Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b773d83c-e026-3389-995b-471e3d71650b.roa
File:                     b773d83c-e026-3389-995b-471e3d71650b.roa (raw, json)
Hash identifier:          1jRx9JJTbLUZFiIx2HNgVq5bC4mjlbrSTJjhNts1nMg=
Subject key identifier:   BA:FD:32:6A:F2:A6:1C:98:C5:08:DC:64:A6:C5:29:5F:B4:00:78:A6
Certificate issuer:       /CN=4f16ffda-d532-447c-91ba-c8b9b5480269
Certificate serial:       010D0C9F43285848C84BEF10556781F3880E8A88
Authority key identifier: 8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b773d83c-e026-3389-995b-471e3d71650b.roa
Signing time:             Wed 05 Feb 2025 14:00:51 +0000
ROA not before:           Wed 05 Feb 2025 14:00:51 +0000
ROA not after:            Tue 06 May 2025 13:00:51 +0000
asID:                     36492
IP address blocks:        64.9.234.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c8:4b:ef:10:55:67:81:f3:88:0e:8a:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4f16ffda-d532-447c-91ba-c8b9b5480269
        Validity
            Not Before: Feb  5 14:00:51 2025 GMT
            Not After : May  6 13:00:51 2025 GMT
        Subject: CN=cfeb6a77-2b5c-476e-aabe-f1783b101df2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:b9:f9:da:74:25:7b:f7:9a:1f:62:01:bf:54:
                    5e:61:f9:62:45:4f:6f:82:6d:78:32:4e:5f:ef:91:
                    49:7d:50:17:a9:2f:4d:df:ea:1c:73:24:05:81:4e:
                    8c:1d:2a:29:ac:c7:21:49:33:5a:a0:d8:78:e1:6d:
                    31:d4:66:6c:da:64:bc:b6:37:05:41:7c:be:37:7a:
                    33:68:7e:2d:c2:15:9b:df:13:d4:a9:f5:54:92:9f:
                    f2:7d:c5:96:0d:a3:a9:cd:a9:05:0b:2d:4a:0d:3f:
                    a4:93:61:70:b8:6c:92:e0:9e:fb:02:55:b7:56:b1:
                    44:6a:03:42:14:01:33:66:36:68:80:2f:7f:20:95:
                    0d:af:07:6a:c4:f5:d9:ec:d1:ec:62:ad:df:6d:ad:
                    f7:67:27:04:92:b2:2b:74:23:cb:2d:67:f6:52:75:
                    70:53:67:23:fc:32:d5:1d:30:46:34:1c:77:b5:34:
                    93:e3:bd:ab:b4:b1:37:61:eb:3e:71:b6:bb:01:cd:
                    0c:59:e9:b9:ac:ab:31:c2:c2:06:87:63:be:87:30:
                    73:ec:dd:10:80:b2:3a:7b:4b:59:e4:21:e6:1e:ee:
                    37:63:de:61:46:25:72:bc:aa:67:1d:94:8f:b6:b0:
                    b3:bf:cc:c4:59:c5:f0:63:b4:6d:51:e6:ff:af:91:
                    22:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:FD:32:6A:F2:A6:1C:98:C5:08:DC:64:A6:C5:29:5F:B4:00:78:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/b773d83c-e026-3389-995b-471e3d71650b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269/4f16ffda-d532-447c-91ba-c8b9b5480269.crl

            X509v3 Authority Key Identifier:
                keyid:8B:C4:43:55:2F:18:A0:AD:66:71:77:38:FC:08:CC:BF:41:76:82:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/4f16ffda-d532-447c-91ba-c8b9b5480269.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.9.234.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:fd:c8:52:42:39:b1:be:12:38:d8:6e:61:f8:c0:a8:60:1f:
         d3:8c:b9:10:ab:47:c4:87:11:b1:18:58:31:d9:77:1c:1d:14:
         60:a9:28:d7:cf:12:1f:e0:58:d2:f1:d0:cf:a8:e6:bb:a2:d1:
         46:70:43:78:dc:85:2d:21:51:c2:ed:78:0a:05:08:e2:a5:78:
         a9:be:4b:c7:f2:e1:bb:9b:75:4a:55:8a:51:29:6c:47:e0:69:
         b7:d9:3b:b5:c7:6a:02:4e:59:c7:4b:d5:81:2d:1d:c3:8d:7d:
         df:b9:64:ab:d1:b8:66:6e:f7:3b:60:3c:e9:54:94:00:d3:75:
         19:06:ab:b9:4b:db:18:7b:92:88:1f:07:e3:db:c4:f3:fd:ad:
         59:11:b2:6f:2a:0d:aa:de:d5:89:32:33:02:21:e6:2d:71:f1:
         89:06:05:9e:0d:8a:d8:f9:79:73:5d:37:8b:1d:e9:dd:d4:f6:
         bf:c4:c4:85:05:09:fd:78:65:14:1b:d0:2c:93:0d:2f:38:e1:
         e1:23:37:1b:c4:8c:9b:e5:8d:f1:02:de:e3:4f:34:36:84:16:
         74:d8:e2:e5:4c:d1:1a:99:12:d7:9a:ce:19:ac:38:f7:1e:95:
         67:96:74:18:64:d6:5c:3a:c6:8b:fd:ce:f7:a7:a7:eb:b1:b1:
         06:73:48:38
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjIS+8QVWeB84gOiogwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGYxNmZmZGEtZDUzMi00NDdjLTkxYmEtYzhiOWI1NDgw
MjY5MB4XDTI1MDIwNTE0MDA1MVoXDTI1MDUwNjEzMDA1MVowLzEtMCsGA1UEAxMk
Y2ZlYjZhNzctMmI1Yy00NzZlLWFhYmUtZjE3ODNiMTAxZGYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv7n52nQle/eaH2IBv1ReYfliRU9vgm14Mk5f
75FJfVAXqS9N3+occyQFgU6MHSoprMchSTNaoNh44W0x1GZs2mS8tjcFQXy+N3oz
aH4twhWb3xPUqfVUkp/yfcWWDaOpzakFCy1KDT+kk2FwuGyS4J77AlW3VrFEagNC
FAEzZjZogC9/IJUNrwdqxPXZ7NHsYq3fba33ZycEkrIrdCPLLWf2UnVwU2cj/DLV
HTBGNBx3tTST472rtLE3Yes+cba7Ac0MWem5rKsxwsIGh2O+hzBz7N0QgLI6e0tZ
5CHmHu43Y95hRiVyvKpnHZSPtrCzv8zEWcXwY7RtUeb/r5EiYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLr9MmryphyYxQjcZKbFKV+0AHimMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2
ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5YjU0ODAyNjkvYjc3M2Q4M2MtZTAyNi0z
Mzg5LTk5NWItNDcxZTNkNzE2NTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNGYxNmZmZGEtZDUzMi00NDdjLTkx
YmEtYzhiOWI1NDgwMjY5LzRmMTZmZmRhLWQ1MzItNDQ3Yy05MWJhLWM4YjliNTQ4
MDI2OS5jcmwwHwYDVR0jBBgwFoAUi8RDVS8YoK1mcXc4/AjMv0F2gjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80ZjE2ZmZkYS1kNTMyLTQ0N2MtOTFiYS1jOGI5
YjU0ODAyNjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBQAnqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGn9yFJCObG+EjjYbmH4wKhgH9OMuRCrR8SHEbEYWDHZdxwdFGCpKNfP
Eh/gWNLx0M+o5rui0UZwQ3jchS0hUcLteAoFCOKleKm+S8fy4bubdUpVilEpbEfg
abfZO7XHagJOWcdL1YEtHcONfd+5ZKvRuGZu9ztgPOlUlADTdRkGq7lL2xh7kogf
B+PbxPP9rVkRsm8qDare1YkyMwIh5i1x8YkGBZ4Nitj5eXNdN4sd6d3U9r/ExIUF
Cf14ZRQb0CyTDS844eEjNxvEjJvljfEC3uNPNDaEFnTY4uVM0RqZEteazhmsOPce
lWeWdBhk1lw6xov9zvenp+uxsQZzSDg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:17 2025 by rpki-client