Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa
File:                     ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa (raw, json)
Hash identifier:          i6m9oqL977aVJi8K7kmzof4EcHgHaUIzhcTuRTRBIc0=
Subject key identifier:   0F:1A:B4:D0:71:9E:F3:E5:C2:DE:01:15:1E:FB:62:94:B2:D7:99:A5
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FD96B85D48A0977B04F00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        66.242.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:d9:6b:85:d4:8a:09:77:b0:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=7e8cf7f9-93ad-4420-8ce3-170be83e5763
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:57:7b:0e:b7:1e:4e:14:00:44:7a:b0:a0:96:
                    60:fa:0b:a7:57:df:0a:3c:93:5d:cf:56:0d:e5:eb:
                    f6:b2:48:cc:4e:24:0d:e0:29:f2:73:62:94:4d:a9:
                    5a:10:73:a7:bf:d4:49:3f:a5:4e:09:2d:9b:d2:4c:
                    2d:e5:57:45:b3:86:0b:be:33:c6:ae:4a:e4:b0:06:
                    40:9f:5c:6a:2f:01:ee:a4:87:5d:0a:fc:d3:bb:51:
                    43:bd:d7:e0:40:48:2c:26:5a:5b:b2:f9:b4:e1:d3:
                    63:d8:a7:d0:c4:3a:2d:6e:d8:1f:33:b0:28:b8:8a:
                    b3:65:ae:d2:36:49:1e:13:1e:14:e1:04:1e:40:50:
                    21:4c:4c:20:9d:00:a5:82:b6:28:0c:71:56:00:a6:
                    f3:ee:c3:07:34:fc:7d:8f:3d:56:96:d1:49:5f:7a:
                    2f:d5:c4:f8:bf:fb:fa:1a:fb:b4:bc:ad:79:69:65:
                    b8:3a:a1:e2:a0:85:d7:96:fd:65:87:24:80:b1:3f:
                    0e:7f:f8:2c:47:c3:d7:da:48:83:95:3b:2a:81:f3:
                    e3:de:73:fb:86:40:2e:2a:67:18:8d:54:27:f5:9f:
                    3f:28:31:cd:ca:4d:34:f6:cc:99:29:be:18:af:e2:
                    9b:22:db:90:a5:ab:e9:87:b0:99:fd:3f:1d:bf:57:
                    2a:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:1A:B4:D0:71:9E:F3:E5:C2:DE:01:15:1E:FB:62:94:B2:D7:99:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/ba9e25e8-7fc8-3a0f-807f-2e3ff87c3301.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.242.64.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:c4:87:32:d8:90:03:79:e3:02:f0:10:f1:1f:86:85:81:59:
         d1:6e:56:cd:a9:ad:1e:12:93:aa:de:58:bc:79:90:aa:b5:1a:
         03:fd:f6:bb:5b:3a:9d:ab:6b:ed:ed:02:92:30:0f:42:19:3e:
         bc:cc:d6:60:00:8b:2f:fe:52:8c:f2:97:ab:e7:3b:06:46:55:
         5d:21:64:cd:63:b4:d5:2c:0b:39:7d:39:7e:46:69:3e:20:ae:
         98:26:b0:e1:c7:72:9b:8b:30:bb:a8:34:cc:e8:e4:cc:d9:37:
         2e:5f:75:15:66:19:71:5d:41:ea:9f:77:bf:6f:06:01:80:91:
         ca:8d:27:07:cf:79:22:1c:a9:b4:54:49:5c:82:bc:7d:b0:44:
         62:da:15:14:1b:03:c1:c0:1e:3e:67:d8:d9:77:aa:1c:bb:98:
         e8:5d:59:bb:f0:36:fb:36:d6:11:a9:09:e9:de:f5:65:47:79:
         fd:67:24:1b:ee:e2:90:8e:52:bc:95:58:7c:5f:fc:0d:8a:a2:
         d5:79:97:cf:ee:41:7e:eb:3f:5e:15:64:ed:e3:8c:31:70:91:
         59:a2:52:98:9c:d8:ba:e8:09:67:9b:b2:55:08:3b:5a:7d:9d:
         19:8a:31:dc:33:b8:a4:9c:ee:72:04:5c:99:64:c1:7f:cc:ab:
         c0:a1:cf:74
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn9lrhdSKCXewTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
N2U4Y2Y3ZjktOTNhZC00NDIwLThjZTMtMTcwYmU4M2U1NzYzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFd7DrceThQARHqwoJZg+gunV98KPJNdz1YN
5ev2skjMTiQN4Cnyc2KUTalaEHOnv9RJP6VOCS2b0kwt5VdFs4YLvjPGrkrksAZA
n1xqLwHupIddCvzTu1FDvdfgQEgsJlpbsvm04dNj2KfQxDotbtgfM7AouIqzZa7S
NkkeEx4U4QQeQFAhTEwgnQClgrYoDHFWAKbz7sMHNPx9jz1WltFJX3ov1cT4v/v6
Gvu0vK15aWW4OqHioIXXlv1lhySAsT8Of/gsR8PX2kiDlTsqgfPj3nP7hkAuKmcY
jVQn9Z8/KDHNyk009syZKb4Yr+KbItuQpavph7CZ/T8dv1cqHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA8atNBxnvPlwt4BFR77YpSy15mlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYmE5ZTI1ZTgtN2ZjOC0z
YTBmLTgwN2YtMmUzZmY4N2MzMzAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFQvJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJHEhzLYkAN54wLwEPEfhoWBWdFuVs2prR4Sk6reWLx5kKq1GgP99rtb
Op2ra+3tApIwD0IZPrzM1mAAiy/+Uozyl6vnOwZGVV0hZM1jtNUsCzl9OX5GaT4g
rpgmsOHHcpuLMLuoNMzo5MzZNy5fdRVmGXFdQeqfd79vBgGAkcqNJwfPeSIcqbRU
SVyCvH2wRGLaFRQbA8HAHj5n2Nl3qhy7mOhdWbvwNvs21hGpCene9WVHef1nJBvu
4pCOUryVWHxf/A2KotV5l8/uQX7rP14VZO3jjDFwkVmiUpic2LroCWebslUIO1p9
nRmKMdwzuKSc7nIEXJlkwX/Mq8Chz3Q=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:51:49 2025 by rpki-client