Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa
File:                     3959543b-12b4-3a65-842b-987e2c3cb0e7.roa (raw, json)
Hash identifier:          Xl44LpCiDOB2exKA3DaPo364XrJ2eOJkFXaJ+YIwzD8=
Subject key identifier:   0F:AE:98:BE:09:28:A7:4F:91:D3:48:2B:01:50:10:B0:BA:A2:B1:05
Certificate issuer:       /CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
Certificate serial:       010D0C9F432858489075F094CEDBF467C112D300
Authority key identifier: E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa
Signing time:             Thu 16 Jan 2025 14:00:50 +0000
ROA not before:           Thu 16 Jan 2025 14:00:50 +0000
ROA not after:            Wed 16 Apr 2025 13:00:50 +0000
asID:                     20454
IP address blocks:        64.38.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:90:75:f0:94:ce:db:f4:67:c1:12:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=802313e6-56bf-4fd8-ae0d-c9e057d3b398
        Validity
            Not Before: Jan 16 14:00:50 2025 GMT
            Not After : Apr 16 13:00:50 2025 GMT
        Subject: CN=a44e1040-4675-4396-8789-68c6ebcd3fa7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:00:f2:a7:2d:e7:11:8e:a5:b8:a0:5c:88:
                    1f:0a:26:5c:7a:ee:b4:20:00:61:4b:30:05:62:a8:
                    d8:66:9f:a1:72:0e:ca:70:81:e1:db:03:8b:95:8e:
                    6e:87:52:3e:71:c1:4d:ef:9e:91:dc:a7:57:d9:7b:
                    51:7b:cc:fb:fe:4e:de:44:01:67:2e:c1:05:24:8c:
                    72:be:7c:bd:69:fc:5e:d8:dd:20:b9:df:b7:54:5b:
                    f1:e4:e0:be:61:79:d8:95:71:ba:ee:17:0f:ed:e3:
                    e8:a7:9c:ee:fb:16:f5:96:ad:34:dd:85:91:39:f5:
                    6f:4e:5d:da:2a:ad:a7:56:23:02:f1:ce:5d:3c:34:
                    18:75:e0:8b:bc:a3:3b:c3:df:c5:b3:41:cc:fa:f4:
                    32:c7:04:d2:ee:d2:79:dc:50:cf:0c:0e:b2:b5:7d:
                    e6:f2:33:52:23:2c:39:03:5d:02:f6:65:57:be:30:
                    7b:0c:e9:9e:9d:35:0d:83:f1:e4:f1:d2:a0:1c:5d:
                    1c:54:74:6b:13:1b:ff:86:31:1f:f7:f9:2e:8b:0e:
                    1e:5d:e1:fc:68:a4:db:98:18:a0:c6:b6:25:27:00:
                    bb:dc:6d:49:34:28:57:08:f2:cb:63:d1:35:39:e9:
                    de:34:1c:c3:ab:32:85:1c:5b:cb:8c:9f:1b:a7:13:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AE:98:BE:09:28:A7:4F:91:D3:48:2B:01:50:10:B0:BA:A2:B1:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/3959543b-12b4-3a65-842b-987e2c3cb0e7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398/802313e6-56bf-4fd8-ae0d-c9e057d3b398.crl

            X509v3 Authority Key Identifier:
                keyid:E8:DC:7C:C9:B6:EA:DB:6E:E0:AC:F7:EA:AC:D0:87:66:EA:D5:BB:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/802313e6-56bf-4fd8-ae0d-c9e057d3b398.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.38.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:d8:81:71:c0:3d:2c:26:d7:74:1b:8f:f4:d1:43:96:7e:c6:
         15:54:c0:7d:b4:0f:87:ad:4a:ea:75:4d:b6:1e:b3:ff:8c:9b:
         2b:2b:e7:fd:00:a1:e6:85:e7:eb:bf:e7:be:6c:6d:22:21:17:
         0e:90:7c:24:67:3e:89:80:c4:d8:64:ef:1c:e8:b4:b4:7d:36:
         15:92:da:a6:05:10:10:b7:91:c4:83:44:5c:77:ae:c2:72:ee:
         1b:78:4f:43:0c:00:7b:26:31:19:45:b9:ce:ea:23:31:d2:ba:
         75:78:0d:c2:f5:64:d0:e2:4e:1b:ef:e1:f4:f0:0e:c2:97:44:
         9e:24:98:26:c5:99:5e:f1:0c:5e:fc:b1:ee:cd:4f:69:1d:28:
         37:55:04:d9:25:d7:7e:ce:61:ae:4c:ff:13:bd:43:7e:fa:3b:
         b6:f0:79:ef:43:d4:aa:62:da:5e:6d:27:14:a2:3d:a9:1b:95:
         17:c8:1a:57:85:0a:42:89:56:bd:1b:69:9d:72:91:0e:c7:8d:
         60:f1:39:d2:47:89:81:3b:5d:0f:35:70:76:18:92:3b:a0:9d:
         3f:9f:e4:b0:9a:5d:27:d1:5e:9d:c6:87:e7:39:b7:b1:35:4c:
         71:f7:9d:a8:f3:b1:66:77:35:1b:8e:87:0f:60:5c:aa:96:7b:
         75:41:d7:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiQdfCUztv0Z8ES0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODAyMzEzZTYtNTZiZi00ZmQ4LWFlMGQtYzllMDU3ZDNi
Mzk4MB4XDTI1MDExNjE0MDA1MFoXDTI1MDQxNjEzMDA1MFowLzEtMCsGA1UEAxMk
YTQ0ZTEwNDAtNDY3NS00Mzk2LTg3ODktNjhjNmViY2QzZmE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAog0A8qct5xGOpbigXIgfCiZceu60IABhSzAF
YqjYZp+hcg7KcIHh2wOLlY5uh1I+ccFN756R3KdX2XtRe8z7/k7eRAFnLsEFJIxy
vny9afxe2N0gud+3VFvx5OC+YXnYlXG67hcP7ePop5zu+xb1lq003YWROfVvTl3a
Kq2nViMC8c5dPDQYdeCLvKM7w9/Fs0HM+vQyxwTS7tJ53FDPDA6ytX3m8jNSIyw5
A10C9mVXvjB7DOmenTUNg/Hk8dKgHF0cVHRrExv/hjEf9/kuiw4eXeH8aKTbmBig
xrYlJwC73G1JNChXCPLLY9E1OeneNBzDqzKFHFvLjJ8bpxMdtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+umL4JKKdPkdNIKwFQELC6orEFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIz
MTNlNi01NmJmLTRmZDgtYWUwZC1jOWUwNTdkM2IzOTgvMzk1OTU0M2ItMTJiNC0z
YTY1LTg0MmItOTg3ZTJjM2NiMGU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvODAyMzEzZTYtNTZiZi00ZmQ4LWFl
MGQtYzllMDU3ZDNiMzk4LzgwMjMxM2U2LTU2YmYtNGZkOC1hZTBkLWM5ZTA1N2Qz
YjM5OC5jcmwwHwYDVR0jBBgwFoAU6Nx8ybbq227grPfqrNCHZurVu2gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS84MDIzMTNlNi01NmJmLTRmZDgtYWUwZC1jOWUw
NTdkM2IzOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCb7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIbYgXHAPSwm13Qbj/TRQ5Z+xhVUwH20D4etSup1TbYes/+Mmysr5/0A
oeaF5+u/575sbSIhFw6QfCRnPomAxNhk7xzotLR9NhWS2qYFEBC3kcSDRFx3rsJy
7ht4T0MMAHsmMRlFuc7qIzHSunV4DcL1ZNDiThvv4fTwDsKXRJ4kmCbFmV7xDF78
se7NT2kdKDdVBNkl137OYa5M/xO9Q376O7bwee9D1Kpi2l5tJxSiPakblRfIGleF
CkKJVr0baZ1ykQ7HjWDxOdJHiYE7XQ81cHYYkjugnT+f5LCaXSfRXp3Gh+c5t7E1
THH3najzsWZ3NRuOhw9gXKqWe3VB134=
-----END CERTIFICATE-----
Generated at Fri Mar 14 08:35:57 2025 by rpki-client