Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2baf24a6-1651-3fd6-9dbf-59d04ae52b95.roa
File:                     2baf24a6-1651-3fd6-9dbf-59d04ae52b95.roa (raw, json)
Hash identifier:          bDledaHzBEnEBlUbyTU4LaXYaaWDODFdgJ7vESCaxLY=
Subject key identifier:   82:15:85:F1:ED:C7:E0:C9:33:8F:17:95:C8:09:BC:6F:D3:45:99:43
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F43285848E59BCD409CA1C312F10B0D80
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2baf24a6-1651-3fd6-9dbf-59d04ae52b95.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     834
IP address blocks:        206.162.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:cd:40:9c:a1:c3:12:f1:0b:0d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=4184f21f-9d9f-47ef-8ecd-ccbfbd68a154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:4f:fd:cf:4d:ed:68:c6:3c:a6:9d:6e:c2:89:
                    9a:64:d6:2a:72:b0:6f:07:0f:64:df:ad:1a:d6:60:
                    ac:80:a2:3b:b7:41:fd:42:69:3b:fb:e3:55:46:5d:
                    e2:8e:6f:bf:9a:62:1e:f8:34:b1:30:02:4e:e2:2b:
                    53:bb:ff:54:b1:fb:e2:c1:b9:28:85:06:8b:22:1c:
                    c2:14:0e:f7:25:af:f6:1a:e2:fc:e5:c8:02:19:bc:
                    d0:da:6d:ce:27:bc:2e:9b:70:c4:1f:6f:f4:22:fe:
                    f0:2b:10:3a:c0:8f:ed:2b:d1:93:b0:b8:cb:e7:2f:
                    95:1a:eb:51:89:4d:62:0a:a8:eb:e6:c3:39:83:38:
                    b6:e7:6b:df:15:b9:01:31:d6:3b:76:44:9d:38:5e:
                    40:87:53:92:96:f3:e5:0b:83:c3:2c:5b:b3:3d:93:
                    a4:22:d8:f7:b4:68:9d:51:81:ab:80:36:79:bf:ec:
                    16:50:97:1f:77:16:83:8e:9f:3e:6e:1e:a2:f1:70:
                    1c:26:03:5e:50:d2:c7:d8:4d:17:b6:73:68:5b:9e:
                    b3:ce:a0:07:f6:42:e4:11:d1:e2:29:d4:69:58:ef:
                    bc:28:91:1d:3f:9a:9c:7a:ea:ee:4b:04:c9:ac:8d:
                    9c:e9:b0:fb:99:2c:ae:cf:b7:07:bd:58:f7:a1:70:
                    f4:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:15:85:F1:ED:C7:E0:C9:33:8F:17:95:C8:09:BC:6F:D3:45:99:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/2baf24a6-1651-3fd6-9dbf-59d04ae52b95.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:e7:dc:fb:5a:21:a1:fb:b2:39:2b:f0:42:b6:6e:8f:a2:39:
         2e:f2:9a:b9:d3:f0:7c:b3:45:6c:73:64:ea:0b:22:bf:d5:d2:
         72:0c:aa:25:f2:c7:64:8c:ff:2a:d2:ef:f4:42:3d:5c:6a:e8:
         0d:90:d2:2b:e8:98:e1:fd:1f:60:6d:4c:1c:01:24:fc:b6:65:
         fb:92:3e:25:3f:56:62:de:01:02:b5:f7:6c:be:82:21:88:21:
         b7:bf:fb:23:3f:2e:38:9e:94:f4:8d:a0:70:09:13:6c:cf:f8:
         b3:8b:05:8e:e8:4b:63:64:ca:2e:78:af:16:2a:e3:27:90:93:
         a3:53:b9:f8:d2:61:d4:ad:23:4b:24:29:80:7b:5f:28:87:9a:
         ba:66:a3:00:3d:e7:53:d7:a8:35:db:5d:48:e0:f5:7e:1f:7b:
         96:d3:a2:72:2a:0f:4f:53:fd:50:71:6a:ed:d3:a1:de:de:78:
         e7:9c:ab:ca:39:8d:1a:27:59:b3:3c:17:f9:64:8a:54:47:8e:
         e3:73:a3:1d:cc:2f:da:8a:21:7d:11:3f:66:f9:14:48:62:35:
         c3:56:93:f7:74:23:b6:27:b5:a2:1a:97:cc:a4:14:eb:58:e8:
         a1:07:89:fe:dd:e6:24:3d:7b:93:d8:7e:8b:dc:e5:b8:8c:eb:
         77:d3:5e:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm81AnKHDEvELDYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZm
YTUyMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
NDE4NGYyMWYtOWQ5Zi00N2VmLThlY2QtY2NiZmJkNjhhMTU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkU/9z03taMY8pp1uwomaZNYqcrBvBw9k360a
1mCsgKI7t0H9Qmk7++NVRl3ijm+/mmIe+DSxMAJO4itTu/9UsfviwbkohQaLIhzC
FA73Ja/2GuL85cgCGbzQ2m3OJ7wum3DEH2/0Iv7wKxA6wI/tK9GTsLjL5y+VGutR
iU1iCqjr5sM5gzi252vfFbkBMdY7dkSdOF5Ah1OSlvPlC4PDLFuzPZOkItj3tGid
UYGrgDZ5v+wWUJcfdxaDjp8+bh6i8XAcJgNeUNLH2E0XtnNoW56zzqAH9kLkEdHi
KdRpWO+8KJEdP5qceuruSwTJrI2c6bD7mSyuz7cHvVj3oXD0bwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIIVhfHtx+DJM48XlcgJvG/TRZlDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZh
MTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvMmJhZjI0YTYtMTY1MS0z
ZmQ2LTlkYmYtNTlkMDRhZTUyYjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjI2YTEzYTItZmJmYi00OWVkLTg5
YzMtMjMzYzc0NWZmYTUyLzIyNmExM2EyLWZiZmItNDllZC04OWMzLTIzM2M3NDVm
ZmE1Mi5jcmwwHwYDVR0jBBgwFoAUN5551oIyh9VQnzmjJFrhIZTZyhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNj
NzQ1ZmZhNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqL+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACrn3PtaIaH7sjkr8EK2bo+iOS7ymrnT8HyzRWxzZOoLIr/V0nIMqiXy
x2SM/yrS7/RCPVxq6A2Q0ivomOH9H2BtTBwBJPy2ZfuSPiU/VmLeAQK192y+giGI
Ibe/+yM/LjielPSNoHAJE2zP+LOLBY7oS2Nkyi54rxYq4yeQk6NTufjSYdStI0sk
KYB7XyiHmrpmowA951PXqDXbXUjg9X4fe5bTonIqD09T/VBxau3Tod7eeOecq8o5
jRonWbM8F/lkilRHjuNzox3ML9qKIX0RP2b5FEhiNcNWk/d0I7YntaIal8ykFOtY
6KEHif7d5iQ9e5PYfovc5biM63fTXgg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:20 2025 by rpki-client