Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/a1363101-dc95-39a2-81e3-ed6b6d26cdc4.roa
File:                     a1363101-dc95-39a2-81e3-ed6b6d26cdc4.roa (raw, json)
Hash identifier:          iqHL9dpZ67FeG4QFJfsgIwSEsUJoNJcFknlvHwrmwiE=
Subject key identifier:   5F:53:F5:EB:2E:9D:A9:52:A1:52:27:6F:DE:D9:FD:AB:6B:AA:7F:49
Certificate issuer:       /CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
Certificate serial:       010D0C9F43285848C150D4497AF5977A968F7580
Authority key identifier: 05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/a1363101-dc95-39a2-81e3-ed6b6d26cdc4.roa
Signing time:             Mon 03 Feb 2025 02:00:39 +0000
ROA not before:           Mon 03 Feb 2025 02:00:39 +0000
ROA not after:            Sun 04 May 2025 01:00:39 +0000
asID:                     53690
IP address blocks:        208.79.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c1:50:d4:49:7a:f5:97:7a:96:8f:75:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87baa4d2-11b1-4829-9bf6-86e0efc65ff4
        Validity
            Not Before: Feb  3 02:00:39 2025 GMT
            Not After : May  4 01:00:39 2025 GMT
        Subject: CN=9f8a02ea-875b-45b8-a20d-37d5e3183318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:63:69:05:c3:92:5f:67:69:73:20:b1:7c:36:
                    e3:ec:3d:68:3d:23:18:b8:1f:e7:f2:48:7b:3e:26:
                    c9:21:57:3f:ee:03:85:bf:7c:d4:b0:ac:07:9e:a1:
                    32:cd:34:a9:f1:ae:19:67:2a:a0:b2:0a:49:93:b2:
                    45:b9:e2:9c:af:fa:04:d1:12:fe:b8:6e:9b:99:d2:
                    b5:08:38:ac:8a:f2:17:a5:32:57:44:b9:4a:50:0e:
                    a2:c5:77:3c:9b:74:ae:8f:3b:2a:6d:0d:bc:3b:48:
                    f4:75:3a:92:de:34:70:a6:5f:64:e7:6c:06:df:64:
                    f4:dd:d8:c2:34:6d:4f:7a:b5:7a:30:92:b5:ed:b3:
                    00:a1:5d:f0:e3:00:f5:ea:43:c9:7a:fe:bc:cd:1a:
                    d6:a0:0e:8d:21:3d:ba:b3:5c:4a:03:f3:04:62:ab:
                    6b:49:f4:d9:85:85:8e:95:bb:13:46:bc:ec:2c:1b:
                    8e:ae:93:2d:58:c3:63:a0:6a:0c:17:8d:93:03:a4:
                    b1:d5:9e:76:4d:4f:ee:8c:8f:38:0b:df:9d:86:35:
                    5a:8a:17:ba:69:4c:65:ea:db:67:91:48:4f:b9:b9:
                    b7:7b:a1:88:4d:b9:bc:c2:d7:a5:8f:0f:3e:60:45:
                    e2:ad:4a:19:6a:5a:17:c6:41:63:c8:d7:7a:71:ba:
                    6b:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:53:F5:EB:2E:9D:A9:52:A1:52:27:6F:DE:D9:FD:AB:6B:AA:7F:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/a1363101-dc95-39a2-81e3-ed6b6d26cdc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.crl

            X509v3 Authority Key Identifier:
                keyid:05:BF:BA:DD:14:E0:8D:B2:E2:C7:E6:7B:D7:8E:F9:39:E1:C8:46:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/87baa4d2-11b1-4829-9bf6-86e0efc65ff4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.79.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:23:35:d2:de:17:33:b7:48:ac:dc:3b:bf:a5:89:77:53:04:
         ee:1d:fc:ad:48:a0:9d:99:5e:16:e3:8c:68:11:37:f4:3f:32:
         04:79:e9:95:45:93:4d:ae:e4:db:49:3e:fd:7e:a0:4d:d8:0d:
         8b:94:5f:57:a6:9e:b0:4d:53:ab:4c:f9:56:6c:b8:9a:6d:66:
         ff:5d:be:a3:6f:d1:fe:67:79:c9:26:43:04:6b:08:79:0c:c3:
         92:c0:26:ba:68:47:98:fc:03:0f:8a:1a:60:e0:e0:00:fe:4b:
         f0:ab:ee:f1:e1:e1:17:0e:db:ca:52:f8:d7:c4:7a:f6:5c:6a:
         f8:c0:18:cb:ac:27:1e:17:4e:d2:63:c8:5a:0e:0d:37:ff:77:
         37:5b:0b:f0:4f:78:6a:4e:89:0d:7f:b7:81:66:72:3b:cc:36:
         14:05:f7:2c:aa:e2:9f:61:84:7d:b6:9b:98:55:04:d3:33:32:
         04:b2:47:02:a3:40:b6:e2:8c:30:d4:a9:6e:c5:1e:f2:cf:c9:
         2d:3b:0d:2e:e8:b8:4e:30:3c:fe:b6:8f:b1:de:61:b6:0f:ee:
         2e:c5:53:57:68:fc:63:72:43:62:7e:c3:39:fd:52:27:89:4c:
         8f:8b:82:de:6b:a7:43:9e:67:66:f3:e2:c0:57:f5:51:d5:83:
         f9:f3:66:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjBUNRJevWXepaPdYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODdiYWE0ZDItMTFiMS00ODI5LTliZjYtODZlMGVmYzY1
ZmY0MB4XDTI1MDIwMzAyMDAzOVoXDTI1MDUwNDAxMDAzOVowLzEtMCsGA1UEAxMk
OWY4YTAyZWEtODc1Yi00NWI4LWEyMGQtMzdkNWUzMTgzMzE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GNpBcOSX2dpcyCxfDbj7D1oPSMYuB/n8kh7
PibJIVc/7gOFv3zUsKwHnqEyzTSp8a4ZZyqgsgpJk7JFueKcr/oE0RL+uG6bmdK1
CDisivIXpTJXRLlKUA6ixXc8m3SujzsqbQ28O0j0dTqS3jRwpl9k52wG32T03djC
NG1PerV6MJK17bMAoV3w4wD16kPJev68zRrWoA6NIT26s1xKA/MEYqtrSfTZhYWO
lbsTRrzsLBuOrpMtWMNjoGoMF42TA6Sx1Z52TU/ujI84C9+dhjVaihe6aUxl6ttn
kUhPubm3e6GITbm8wteljw8+YEXirUoZaloXxkFjyNd6cbprAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF9T9esunalSoVInb97Z/atrqn9JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84N2Jh
YTRkMi0xMWIxLTQ4MjktOWJmNi04NmUwZWZjNjVmZjQvYTEzNjMxMDEtZGM5NS0z
OWEyLTgxZTMtZWQ2YjZkMjZjZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvODdiYWE0ZDItMTFiMS00ODI5LTli
ZjYtODZlMGVmYzY1ZmY0Lzg3YmFhNGQyLTExYjEtNDgyOS05YmY2LTg2ZTBlZmM2
NWZmNC5jcmwwHwYDVR0jBBgwFoAUBb+63RTgjbLix+Z71475OeHIRlEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84N2JhYTRkMi0xMWIxLTQ4MjktOWJmNi04NmUw
ZWZjNjVmZjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0E+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABUjNdLeFzO3SKzcO7+liXdTBO4d/K1IoJ2ZXhbjjGgRN/Q/MgR56ZVF
k02u5NtJPv1+oE3YDYuUX1emnrBNU6tM+VZsuJptZv9dvqNv0f5neckmQwRrCHkM
w5LAJrpoR5j8Aw+KGmDg4AD+S/Cr7vHh4RcO28pS+NfEevZcavjAGMusJx4XTtJj
yFoODTf/dzdbC/BPeGpOiQ1/t4FmcjvMNhQF9yyq4p9hhH22m5hVBNMzMgSyRwKj
QLbijDDUqW7FHvLPyS07DS7ouE4wPP62j7HeYbYP7i7FU1do/GNyQ2J+wzn9UieJ
TI+Lgt5rp0OeZ2bz4sBX9VHVg/nzZt8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:58:37 2025 by rpki-client