Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/332814be-fb36-3b13-b960-28882a89c247.roa
File:                     332814be-fb36-3b13-b960-28882a89c247.roa (raw, json)
Hash identifier:          YDxASwdAzDD3sj+YB38hOiW7crX4g0DhWMsY4QMeqdY=
Subject key identifier:   39:B5:94:04:5B:18:4F:8A:D4:80:7D:79:92:D6:FA:90:09:3F:C1:6F
Certificate issuer:       /CN=385196b1-542e-428c-8866-0efd1362fdc0
Certificate serial:       010D0C9F43285848EF61611E2D7D027DFE8075C0
Authority key identifier: 5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/332814be-fb36-3b13-b960-28882a89c247.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        64.35.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:61:1e:2d:7d:02:7d:fe:80:75:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=385196b1-542e-428c-8866-0efd1362fdc0
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=317187c2-41f1-4fc5-b7ab-5a7962abe80f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:e2:b3:33:a3:ec:53:60:a0:55:c5:ea:2a:d7:
                    09:e9:cf:58:90:ed:bf:01:5a:19:1c:1e:4e:d7:74:
                    7c:d0:ba:75:f6:7f:67:f4:3d:30:c4:c0:1d:56:c7:
                    f9:e1:ff:57:3d:23:f8:14:c2:6f:34:20:f2:39:f4:
                    5e:2d:b0:d0:02:ac:5f:57:05:d5:a8:cf:cf:e5:46:
                    5d:97:05:ec:4b:cb:8a:59:93:8d:96:ba:11:5b:b1:
                    96:43:47:19:ea:b6:1f:53:af:52:ca:2c:2d:e8:8d:
                    6d:7e:27:06:ec:e6:12:b0:30:3a:1c:f1:98:9e:09:
                    8d:b5:8d:b2:8e:ee:c9:7c:2a:67:ef:8f:b7:e6:38:
                    39:ac:f5:b4:cb:8a:6b:42:04:f2:58:0f:b5:30:c8:
                    41:34:4d:fc:7e:c1:91:b6:98:4e:a0:b5:fa:6e:4b:
                    4c:23:e2:47:07:d0:1d:4a:59:8f:c5:4c:f1:04:37:
                    a1:a6:fc:79:b1:79:43:64:80:71:9c:b4:52:0d:a4:
                    18:78:28:c9:3e:da:bd:fc:83:bd:a4:a1:05:4f:b1:
                    a5:6a:08:f2:54:bc:f7:75:d7:e2:2d:08:77:1a:43:
                    9a:a0:28:a4:0d:c3:6e:7b:fe:1e:01:42:84:d3:a1:
                    81:e4:cc:85:89:b8:d3:16:48:f4:aa:ac:14:08:0d:
                    af:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:B5:94:04:5B:18:4F:8A:D4:80:7D:79:92:D6:FA:90:09:3F:C1:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/332814be-fb36-3b13-b960-28882a89c247.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0/385196b1-542e-428c-8866-0efd1362fdc0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:EC:BB:7F:3D:6D:75:7E:6E:54:83:89:F2:D5:6F:7B:C6:78:FD:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/385196b1-542e-428c-8866-0efd1362fdc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.35.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:74:7e:17:fc:ec:90:c9:7b:93:f8:14:6d:a3:0c:c0:05:cd:
         5f:f2:d2:1f:21:19:72:65:bc:f1:30:47:1a:02:b9:70:f4:30:
         8e:62:2e:6c:8a:ac:95:a5:32:1b:32:6f:5f:18:1f:00:81:59:
         68:65:33:31:a9:9d:a6:dd:2d:79:42:37:95:57:56:20:a2:78:
         f1:17:f0:1c:4d:d1:05:42:26:19:e3:79:23:38:5d:11:c2:7c:
         a4:ca:1a:6b:eb:a5:20:cf:02:43:f4:ad:e1:bf:58:ce:24:5f:
         d0:a1:cd:85:8a:cf:67:69:eb:3a:78:b5:88:24:af:99:5f:0a:
         12:15:80:ca:37:b4:c5:2b:92:9c:0e:9e:91:9b:f9:1d:13:0f:
         06:b1:3a:4b:ef:d9:9a:d0:6a:96:96:d8:ed:00:3a:c4:78:e5:
         39:be:aa:a1:e6:48:8b:1d:13:2a:5c:8c:16:55:f3:aa:9b:e8:
         c4:45:72:89:90:91:0c:2c:28:d6:83:8a:d1:72:9a:0b:25:94:
         22:a1:18:0a:ff:83:52:f4:f2:60:75:f8:45:3c:23:9a:d4:a1:
         5b:92:ae:b0:7b:7e:f4:43:b9:24:89:04:f7:45:e5:30:0e:39:
         65:e5:8e:0d:cf:52:c2:39:ed:2b:a9:a6:2b:bc:33:47:ba:35:
         3b:c8:05:e6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYWEeLX0Cff6AdcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzg1MTk2YjEtNTQyZS00MjhjLTg4NjYtMGVmZDEzNjJm
ZGMwMB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MzE3MTg3YzItNDFmMS00ZmM1LWI3YWItNWE3OTYyYWJlODBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyuKzM6PsU2CgVcXqKtcJ6c9YkO2/AVoZHB5O
13R80Lp19n9n9D0wxMAdVsf54f9XPSP4FMJvNCDyOfReLbDQAqxfVwXVqM/P5UZd
lwXsS8uKWZONlroRW7GWQ0cZ6rYfU69Syiwt6I1tficG7OYSsDA6HPGYngmNtY2y
ju7JfCpn74+35jg5rPW0y4prQgTyWA+1MMhBNE38fsGRtphOoLX6bktMI+JHB9Ad
SlmPxUzxBDehpvx5sXlDZIBxnLRSDaQYeCjJPtq9/IO9pKEFT7GlagjyVLz3ddfi
LQh3GkOaoCikDcNue/4eAUKE06GB5MyFibjTFkj0qqwUCA2vIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDm1lARbGE+K1IB9eZLW+pAJP8FvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zODUx
OTZiMS01NDJlLTQyOGMtODg2Ni0wZWZkMTM2MmZkYzAvMzMyODE0YmUtZmIzNi0z
YjEzLWI5NjAtMjg4ODJhODljMjQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzg1MTk2YjEtNTQyZS00MjhjLTg4
NjYtMGVmZDEzNjJmZGMwLzM4NTE5NmIxLTU0MmUtNDI4Yy04ODY2LTBlZmQxMzYy
ZmRjMC5jcmwwHwYDVR0jBBgwFoAUW+y7fz1tdX5uVIOJ8tVve8Z4/Q0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zODUxOTZiMS01NDJlLTQyOGMtODg2Ni0wZWZk
MTM2MmZkYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCOoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD90fhf87JDJe5P4FG2jDMAFzV/y0h8hGXJlvPEwRxoCuXD0MI5iLmyK
rJWlMhsyb18YHwCBWWhlMzGpnabdLXlCN5VXViCiePEX8BxN0QVCJhnjeSM4XRHC
fKTKGmvrpSDPAkP0reG/WM4kX9ChzYWKz2dp6zp4tYgkr5lfChIVgMo3tMUrkpwO
npGb+R0TDwaxOkvv2ZrQapaW2O0AOsR45Tm+qqHmSIsdEypcjBZV86qb6MRFcomQ
kQwsKNaDitFymgsllCKhGAr/g1L08mB1+EU8I5rUoVuSrrB7fvRDuSSJBPdF5TAO
OWXljg3PUsI57Suppiu8M0e6NTvIBeY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:17:39 2025 by rpki-client