Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa
File:                     891200df-1fd8-3d70-8932-c0cbb249ba2e.roa (raw, json)
Hash identifier:          Uwl367LhxY9CNVArbSg39khcFbPIwi8jLvMDeE0NH7Y=
Subject key identifier:   95:70:AB:13:FE:11:9B:2B:C6:61:AD:B3:42:DE:08:13:80:D1:D2:85
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F43285848DEA11E55A7311C7EE362F900
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa
Signing time:             Thu 13 Feb 2025 14:00:50 +0000
ROA not before:           Thu 13 Feb 2025 14:00:50 +0000
ROA not after:            Wed 14 May 2025 13:00:50 +0000
asID:                     399672
IP address blocks:        173.211.125.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:de:a1:1e:55:a7:31:1c:7e:e3:62:f9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Feb 13 14:00:50 2025 GMT
            Not After : May 14 13:00:50 2025 GMT
        Subject: CN=7b78fbca-8339-4d88-a483-555f20b7285d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bc:ef:0d:d5:2e:2e:fd:2d:10:ae:88:97:71:
                    db:ce:47:96:66:c4:e6:ca:35:c9:e8:a5:0e:18:92:
                    20:93:b3:ad:d0:df:c3:3a:ee:d4:5d:73:f6:5a:fd:
                    1d:ac:32:49:15:c2:18:e8:54:f2:8d:7a:16:02:5a:
                    a1:bb:bc:6d:21:50:9e:ac:cc:d0:e3:f4:b4:92:3b:
                    c8:9c:f0:1f:01:82:3f:aa:38:90:21:49:48:e6:99:
                    3b:99:2d:50:6f:ac:03:1a:9a:d1:35:c8:6b:8a:46:
                    6e:a4:49:79:ba:4d:91:8f:62:55:69:26:9c:93:dd:
                    54:1f:9b:b9:b5:e5:43:ed:76:69:9e:22:8c:b2:53:
                    82:10:26:38:29:38:88:c0:e7:02:e1:de:c9:78:35:
                    d1:2e:95:56:a2:d2:a6:97:f3:71:4d:1f:5e:fb:63:
                    76:e9:95:2a:4c:cc:79:6b:7a:f8:3c:bb:97:21:af:
                    96:d8:af:db:fa:24:32:ae:46:2b:ad:06:09:0f:6e:
                    8e:ab:6b:90:88:c8:b4:39:ef:42:74:22:49:de:a7:
                    2c:fa:95:26:e9:21:e5:a7:e4:98:ca:45:de:ee:5a:
                    68:90:81:6e:84:dc:82:6c:84:01:ad:79:cd:c2:48:
                    33:2d:68:65:8a:32:96:0a:a0:c0:34:5b:d6:4d:99:
                    0f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:70:AB:13:FE:11:9B:2B:C6:61:AD:B3:42:DE:08:13:80:D1:D2:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/891200df-1fd8-3d70-8932-c0cbb249ba2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.211.125.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         03:b8:2e:bf:7d:4c:8e:2e:e3:52:e9:bc:db:74:85:bf:a6:c6:
         7a:b6:15:c7:62:c6:7c:de:6e:a9:4b:6f:31:54:3f:d3:c8:6c:
         0e:b5:d4:03:94:61:18:64:42:ed:fe:b9:c7:e1:1d:7f:45:8f:
         4d:94:00:fa:b3:5b:2d:48:ee:a3:7a:24:3a:a1:fb:c4:f2:66:
         47:32:4b:ce:1b:9a:da:94:39:f3:ca:d9:44:30:10:5b:e3:f7:
         5a:25:ce:d5:5b:38:71:c9:b7:d6:22:d5:32:fc:72:61:7a:56:
         db:40:4a:f7:62:d8:d6:6e:13:ec:79:54:ea:d9:20:64:78:33:
         93:73:e2:3c:9e:70:c0:c1:d0:8f:ff:f8:34:36:cf:7e:2b:3b:
         25:70:c7:5c:ea:9f:21:bb:ff:e5:68:66:f7:8e:81:41:7f:9e:
         91:05:5e:36:73:b0:c0:5a:de:c0:e9:2b:8f:12:c4:01:4e:9c:
         d5:6c:b7:f7:0c:bc:2c:38:10:a1:ff:4b:c7:8e:10:4e:ea:8b:
         f2:c7:88:15:52:da:63:98:f8:a6:d6:3d:5d:66:93:d6:30:51:
         07:f9:70:6c:8f:cf:62:f9:0f:46:9d:7b:91:fd:56:b7:93:f5:
         54:95:9a:1b:69:a9:5b:7d:ab:3c:28:7f:4c:98:01:43:76:bb:
         61:c5:89:da
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjeoR5VpzEcfuNi+QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDIxMzE0MDA1MFoXDTI1MDUxNDEzMDA1MFowLzEtMCsGA1UEAxMk
N2I3OGZiY2EtODMzOS00ZDg4LWE0ODMtNTU1ZjIwYjcyODVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAibzvDdUuLv0tEK6Il3HbzkeWZsTmyjXJ6KUO
GJIgk7Ot0N/DOu7UXXP2Wv0drDJJFcIY6FTyjXoWAlqhu7xtIVCerMzQ4/S0kjvI
nPAfAYI/qjiQIUlI5pk7mS1Qb6wDGprRNchrikZupEl5uk2Rj2JVaSack91UH5u5
teVD7XZpniKMslOCECY4KTiIwOcC4d7JeDXRLpVWotKml/NxTR9e+2N26ZUqTMx5
a3r4PLuXIa+W2K/b+iQyrkYrrQYJD26Oq2uQiMi0Oe9CdCJJ3qcs+pUm6SHlp+SY
ykXe7lpokIFuhNyCbIQBrXnNwkgzLWhlijKWCqDANFvWTZkPRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJVwqxP+EZsrxmGts0LeCBOA0dKFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvODkxMjAwZGYtMWZkOC0z
ZDcwLTg5MzItYzBjYmIyNDliYTJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArdN9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAO4Lr99TI4u41LpvNt0hb+mxnq2FcdixnzebqlLbzFUP9PIbA611AOU
YRhkQu3+ucfhHX9Fj02UAPqzWy1I7qN6JDqh+8TyZkcyS84bmtqUOfPK2UQwEFvj
91olztVbOHHJt9Yi1TL8cmF6VttASvdi2NZuE+x5VOrZIGR4M5Nz4jyecMDB0I//
+DQ2z34rOyVwx1zqnyG7/+VoZveOgUF/npEFXjZzsMBa3sDpK48SxAFOnNVst/cM
vCw4EKH/S8eOEE7qi/LHiBVS2mOY+KbWPV1mk9YwUQf5cGyPz2L5D0ade5H9VreT
9VSVmhtpqVt9qzwof0yYAUN2u2HFido=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:15:00 2025 by rpki-client