Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa
File:                     1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa (raw, json)
Hash identifier:          UwWE7GWj45zoy8rDhU5T++jlbEV0j+zbdMDVwF8Jwiw=
Subject key identifier:   70:47:D6:CB:C2:EF:7F:0A:C4:E0:63:4E:8D:5E:6B:9F:6D:3B:B9:4F
Certificate issuer:       /CN=cc3ad4cd-0893-42fc-a743-e36058983069
Certificate serial:       010D0C9F432858491AA6CE7F1B0F5FF5A3B06080
Authority key identifier: D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa
Signing time:             Fri 07 Mar 2025 02:00:39 +0000
ROA not before:           Fri 07 Mar 2025 02:00:39 +0000
ROA not after:            Thu 05 Jun 2025 01:00:39 +0000
asID:                     15290
IP address blocks:        216.191.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1a:a6:ce:7f:1b:0f:5f:f5:a3:b0:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cc3ad4cd-0893-42fc-a743-e36058983069
        Validity
            Not Before: Mar  7 02:00:39 2025 GMT
            Not After : Jun  5 01:00:39 2025 GMT
        Subject: CN=ed344351-f6fc-4279-b700-64f5b43eede9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:79:31:04:3b:c8:bc:96:e7:1c:40:de:76:ee:
                    b5:d0:57:10:6d:c4:43:a1:ae:9b:a8:0f:eb:2b:c1:
                    b4:33:bd:c8:f5:3a:8f:d0:5c:17:a0:14:dc:c6:6a:
                    1c:b6:6c:25:87:b1:6b:9d:b6:77:e3:d3:5d:39:e1:
                    9f:ef:06:ac:bb:82:bd:6f:bc:ae:a2:bc:1c:2e:f3:
                    d6:81:dd:77:01:a5:2f:06:ef:12:56:b4:ba:13:14:
                    60:4c:38:a2:ad:f1:b6:47:46:06:11:07:8f:8b:27:
                    ea:ad:86:04:c7:7a:c6:ea:de:1b:31:40:9d:5e:83:
                    b1:b4:bf:de:51:0c:28:3f:0e:d4:b9:e1:e1:02:63:
                    6e:0c:79:2a:c7:cd:f2:87:2b:e9:fb:5c:68:c4:33:
                    17:ca:cc:95:1a:3b:3c:dc:fc:be:bd:5d:80:17:36:
                    92:0f:16:d1:f2:c3:f7:2f:d8:44:af:0c:6f:dc:6e:
                    b9:41:2f:ad:df:17:f0:f7:42:2d:e9:0c:9d:f6:19:
                    8a:18:66:5e:1f:d5:94:79:c5:ba:40:23:4d:43:0b:
                    4e:2d:31:9a:5d:72:11:68:f7:14:f6:1a:14:3a:b8:
                    fb:10:cd:13:b5:38:ca:ae:aa:45:d1:d3:fc:0c:82:
                    5b:c3:29:68:dc:c0:7c:1c:be:8a:1a:09:10:e9:1a:
                    d1:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:47:D6:CB:C2:EF:7F:0A:C4:E0:63:4E:8D:5E:6B:9F:6D:3B:B9:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/1b12f7bf-152a-3ecd-81a8-4fac0242fcdb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069/cc3ad4cd-0893-42fc-a743-e36058983069.crl

            X509v3 Authority Key Identifier:
                keyid:D0:19:33:60:20:39:B8:B1:28:73:6E:9E:D6:E9:A1:86:B5:4A:FB:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/cc3ad4cd-0893-42fc-a743-e36058983069.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.191.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:2a:4c:7f:cb:82:15:75:bc:a1:0c:5c:33:fb:80:23:b4:
         e7:94:5e:5f:5d:af:1b:5e:b7:5b:77:cf:00:4b:76:90:a8:a0:
         18:17:e8:a9:cc:2d:21:f6:87:39:9b:47:72:1a:fd:a9:87:96:
         2a:cd:02:be:59:1c:b9:8d:5e:ee:41:59:6d:a8:d6:37:54:6b:
         ff:df:1a:5b:f1:0f:df:e3:49:4e:22:d6:ce:9d:60:00:8a:9d:
         05:42:bf:15:21:b9:9f:1a:69:ca:b5:09:45:62:a7:c2:2c:56:
         b0:24:65:51:d5:98:4e:8c:88:d2:3c:f9:36:c4:6b:bb:7e:c5:
         bb:b8:ba:67:c7:5d:4b:a1:0c:6f:92:08:ec:8a:da:6c:38:be:
         12:b8:5f:fc:76:c8:e0:28:01:09:4f:ea:c3:29:cd:29:63:5a:
         34:8e:ac:68:b1:2e:b2:7b:1b:cf:e2:da:e0:2c:3c:05:98:ca:
         b0:b1:0c:cb:0f:bb:67:3c:e4:6f:c6:e2:2f:9a:f3:de:01:4e:
         ba:62:69:da:dc:27:c3:0b:a4:6a:21:69:73:7b:54:d3:3a:d4:
         13:f0:69:24:70:aa:03:8a:27:55:98:b7:7c:8e:e2:1e:a1:b6:
         4c:26:9a:da:01:f7:2d:4e:5b:1e:ec:82:01:a3:24:07:99:d4:
         87:71:31:b7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkaps5/Gw9f9aOwYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2MzYWQ0Y2QtMDg5My00MmZjLWE3NDMtZTM2MDU4OTgz
MDY5MB4XDTI1MDMwNzAyMDAzOVoXDTI1MDYwNTAxMDAzOVowLzEtMCsGA1UEAxMk
ZWQzNDQzNTEtZjZmYy00Mjc5LWI3MDAtNjRmNWI0M2VlZGU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XkxBDvIvJbnHEDedu610FcQbcRDoa6bqA/r
K8G0M73I9TqP0FwXoBTcxmoctmwlh7FrnbZ349NdOeGf7wasu4K9b7yuorwcLvPW
gd13AaUvBu8SVrS6ExRgTDiirfG2R0YGEQePiyfqrYYEx3rG6t4bMUCdXoOxtL/e
UQwoPw7UueHhAmNuDHkqx83yhyvp+1xoxDMXysyVGjs83Py+vV2AFzaSDxbR8sP3
L9hErwxv3G65QS+t3xfw90It6Qyd9hmKGGZeH9WUecW6QCNNQwtOLTGaXXIRaPcU
9hoUOrj7EM0TtTjKrqpF0dP8DIJbwylo3MB8HL6KGgkQ6RrROwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBH1svC738KxOBjTo1ea59tO7lPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNh
ZDRjZC0wODkzLTQyZmMtYTc0My1lMzYwNTg5ODMwNjkvMWIxMmY3YmYtMTUyYS0z
ZWNkLTgxYTgtNGZhYzAyNDJmY2RiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvY2MzYWQ0Y2QtMDg5My00MmZjLWE3
NDMtZTM2MDU4OTgzMDY5L2NjM2FkNGNkLTA4OTMtNDJmYy1hNzQzLWUzNjA1ODk4
MzA2OS5jcmwwHwYDVR0jBBgwFoAU0BkzYCA5uLEoc26e1umhhrVK+64wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jYzNhZDRjZC0wODkzLTQyZmMtYTc0My1lMzYw
NTg5ODMwNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2L92MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACuaKkx/y4IVdbyhDFwz+4AjtOeUXl9drxtet1t3zwBLdpCooBgX6KnM
LSH2hzmbR3Ia/amHlirNAr5ZHLmNXu5BWW2o1jdUa//fGlvxD9/jSU4i1s6dYACK
nQVCvxUhuZ8aacq1CUVip8IsVrAkZVHVmE6MiNI8+TbEa7t+xbu4umfHXUuhDG+S
COyK2mw4vhK4X/x2yOAoAQlP6sMpzSljWjSOrGixLrJ7G8/i2uAsPAWYyrCxDMsP
u2c85G/G4i+a894BTrpiadrcJ8MLpGohaXN7VNM61BPwaSRwqgOKJ1WYt3yO4h6h
tkwmmtoB9y1OWx7sggGjJAeZ1IdxMbc=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:58:39 2025 by rpki-client