Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1064f732-fb5f-354a-a62c-2014024cede6.roa
File:                     1064f732-fb5f-354a-a62c-2014024cede6.roa (raw, json)
Hash identifier:          ODUyIAj0OMn0V3BPFD0J0TxnFmTWYsYLszmrLevNqIE=
Subject key identifier:   BD:90:F8:20:E4:E9:0D:C0:61:2C:1B:F1:BC:D4:81:C3:B8:23:43:48
Certificate issuer:       /CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
Certificate serial:       010D0C9F4328584898D60980645790D7BF0148C0
Authority key identifier: F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1064f732-fb5f-354a-a62c-2014024cede6.roa
Signing time:             Sun 19 Jan 2025 14:00:52 +0000
ROA not before:           Sun 19 Jan 2025 14:00:52 +0000
ROA not after:            Sat 19 Apr 2025 13:00:52 +0000
asID:                     29802
IP address blocks:        65.110.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:98:d6:09:80:64:57:90:d7:bf:01:48:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20e972e7-ae1e-448c-8e6c-8f81f73b77a1
        Validity
            Not Before: Jan 19 14:00:52 2025 GMT
            Not After : Apr 19 13:00:52 2025 GMT
        Subject: CN=1ee82512-c191-4be3-96f7-b2aa73f75379
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6c:8e:f4:73:94:da:00:6c:7b:87:18:34:b1:
                    8d:fe:79:19:4e:ab:73:dc:3d:eb:bb:49:4e:0b:ac:
                    38:c4:b4:41:48:f0:2d:a3:2d:8d:9b:34:e6:e6:d5:
                    60:79:7c:04:2c:a4:9f:28:39:3d:0c:45:4c:66:60:
                    70:de:31:f6:51:37:58:5b:0b:23:7a:2a:ac:56:fa:
                    35:dc:bb:48:21:76:11:31:84:61:24:10:e8:40:49:
                    d8:e0:89:85:65:56:09:5d:d2:3f:ff:e3:2d:5e:01:
                    e1:66:5c:47:7e:ee:77:b5:76:5d:71:9c:dd:53:0b:
                    95:b7:97:22:27:1c:e7:c0:ab:99:57:c1:43:b1:31:
                    c0:5a:3c:0a:0c:f1:88:cb:36:34:b4:0d:3f:2d:6b:
                    02:5a:6a:9d:04:61:7c:4a:ab:81:4e:cb:01:ab:e0:
                    23:d9:27:cb:30:50:b8:b6:84:61:ee:9a:7f:f8:98:
                    1d:07:9b:2f:dc:4e:ad:d5:52:9a:3f:79:3d:6d:da:
                    81:cd:1e:26:07:aa:92:02:e6:a6:cc:6b:51:e0:52:
                    c0:5c:d2:5a:f7:a0:d5:ba:68:f1:a7:b9:25:df:c4:
                    be:f2:51:89:f3:e7:69:59:be:c0:fa:a4:bc:7d:58:
                    66:0f:1c:c0:2b:db:76:99:a8:76:de:db:33:1f:cb:
                    1b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:90:F8:20:E4:E9:0D:C0:61:2C:1B:F1:BC:D4:81:C3:B8:23:43:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/1064f732-fb5f-354a-a62c-2014024cede6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.crl

            X509v3 Authority Key Identifier:
                keyid:F6:6E:A1:E7:F8:61:F9:D7:74:00:2C:BB:98:1C:3B:8A:34:86:5F:47

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/20e972e7-ae1e-448c-8e6c-8f81f73b77a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.110.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:05:60:ab:00:18:21:6d:1e:fb:17:e7:15:0b:1a:79:96:3b:
         6d:cf:2a:63:82:52:13:31:7c:7a:2a:9f:f9:d3:1c:82:6e:4d:
         0b:72:1d:79:fc:d4:82:f2:22:1b:95:ec:a2:56:49:94:f2:91:
         4a:36:df:91:03:f9:ce:af:0d:64:f4:48:63:bb:8d:15:ec:fb:
         3c:4d:46:53:c4:e2:41:f7:8c:89:26:25:b1:bd:6f:33:8d:9b:
         83:96:13:93:05:4d:a8:58:0f:a8:06:c6:69:b2:65:3e:a6:61:
         e7:6f:81:74:35:7c:e7:6e:a7:25:bc:8a:a7:4d:f1:3e:56:12:
         0c:8e:33:60:ee:5a:22:8a:b8:d3:dc:00:ac:87:5b:af:0f:25:
         89:16:d7:ca:b7:d9:01:49:1a:4f:36:ec:de:aa:bb:8b:03:3e:
         91:90:a8:03:ab:30:56:f9:0d:39:06:b0:30:67:31:d5:cb:3e:
         12:d9:f9:09:14:7b:55:09:2c:cf:12:64:56:23:08:f7:f4:83:
         bc:48:d1:eb:87:63:ab:e3:2d:31:a9:7d:1e:75:c6:5e:97:b7:
         ad:ce:bf:cf:65:4e:45:6d:b1:64:a0:ac:99:d8:65:83:a6:31:
         53:14:40:ce:eb:15:62:8b:70:27:8e:7a:12:30:df:c4:68:7c:
         e8:fd:d3:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiY1gmAZFeQ178BSMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjBlOTcyZTctYWUxZS00NDhjLThlNmMtOGY4MWY3M2I3
N2ExMB4XDTI1MDExOTE0MDA1MloXDTI1MDQxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MWVlODI1MTItYzE5MS00YmUzLTk2ZjctYjJhYTczZjc1Mzc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmyO9HOU2gBse4cYNLGN/nkZTqtz3D3ru0lO
C6w4xLRBSPAtoy2NmzTm5tVgeXwELKSfKDk9DEVMZmBw3jH2UTdYWwsjeiqsVvo1
3LtIIXYRMYRhJBDoQEnY4ImFZVYJXdI//+MtXgHhZlxHfu53tXZdcZzdUwuVt5ci
JxznwKuZV8FDsTHAWjwKDPGIyzY0tA0/LWsCWmqdBGF8SquBTssBq+Aj2SfLMFC4
toRh7pp/+JgdB5sv3E6t1VKaP3k9bdqBzR4mB6qSAuamzGtR4FLAXNJa96DVumjx
p7kl38S+8lGJ8+dpWb7A+qS8fVhmDxzAK9t2mah23tszH8sbDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2Q+CDk6Q3AYSwb8bzUgcO4I0NIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5
NzJlNy1hZTFlLTQ0OGMtOGU2Yy04ZjgxZjczYjc3YTEvMTA2NGY3MzItZmI1Zi0z
NTRhLWE2MmMtMjAxNDAyNGNlZGU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjBlOTcyZTctYWUxZS00NDhjLThl
NmMtOGY4MWY3M2I3N2ExLzIwZTk3MmU3LWFlMWUtNDQ4Yy04ZTZjLThmODFmNzNi
NzdhMS5jcmwwHwYDVR0jBBgwFoAU9m6h5/hh+dd0ACy7mBw7ijSGX0cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMGU5NzJlNy1hZTFlLTQ0OGMtOGU2Yy04Zjgx
ZjczYjc3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQW4rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYFYKsAGCFtHvsX5xULGnmWO23PKmOCUhMxfHoqn/nTHIJuTQtyHXn8
1ILyIhuV7KJWSZTykUo235ED+c6vDWT0SGO7jRXs+zxNRlPE4kH3jIkmJbG9bzON
m4OWE5MFTahYD6gGxmmyZT6mYedvgXQ1fOdupyW8iqdN8T5WEgyOM2DuWiKKuNPc
AKyHW68PJYkW18q32QFJGk827N6qu4sDPpGQqAOrMFb5DTkGsDBnMdXLPhLZ+QkU
e1UJLM8SZFYjCPf0g7xI0euHY6vjLTGpfR51xl6Xt63Ov89lTkVtsWSgrJnYZYOm
MVMUQM7rFWKLcCeOehIw38RofOj902w=
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:57:50 2025 by rpki-client