Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fa718251-c183-32b9-8af7-00edc7c70533.roa
File:                     fa718251-c183-32b9-8af7-00edc7c70533.roa (raw, json)
Hash identifier:          l3a7JhqbLogp0g07hTbvHG08aSPKFBbNzD8Y/y5K11o=
Subject key identifier:   D6:91:CA:89:C5:02:CA:7D:EB:A0:0A:74:64:FC:5E:EF:C0:A7:88:A4
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285848A04912AAB292F7B9662330D0
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fa718251-c183-32b9-8af7-00edc7c70533.roa
Signing time:             Wed 22 Jan 2025 06:03:27 +0000
ROA not before:           Wed 22 Jan 2025 06:03:27 +0000
ROA not after:            Tue 22 Apr 2025 05:03:27 +0000
asID:                     19165
IP address blocks:        136.24.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a0:49:12:aa:b2:92:f7:b9:66:23:30:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Jan 22 06:03:27 2025 GMT
            Not After : Apr 22 05:03:27 2025 GMT
        Subject: CN=ea8a4f22-5181-4364-9b08-62e988be7474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:f0:a8:82:fb:00:8b:19:b0:d1:ad:99:48:3b:
                    5c:7b:e9:a0:61:99:5d:2b:bf:70:19:7e:43:f2:17:
                    b4:09:03:52:3c:d1:18:f7:c3:d2:f9:01:c0:f1:3a:
                    ea:fd:40:61:98:c6:12:b0:d1:07:de:14:dd:7e:61:
                    4e:87:8c:2a:d1:64:66:9a:21:62:03:ab:5f:8a:c1:
                    dc:cc:ad:8f:53:12:7e:8d:8a:a8:9f:9e:e0:bb:5a:
                    96:03:70:1d:e9:4f:4f:d9:bb:3d:d0:3b:8a:c0:9c:
                    f6:86:b7:17:1f:c9:ea:25:42:00:bf:1d:64:ea:2f:
                    e6:0c:8d:6a:fd:34:08:50:3e:e6:f2:85:ba:58:9c:
                    bc:94:fd:0c:46:06:d9:94:de:e9:7c:e0:b4:72:72:
                    71:6c:1e:a0:85:72:90:9d:07:8c:c4:0b:ec:c7:7a:
                    87:81:25:e4:bf:50:6c:c8:7b:3e:72:8c:2d:73:15:
                    8a:79:00:9b:2b:da:a5:4d:09:1d:9b:5b:45:d9:d9:
                    b8:39:99:25:7f:c7:56:7a:86:fc:c2:04:5b:88:b1:
                    2e:2f:1c:cf:d1:49:b7:f6:56:8d:cf:3c:8b:50:a2:
                    41:ad:d8:5e:92:27:77:d1:ad:ec:8a:f4:d9:59:71:
                    5a:1c:cc:ef:cf:3a:fb:4c:e5:60:dc:b8:54:f8:a7:
                    3d:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:91:CA:89:C5:02:CA:7D:EB:A0:0A:74:64:FC:5E:EF:C0:A7:88:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/fa718251-c183-32b9-8af7-00edc7c70533.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.24.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:7c:eb:d6:f2:a6:ed:43:d8:71:94:bf:77:82:f9:19:c3:
         a5:3a:c1:18:ba:42:6c:9a:8c:33:82:e6:94:0c:f6:da:91:ff:
         76:a5:ce:eb:4e:5d:29:70:49:2e:af:94:1f:33:45:57:7c:9a:
         06:03:e6:b6:b8:d4:fd:c7:d6:9f:ad:4b:48:1a:b9:6e:74:a1:
         c7:fc:a7:b2:6c:19:ef:bb:10:9a:e7:71:3c:3e:13:24:7c:bd:
         b7:fa:7b:8e:c7:7c:a6:60:41:54:59:38:6d:c4:1b:bd:df:09:
         a1:b9:e9:8e:71:3a:41:b6:cf:e2:cd:08:2a:71:db:09:bd:6c:
         5b:c5:23:47:ab:57:c7:69:2f:a5:cb:fd:7f:88:05:33:ee:71:
         00:97:96:37:b0:ca:0f:ed:00:fa:6b:a5:b5:dc:38:20:f4:0c:
         37:84:75:d6:5c:bd:c8:a7:a7:d5:fd:21:9c:f6:da:0b:d4:44:
         fa:73:aa:8d:37:e9:4f:c3:b2:8c:46:97:33:b8:c4:12:99:6b:
         a3:5a:ea:09:5f:3b:c2:1e:cf:3c:ca:62:04:49:2a:b2:9f:fe:
         91:67:80:2c:6a:21:10:52:89:f2:d8:af:6d:0d:96:d7:9a:f4:
         0a:fb:bb:ed:b4:dd:10:4e:f7:9f:f1:54:00:26:df:ea:6f:c1:
         96:ad:f6:52
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEigSRKqspL3uWYjMNAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDEyMjA2MDMyN1oXDTI1MDQyMjA1MDMyN1owLzEtMCsGA1UEAxMk
ZWE4YTRmMjItNTE4MS00MzY0LTliMDgtNjJlOTg4YmU3NDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhvCogvsAixmw0a2ZSDtce+mgYZldK79wGX5D
8he0CQNSPNEY98PS+QHA8Trq/UBhmMYSsNEH3hTdfmFOh4wq0WRmmiFiA6tfisHc
zK2PUxJ+jYqon57gu1qWA3Ad6U9P2bs90DuKwJz2hrcXH8nqJUIAvx1k6i/mDI1q
/TQIUD7m8oW6WJy8lP0MRgbZlN7pfOC0cnJxbB6ghXKQnQeMxAvsx3qHgSXkv1Bs
yHs+cowtcxWKeQCbK9qlTQkdm1tF2dm4OZklf8dWeob8wgRbiLEuLxzP0Um39laN
zzyLUKJBrdhekid30a3sivTZWXFaHMzvzzr7TOVg3LhU+Kc9IwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNaRyonFAsp966AKdGT8Xu/Ap4ikMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZmE3MTgyNTEtYzE4My0z
MmI5LThhZjctMDBlZGM3YzcwNTMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAiBgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAV8B869bypu1D2HGUv3eC+RnDpTrBGLpCbJqMM4LmlAz22pH/dqXO605d
KXBJLq+UHzNFV3yaBgPmtrjU/cfWn61LSBq5bnShx/ynsmwZ77sQmudxPD4TJHy9
t/p7jsd8pmBBVFk4bcQbvd8JobnpjnE6QbbP4s0IKnHbCb1sW8UjR6tXx2kvpcv9
f4gFM+5xAJeWN7DKD+0A+multdw4IPQMN4R11ly9yKen1f0hnPbaC9RE+nOqjTfp
T8OyjEaXM7jEEplro1rqCV87wh7PPMpiBEkqsp/+kWeALGohEFKJ8tivbQ2W15r0
Cvu77bTdEE73n/FUACbf6m/Blq32Ug==
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:43:13 2025 by rpki-client