Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
File:                     0d6b90d2-2492-3695-a106-a29303fe9cb3.roa (raw, json)
Hash identifier:          rOptJMON4jBfPk7s7c1ci2NBY4lz4agPgS/XL6YZuE4=
Subject key identifier:   A8:BF:67:AC:CB:79:E2:3D:8C:09:E7:D5:EE:6E:21:97:39:A0:58:6B
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285848100A806E8F43DA66DEB9FDF0
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa
Signing time:             Sun 01 Dec 2024 14:00:51 +0000
ROA not before:           Sun 01 Dec 2024 14:00:51 +0000
ROA not after:            Sat 01 Mar 2025 14:00:51 +0000
asID:                     14618
IP address blocks:        64.35.172.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:10:0a:80:6e:8f:43:da:66:de:b9:fd:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Dec  1 14:00:51 2024 GMT
            Not After : Mar  1 14:00:51 2025 GMT
        Subject: CN=6d3d01ec-04ad-4cd6-a66a-d10244395a2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:8d:64:16:4e:ab:59:75:78:e4:dd:98:b9:65:
                    ec:24:03:94:73:c2:3f:4a:58:a3:6e:43:e0:70:b2:
                    21:72:2e:4e:3a:94:c8:e4:0d:86:d9:d6:7c:3b:7d:
                    30:2c:cb:58:31:a6:4d:a7:da:d5:a1:61:52:29:ca:
                    e8:f5:23:5e:a6:59:6a:9c:86:8a:25:6d:b1:95:21:
                    b6:04:13:69:4d:24:a3:7e:53:b7:1a:0b:bb:d3:19:
                    73:86:62:30:73:71:73:2e:f7:fd:e2:d0:4d:4a:a4:
                    98:64:15:b9:45:8f:9e:35:db:f0:db:bc:26:29:9f:
                    e1:01:ae:a5:98:1b:83:b0:06:c5:cd:2e:2c:d1:11:
                    bd:a1:9a:de:b5:fc:0b:f0:66:8e:c6:c1:cd:4c:c0:
                    d4:6b:a3:55:63:c5:ec:09:33:15:ac:4b:25:ff:d1:
                    ae:aa:b8:46:8e:7c:c3:43:37:4c:a3:85:f7:7c:bd:
                    3a:ae:79:44:9b:61:d6:6b:04:5e:10:9f:d8:43:3a:
                    93:8d:72:f3:9c:aa:ea:92:59:f6:25:93:84:13:06:
                    9d:ac:c3:d0:ce:06:00:5f:86:6d:fa:51:71:70:ca:
                    3b:10:23:0b:6b:82:5e:7b:46:06:90:fa:16:1b:9c:
                    2d:17:a4:7e:b7:bb:af:99:9f:d5:ee:81:2a:47:77:
                    cb:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:BF:67:AC:CB:79:E2:3D:8C:09:E7:D5:EE:6E:21:97:39:A0:58:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/0d6b90d2-2492-3695-a106-a29303fe9cb3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.172.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a1:40:94:b9:aa:3e:2a:e4:0a:e2:be:44:25:ba:6e:99:c5:4f:
         89:72:e4:fc:4c:f9:21:d0:bf:6b:87:6f:96:db:1c:b8:14:2c:
         d3:fb:1a:86:f0:5a:b5:59:f9:11:54:d7:47:49:88:cf:8e:b0:
         cc:4a:a5:b8:17:3b:fe:71:ca:5e:0e:fb:72:35:67:46:9b:64:
         e5:a1:16:0d:3e:67:2b:30:e0:2a:fb:58:8c:7e:d1:48:4f:da:
         53:2f:e3:f5:95:a3:98:39:35:2d:16:de:ac:d3:77:d5:87:fc:
         66:d2:d6:32:2f:30:b8:2e:c1:fc:76:59:4e:d5:ff:1b:63:0c:
         80:6c:45:2c:68:a8:d4:ac:bd:9a:8e:75:3f:8e:75:f4:79:ce:
         ff:77:18:b6:2c:2c:d7:ea:23:8b:8f:87:33:77:52:81:99:b6:
         f8:0a:22:df:58:56:a1:e5:0a:47:f5:8a:1c:f9:2a:cb:76:51:
         72:8c:12:d4:df:5d:43:e5:55:cf:c2:6a:2d:3e:02:ed:4e:65:
         0c:5b:a0:c6:82:43:a4:ef:6d:c0:53:26:10:9a:27:b1:ea:b6:
         6b:0a:6b:41:04:fe:11:d7:1e:97:3d:e3:9b:f8:58:bd:e1:3b:
         93:15:65:43:1f:96:4d:0d:b5:b6:52:2c:d4:3d:da:cb:95:7e:
         c2:33:e4:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgQCoBuj0PaZt65/fAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg1MTk2YjEtNTQyZS00MjhjLTg4NjYtMGVmZDEzNjJm
ZGMwMB4XDTI0MTIwMTE0MDA1MVoXDTI1MDMwMTE0MDA1MVowLzEtMCsGA1UEAxMk
NmQzZDAxZWMtMDRhZC00Y2Q2LWE2NmEtZDEwMjQ0Mzk1YTJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlI1kFk6rWXV45N2YuWXsJAOUc8I/SlijbkPg
cLIhci5OOpTI5A2G2dZ8O30wLMtYMaZNp9rVoWFSKcro9SNepllqnIaKJW2xlSG2
BBNpTSSjflO3Ggu70xlzhmIwc3FzLvf94tBNSqSYZBW5RY+eNdvw27wmKZ/hAa6l
mBuDsAbFzS4s0RG9oZretfwL8GaOxsHNTMDUa6NVY8XsCTMVrEsl/9GuqrhGjnzD
QzdMo4X3fL06rnlEm2HWawReEJ/YQzqTjXLznKrqkln2JZOEEwadrMPQzgYAX4Zt
+lFxcMo7ECMLa4Jee0YGkPoWG5wtF6R+t7uvmZ/V7oEqR3fLdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKi/Z6zLeeI9jAnn1e5uIZc5oFhrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zODUx
OTZiMS01NDJlLTQyOGMtODg2Ni0wZWZkMTM2MmZkYzAvMGQ2YjkwZDItMjQ5Mi0z
Njk1LWExMDYtYTI5MzAzZmU5Y2IzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzg1MTk2YjEtNTQyZS00MjhjLTg4
NjYtMGVmZDEzNjJmZGMwLzM4NTE5NmIxLTU0MmUtNDI4Yy04ODY2LTBlZmQxMzYy
ZmRjMC5jcmwwHwYDVR0jBBgwFoAUW+y7fz1tdX5uVIOJ8tVve8Z4/Q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zODUxOTZiMS01NDJlLTQyOGMtODg2Ni0wZWZk
MTM2MmZkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCOsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKFAlLmqPirkCuK+RCW6bpnFT4ly5PxM+SHQv2uHb5bbHLgULNP7Gobw
WrVZ+RFU10dJiM+OsMxKpbgXO/5xyl4O+3I1Z0abZOWhFg0+Zysw4Cr7WIx+0UhP
2lMv4/WVo5g5NS0W3qzTd9WH/GbS1jIvMLguwfx2WU7V/xtjDIBsRSxoqNSsvZqO
dT+OdfR5zv93GLYsLNfqI4uPhzN3UoGZtvgKIt9YVqHlCkf1ihz5Kst2UXKMEtTf
XUPlVc/Cai0+Au1OZQxboMaCQ6TvbcBTJhCaJ7HqtmsKa0EE/hHXHpc945v4WL3h
O5MVZUMflk0NtbZSLNQ92suVfsIz5Hg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:03 2025 by rpki-client