Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
File:                     0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa (raw, json)
Hash identifier:          m051Zs2E/b9aWdRaMtPgKKDvQYK/taxT/e1E8B+4t0I=
Subject key identifier:   36:DE:84:9C:0E:7F:2C:82:53:F8:6E:E2:1D:A7:02:D1:DA:85:AA:0A
Certificate issuer:       /CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
Certificate serial:       010D0C9F432858491D717BDA79F6ECF38814A6C0
Authority key identifier: 3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa
Signing time:             Sat 08 Mar 2025 02:00:39 +0000
ROA not before:           Sat 08 Mar 2025 02:00:39 +0000
ROA not after:            Fri 06 Jun 2025 01:00:39 +0000
asID:                     14618
IP address blocks:        66.179.16.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:1d:71:7b:da:79:f6:ec:f3:88:14:a6:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=429c38be-db51-4d91-a361-94ba3bfd9e9a
        Validity
            Not Before: Mar  8 02:00:39 2025 GMT
            Not After : Jun  6 01:00:39 2025 GMT
        Subject: CN=f0b2db61-bf5a-4577-bdbd-b3637c35feae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:d8:e8:23:a2:f0:e9:4e:17:69:85:73:75:1b:
                    ce:cb:e3:0e:b4:6c:86:e4:4f:3f:31:57:fd:8d:b0:
                    cb:3a:35:87:26:8f:c7:e6:59:16:eb:f3:b6:fa:42:
                    0a:42:8a:aa:1a:96:2b:aa:9e:6c:a0:a8:2e:6f:17:
                    34:38:d6:31:49:df:42:11:ca:f0:4c:87:5d:14:0d:
                    d6:4c:9c:23:6d:af:4b:59:d0:2e:53:b6:56:85:6a:
                    69:de:d4:1f:57:b8:9b:0e:3f:f0:0a:26:63:af:71:
                    ab:ff:c3:1e:a5:8c:f0:58:2e:72:ff:71:8f:76:9b:
                    b4:b1:1a:10:4f:87:27:e9:12:fd:1c:3a:6b:e7:f5:
                    6e:d9:76:06:c3:53:5a:ad:7e:79:3c:6c:c9:38:d6:
                    42:b6:3b:5f:c2:f7:eb:90:fc:46:0d:00:18:28:06:
                    6a:c5:4f:88:07:3a:b9:28:fe:fb:02:6d:a0:e0:a5:
                    24:66:ae:4b:16:de:a6:25:05:33:46:be:16:41:91:
                    ce:59:5d:78:93:35:ea:65:46:06:bc:5b:00:36:ba:
                    87:41:d8:56:e2:1f:fb:c4:10:a6:07:a8:e4:4e:8f:
                    51:7f:51:36:76:10:87:6b:08:e0:2f:34:14:a7:a8:
                    00:0b:b2:c2:a5:d1:25:13:88:91:cd:d6:a5:97:20:
                    d0:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:DE:84:9C:0E:7F:2C:82:53:F8:6E:E2:1D:A7:02:D1:DA:85:AA:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/0cb704fd-5e6e-3de0-93ed-cd5c88cb6afb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a/429c38be-db51-4d91-a361-94ba3bfd9e9a.crl

            X509v3 Authority Key Identifier:
                keyid:3B:0A:DE:00:75:72:22:68:DA:FD:27:00:F1:C8:1F:8B:CA:05:97:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/429c38be-db51-4d91-a361-94ba3bfd9e9a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  66.179.16.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         14:be:96:f1:cb:a6:7e:14:c5:6a:b3:24:9f:b8:e4:89:3c:d6:
         cc:5a:67:eb:6d:c0:56:76:ef:e1:38:2a:8c:8e:15:78:14:f5:
         1f:bf:51:08:cc:2b:b6:ba:e5:37:32:1f:1e:12:f9:64:85:74:
         f0:f9:5d:d2:87:75:78:7c:d5:49:f5:a6:0b:37:ac:a5:b4:99:
         33:f8:3d:a0:2f:6d:dd:72:11:8e:c5:40:b7:4e:20:6e:3d:99:
         3a:1b:86:43:ea:45:35:77:7d:bd:a7:ca:4f:77:33:c3:a9:a1:
         01:05:e0:9a:43:18:d1:3b:cc:c0:39:6d:08:1d:39:fd:5f:ed:
         bb:a3:1a:c5:1f:b3:d1:87:b8:16:fa:b8:e3:d6:9b:b2:f4:57:
         d2:cb:61:2a:ed:33:d8:b1:5c:e7:2c:e2:03:64:31:be:23:3c:
         61:44:99:22:8e:ec:ba:a5:b9:e4:f2:6b:31:34:88:e7:6b:fd:
         c0:20:75:e8:bf:e3:11:a1:21:a6:40:ad:b9:2e:2b:10:2f:e9:
         ba:c6:f1:71:ef:7b:9b:f5:65:38:66:36:2c:a2:df:8c:50:f2:
         0a:d0:c8:ad:7c:93:00:82:1a:d9:bf:bb:77:85:dd:e7:0f:c1:
         e3:25:42:ea:b9:53:75:f3:6b:a4:5b:c8:c0:2f:31:1e:81:79:
         bf:b8:28:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkdcXvaefbs84gUpsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDI5YzM4YmUtZGI1MS00ZDkxLWEzNjEtOTRiYTNiZmQ5
ZTlhMB4XDTI1MDMwODAyMDAzOVoXDTI1MDYwNjAxMDAzOVowLzEtMCsGA1UEAxMk
ZjBiMmRiNjEtYmY1YS00NTc3LWJkYmQtYjM2MzdjMzVmZWFlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudjoI6Lw6U4XaYVzdRvOy+MOtGyG5E8/MVf9
jbDLOjWHJo/H5lkW6/O2+kIKQoqqGpYrqp5soKgubxc0ONYxSd9CEcrwTIddFA3W
TJwjba9LWdAuU7ZWhWpp3tQfV7ibDj/wCiZjr3Gr/8MepYzwWC5y/3GPdpu0sRoQ
T4cn6RL9HDpr5/Vu2XYGw1NarX55PGzJONZCtjtfwvfrkPxGDQAYKAZqxU+IBzq5
KP77Am2g4KUkZq5LFt6mJQUzRr4WQZHOWV14kzXqZUYGvFsANrqHQdhW4h/7xBCm
B6jkTo9Rf1E2dhCHawjgLzQUp6gAC7LCpdElE4iRzdallyDQvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbehJwOfyyCU/hu4h2nAtHahaoKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80Mjlj
MzhiZS1kYjUxLTRkOTEtYTM2MS05NGJhM2JmZDllOWEvMGNiNzA0ZmQtNWU2ZS0z
ZGUwLTkzZWQtY2Q1Yzg4Y2I2YWZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDI5YzM4YmUtZGI1MS00ZDkxLWEz
NjEtOTRiYTNiZmQ5ZTlhLzQyOWMzOGJlLWRiNTEtNGQ5MS1hMzYxLTk0YmEzYmZk
OWU5YS5jcmwwHwYDVR0jBBgwFoAUOwreAHVyImja/ScA8cgfi8oFlzwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80MjljMzhiZS1kYjUxLTRkOTEtYTM2MS05NGJh
M2JmZDllOWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQrMQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABS+lvHLpn4UxWqzJJ+45Ik81sxaZ+ttwFZ27+E4KoyOFXgU9R+/UQjM
K7a65TcyHx4S+WSFdPD5XdKHdXh81Un1pgs3rKW0mTP4PaAvbd1yEY7FQLdOIG49
mTobhkPqRTV3fb2nyk93M8OpoQEF4JpDGNE7zMA5bQgdOf1f7bujGsUfs9GHuBb6
uOPWm7L0V9LLYSrtM9ixXOcs4gNkMb4jPGFEmSKO7LqlueTyazE0iOdr/cAgdei/
4xGhIaZArbkuKxAv6brG8XHve5v1ZThmNiyi34xQ8grQyK18kwCCGtm/u3eF3ecP
weMlQuq5U3Xza6RbyMAvMR6Beb+4KAg=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:05:04 2025 by rpki-client