Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
File:                     09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa (raw, json)
Hash identifier:          Uv4eFjMdOsAXHmcUp/w/MvDJXw9P/KeI72yAZoo3bgA=
Subject key identifier:   3C:B0:8F:34:DF:38:F8:ED:DB:C0:7C:4A:52:97:2F:94:AC:FD:B1:68
Certificate issuer:       /CN=e2213668-8973-4471-a19a-d7e8374ada63
Certificate serial:       010D0C9F43285848F926A9575F98EC23C390CD00
Authority key identifier: C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa
Signing time:             Sun 23 Feb 2025 02:00:39 +0000
ROA not before:           Sun 23 Feb 2025 02:00:39 +0000
ROA not after:            Sat 24 May 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        69.64.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f9:26:a9:57:5f:98:ec:23:c3:90:cd:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e2213668-8973-4471-a19a-d7e8374ada63
        Validity
            Not Before: Feb 23 02:00:39 2025 GMT
            Not After : May 24 01:00:39 2025 GMT
        Subject: CN=4452f391-cf2a-4de7-96f9-ac0d42381826
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:3e:fe:40:0f:fe:bd:1e:63:f1:f1:96:98:
                    1e:34:1c:aa:c6:7e:ec:19:80:37:47:3d:3a:de:e8:
                    77:f5:e6:e8:c4:06:da:aa:08:9b:9d:df:2a:b9:34:
                    90:b0:51:e0:40:66:1a:23:59:b9:5e:07:74:4d:d6:
                    4a:9a:bc:68:68:41:8a:d7:16:f3:d9:ed:cf:b3:77:
                    de:e1:73:04:94:10:48:9a:52:67:84:9a:5d:4c:c7:
                    35:c0:92:f6:43:d9:1f:06:28:d8:a6:7b:c9:b2:bf:
                    6d:03:af:3c:65:7e:86:9b:65:b8:1b:41:15:76:da:
                    ce:2e:3a:2c:56:d4:32:95:b5:88:03:b8:52:b5:53:
                    07:52:33:06:39:bc:4d:37:5f:19:5c:42:c0:f2:53:
                    fb:6e:e4:4d:45:2b:98:6f:2a:12:47:73:fb:08:54:
                    d9:43:af:d4:26:fb:8f:35:1f:a9:ad:64:f2:c4:57:
                    5a:fe:52:de:af:79:53:01:b0:70:a4:e9:b8:19:5b:
                    0c:c3:85:36:ea:49:91:1e:7d:ee:92:b3:ec:43:99:
                    d8:7a:7f:5c:5b:84:ba:a8:63:6b:4c:97:a2:94:06:
                    53:ef:4b:32:9f:e5:93:7b:03:c3:06:2e:dc:15:0e:
                    43:b4:cb:6c:bb:ad:fc:f0:df:b5:c8:af:81:bc:e3:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B0:8F:34:DF:38:F8:ED:DB:C0:7C:4A:52:97:2F:94:AC:FD:B1:68
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/09aa21f8-eb3b-38da-b869-c742aaeb5b69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63/e2213668-8973-4471-a19a-d7e8374ada63.crl

            X509v3 Authority Key Identifier:
                keyid:C4:C2:67:04:36:13:3B:67:5F:A5:F5:02:A2:60:55:11:8F:84:E7:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/e2213668-8973-4471-a19a-d7e8374ada63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.64.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:be:b6:dd:09:f6:cc:e1:ef:d9:aa:16:e8:44:e8:eb:56:27:
         8c:8b:96:ec:d2:a1:a8:89:d9:1e:df:e0:de:c3:c3:b1:a0:d2:
         ee:48:cb:32:f1:04:32:1b:ed:b9:08:81:f8:c5:16:b5:de:95:
         c9:c5:25:08:65:b3:8c:43:55:d5:99:0e:57:3c:3b:6e:8e:dc:
         a5:13:3b:80:55:76:b8:e7:7e:92:fc:6e:de:58:b1:38:1b:fa:
         68:22:49:5f:1b:89:d7:30:85:e6:58:83:f8:98:46:91:77:c6:
         e0:13:d7:df:94:ac:2a:4c:70:5c:d9:5d:4f:1a:86:49:9b:be:
         6e:83:84:30:86:7c:ca:7e:6e:e8:4e:7e:d4:6c:fd:88:e0:ce:
         b1:83:11:e9:48:61:78:93:88:0f:54:7e:e0:50:1e:3d:cb:37:
         a8:bf:2a:d1:65:1d:e5:b3:88:b1:b8:ed:7a:c0:e7:70:ac:8b:
         10:67:89:77:d1:07:b5:54:0c:3d:cc:e4:7c:77:4a:a1:a0:50:
         19:b4:b8:0f:9e:f8:d3:ce:aa:dc:c0:59:3a:3e:9b:a8:1e:c6:
         30:be:c0:16:f3:d1:11:7a:1b:bb:01:56:5a:5a:e7:dd:6f:30:
         79:12:4c:19:55:96:b7:62:1c:65:07:a4:4c:7f:57:e9:6f:01:
         e2:96:28:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj5JqlXX5jsI8OQzQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIyMTM2NjgtODk3My00NDcxLWExOWEtZDdlODM3NGFk
YTYzMB4XDTI1MDIyMzAyMDAzOVoXDTI1MDUyNDAxMDAzOVowLzEtMCsGA1UEAxMk
NDQ1MmYzOTEtY2YyYS00ZGU3LTk2ZjktYWMwZDQyMzgxODI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxs+/kAP/r0eY/HxlpgeNByqxn7sGYA3Rz06
3uh39eboxAbaqgibnd8quTSQsFHgQGYaI1m5Xgd0TdZKmrxoaEGK1xbz2e3Ps3fe
4XMElBBImlJnhJpdTMc1wJL2Q9kfBijYpnvJsr9tA688ZX6Gm2W4G0EVdtrOLjos
VtQylbWIA7hStVMHUjMGObxNN18ZXELA8lP7buRNRSuYbyoSR3P7CFTZQ6/UJvuP
NR+prWTyxFda/lLer3lTAbBwpOm4GVsMw4U26kmRHn3ukrPsQ5nYen9cW4S6qGNr
TJeilAZT70syn+WTewPDBi7cFQ5DtMtsu6388N+1yK+BvOOfIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDywjzTfOPjt28B8SlKXL5Ss/bFoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9lMjIx
MzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4Mzc0YWRhNjMvMDlhYTIxZjgtZWIzYi0z
OGRhLWI4NjktYzc0MmFhZWI1YjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZTIyMTM2NjgtODk3My00NDcxLWEx
OWEtZDdlODM3NGFkYTYzL2UyMjEzNjY4LTg5NzMtNDQ3MS1hMTlhLWQ3ZTgzNzRh
ZGE2My5jcmwwHwYDVR0jBBgwFoAUxMJnBDYTO2dfpfUComBVEY+E5xMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9lMjIxMzY2OC04OTczLTQ0NzEtYTE5YS1kN2U4
Mzc0YWRhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUCVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK6+tt0J9szh79mqFuhE6OtWJ4yLluzSoaiJ2R7f4N7Dw7Gg0u5IyzLx
BDIb7bkIgfjFFrXelcnFJQhls4xDVdWZDlc8O26O3KUTO4BVdrjnfpL8bt5YsTgb
+mgiSV8bidcwheZYg/iYRpF3xuAT19+UrCpMcFzZXU8ahkmbvm6DhDCGfMp+buhO
ftRs/YjgzrGDEelIYXiTiA9UfuBQHj3LN6i/KtFlHeWziLG47XrA53CsixBniXfR
B7VUDD3M5Hx3SqGgUBm0uA+e+NPOqtzAWTo+m6gexjC+wBbz0RF6G7sBVlpa591v
MHkSTBlVlrdiHGUHpEx/V+lvAeKWKJ4=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:27:44 2025 by rpki-client