Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
File:                     c914ae45-f96a-379f-b2e6-986e217df7d0.roa (raw, json)
Hash identifier:          aiIVxO/uImFowNLVkf4dJOm4mbWQ6bLVGZ90NUyITN4=
Subject key identifier:   3B:F9:7F:2B:F9:39:68:03:EC:77:DF:86:A6:76:F6:29:68:B6:9C:38
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848159FDA9F6B30CD86ABBB5C00
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     16904
IP address blocks:        209.237.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:da:9f:6b:30:cd:86:ab:bb:5c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=7bb0200b-bfde-4f43-b1e6-02a415bde46a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:15:eb:a1:3f:6f:f3:a1:80:ba:92:2c:ad:6b:
                    5b:94:1e:56:a7:8c:d6:fd:51:53:ab:e3:be:46:b6:
                    93:0d:ce:93:4d:c0:4e:24:0b:f6:0a:66:9f:c2:52:
                    ae:b3:bf:b6:f5:b5:af:1d:f3:71:ac:44:d8:78:35:
                    7b:af:4e:71:86:6c:30:9e:ae:72:68:60:84:ac:10:
                    db:e6:c2:89:78:1d:d0:a2:91:89:85:06:da:cf:d1:
                    1c:95:cc:8e:0b:93:9d:de:93:ec:4d:ce:bf:c5:97:
                    0e:08:a9:1f:3c:02:38:44:d3:2a:1a:c2:52:50:0b:
                    be:a5:d3:73:08:e8:63:95:b5:9f:0f:43:bd:dd:d9:
                    87:01:36:d2:52:de:f4:37:be:49:c1:99:a3:43:c6:
                    ce:66:92:97:46:9b:d5:47:a7:8a:be:a9:92:98:a0:
                    9a:8c:0f:e4:d3:67:e8:93:7b:e5:5b:da:c8:f3:e3:
                    69:bf:be:a4:05:0e:3b:ea:1c:7e:cf:19:51:7f:84:
                    19:72:f7:48:de:de:ae:e5:29:86:1b:17:84:49:29:
                    7f:0f:e3:80:12:73:e7:ec:36:f1:9a:88:17:c2:6d:
                    98:04:af:6f:6b:82:e7:c1:4c:66:1f:ff:81:90:25:
                    e8:2c:27:b0:2f:46:6b:24:df:5c:d7:65:d5:2b:c1:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:F9:7F:2B:F9:39:68:03:EC:77:DF:86:A6:76:F6:29:68:B6:9C:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/c914ae45-f96a-379f-b2e6-986e217df7d0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.237.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:6e:5d:7f:fc:f8:5b:5d:bc:ff:d8:c8:bf:26:f0:9d:21:46:
         4c:e6:7f:14:a1:c6:db:cc:38:fe:53:d5:ea:c9:7e:50:ea:a3:
         cc:e6:46:50:86:57:da:82:c0:e5:46:f0:de:b8:19:52:13:89:
         8f:66:16:9e:37:38:d7:6a:69:1b:5a:03:73:12:63:b6:01:cd:
         3f:06:aa:09:8b:68:13:91:ec:52:33:fd:a8:15:37:3d:27:ca:
         22:2e:d2:3c:90:62:ea:ad:80:8a:75:7a:02:4b:f0:22:e6:0f:
         cc:f4:9d:19:47:33:cc:17:99:b4:4f:90:a5:fe:63:22:b5:06:
         37:c2:a4:04:86:e2:23:8d:18:4f:13:d7:ef:8d:2f:60:29:9e:
         8a:25:6f:0e:1e:8e:75:f4:3c:69:46:78:21:5a:79:78:af:7e:
         5f:d8:da:40:6a:29:a6:4e:8f:5f:ae:51:89:46:e1:a9:8a:49:
         e2:4e:f0:ff:a6:12:ca:8a:7b:c7:45:be:98:ed:d3:3f:c9:8f:
         b9:01:b2:06:a9:f1:d0:64:7a:d6:d2:a3:b0:b2:10:9f:0a:95:
         27:27:c7:7c:54:99:35:db:44:4d:9d:f8:92:58:c9:ef:01:08:
         87:e9:89:2d:5b:22:3b:28:be:78:b9:52:61:75:03:8c:53:e4:
         7b:69:c0:68
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn9qfazDNhqu7XAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
N2JiMDIwMGItYmZkZS00ZjQzLWIxZTYtMDJhNDE1YmRlNDZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjBXroT9v86GAupIsrWtblB5Wp4zW/VFTq+O+
RraTDc6TTcBOJAv2CmafwlKus7+29bWvHfNxrETYeDV7r05xhmwwnq5yaGCErBDb
5sKJeB3QopGJhQbaz9EclcyOC5Od3pPsTc6/xZcOCKkfPAI4RNMqGsJSUAu+pdNz
COhjlbWfD0O93dmHATbSUt70N75JwZmjQ8bOZpKXRpvVR6eKvqmSmKCajA/k02fo
k3vlW9rI8+Npv76kBQ476hx+zxlRf4QZcvdI3t6u5SmGGxeESSl/D+OAEnPn7Dbx
mogXwm2YBK9va4LnwUxmH/+BkCXoLCewL0ZrJN9c12XVK8GMXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDv5fyv5OWgD7HffhqZ29ilotpw4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvYzkxNGFlNDUtZjk2YS0z
NzlmLWIyZTYtOTg2ZTIxN2RmN2QwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF0e1gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADRuXX/8+FtdvP/YyL8m8J0hRkzmfxShxtvMOP5T1erJflDqo8zmRlCG
V9qCwOVG8N64GVITiY9mFp43ONdqaRtaA3MSY7YBzT8GqgmLaBOR7FIz/agVNz0n
yiIu0jyQYuqtgIp1egJL8CLmD8z0nRlHM8wXmbRPkKX+YyK1BjfCpASG4iONGE8T
1++NL2Apnoolbw4ejnX0PGlGeCFaeXivfl/Y2kBqKaZOj1+uUYlG4amKSeJO8P+m
EsqKe8dFvpjt0z/Jj7kBsgap8dBketbSo7CyEJ8KlScnx3xUmTXbRE2d+JJYye8B
CIfpiS1bIjsovni5UmF1A4xT5HtpwGg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:37:04 2025 by rpki-client