Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
File:                     9b1c53d7-a055-3051-9111-c6f8e5def468.roa (raw, json)
Hash identifier:          UTArJyfPsB4kkxGQC0L8Wn3lRu9ydcBSVirs8aAkFj8=
Subject key identifier:   ED:6E:32:43:0D:A4:03:5E:DD:E7:83:F4:12:03:37:78:30:0E:6D:EB
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584865303C5E8F46157544FDFE7C
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa
Signing time:             Wed 01 Jan 2025 02:00:40 +0000
ROA not before:           Wed 01 Jan 2025 02:00:40 +0000
ROA not after:            Tue 01 Apr 2025 01:00:40 +0000
asID:                     4922
IP address blocks:        24.149.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 18 Feb 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:65:30:3c:5e:8f:46:15:75:44:fd:fe:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jan  1 02:00:40 2025 GMT
            Not After : Apr  1 01:00:40 2025 GMT
        Subject: CN=01aa1c0b-fd32-4056-80c0-a0f691c3974c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:97:42:83:bd:02:f3:37:76:4b:04:79:cb:4a:
                    ab:bf:cd:07:a6:52:34:dd:5e:d8:44:55:bb:9f:d7:
                    c0:71:17:0d:be:dc:9c:96:fc:9b:81:14:80:dc:30:
                    34:35:21:69:27:99:fd:6a:a8:93:51:24:f9:0c:30:
                    2e:c3:83:e7:8c:87:eb:ad:47:38:f0:51:02:d7:b9:
                    42:d4:49:35:46:2a:1c:ca:e9:11:19:e3:11:04:67:
                    b2:bb:f1:6a:0b:5b:9c:ae:34:a8:31:9f:4b:79:c0:
                    a1:51:06:09:56:43:f0:e4:da:9a:77:9e:54:4c:da:
                    94:08:a8:c5:ed:44:1a:a1:6f:ea:73:58:d8:03:f3:
                    0e:11:18:93:9c:ba:7e:c2:48:9c:7a:03:c8:80:9d:
                    3c:3a:8b:10:2a:d3:a6:7b:7e:b6:e1:e4:e9:a2:c1:
                    67:11:06:8d:8a:95:bd:ac:64:9b:bf:9c:71:d3:cf:
                    69:2b:49:e8:2a:2b:26:e4:00:3c:89:b0:9f:a9:22:
                    c0:0c:90:e0:28:e9:45:f5:a7:95:17:ca:6e:d3:18:
                    2e:50:08:d7:61:2c:4a:f0:b9:95:ec:44:2c:98:c4:
                    e1:ff:a2:ce:62:97:37:6f:fa:c5:3b:57:f3:f4:29:
                    8f:98:7d:e7:d6:f2:a5:07:7c:f2:db:e5:b7:63:36:
                    5d:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:6E:32:43:0D:A4:03:5E:DD:E7:83:F4:12:03:37:78:30:0E:6D:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/9b1c53d7-a055-3051-9111-c6f8e5def468.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.149.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0e:35:3c:3c:18:96:f0:f9:b1:f7:25:00:f6:10:61:28:de:73:
         03:e0:db:6a:9d:75:8c:c7:ae:65:17:d2:35:98:51:d1:03:ec:
         fc:e6:64:6b:f2:ae:4a:d0:eb:2d:ab:3b:72:b9:a6:55:ed:6f:
         e5:10:36:cc:de:03:ee:9b:75:3e:4e:9f:6b:cb:2b:ad:cd:7f:
         74:44:0f:bf:42:c2:06:9c:62:d8:f0:58:45:2e:09:2a:58:a5:
         9f:0b:0a:a4:2a:0f:d9:8e:96:f1:45:ee:43:90:70:be:b5:1c:
         9b:db:ca:fb:ee:9d:b5:1c:5e:33:fd:d7:17:74:86:14:df:df:
         8b:22:9e:59:dd:bc:e1:7e:d0:1e:e8:77:ef:bb:88:31:65:41:
         8f:0b:c0:a2:b6:3d:88:e0:c8:7f:e9:b0:6a:57:64:52:89:36:
         98:fa:8b:35:0e:b6:0e:12:da:e3:ac:9e:1b:86:6d:3a:19:09:
         8a:79:29:59:a8:80:50:95:0c:88:5e:b3:49:2e:86:c7:a0:5a:
         3f:cb:69:32:39:75:a5:b8:07:4d:53:1a:61:40:fc:ae:a1:df:
         08:07:12:9c:a7:e9:4d:da:a7:81:de:b8:54:ef:1b:f7:ce:a2:
         e2:63:15:ea:a8:a1:fe:12:fd:ff:0c:b7:a6:6f:62:a4:85:95:
         0c:01:8e:2f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhlMDxej0YVdUT9/nwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDEwMTAyMDA0MFoXDTI1MDQwMTAxMDA0MFowLzEtMCsGA1UEAxMk
MDFhYTFjMGItZmQzMi00MDU2LTgwYzAtYTBmNjkxYzM5NzRjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZdCg70C8zd2SwR5y0qrv80HplI03V7YRFW7
n9fAcRcNvtyclvybgRSA3DA0NSFpJ5n9aqiTUST5DDAuw4PnjIfrrUc48FEC17lC
1Ek1RiocyukRGeMRBGeyu/FqC1ucrjSoMZ9LecChUQYJVkPw5Nqad55UTNqUCKjF
7UQaoW/qc1jYA/MOERiTnLp+wkicegPIgJ08OosQKtOme3624eTposFnEQaNipW9
rGSbv5xx089pK0noKism5AA8ibCfqSLADJDgKOlF9aeVF8pu0xguUAjXYSxK8LmV
7EQsmMTh/6LOYpc3b/rFO1fz9CmPmH3n1vKlB3zy2+W3YzZdfQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO1uMkMNpANe3eeD9BIDN3gwDm3rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvOWIxYzUzZDctYTA1NS0z
MDUxLTkxMTEtYzZmOGU1ZGVmNDY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGGJVAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA41PDwYlvD5sfclAPYQYSjecwPg22qddYzHrmUX0jWYUdED7PzmZGvy
rkrQ6y2rO3K5plXtb+UQNszeA+6bdT5On2vLK63Nf3RED79CwgacYtjwWEUuCSpY
pZ8LCqQqD9mOlvFF7kOQcL61HJvbyvvunbUcXjP91xd0hhTf34sinlndvOF+0B7o
d++7iDFlQY8LwKK2PYjgyH/psGpXZFKJNpj6izUOtg4S2uOsnhuGbToZCYp5KVmo
gFCVDIhes0kuhsegWj/LaTI5daW4B01TGmFA/K6h3wgHEpyn6U3ap4HeuFTvG/fO
ouJjFeqoof4S/f8Mt6ZvYqSFlQwBji8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 20:40:18 2025 by rpki-client