d7:
                    d1:ac:a5:25:e5:1e:41:8b:5d:91:7b:67:19:80:92:
                    9e:29:14:1d:d5:06:ed:0e:e9:23:13:cb:68:b8:09:
                    d3:ca:a3:f0:4c:66:95:45:88:93:88:91:84:74:d3:
                    a7:27:b5:9a:41:f3:32:88:6d:b3:3f:d4:f9:f5:20:
                    4a:3f:f5:5d:cb:ef:eb:5a:4b:36:a8:40:b1:a7:2b:
                    6e:88:c0:c2:f6:3f:36:ef:ad:85:d3:5d:38:bb:3c:
                    27:30:71:20:c9:ab:0c:56:43:10:29:a0:71:d1:41:
                    58:29:ab:b8:f5:6e:85:f6:7c:4f:2a:b2:db:5a:e1:
                    e0:c1:61:9f:dd:9b:5d:f1:20:8c:a1:9a:3b:36:3a:
                    2c:4c:17:1c:59:40:eb:31:ff:51:be:99:84:2e:f6:
                    ff:3a:27:d5:85:f9:18:6f:6b:6f:4b:8e:65:ba:01:
                    d1:eb:53:57:f8:fe:b0:02:11:1d:c6:c6:78:e2:47:
                    27:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:7E:D3:B9:1D:27:05:1E:FF:86:E8:14:66:CD:C3:50:B8:B9:11:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/951f03da-99ef-3fc4-81ff-16ac192a1586.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b/c0094aab-7ad1-4889-853f-ce946552206b.crl

            X509v3 Authority Key Identifier:
                keyid:8F:7B:E0:51:77:DA:9D:4E:21:90:35:D7:81:CD:ED:A1:00:C7:B9:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c0094aab-7ad1-4889-853f-ce946552206b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.98.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f7:1e:f1:9e:bd:41:55:80:59:0c:50:a7:34:eb:61:ad:0c:
         00:0e:6f:d8:59:ff:88:18:9d:1a:0a:3b:24:97:4d:ba:07:7c:
         87:29:08:80:b3:78:5b:79:5b:ad:9b:02:20:7f:7b:35:9a:cb:
         03:b6:1c:27:c2:8b:a6:9f:2c:54:ae:35:41:cf:b1:0d:1e:a6:
         af:2b:1c:b8:3a:6e:67:b2:7b:ac:58:8d:4c:59:b6:83:44:60:
         4f:10:7e:cc:6e:8d:d6:57:88:4f:60:f5:95:44:92:ac:77:3e:
         9e:3e:7c:65:6c:86:ec:f3:b1:de:df:eb:db:24:6e:52:91:af:
         d1:ff:fc:2d:11:d9:a7:69:af:1a:e4:dc:52:e3:50:c5:34:6c:
         e1:aa:34:43:67:5c:0f:22:2c:a2:96:8d:fc:a4:86:bc:de:b5:
         d3:48:12:bb:94:35:a8:6a:09:75:04:21:13:05:4b:ff:3b:12:
         ce:2a:11:a1:73:9f:4a:17:46:e3:7a:19:71:4e:ba:95:c2:1a:
         01:90:00:f7:91:50:6a:e4:5c:5f:a0:78:d6:e6:52:2c:85:a9:
         10:23:08:6a:7d:e8:c7:4f:3d:fb:10:a9:c2:ba:be:0f:50:53:
         c1:e7:15:4a:22:c9:ce:25:4a:1f:82:04:76:ec:64:19:31:fa:
         1b:65:0e:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkX3Dkd8E6Ec00SP0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAwOTRhYWItN2FkMS00ODg5LTg1M2YtY2U5NDY1NTIy
MDZiMB4XDTI1MDMwNjAyMDAzOVoXDTI1MDYwNDAxMDAzOVowLzEtMCsGA1UEAxMk
ZmNjYjc5N2QtOWZlNy00NzRjLWE3MWUtZjE0MGViYjU3MzhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHnE6EsTGTx787aBL55adrtlKZkbEUqw2i/P
HV/tjumAGqps9q7fGUvl1tb2/LPvXvlbb371RCWQpyJSEnfgfzquA0lElr0dxtfR
rKUl5R5Bi12Re2cZgJKeKRQd1QbtDukjE8touAnTyqPwTGaVRYiTiJGEdNOnJ7Wa
QfMyiG2zP9T59SBKP/Vdy+/rWks2qECxpytuiMDC9j82762F0104uzwnMHEgyasM
VkMQKaBx0UFYKau49W6F9nxPKrLbWuHgwWGf3Ztd8SCMoZo7NjosTBccWUDrMf9R
vpmELvb/OifVhfkYb2tvS45lugHR61NX+P6wAhEdxsZ44kcnuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMJ+07kdJwUe/4boFGbNw1C4uRFFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5
NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0NjU1MjIwNmIvOTUxZjAzZGEtOTllZi0z
ZmM0LTgxZmYtMTZhYzE5MmExNTg2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzAwOTRhYWItN2FkMS00ODg5LTg1
M2YtY2U5NDY1NTIyMDZiL2MwMDk0YWFiLTdhZDEtNDg4OS04NTNmLWNlOTQ2NTUy
MjA2Yi5jcmwwHwYDVR0jBBgwFoAUj3vgUXfanU4hkDXXgc3toQDHub4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jMDA5NGFhYi03YWQxLTQ4ODktODUzZi1jZTk0
NjU1MjIwNmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBrGIQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIn3HvGevUFVgFkMUKc062GtDAAOb9hZ/4gYnRoKOySXTboHfIcpCICz
eFt5W62bAiB/ezWaywO2HCfCi6afLFSuNUHPsQ0epq8rHLg6bmeye6xYjUxZtoNE
YE8QfsxujdZXiE9g9ZVEkqx3Pp4+fGVshuzzsd7f69skblKRr9H//C0R2adprxrk
3FLjUMU0bOGqNENnXA8iLKKWjfykhrzetdNIEruUNahqCXUEIRMFS/87Es4qEaFz
n0oXRuN6GXFOupXCGgGQAPeRUGrkXF+geNbmUiyFqRAjCGp96MdPPfsQqcK6vg9Q
U8HnFUoiyc4lSh+CBHbsZBkx+htlDt8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:50:21 2025 by rpki-client