Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa
File:                     34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa (raw, json)
Hash identifier:          sFTNyPa41U/nKSJIKHHexsVgChNGDOFN3aOk46hR2Rk=
Subject key identifier:   FC:08:CF:1E:CA:12:92:59:57:E0:1F:EB:70:FA:3A:DD:01:E6:23:4B
Certificate issuer:       /CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
Certificate serial:       010D0C9F43285848159FFC70BEA4444278145030
Authority key identifier: CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     203690
IP address blocks:        216.169.158.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:fc:70:be:a4:44:42:78:14:50:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a2847747-8d46-4da2-bb9e-4c72860e7bcd
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=db693e1b-7816-4c77-8e2e-6bae454dbab6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:02:9d:7c:b5:3c:d7:9e:73:91:60:ca:59:60:
                    4e:2e:b0:94:25:9a:b6:09:eb:63:d6:c5:c2:ad:5f:
                    44:7b:92:d3:d4:7b:9c:46:11:50:31:0a:6f:50:31:
                    63:1a:10:ec:55:5a:96:bd:05:b5:5e:5e:d7:9f:54:
                    57:8e:6d:34:c6:87:5f:f5:ab:90:7f:8b:2b:fd:5d:
                    9d:99:06:b7:99:c7:70:67:e4:3a:95:e4:c1:42:e8:
                    5d:53:c2:24:23:b2:e5:48:f0:5a:e9:95:b7:6a:97:
                    e1:2a:7b:b9:1d:94:1a:33:62:85:06:c2:1e:b1:cb:
                    ef:b0:a7:c5:d9:71:68:ed:da:cb:04:3b:ff:7d:c3:
                    1b:da:f6:4d:d2:23:e6:46:b3:09:44:6d:cf:ee:6f:
                    3e:88:28:27:0f:6e:c5:6a:0e:d2:72:ad:54:d5:4b:
                    67:2f:6a:3d:88:d7:45:16:d1:5d:84:1d:7d:a2:0b:
                    e4:0b:19:36:9d:03:64:f3:48:5b:98:4b:b7:65:7e:
                    88:54:1a:68:a3:0e:cd:66:a5:70:1e:38:b9:b3:f6:
                    bd:0e:24:2a:ef:45:47:af:23:82:2f:e6:4f:b9:12:
                    65:bd:bc:75:7b:35:c3:6c:d2:cc:ef:92:ca:2c:3f:
                    5e:f7:b9:af:f4:63:91:7c:19:d7:50:56:eb:5b:af:
                    d6:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:08:CF:1E:CA:12:92:59:57:E0:1F:EB:70:FA:3A:DD:01:E6:23:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/34e7c3c5-dba9-3060-bae7-762f860c9ff8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd/a2847747-8d46-4da2-bb9e-4c72860e7bcd.crl

            X509v3 Authority Key Identifier:
                keyid:CC:21:3E:58:74:F4:E7:E4:17:39:FB:8B:91:FE:79:BA:A9:33:8C:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a2847747-8d46-4da2-bb9e-4c72860e7bcd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.169.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:4b:88:59:d9:56:f8:fb:d2:b2:d7:27:75:11:e9:71:4a:3f:
         94:97:74:9d:b4:eb:32:30:d5:12:ca:0b:3b:e3:b7:17:9e:ac:
         b6:84:7e:86:ef:4b:83:ff:cb:40:56:52:2d:15:80:65:10:40:
         fa:67:f6:8d:ab:29:f2:89:9a:c7:60:d5:85:09:2a:e8:ba:a1:
         7d:f5:32:d3:f4:b9:87:99:ba:e2:16:b7:b4:2f:c8:bf:5a:1b:
         8d:63:7c:22:2f:c0:4c:66:f9:93:15:2d:b7:d2:92:2e:eb:d5:
         a2:da:80:63:09:f7:37:32:f0:5a:1e:eb:4f:50:16:a1:7e:a9:
         7f:3a:5d:2a:63:ee:16:df:79:3b:4a:5e:b4:54:34:63:e3:91:
         1d:db:ab:2b:2c:0e:d9:9e:b3:13:03:60:77:f4:bc:8f:85:69:
         63:a0:f5:a0:53:62:3d:f8:07:db:69:ec:18:86:da:29:4d:89:
         c3:d4:5d:21:c9:3b:3f:72:11:58:0d:a1:6e:5a:61:b9:51:69:
         90:84:58:63:be:3a:48:e3:6d:1a:c4:63:d9:8d:94:ab:55:96:
         c7:10:38:88:64:f1:c1:b5:f4:6d:64:bf:fa:6d:38:d5:12:47:
         d3:32:a3:cb:b0:7d:8f:7e:e5:7b:08:ce:e4:08:2c:38:26:0d:
         a1:ae:0e:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/xwvqREQngUUDAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTI4NDc3NDctOGQ0Ni00ZGEyLWJiOWUtNGM3Mjg2MGU3
YmNkMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
ZGI2OTNlMWItNzgxNi00Yzc3LThlMmUtNmJhZTQ1NGRiYWI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgKdfLU8155zkWDKWWBOLrCUJZq2Cetj1sXC
rV9Ee5LT1HucRhFQMQpvUDFjGhDsVVqWvQW1Xl7Xn1RXjm00xodf9auQf4sr/V2d
mQa3mcdwZ+Q6leTBQuhdU8IkI7LlSPBa6ZW3apfhKnu5HZQaM2KFBsIescvvsKfF
2XFo7drLBDv/fcMb2vZN0iPmRrMJRG3P7m8+iCgnD27Fag7Scq1U1UtnL2o9iNdF
FtFdhB19ogvkCxk2nQNk80hbmEu3ZX6IVBpoow7NZqVwHji5s/a9DiQq70VHryOC
L+ZPuRJlvbx1ezXDbNLM75LKLD9e97mv9GORfBnXUFbrW6/WTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPwIzx7KEpJZV+Af63D6Ot0B5iNLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0
Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00YzcyODYwZTdiY2QvMzRlN2MzYzUtZGJhOS0z
MDYwLWJhZTctNzYyZjg2MGM5ZmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTI4NDc3NDctOGQ0Ni00ZGEyLWJi
OWUtNGM3Mjg2MGU3YmNkL2EyODQ3NzQ3LThkNDYtNGRhMi1iYjllLTRjNzI4NjBl
N2JjZC5jcmwwHwYDVR0jBBgwFoAUzCE+WHT05+QXOfuLkf55uqkzjOwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hMjg0Nzc0Ny04ZDQ2LTRkYTItYmI5ZS00Yzcy
ODYwZTdiY2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2KmeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGRLiFnZVvj70rLXJ3UR6XFKP5SXdJ206zIw1RLKCzvjtxeerLaEfobv
S4P/y0BWUi0VgGUQQPpn9o2rKfKJmsdg1YUJKui6oX31MtP0uYeZuuIWt7QvyL9a
G41jfCIvwExm+ZMVLbfSki7r1aLagGMJ9zcy8Foe609QFqF+qX86XSpj7hbfeTtK
XrRUNGPjkR3bqyssDtmesxMDYHf0vI+FaWOg9aBTYj34B9tp7BiG2ilNicPUXSHJ
Oz9yEVgNoW5aYblRaZCEWGO+OkjjbRrEY9mNlKtVlscQOIhk8cG19G1kv/ptONUS
R9Myo8uwfY9+5XsIzuQILDgmDaGuDr0=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:24:33 2025 by rpki-client