Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa
File:                     17341178-41be-3c9f-91bd-f081430c9015.roa (raw, json)
Hash identifier:          6IY4YSVXxtss/+u/uFC67ZeEeO3XF3Q4tLWp/cvPQM8=
Subject key identifier:   C0:A3:C9:DE:F2:A7:AD:A7:6B:09:C0:78:7D:59:63:09:E4:9B:8B:AA
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F432858491D7189AE6317B2DD3CD25300
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     19107
IP address blocks:        216.234.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:89:ae:63:17:b2:dd:3c:d2:53:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=c33eeaf3-d6a8-453c-b8d1-2e4448f31af4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:96:7d:34:1d:bd:c5:0f:31:93:bf:9d:9e:
                    31:86:b5:99:90:ec:a5:9d:d3:d9:af:03:88:99:20:
                    03:23:e2:ab:17:63:e6:9b:97:9f:c4:0d:00:9f:57:
                    3b:39:e3:0c:2c:43:e0:ec:24:d9:42:e0:d2:93:05:
                    77:dc:36:85:40:8d:f3:a4:49:ad:5d:40:69:30:1a:
                    36:7c:22:0b:4f:f9:62:b7:85:b1:15:0a:94:9d:3c:
                    37:f0:79:d3:11:9b:24:2f:4f:69:05:2d:b4:7c:7b:
                    ad:46:6b:03:9d:39:b7:5a:d7:71:87:e0:1c:ba:fb:
                    67:49:de:31:e2:9a:7a:a9:30:53:12:e7:13:25:5c:
                    1c:95:71:5a:14:a4:28:4e:73:a3:28:13:2e:13:7b:
                    b8:fa:8a:b6:d1:52:47:19:c6:55:76:36:49:20:73:
                    69:63:da:02:05:27:f2:a9:a0:11:4c:3a:1d:5f:a8:
                    3d:cf:3f:d6:bd:d6:7b:b4:79:1c:a8:fd:b8:d9:8b:
                    0b:fe:c0:4d:66:ea:60:cf:5f:98:40:da:6c:4b:ff:
                    71:df:20:40:ec:39:6c:59:b8:f6:78:fc:5c:69:0c:
                    83:d5:0e:5e:75:fc:ac:fc:64:c5:e9:4e:66:2a:82:
                    0e:9e:4c:e5:e3:f4:da:f8:0b:e3:2a:56:ad:94:c7:
                    1a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:A3:C9:DE:F2:A7:AD:A7:6B:09:C0:78:7D:59:63:09:E4:9B:8B:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/17341178-41be-3c9f-91bd-f081430c9015.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0c:16:07:ec:4d:c8:03:aa:ff:a4:af:e4:b3:f3:07:30:8d:
         b8:aa:56:7d:7e:b2:cf:92:ec:d5:e0:34:08:97:37:7f:6a:15:
         a4:de:7e:dc:c3:c3:26:c0:cf:f8:7e:a6:59:4f:07:44:81:cb:
         7a:14:b7:14:e3:f3:11:8b:a4:2b:3f:a4:03:9c:8c:54:20:b1:
         de:f5:d8:01:78:2f:68:55:ee:e2:34:56:b9:80:21:eb:e0:f7:
         39:3d:e8:d7:85:72:bf:ea:04:5b:76:8d:fd:a2:9b:1e:da:1e:
         b5:63:d2:2d:08:54:1a:ef:ee:41:60:ca:9e:e8:0c:74:48:8e:
         38:b2:f4:27:66:02:31:91:3e:1f:64:c9:84:60:42:e5:3c:34:
         dc:6c:6b:a9:e0:28:29:0c:ee:89:ec:a7:c8:0a:39:c1:5d:87:
         f8:0a:97:77:b2:4a:b0:dc:59:96:76:25:3a:d1:61:cd:59:0d:
         bf:30:18:f6:bb:20:87:7a:46:bb:5b:b3:99:5c:e0:6a:d6:78:
         00:e6:9b:2c:9b:43:5a:ce:6c:f9:3a:da:a3:28:29:d3:c1:2f:
         08:8a:7d:b7:88:44:4a:d0:a9:7e:fd:e8:0a:68:52:76:ea:d7:
         ad:a9:23:26:5e:d2:89:a6:3b:e9:d6:75:be:bc:50:5b:b5:ca:
         68:ac:a2:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcYmuYxey3TzSUwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YzMzZWVhZjMtZDZhOC00NTNjLWI4ZDEtMmU0NDQ4ZjMxYWY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0jaWfTQdvcUPMZO/nZ4xhrWZkOylndPZrwOI
mSADI+KrF2Pmm5efxA0An1c7OeMMLEPg7CTZQuDSkwV33DaFQI3zpEmtXUBpMBo2
fCILT/lit4WxFQqUnTw38HnTEZskL09pBS20fHutRmsDnTm3Wtdxh+AcuvtnSd4x
4pp6qTBTEucTJVwclXFaFKQoTnOjKBMuE3u4+oq20VJHGcZVdjZJIHNpY9oCBSfy
qaARTDodX6g9zz/WvdZ7tHkcqP242YsL/sBNZupgz1+YQNpsS/9x3yBA7DlsWbj2
ePxcaQyD1Q5edfys/GTF6U5mKoIOnkzl4/Ta+AvjKlatlMca6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMCjyd7yp62nawnAeH1ZYwnkm4uqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvMTczNDExNzgtNDFiZS0z
YzlmLTkxYmQtZjA4MTQzMGM5MDE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADAMFgfsTcgDqv+kr+Sz8wcwjbiqVn1+ss+S7NXgNAiXN39qFaTeftzD
wybAz/h+pllPB0SBy3oUtxTj8xGLpCs/pAOcjFQgsd712AF4L2hV7uI0VrmAIevg
9zk96NeFcr/qBFt2jf2imx7aHrVj0i0IVBrv7kFgyp7oDHRIjjiy9CdmAjGRPh9k
yYRgQuU8NNxsa6ngKCkM7onsp8gKOcFdh/gKl3eySrDcWZZ2JTrRYc1ZDb8wGPa7
IId6Rrtbs5lc4GrWeADmmyybQ1rObPk62qMoKdPBLwiKfbeIRErQqX796ApoUnbq
162pIyZe0ommO+nWdb68UFu1ymisoo8=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:24:17 2025 by rpki-client