Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
File:                     974ff7ae-7cf3-3c09-bdbf-28451326b447.roa (raw, json)
Hash identifier:          FHvIUiEciJdPqIj0x7RSkxTVjbUFBlB0f/yGTXChNP4=
Subject key identifier:   96:CA:A7:58:A3:CA:1F:3A:7F:BC:81:6D:87:F9:06:8B:DD:11:90:3B
Certificate issuer:       /CN=f195db10-ef56-4145-99a8-ea6962c2a136
Certificate serial:       010D0C9F43285848CC7B891934678F4851AA8A00
Authority key identifier: 49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa
Signing time:             Fri 07 Feb 2025 02:00:39 +0000
ROA not before:           Fri 07 Feb 2025 02:00:39 +0000
ROA not after:            Thu 08 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        172.81.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:cc:7b:89:19:34:67:8f:48:51:aa:8a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f195db10-ef56-4145-99a8-ea6962c2a136
        Validity
            Not Before: Feb  7 02:00:39 2025 GMT
            Not After : May  8 01:00:39 2025 GMT
        Subject: CN=facd6199-145d-4faa-8afd-5f349f57bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:b3:f0:dd:f9:49:99:35:49:d3:bf:37:f8:
                    9c:85:e7:65:63:95:72:eb:49:fa:40:0c:8e:3f:12:
                    0c:73:f9:f6:dc:e5:44:1b:fe:2c:cb:6f:95:f0:a1:
                    a1:19:2d:3c:19:4c:b6:79:c3:dc:5f:46:f7:a3:aa:
                    0e:35:d5:e3:89:d5:80:cf:3f:14:6d:b9:a7:af:00:
                    15:7a:11:64:89:c1:5e:ef:4e:8d:74:21:8a:55:a6:
                    8c:78:54:6a:99:0a:5b:a0:5d:ca:5b:5e:61:fb:15:
                    b5:a4:a4:49:c2:f2:a9:32:9f:fe:c6:a7:a1:94:ad:
                    ba:5e:85:9d:a9:7e:8c:2e:a9:43:f8:de:0e:78:5c:
                    3f:7c:2e:56:52:90:21:7b:39:9a:d8:12:05:a4:1b:
                    68:bf:6f:f0:c1:28:c1:cc:36:60:c1:55:1d:84:7d:
                    a3:5d:ec:b3:73:d8:f6:92:a1:ab:5b:ad:ee:a1:b7:
                    3e:05:b7:c4:39:d9:57:e9:ff:ab:b5:66:66:75:8c:
                    17:3d:d3:8a:b8:3c:e9:d3:fb:29:77:65:b3:8f:6b:
                    76:7b:5a:b8:55:0b:3d:a6:90:e1:6d:9b:11:d7:a6:
                    f4:79:8e:7f:38:63:84:e3:0d:b9:7b:5b:03:30:14:
                    84:ec:3e:3a:a9:33:09:aa:22:fc:7d:0a:f7:a8:df:
                    75:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:CA:A7:58:A3:CA:1F:3A:7F:BC:81:6D:87:F9:06:8B:DD:11:90:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/974ff7ae-7cf3-3c09-bdbf-28451326b447.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136/f195db10-ef56-4145-99a8-ea6962c2a136.crl

            X509v3 Authority Key Identifier:
                keyid:49:2D:7A:2F:F0:78:AB:A6:09:B8:9C:52:E1:CF:A8:AF:A7:4C:7A:8D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f195db10-ef56-4145-99a8-ea6962c2a136.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:af:c0:4f:d0:f5:7b:fc:3b:c7:6d:0f:87:08:4f:a7:0d:3b:
         6f:e9:9d:bb:ef:c8:85:55:2e:a3:ab:2a:c2:55:13:4e:33:c8:
         d9:d6:e5:90:76:26:25:a9:4b:b1:a9:2e:90:79:c6:9b:2b:5a:
         61:8c:fb:e6:c6:ac:99:57:b8:48:e4:2e:1d:a8:2c:58:f2:37:
         e6:c1:f3:29:0f:25:e4:96:21:15:d6:5a:3b:5f:60:13:6d:fd:
         f8:c5:6e:77:15:40:cc:85:53:53:db:29:70:53:67:c4:22:ba:
         9f:cf:40:b0:0b:69:77:ea:f9:9f:65:c3:92:a7:f5:d3:e6:41:
         12:b6:23:cb:43:2a:0f:d9:a5:19:db:a9:c8:48:8e:72:ee:16:
         c8:f9:50:f9:90:1b:df:a2:11:30:16:4d:99:00:dd:d7:4a:9d:
         7d:73:92:38:75:8f:2e:0c:7a:9e:a0:98:76:80:77:c8:45:c1:
         92:ba:7b:9d:e1:a8:b9:d6:1c:e4:96:a4:45:76:23:23:9f:86:
         e4:1a:6f:01:99:06:0e:16:0e:d5:61:39:b4:0c:bd:0a:66:09:
         72:28:b8:95:23:c4:ab:e1:c8:92:ba:fd:6c:6e:57:4b:cb:e5:
         df:78:f1:38:11:37:32:46:8d:ab:b8:7e:29:df:a3:d9:85:c9:
         7c:f8:fd:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjMe4kZNGePSFGqigAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE5NWRiMTAtZWY1Ni00MTQ1LTk5YTgtZWE2OTYyYzJh
MTM2MB4XDTI1MDIwNzAyMDAzOVoXDTI1MDUwODAxMDAzOVowLzEtMCsGA1UEAxMk
ZmFjZDYxOTktMTQ1ZC00ZmFhLThhZmQtNWYzNDlmNTdiYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/2z8N35SZk1SdO/N/ichedlY5Vy60n6QAyO
PxIMc/n23OVEG/4sy2+V8KGhGS08GUy2ecPcX0b3o6oONdXjidWAzz8UbbmnrwAV
ehFkicFe706NdCGKVaaMeFRqmQpboF3KW15h+xW1pKRJwvKpMp/+xqehlK26XoWd
qX6MLqlD+N4OeFw/fC5WUpAhezma2BIFpBtov2/wwSjBzDZgwVUdhH2jXeyzc9j2
kqGrW63uobc+BbfEOdlX6f+rtWZmdYwXPdOKuDzp0/spd2Wzj2t2e1q4VQs9ppDh
bZsR16b0eY5/OGOE4w25e1sDMBSE7D46qTMJqiL8fQr3qN91fQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJbKp1ijyh86f7yBbYf5BovdEZA7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mMTk1
ZGIxMC1lZjU2LTQxNDUtOTlhOC1lYTY5NjJjMmExMzYvOTc0ZmY3YWUtN2NmMy0z
YzA5LWJkYmYtMjg0NTEzMjZiNDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjE5NWRiMTAtZWY1Ni00MTQ1LTk5
YTgtZWE2OTYyYzJhMTM2L2YxOTVkYjEwLWVmNTYtNDE0NS05OWE4LWVhNjk2MmMy
YTEzNi5jcmwwHwYDVR0jBBgwFoAUSS16L/B4q6YJuJxS4c+or6dMeo0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mMTk1ZGIxMC1lZjU2LTQxNDUtOTlhOC1lYTY5
NjJjMmExMzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFGLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ+vwE/Q9Xv8O8dtD4cIT6cNO2/pnbvvyIVVLqOrKsJVE04zyNnW5ZB2
JiWpS7GpLpB5xpsrWmGM++bGrJlXuEjkLh2oLFjyN+bB8ykPJeSWIRXWWjtfYBNt
/fjFbncVQMyFU1PbKXBTZ8Qiup/PQLALaXfq+Z9lw5Kn9dPmQRK2I8tDKg/ZpRnb
qchIjnLuFsj5UPmQG9+iETAWTZkA3ddKnX1zkjh1jy4Mep6gmHaAd8hFwZK6e53h
qLnWHOSWpEV2IyOfhuQabwGZBg4WDtVhObQMvQpmCXIouJUjxKvhyJK6/WxuV0vL
5d948TgRNzJGjau4finfo9mFyXz4/ak=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:41:28 2025 by rpki-client