Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa
File:                     f279cc96-80dd-35e6-9557-660f0a24c19f.roa (raw, json)
Hash identifier:          eUZimhwnjxS5YpyLrl+t1/ZeQ+GQ3yEgTnxERT9cJEQ=
Subject key identifier:   CE:AD:A0:67:39:E9:3D:7C:F0:C7:31:A6:99:33:45:F2:A9:0E:62:7A
Certificate issuer:       /CN=0be9634a-0674-471a-bb54-7866e12ded7a
Certificate serial:       010D0C9F432858483D287FAA8B6136456DD7B400
Authority key identifier: 99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa
Signing time:             Tue 17 Dec 2024 17:52:48 +0000
ROA not before:           Tue 17 Dec 2024 17:52:48 +0000
ROA not after:            Mon 17 Mar 2025 16:52:48 +0000
asID:                     16509
IP address blocks:        64.42.185.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3d:28:7f:aa:8b:61:36:45:6d:d7:b4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0be9634a-0674-471a-bb54-7866e12ded7a
        Validity
            Not Before: Dec 17 17:52:48 2024 GMT
            Not After : Mar 17 16:52:48 2025 GMT
        Subject: CN=2084be5d-0e5b-4eef-8d21-3f2695815f4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:53:a2:93:12:62:7a:40:cf:2f:34:ea:0a:b5:
                    f8:da:53:a5:ad:6d:66:79:83:37:cc:64:2e:ee:c4:
                    f8:10:1f:71:ec:c5:cc:de:3c:71:ba:ca:33:28:2e:
                    8e:1a:57:53:8b:c2:28:02:e5:85:12:8e:0a:4d:cb:
                    a1:01:d4:7c:19:e4:e8:04:19:1c:2f:94:05:16:12:
                    30:9f:fc:a0:fd:5d:be:6c:ab:d9:36:f1:80:c4:f3:
                    53:01:bd:93:fc:5e:cf:91:33:c3:dd:d5:8d:12:a7:
                    30:41:80:71:fa:2d:62:f8:c8:c4:12:b3:0f:f8:af:
                    c5:45:eb:56:49:2d:d8:c4:40:26:e9:34:6f:1b:a1:
                    66:47:a9:82:82:ea:a7:e3:75:0a:6c:cd:ab:7e:69:
                    9c:88:65:d7:b8:2d:da:fa:e3:b3:4c:37:1b:4b:7c:
                    5b:73:3f:44:93:80:2e:23:a6:82:f0:6d:fb:44:f1:
                    1b:ea:cf:37:95:f9:f1:ea:a7:32:9c:a5:97:5b:c7:
                    2a:7f:c1:31:b3:a7:a4:e5:37:25:de:a8:20:a6:ef:
                    be:cc:21:5d:ee:88:82:d3:dc:80:a9:6d:ca:85:c0:
                    a3:9e:6e:9c:3e:5e:54:ba:fe:bc:21:21:d1:b5:7c:
                    f9:f2:99:7a:4d:a2:f7:b4:7a:31:c6:1c:5a:9e:45:
                    7e:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:AD:A0:67:39:E9:3D:7C:F0:C7:31:A6:99:33:45:F2:A9:0E:62:7A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/f279cc96-80dd-35e6-9557-660f0a24c19f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a/0be9634a-0674-471a-bb54-7866e12ded7a.crl

            X509v3 Authority Key Identifier:
                keyid:99:C2:73:13:67:C3:46:38:B7:EB:0A:6F:DD:5E:E9:B8:81:48:F7:B1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/0be9634a-0674-471a-bb54-7866e12ded7a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.42.185.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:0d:2f:93:0e:e9:92:a8:e0:6c:e5:49:6c:de:79:15:ca:41:
         a9:96:25:e5:72:3f:3a:83:af:e5:61:13:79:04:f2:5a:07:75:
         1c:c2:9b:5e:59:7e:ec:66:30:6e:8d:88:15:be:41:52:9a:ba:
         56:c5:14:e8:e8:a9:1f:86:d2:d6:70:d7:12:48:1b:5a:7a:1c:
         85:a8:84:14:a3:c5:ba:ea:5e:f4:a1:83:bf:52:c4:3a:33:8a:
         6e:56:23:88:db:de:73:d0:7d:09:56:24:60:e1:3d:e0:a9:16:
         95:07:c4:4b:d1:75:ed:82:00:5d:d1:8c:1f:7d:28:1b:f6:df:
         94:45:71:dc:ce:3d:84:e2:48:8a:c4:a3:db:27:21:a2:7c:46:
         58:9f:18:21:e5:b4:42:ad:47:0c:4c:0a:78:77:c3:66:98:33:
         f1:b9:05:27:0a:73:e6:f6:1d:07:8c:06:3f:3f:29:ca:6d:bd:
         f5:7e:25:0d:4c:fe:e8:ca:c9:20:94:06:33:90:ac:85:18:fe:
         38:2f:67:4a:ad:2a:a9:e2:d4:4f:ca:0b:2f:47:72:d3:4b:41:
         41:31:39:27:a0:d6:22:19:3d:f2:6f:eb:9c:9c:c9:a5:42:5e:
         14:b1:a9:fc:72:66:e1:4b:51:ce:d6:57:0d:71:77:96:9f:8b:
         b4:4d:ac:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEg9KH+qi2E2RW3XtAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGJlOTYzNGEtMDY3NC00NzFhLWJiNTQtNzg2NmUxMmRl
ZDdhMB4XDTI0MTIxNzE3NTI0OFoXDTI1MDMxNzE2NTI0OFowLzEtMCsGA1UEAxMk
MjA4NGJlNWQtMGU1Yi00ZWVmLThkMjEtM2YyNjk1ODE1ZjRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFOikxJiekDPLzTqCrX42lOlrW1meYM3zGQu
7sT4EB9x7MXM3jxxusozKC6OGldTi8IoAuWFEo4KTcuhAdR8GeToBBkcL5QFFhIw
n/yg/V2+bKvZNvGAxPNTAb2T/F7PkTPD3dWNEqcwQYBx+i1i+MjEErMP+K/FRetW
SS3YxEAm6TRvG6FmR6mCguqn43UKbM2rfmmciGXXuC3a+uOzTDcbS3xbcz9Ek4Au
I6aC8G37RPEb6s83lfnx6qcynKWXW8cqf8Exs6ek5Tcl3qggpu++zCFd7oiC09yA
qW3KhcCjnm6cPl5Uuv68ISHRtXz58pl6TaL3tHoxxhxankV+lQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM6toGc56T188McxppkzRfKpDmJ6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5
NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2ZTEyZGVkN2EvZjI3OWNjOTYtODBkZC0z
NWU2LTk1NTctNjYwZjBhMjRjMTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMGJlOTYzNGEtMDY3NC00NzFhLWJi
NTQtNzg2NmUxMmRlZDdhLzBiZTk2MzRhLTA2NzQtNDcxYS1iYjU0LTc4NjZlMTJk
ZWQ3YS5jcmwwHwYDVR0jBBgwFoAUmcJzE2fDRji36wpv3V7puIFI97EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8wYmU5NjM0YS0wNjc0LTQ3MWEtYmI1NC03ODY2
ZTEyZGVkN2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCq5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACsNL5MO6ZKo4GzlSWzeeRXKQamWJeVyPzqDr+VhE3kE8loHdRzCm15Z
fuxmMG6NiBW+QVKaulbFFOjoqR+G0tZw1xJIG1p6HIWohBSjxbrqXvShg79SxDoz
im5WI4jb3nPQfQlWJGDhPeCpFpUHxEvRde2CAF3RjB99KBv235RFcdzOPYTiSIrE
o9snIaJ8RlifGCHltEKtRwxMCnh3w2aYM/G5BScKc+b2HQeMBj8/KcptvfV+JQ1M
/ujKySCUBjOQrIUY/jgvZ0qtKqni1E/KCy9HctNLQUExOSeg1iIZPfJv65ycyaVC
XhSxqfxyZuFLUc7WVw1xd5afi7RNrJI=
-----END CERTIFICATE-----
Generated at Wed Feb 19 21:01:35 2025 by rpki-client