Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa
File:                     93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa (raw, json)
Hash identifier:          8Ed6AASheYs+KfhwCgGUDcZrmakfOopCVUbe8nE+LPo=
Subject key identifier:   A3:63:C6:34:EB:06:9C:0B:FA:D2:3D:62:37:F8:3A:36:75:C5:F0:20
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F432858481C9A799CAEFD93DF5C92AFC0
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa
Signing time:             Fri 06 Dec 2024 02:00:39 +0000
ROA not before:           Fri 06 Dec 2024 02:00:39 +0000
ROA not after:            Thu 06 Mar 2025 02:00:39 +0000
asID:                     16509
IP address blocks:        142.147.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:1c:9a:79:9c:ae:fd:93:df:5c:92:af:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: Dec  6 02:00:39 2024 GMT
            Not After : Mar  6 02:00:39 2025 GMT
        Subject: CN=885be05f-64ae-4382-bc46-33a95625b399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:57:a4:22:9c:07:50:c7:8b:27:bc:cd:b9:8b:
                    11:3e:a3:39:15:99:8e:f0:c8:11:ab:62:48:11:4d:
                    b6:34:dc:82:a0:9a:8f:ff:4d:97:0d:e9:ea:4c:f7:
                    1a:7b:fa:32:a2:e2:2b:eb:3b:2d:70:bc:d7:0b:b9:
                    35:c9:f3:18:8f:5b:f1:a6:c7:b6:28:46:9d:46:2a:
                    07:16:4e:a8:30:1a:3f:df:1d:f1:88:d0:b1:ff:e3:
                    ff:78:74:f9:a4:1d:92:ad:c7:11:20:4e:c3:52:ce:
                    76:9b:1e:01:12:c3:2d:5f:3c:cf:e8:0c:00:df:20:
                    98:85:5d:99:b4:d2:8b:3f:cd:ea:d0:4f:0f:f2:51:
                    00:08:fc:cf:80:12:23:48:60:f5:ee:f5:be:57:d9:
                    8e:5b:eb:7a:47:83:e1:44:81:04:a8:62:7f:27:da:
                    5b:f3:04:fa:78:88:9a:d7:8e:0b:23:49:b5:f6:15:
                    f3:35:57:d2:7f:25:be:d0:20:89:44:c2:52:7d:fb:
                    bf:f9:2b:9d:ff:48:2e:57:2f:b9:fa:1a:04:ff:45:
                    93:c4:64:ef:62:28:d5:36:e1:b3:12:54:87:8f:92:
                    91:24:09:16:d4:dc:bb:7e:1e:f2:36:6f:93:3c:41:
                    67:5c:bc:e9:c2:85:c9:d8:2d:94:07:2e:d9:d6:0e:
                    3f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:63:C6:34:EB:06:9C:0B:FA:D2:3D:62:37:F8:3A:36:75:C5:F0:20
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/93f91ac0-3af0-311d-8a38-a2a2448b7b75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.147.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:0e:ec:ce:a9:ae:70:24:c7:16:33:b5:19:0a:24:33:1f:a2:
         c4:47:f7:51:68:14:72:43:7b:5a:b7:ba:73:92:79:be:2c:d2:
         d3:a1:ba:03:dc:3a:84:8e:66:7f:fe:2d:2d:21:ec:33:f0:f4:
         b3:75:d6:69:f9:fe:4e:43:1f:4d:92:89:97:02:b4:b0:34:cb:
         10:f0:d3:91:f1:ac:00:ee:1e:e3:cc:bf:f3:7b:29:d4:eb:fd:
         46:48:b4:57:ab:10:26:0d:fc:f5:5d:a4:7d:2d:bb:bf:e0:93:
         23:82:88:e5:88:99:35:b1:6f:b2:80:71:60:5c:06:38:74:da:
         dd:0c:63:8d:de:22:99:b7:68:0a:c5:6d:5f:72:dc:c4:65:0f:
         00:39:03:18:e1:e9:4a:2e:8a:c3:9c:d5:36:53:44:33:fc:e9:
         b8:e9:ee:af:42:dd:1b:7a:6f:52:72:88:c7:30:c9:ef:12:d0:
         92:46:0c:23:11:25:d2:b1:aa:e9:c0:c7:18:e0:e5:a3:5a:2e:
         5a:ab:c4:be:b7:1b:12:92:cb:cb:33:8f:84:31:04:41:a6:d1:
         a7:b3:d5:9a:c6:b5:30:d3:33:f1:a5:92:ff:a5:2f:7c:fe:0a:
         80:98:90:5f:c4:02:8e:43:12:11:82:53:11:bf:e8:0c:5c:07:
         8d:d0:ac:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgcmnmcrv2T31ySr8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI0MTIwNjAyMDAzOVoXDTI1MDMwNjAyMDAzOVowLzEtMCsGA1UEAxMk
ODg1YmUwNWYtNjRhZS00MzgyLWJjNDYtMzNhOTU2MjViMzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyFekIpwHUMeLJ7zNuYsRPqM5FZmO8MgRq2JI
EU22NNyCoJqP/02XDenqTPcae/oyouIr6zstcLzXC7k1yfMYj1vxpse2KEadRioH
Fk6oMBo/3x3xiNCx/+P/eHT5pB2SrccRIE7DUs52mx4BEsMtXzzP6AwA3yCYhV2Z
tNKLP83q0E8P8lEACPzPgBIjSGD17vW+V9mOW+t6R4PhRIEEqGJ/J9pb8wT6eIia
144LI0m19hXzNVfSfyW+0CCJRMJSffu/+Sud/0guVy+5+hoE/0WTxGTvYijVNuGz
ElSHj5KRJAkW1Ny7fh7yNm+TPEFnXLzpwoXJ2C2UBy7Z1g4/NwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKNjxjTrBpwL+tI9Yjf4OjZ1xfAgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvOTNmOTFhYzAtM2FmMC0z
MTFkLThhMzgtYTJhMjQ0OGI3Yjc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjpMLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGMO7M6prnAkxxYztRkKJDMfosRH91FoFHJDe1q3unOSeb4s0tOhugPc
OoSOZn/+LS0h7DPw9LN11mn5/k5DH02SiZcCtLA0yxDw05HxrADuHuPMv/N7KdTr
/UZItFerECYN/PVdpH0tu7/gkyOCiOWImTWxb7KAcWBcBjh02t0MY43eIpm3aArF
bV9y3MRlDwA5Axjh6UouisOc1TZTRDP86bjp7q9C3Rt6b1JyiMcwye8S0JJGDCMR
JdKxqunAxxjg5aNaLlqrxL63GxKSy8szj4QxBEGm0aez1ZrGtTDTM/Glkv+lL3z+
CoCYkF/EAo5DEhGCUxG/6AxcB43QrN8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:44:35 2025 by rpki-client