Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/01dad83e-8182-381f-9b95-0e2aa36bdd9e.roa
File:                     01dad83e-8182-381f-9b95-0e2aa36bdd9e.roa (raw, json)
Hash identifier:          SWVp3o5yVrBtU6dFgWsmZsgahC9zBRQC5pyXoZU2TMY=
Subject key identifier:   21:01:E5:BC:A1:E7:92:E3:15:2F:32:37:0B:4A:06:8A:8B:16:EF:58
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F4328584832EFE827FB9AAEDAED350780
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/01dad83e-8182-381f-9b95-0e2aa36bdd9e.roa
Signing time:             Sat 14 Dec 2024 02:00:39 +0000
ROA not before:           Sat 14 Dec 2024 02:00:39 +0000
ROA not after:            Fri 14 Mar 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        64.42.190.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:32:ef:e8:27:fb:9a:ae:da:ed:35:07:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Dec 14 02:00:39 2024 GMT
            Not After : Mar 14 01:00:39 2025 GMT
        Subject: CN=543510ea-1e20-41ef-b5bb-e935572464b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:16:2e:2c:83:10:21:99:6c:8c:28:ad:be:a5:
                    e0:6c:28:9b:ed:b3:26:10:c5:37:36:77:eb:c4:15:
                    ab:39:35:85:83:68:b7:bc:c0:17:41:89:27:43:6b:
                    0a:7a:61:e7:27:bb:17:f2:ed:f3:9f:19:7f:b7:5d:
                    61:80:ff:91:a6:40:fc:20:6c:a1:7c:90:81:df:1f:
                    86:08:15:f7:50:80:8e:9e:ad:22:dd:7a:20:f3:73:
                    0f:dc:ef:62:93:f6:9a:ac:c7:9d:88:04:dc:bd:02:
                    96:37:db:1d:5c:5a:9e:d7:11:b0:98:5f:fb:b7:e3:
                    7f:d0:e4:ae:1d:55:d3:ea:04:02:80:f6:ec:fe:40:
                    f8:5b:98:c6:1c:5e:d5:28:53:66:65:1a:74:a7:16:
                    65:0d:ba:4b:6b:09:08:57:8f:e2:d2:fc:b6:bf:cd:
                    16:05:1a:73:38:b0:b1:f1:1a:7f:46:0b:34:05:70:
                    cc:e3:ae:db:d1:6c:4e:38:df:5b:7d:37:1a:76:c3:
                    7b:a2:5f:0b:5c:9d:d9:39:c9:27:95:77:d7:ae:5e:
                    79:94:5f:b9:8a:c4:72:a7:35:0f:02:a2:59:90:e8:
                    5a:cd:69:c9:40:6f:40:47:71:44:a5:35:20:d4:dc:
                    52:87:3b:95:19:b2:60:98:10:9f:47:3a:a2:6f:89:
                    2e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:01:E5:BC:A1:E7:92:E3:15:2F:32:37:0B:4A:06:8A:8B:16:EF:58
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/01dad83e-8182-381f-9b95-0e2aa36bdd9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.190.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:f6:7e:9c:7c:a5:95:c0:b0:a6:df:e9:16:63:2b:19:83:f8:
         ed:5a:d6:41:97:80:6d:d5:26:68:ef:22:29:23:50:59:f6:e0:
         42:d7:bb:6e:b9:77:27:89:69:26:b9:f7:54:5d:78:08:db:a0:
         ef:6f:36:67:ac:e0:c9:cf:0a:b4:bb:ac:73:85:4c:d3:b3:30:
         7b:91:9d:f1:7a:a3:62:a0:2a:22:e6:06:91:7e:28:69:b5:65:
         4d:b7:4b:21:77:6d:66:00:b4:ef:03:e5:d2:b3:c9:69:9f:7a:
         76:96:68:31:da:c7:24:d9:89:4c:01:e0:d4:a4:22:22:80:f7:
         ee:71:0f:a2:0a:20:99:a1:6a:c9:67:64:07:27:a9:a9:f5:21:
         cd:4b:b6:04:6b:02:06:ae:2f:07:95:fc:e1:9f:29:22:4d:e3:
         07:bf:85:ec:9c:5c:23:bb:ca:0a:b7:d5:ae:dc:96:98:4d:fc:
         99:c5:88:2d:c4:0c:95:af:55:df:20:31:d9:0e:99:03:84:a6:
         b4:f7:7d:d0:91:90:d4:72:98:17:8c:f0:c6:3f:d8:1a:97:4c:
         92:08:2e:be:0a:df:25:7e:46:25:6b:1b:d3:66:d3:87:de:a2:
         a6:68:70:ec:60:28:d4:76:59:3b:e8:e1:2b:5a:f5:31:3f:22:
         1f:bf:df:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgy7+gn+5qu2u01B4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl
ZDdhMB4XDTI0MTIxNDAyMDAzOVoXDTI1MDMxNDAxMDAzOVowLzEtMCsGA1UEAxMk
NTQzNTEwZWEtMWUyMC00MWVmLWI1YmItZTkzNTU3MjQ2NGI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphYuLIMQIZlsjCitvqXgbCib7bMmEMU3Nnfr
xBWrOTWFg2i3vMAXQYknQ2sKemHnJ7sX8u3znxl/t11hgP+RpkD8IGyhfJCB3x+G
CBX3UICOnq0i3Xog83MP3O9ik/aarMediATcvQKWN9sdXFqe1xGwmF/7t+N/0OSu
HVXT6gQCgPbs/kD4W5jGHF7VKFNmZRp0pxZlDbpLawkIV4/i0vy2v80WBRpzOLCx
8Rp/Rgs0BXDM467b0WxOON9bfTcadsN7ol8LXJ3ZOcknlXfXrl55lF+5isRypzUP
AqJZkOhazWnJQG9AR3FEpTUg1NxShzuVGbJgmBCfRzqib4ku/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCEB5byh55LjFS8yNwtKBoqLFu9YMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5
NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvMDFkYWQ4M2UtODE4Mi0z
ODFmLTliOTUtMGUyYWEzNmJkZDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi
NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk
ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2
ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz2fpx8pZXAsKbf6RZjKxmD+O1a1kGXgG3VJmjvIikjUFn24ELXu265
dyeJaSa591RdeAjboO9vNmes4MnPCrS7rHOFTNOzMHuRnfF6o2KgKiLmBpF+KGm1
ZU23SyF3bWYAtO8D5dKzyWmfenaWaDHaxyTZiUwB4NSkIiKA9+5xD6IKIJmhasln
ZAcnqan1Ic1LtgRrAgauLweV/OGfKSJN4we/heycXCO7ygq31a7clphN/JnFiC3E
DJWvVd8gMdkOmQOEprT3fdCRkNRymBeM8MY/2BqXTJIILr4K3yV+RiVrG9Nm04fe
oqZocOxgKNR2WTvo4Sta9TE/Ih+/3wQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:40:23 2025 by rpki-client