Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7b4274fe-8794-3f04-9fe1-b950ae9c5570.roa
File:                     7b4274fe-8794-3f04-9fe1-b950ae9c5570.roa (raw, json)
Hash identifier:          tcHsZ8k+JfKjA6IA1xbAGzcG5uubNk0h0UIRfhvFpEo=
Subject key identifier:   F6:88:14:58:0A:58:87:70:C7:B6:0F:9D:E8:49:BA:19:73:29:CF:3E
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C84C16C5D8DAEDA453B75480
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7b4274fe-8794-3f04-9fe1-b950ae9c5570.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36492
IP address blocks:        64.9.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4c:16:c5:d8:da:ed:a4:53:b7:54:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=b77d16ee-0a5f-4eaa-8e0c-b7fab7f32f2c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:77:11:48:66:fc:3f:6a:52:bf:3c:13:73:ee:
                    ce:62:6a:8c:8b:72:c5:f1:33:2d:7a:91:de:56:42:
                    e4:69:73:72:5a:18:14:db:ce:63:bf:29:27:df:f5:
                    f6:e1:40:a9:78:4f:ea:e4:50:0e:6c:fc:a3:5e:5a:
                    20:f9:05:6e:12:bd:01:38:b7:02:08:53:9c:73:63:
                    fd:9f:d6:f9:ed:d8:8f:28:cb:4f:3d:f7:8b:42:93:
                    83:c2:db:f5:a5:7e:ec:78:f4:d6:f7:55:49:1a:b6:
                    20:72:48:9a:c7:39:59:4f:e0:b3:c8:09:1d:8e:33:
                    f9:8f:18:51:5d:fb:bb:37:b3:68:49:ad:6b:48:56:
                    19:f0:a4:ce:0a:49:5b:41:a7:4d:8a:8b:43:2f:c4:
                    37:ae:d4:96:5f:0f:d8:39:be:34:42:0d:ec:9d:5b:
                    1d:2f:2d:0f:b1:3d:33:1f:43:3b:35:51:22:41:b4:
                    38:7d:50:05:9a:7b:3a:10:0a:1e:33:92:ab:85:96:
                    df:ab:d1:4c:cd:e2:3a:13:d6:8a:43:44:92:dc:be:
                    1f:dc:ee:88:77:0f:7c:78:6a:06:f8:32:be:90:df:
                    90:8c:2e:58:13:04:84:b2:d6:53:50:2f:02:88:fb:
                    d3:82:38:c5:00:b9:eb:99:54:b7:13:e3:7a:e1:d9:
                    ca:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:88:14:58:0A:58:87:70:C7:B6:0F:9D:E8:49:BA:19:73:29:CF:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/7b4274fe-8794-3f04-9fe1-b950ae9c5570.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:9d:34:61:8f:c3:4e:d3:f7:ec:c7:eb:37:e4:12:d1:23:bd:
         42:eb:3f:f2:5e:6f:e5:d6:34:a6:3c:44:3e:4d:19:f0:a4:c0:
         14:ce:a9:62:32:41:02:68:fa:13:ee:11:11:8c:a3:28:b5:7f:
         6e:eb:2c:8c:08:dc:1f:d9:74:0b:97:b6:fd:47:a0:a1:39:2d:
         a0:c5:1e:23:8a:cd:24:d0:ce:2c:d2:f6:c6:4d:fa:3d:41:b4:
         6b:97:6e:43:30:ab:8c:22:8b:37:ae:10:1a:51:21:22:8a:d0:
         89:f9:95:78:c0:05:19:a4:64:36:41:77:0d:37:95:a1:0c:e8:
         3d:3f:e5:54:8d:56:af:50:c6:ba:72:a2:67:0b:99:6f:f8:1c:
         94:41:16:54:3e:81:ae:b9:91:21:f4:a7:31:0b:db:5d:67:6a:
         f9:df:e7:11:8e:2e:4f:6f:c0:4e:19:14:df:74:ae:18:63:50:
         11:a8:66:47:1b:6c:26:07:5b:11:1d:dc:28:95:03:44:d6:b0:
         f0:69:35:47:1f:df:7d:c1:d9:b4:ac:b8:7a:c7:43:88:20:b0:
         1d:de:78:02:52:d3:62:b0:5d:50:8d:be:1d:ab:a7:1e:03:f4:
         f7:28:34:47:6d:6f:79:3c:bc:5d:83:b3:15:62:74:92:34:3f:
         06:85:74:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjITBbF2NrtpFO3VIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
Yjc3ZDE2ZWUtMGE1Zi00ZWFhLThlMGMtYjdmYWI3ZjMyZjJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwncRSGb8P2pSvzwTc+7OYmqMi3LF8TMtepHe
VkLkaXNyWhgU285jvykn3/X24UCpeE/q5FAObPyjXlog+QVuEr0BOLcCCFOcc2P9
n9b57diPKMtPPfeLQpODwtv1pX7sePTW91VJGrYgckiaxzlZT+CzyAkdjjP5jxhR
Xfu7N7NoSa1rSFYZ8KTOCklbQadNiotDL8Q3rtSWXw/YOb40Qg3snVsdLy0PsT0z
H0M7NVEiQbQ4fVAFmns6EAoeM5KrhZbfq9FMzeI6E9aKQ0SS3L4f3O6Idw98eGoG
+DK+kN+QjC5YEwSEstZTUC8CiPvTgjjFALnrmVS3E+N64dnKHwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPaIFFgKWIdwx7YPnehJuhlzKc8+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvN2I0Mjc0ZmUtODc5NC0z
ZjA0LTlmZTEtYjk1MGFlOWM1NTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQAn7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADKdNGGPw07T9+zH6zfkEtEjvULrP/Jeb+XWNKY8RD5NGfCkwBTOqWIy
QQJo+hPuERGMoyi1f27rLIwI3B/ZdAuXtv1HoKE5LaDFHiOKzSTQzizS9sZN+j1B
tGuXbkMwq4wiizeuEBpRISKK0In5lXjABRmkZDZBdw03laEM6D0/5VSNVq9Qxrpy
omcLmW/4HJRBFlQ+ga65kSH0pzEL211navnf5xGOLk9vwE4ZFN90rhhjUBGoZkcb
bCYHWxEd3CiVA0TWsPBpNUcf333B2bSsuHrHQ4ggsB3eeAJS02KwXVCNvh2rpx4D
9PcoNEdtb3k8vF2DsxVidJI0PwaFdEs=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:33:50 2025 by rpki-client