Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa
File:                     bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa (raw, json)
Hash identifier:          fPfyFS4pfrUkcPM+fr9kEYj9kMfWgWB1y4COsCJl8OY=
Subject key identifier:   F9:E9:A6:DF:DB:55:8C:97:C2:46:38:BC:40:7A:03:D9:DF:A6:42:52
Certificate issuer:       /CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
Certificate serial:       010D0C9F432858487325AA8FBB1CB1028B2C2A80
Authority key identifier: E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa
Signing time:             Mon 06 Jan 2025 02:00:40 +0000
ROA not before:           Mon 06 Jan 2025 02:00:40 +0000
ROA not after:            Sun 06 Apr 2025 01:00:40 +0000
asID:                     393653
IP address blocks:        104.128.145.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:73:25:aa:8f:bb:1c:b1:02:8b:2c:2a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75b2e9b5-f1aa-41de-8bdc-7058e58ef81c
        Validity
            Not Before: Jan  6 02:00:40 2025 GMT
            Not After : Apr  6 01:00:40 2025 GMT
        Subject: CN=cd3f20d6-ae41-4fad-b8be-4a9641972fa9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c4:43:3e:6e:4f:cd:20:67:8c:5b:99:91:fe:
                    f9:cd:51:71:8e:a6:64:e4:94:ea:78:2a:a5:b5:28:
                    f1:42:35:16:6f:d9:3b:3f:b9:63:07:c9:84:02:5c:
                    a1:80:2e:7e:30:c9:58:17:85:05:e7:7b:6a:83:e5:
                    65:5a:71:67:6e:eb:e5:69:85:a5:ac:36:66:bc:37:
                    3f:cd:8b:d7:6d:5a:27:ed:bc:3c:99:48:cd:45:03:
                    84:e0:27:1b:89:a3:21:cd:28:15:ac:d6:39:c7:86:
                    ce:d1:c1:48:ae:24:92:e2:66:81:ae:01:1e:d6:22:
                    46:37:a0:2c:2d:3c:b3:f1:35:03:12:30:88:86:65:
                    a7:79:97:23:1d:6c:dd:0d:73:b2:22:da:1c:94:3f:
                    4e:b5:d4:c1:1f:13:5b:f0:d8:6a:22:1f:67:94:56:
                    2d:4d:81:a0:6d:a2:fb:75:ce:19:d5:a3:e5:a5:2f:
                    53:54:65:5c:76:f3:b2:74:c6:52:07:c1:de:0b:50:
                    a2:bf:1e:35:7e:45:ef:d0:82:fe:23:99:3a:35:d7:
                    77:d2:06:d1:e7:03:dd:53:67:db:10:14:08:ca:54:
                    2b:c7:dd:c2:2b:f5:88:d0:f7:f1:bb:fd:eb:bd:c0:
                    6a:80:36:0c:93:4a:3d:4d:d2:81:bd:bb:99:eb:bd:
                    a8:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E9:A6:DF:DB:55:8C:97:C2:46:38:BC:40:7A:03:D9:DF:A6:42:52
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/bf32a41d-c41b-39f6-baf6-ab0c6fa8f238.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.crl

            X509v3 Authority Key Identifier:
                keyid:E7:A7:8B:86:6E:9E:3E:C7:A5:DB:E5:8C:63:40:A5:CB:49:A9:4B:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/75b2e9b5-f1aa-41de-8bdc-7058e58ef81c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  104.128.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         51:77:2d:b6:33:2b:33:b8:41:06:dc:4e:a9:8d:62:ec:5b:d1:
         70:15:07:55:6c:56:9c:df:66:33:49:e9:ae:3b:c0:cc:a8:2d:
         99:7d:7c:e4:34:6c:b7:fc:73:6d:5e:8d:04:01:a3:74:fd:30:
         96:8c:85:45:e5:dc:fc:8b:72:9e:4a:bf:d3:61:4f:5f:af:c6:
         04:d3:f4:7b:3b:51:ab:62:27:15:dc:a3:70:d9:b7:8f:70:e2:
         64:18:e2:4c:ee:a3:a2:32:39:d9:aa:e9:bc:11:21:43:d1:9a:
         b7:53:dc:1d:3d:5f:01:60:cc:ee:97:b6:bb:cf:93:04:cd:4a:
         53:3f:b5:6e:ed:cd:05:5a:88:20:33:75:06:65:fe:3f:8a:8e:
         42:0c:e2:63:3f:ec:f8:9d:bb:32:18:2c:9b:0c:c5:47:c6:e0:
         34:3f:30:45:ee:81:46:c4:3c:ac:7f:68:b6:a0:b9:6d:fe:ed:
         9f:dc:0f:ae:e6:42:7d:45:02:d0:44:f5:87:37:f2:53:27:c8:
         4b:6e:50:4e:4b:25:05:51:78:5a:37:56:00:bb:6e:7d:9e:5b:
         61:c2:9a:c1:b5:63:97:cd:95:a4:d0:41:32:86:4b:5f:3c:78:
         88:c4:6f:6d:0e:3b:88:0f:c7:3d:d0:89:a4:38:36:bd:d9:a8:
         38:c4:3e:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhzJaqPuxyxAossKoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzViMmU5YjUtZjFhYS00MWRlLThiZGMtNzA1OGU1OGVm
ODFjMB4XDTI1MDEwNjAyMDA0MFoXDTI1MDQwNjAxMDA0MFowLzEtMCsGA1UEAxMk
Y2QzZjIwZDYtYWU0MS00ZmFkLWI4YmUtNGE5NjQxOTcyZmE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcRDPm5PzSBnjFuZkf75zVFxjqZk5JTqeCql
tSjxQjUWb9k7P7ljB8mEAlyhgC5+MMlYF4UF53tqg+VlWnFnbuvlaYWlrDZmvDc/
zYvXbVon7bw8mUjNRQOE4CcbiaMhzSgVrNY5x4bO0cFIriSS4maBrgEe1iJGN6As
LTyz8TUDEjCIhmWneZcjHWzdDXOyItoclD9OtdTBHxNb8NhqIh9nlFYtTYGgbaL7
dc4Z1aPlpS9TVGVcdvOydMZSB8HeC1Civx41fkXv0IL+I5k6Ndd30gbR5wPdU2fb
EBQIylQrx93CK/WI0Pfxu/3rvcBqgDYMk0o9TdKBvbuZ672oGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnppt/bVYyXwkY4vEB6A9nfpkJSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83NWIy
ZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4ZTU4ZWY4MWMvYmYzMmE0MWQtYzQxYi0z
OWY2LWJhZjYtYWIwYzZmYThmMjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNzViMmU5YjUtZjFhYS00MWRlLThi
ZGMtNzA1OGU1OGVmODFjLzc1YjJlOWI1LWYxYWEtNDFkZS04YmRjLTcwNThlNThl
ZjgxYy5jcmwwHwYDVR0jBBgwFoAU56eLhm6ePsel2+WMY0Cly0mpS40wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83NWIyZTliNS1mMWFhLTQxZGUtOGJkYy03MDU4
ZTU4ZWY4MWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAaICRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFF3LbYzKzO4QQbcTqmNYuxb0XAVB1VsVpzfZjNJ6a47wMyoLZl9fOQ0
bLf8c21ejQQBo3T9MJaMhUXl3PyLcp5Kv9NhT1+vxgTT9Hs7UatiJxXco3DZt49w
4mQY4kzuo6IyOdmq6bwRIUPRmrdT3B09XwFgzO6XtrvPkwTNSlM/tW7tzQVaiCAz
dQZl/j+KjkIM4mM/7PiduzIYLJsMxUfG4DQ/MEXugUbEPKx/aLaguW3+7Z/cD67m
Qn1FAtBE9Yc38lMnyEtuUE5LJQVReFo3VgC7bn2eW2HCmsG1Y5fNlaTQQTKGS188
eIjEb20OO4gPxz3QiaQ4Nr3ZqDjEPlw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:53:44 2025 by rpki-client