Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa
File:                     06a16a61-6f9c-35c3-84de-2806dd454047.roa (raw, json)
Hash identifier:          AmK+fQ/86EK0bKKhw+6IQH8/SZpPiX3J0uw1GI/pEFk=
Subject key identifier:   CF:31:E9:6A:BC:D9:65:42:D6:9F:A9:D7:64:34:42:4C:5E:48:1F:C6
Certificate issuer:       /CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
Certificate serial:       010D0C9F43285848573AD8B10263ED477E340A80
Authority key identifier: 3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa
Signing time:             Fri 27 Dec 2024 02:00:40 +0000
ROA not before:           Fri 27 Dec 2024 02:00:40 +0000
ROA not after:            Thu 27 Mar 2025 01:00:40 +0000
asID:                     14618
IP address blocks:        162.212.44.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:57:3a:d8:b1:02:63:ed:47:7e:34:0a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37d6a0ba-c124-4540-b5ef-6ab20943af24
        Validity
            Not Before: Dec 27 02:00:40 2024 GMT
            Not After : Mar 27 01:00:40 2025 GMT
        Subject: CN=c2712057-9966-4581-9965-90b805c48a56
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:30:34:97:e9:86:ed:6e:ac:6b:27:fc:89:54:
                    f0:c0:ba:e4:32:75:35:70:11:64:b4:c3:ce:6b:cc:
                    de:85:1c:5e:f6:80:91:18:3f:25:39:c2:4a:b4:38:
                    f3:a2:c6:cb:70:ac:ab:2c:5a:73:e3:05:46:61:81:
                    f2:1f:8c:b8:e8:d5:f8:9e:23:50:b0:45:d7:2c:09:
                    dc:96:29:1e:64:b1:b9:62:67:a3:de:6c:a2:63:a7:
                    c3:a6:74:73:f2:79:cf:9d:90:02:43:58:51:13:27:
                    c0:10:2a:e2:1f:3c:0f:f0:41:58:78:e6:46:11:19:
                    cb:d1:fa:3a:b6:e6:bc:52:c0:a2:ec:1e:1d:9f:78:
                    c4:7b:59:1b:73:52:90:ff:75:f4:e7:79:b5:c9:a1:
                    ed:59:83:53:5e:8c:03:cd:f6:af:94:8c:c5:f1:bb:
                    17:c8:0f:57:57:bb:81:93:67:db:86:27:1d:88:9c:
                    8a:6f:4a:f9:85:b2:b1:e9:41:4d:d1:e7:89:f1:e6:
                    28:b7:02:d6:6a:71:d9:1d:2e:c3:85:1d:a9:34:2d:
                    55:e7:68:b9:18:a1:2f:32:39:70:aa:a2:34:10:ee:
                    a8:42:6a:81:6c:28:f3:37:ac:8f:c3:e1:d0:c8:16:
                    e3:3f:d3:e0:18:9f:4c:30:7a:b0:b0:48:4c:9e:7c:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:31:E9:6A:BC:D9:65:42:D6:9F:A9:D7:64:34:42:4C:5E:48:1F:C6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/06a16a61-6f9c-35c3-84de-2806dd454047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24/37d6a0ba-c124-4540-b5ef-6ab20943af24.crl

            X509v3 Authority Key Identifier:
                keyid:3F:C6:68:B4:FB:02:1A:DC:55:78:B5:D4:5F:11:F2:04:AC:FD:D4:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/37d6a0ba-c124-4540-b5ef-6ab20943af24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.44.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:f0:5a:b9:ac:68:95:b5:6a:c0:3f:bd:49:db:4e:a4:2a:9b:
         90:30:56:8f:49:76:9c:75:24:a3:7e:83:3a:50:30:13:54:8c:
         bb:f0:47:12:9f:55:44:f8:9a:36:81:0f:08:95:62:a7:0e:d8:
         76:2c:7d:2b:d0:12:b4:f9:72:ff:a8:ec:ce:5a:97:ec:81:85:
         68:4a:4d:d6:93:a5:aa:26:db:37:e0:8c:39:28:a8:0d:82:01:
         e0:a3:7f:21:75:12:41:b9:d5:56:48:d5:c3:68:1a:70:93:7a:
         6b:63:88:1c:85:3e:5c:c6:c1:d3:d7:c0:33:ad:7b:63:cc:a1:
         52:aa:dc:08:a2:0e:78:a5:a1:18:56:75:3f:3f:13:ec:d5:78:
         23:b9:28:5c:66:64:5c:b9:ee:96:7f:79:5f:ca:be:6c:98:75:
         8f:18:6c:c9:bd:8e:6e:0b:49:20:ab:bd:be:40:e6:a3:89:02:
         c9:70:5b:f8:88:2e:77:d7:a0:03:1d:cd:be:c9:9f:66:77:6c:
         d0:a2:c4:97:9f:91:b6:bb:c1:07:fd:d8:c8:1c:12:f6:0f:a1:
         b9:1d:3c:f9:08:8e:86:98:06:58:53:5c:33:00:97:73:3e:2e:
         1e:60:b7:82:d3:58:2f:5f:23:b6:f4:1c:99:60:c0:61:5f:ea:
         a6:fc:98:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhXOtixAmPtR340CoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzdkNmEwYmEtYzEyNC00NTQwLWI1ZWYtNmFiMjA5NDNh
ZjI0MB4XDTI0MTIyNzAyMDA0MFoXDTI1MDMyNzAxMDA0MFowLzEtMCsGA1UEAxMk
YzI3MTIwNTctOTk2Ni00NTgxLTk5NjUtOTBiODA1YzQ4YTU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5DA0l+mG7W6sayf8iVTwwLrkMnU1cBFktMPO
a8zehRxe9oCRGD8lOcJKtDjzosbLcKyrLFpz4wVGYYHyH4y46NX4niNQsEXXLAnc
likeZLG5Ymej3myiY6fDpnRz8nnPnZACQ1hREyfAECriHzwP8EFYeOZGERnL0fo6
tua8UsCi7B4dn3jEe1kbc1KQ/3X053m1yaHtWYNTXowDzfavlIzF8bsXyA9XV7uB
k2fbhicdiJyKb0r5hbKx6UFN0eeJ8eYotwLWanHZHS7DhR2pNC1V52i5GKEvMjlw
qqI0EO6oQmqBbCjzN6yPw+HQyBbjP9PgGJ9MMHqwsEhMnny3MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM8x6Wq82WVC1p+p12Q0QkxeSB/GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2
YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIyMDk0M2FmMjQvMDZhMTZhNjEtNmY5Yy0z
NWMzLTg0ZGUtMjgwNmRkNDU0MDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMzdkNmEwYmEtYzEyNC00NTQwLWI1
ZWYtNmFiMjA5NDNhZjI0LzM3ZDZhMGJhLWMxMjQtNDU0MC1iNWVmLTZhYjIwOTQz
YWYyNC5jcmwwHwYDVR0jBBgwFoAUP8ZotPsCGtxVeLXUXxHyBKz91CEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8zN2Q2YTBiYS1jMTI0LTQ1NDAtYjVlZi02YWIy
MDk0M2FmMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotQsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrwWrmsaJW1asA/vUnbTqQqm5AwVo9Jdpx1JKN+gzpQMBNUjLvwRxKf
VUT4mjaBDwiVYqcO2HYsfSvQErT5cv+o7M5al+yBhWhKTdaTpaom2zfgjDkoqA2C
AeCjfyF1EkG51VZI1cNoGnCTemtjiByFPlzGwdPXwDOte2PMoVKq3AiiDniloRhW
dT8/E+zVeCO5KFxmZFy57pZ/eV/KvmyYdY8YbMm9jm4LSSCrvb5A5qOJAslwW/iI
LnfXoAMdzb7Jn2Z3bNCixJefkba7wQf92MgcEvYPobkdPPkIjoaYBlhTXDMAl3M+
Lh5gt4LTWC9fI7b0HJlgwGFf6qb8mCQ=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:13:57 2025 by rpki-client