Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
File:                     20212cf5-9652-3db8-891b-2e568988220d.roa (raw, json)
Hash identifier:          FSCAb/0Aqvuz0X+sCk29yldoiKBFmJUc3tePF1VZ2XI=
Subject key identifier:   7A:B3:FE:D1:81:86:0A:54:74:47:D4:CC:3E:EA:FF:8F:77:37:F0:19
Certificate issuer:       /CN=bebad29c-c2e4-447d-a29e-20f329219ea9
Certificate serial:       010D0C9F432858483F802C7B110DDBE825526B40
Authority key identifier: 07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa
Signing time:             Wed 18 Dec 2024 14:00:52 +0000
ROA not before:           Wed 18 Dec 2024 14:00:52 +0000
ROA not after:            Tue 18 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        172.82.211.0/24 maxlen: 24
                          172.82.213.0/24 maxlen: 24
                          172.82.225.0/24 maxlen: 24
                          172.82.237.0/24 maxlen: 24
                          192.243.245.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:3f:80:2c:7b:11:0d:db:e8:25:52:6b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bebad29c-c2e4-447d-a29e-20f329219ea9
        Validity
            Not Before: Dec 18 14:00:52 2024 GMT
            Not After : Mar 18 13:00:52 2025 GMT
        Subject: CN=b72021d2-d141-4a74-a521-e5c92e8a762f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:f5:16:ff:9b:6b:4a:d6:6a:0f:67:d9:67:ce:
                    2c:36:72:66:c6:8b:c3:9a:77:0d:7e:70:80:c0:40:
                    a9:5f:fc:95:56:68:11:11:86:c4:bd:8d:78:80:c1:
                    86:02:f8:24:9c:7a:cb:bc:9c:5b:6c:1d:6a:af:b1:
                    7e:b4:9f:2c:ac:24:86:f8:57:32:0a:f3:ed:38:55:
                    f8:66:cc:e4:82:57:b9:6a:fb:8b:02:b1:c5:36:77:
                    d2:d8:59:b4:a9:5f:e9:e4:78:77:a5:bb:b7:ee:b6:
                    8d:e5:fe:52:98:dd:f9:12:a2:67:b6:d2:c5:8b:f3:
                    c8:e9:ac:76:b0:77:b5:c9:ef:ef:19:dd:b8:30:bd:
                    3d:40:62:76:2e:23:90:3b:86:71:18:37:2e:4a:99:
                    94:b7:41:09:52:53:69:96:ee:3c:b1:ad:8f:f1:49:
                    07:6b:78:44:9f:d8:93:8e:35:a4:13:1e:a2:ff:a6:
                    ea:dc:f9:8e:25:9f:7f:99:f7:ce:24:63:04:59:8f:
                    e3:80:29:e0:f9:b5:b4:7c:dc:45:59:54:90:4b:d4:
                    5d:09:3a:d1:38:c0:49:3a:43:b7:6f:09:0e:5c:b8:
                    20:44:c6:45:58:7e:14:8c:ea:f0:20:42:90:79:bc:
                    75:1d:ef:70:9e:ee:cf:2b:bc:b4:c0:ce:39:7a:9f:
                    79:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B3:FE:D1:81:86:0A:54:74:47:D4:CC:3E:EA:FF:8F:77:37:F0:19
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/20212cf5-9652-3db8-891b-2e568988220d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9/bebad29c-c2e4-447d-a29e-20f329219ea9.crl

            X509v3 Authority Key Identifier:
                keyid:07:3C:51:6D:EA:85:18:32:66:CA:85:68:84:47:38:0F:36:B9:52:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/bebad29c-c2e4-447d-a29e-20f329219ea9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.82.211.0/24
                  172.82.213.0/24
                  172.82.225.0/24
                  172.82.237.0/24
                  192.243.245.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:d5:5c:f6:fe:2b:77:ba:1c:1f:26:42:c2:c3:11:16:e1:46:
         69:60:e4:37:af:4d:e7:16:cb:e9:f9:e1:1c:02:f1:4b:06:8f:
         78:60:19:db:65:40:dc:ab:b1:f1:90:2b:bd:89:53:12:b2:c8:
         e2:94:89:cc:4f:1e:8f:d2:72:00:2a:22:5e:87:cf:47:93:54:
         5c:f0:1b:29:37:ca:0f:18:59:9a:e3:e0:97:c9:74:75:44:5b:
         20:74:51:29:b9:66:85:45:fd:28:73:0e:dc:04:15:81:0e:8b:
         a9:66:c2:c9:3b:f7:b7:e3:bb:50:f4:a3:48:ae:7a:ef:2d:24:
         c7:0c:94:1b:d7:a2:ff:1f:f2:41:49:b6:aa:d0:56:a0:b6:67:
         ce:52:16:a7:a0:9b:70:99:fa:f6:44:1c:88:62:59:2a:b1:14:
         4f:1e:49:9d:07:11:9c:46:bb:4d:51:91:50:0a:1a:97:fd:fe:
         c9:63:56:37:18:3c:46:8a:54:8a:36:68:d4:3f:e7:27:7f:f5:
         7b:14:1f:69:f6:fa:31:d0:e6:1f:96:32:b9:d7:4d:fc:27:f2:
         ba:a8:ce:8c:8a:0b:17:0a:de:3e:b0:82:9d:17:6c:0d:bd:f7:
         fd:0f:64:7b:f8:91:df:76:de:5a:44:49:fb:be:4c:5f:30:5f:
         7c:1d:34:ff
-----BEGIN CERTIFICATE-----
MIIGWzCCBUOgAwIBAgIUAQ0Mn0MoWEg/gCx7EQ3b6CVSa0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmViYWQyOWMtYzJlNC00NDdkLWEyOWUtMjBmMzI5MjE5
ZWE5MB4XDTI0MTIxODE0MDA1MloXDTI1MDMxODEzMDA1MlowLzEtMCsGA1UEAxMk
YjcyMDIxZDItZDE0MS00YTc0LWE1MjEtZTVjOTJlOGE3NjJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiPUW/5trStZqD2fZZ84sNnJmxovDmncNfnCA
wECpX/yVVmgREYbEvY14gMGGAvgknHrLvJxbbB1qr7F+tJ8srCSG+FcyCvPtOFX4
Zszkgle5avuLArHFNnfS2Fm0qV/p5Hh3pbu37raN5f5SmN35EqJnttLFi/PI6ax2
sHe1ye/vGd24ML09QGJ2LiOQO4ZxGDcuSpmUt0EJUlNplu48sa2P8UkHa3hEn9iT
jjWkEx6i/6bq3PmOJZ9/mffOJGMEWY/jgCng+bW0fNxFWVSQS9RdCTrROMBJOkO3
bwkOXLggRMZFWH4UjOrwIEKQebx1He9wnu7PK7y0wM45ep95KQIDAQABo4IDbTCC
A2kwHQYDVR0OBBYEFHqz/tGBhgpUdEfUzD7q/493N/AZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJh
ZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYzMjkyMTllYTkvMjAyMTJjZjUtOTY1Mi0z
ZGI4LTg5MWItMmU1Njg5ODgyMjBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYmViYWQyOWMtYzJlNC00NDdkLWEy
OWUtMjBmMzI5MjE5ZWE5L2JlYmFkMjljLWMyZTQtNDQ3ZC1hMjllLTIwZjMyOTIx
OWVhOS5jcmwwHwYDVR0jBBgwFoAUBzxRbeqFGDJmyoVohEc4Dza5UhAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iZWJhZDI5Yy1jMmU0LTQ0N2QtYTI5ZS0yMGYz
MjkyMTllYTkuY2VyMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQArFLTAwQA
rFLVAwQArFLhAwQArFLtAwQAwPP1MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIw
OjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jw
a2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA/VXPb+K3e6HB8mQsLDERbh
Rmlg5DevTecWy+n54RwC8UsGj3hgGdtlQNyrsfGQK72JUxKyyOKUicxPHo/ScgAq
Il6Hz0eTVFzwGyk3yg8YWZrj4JfJdHVEWyB0USm5ZoVF/ShzDtwEFYEOi6lmwsk7
97fju1D0o0iueu8tJMcMlBvXov8f8kFJtqrQVqC2Z85SFqegm3CZ+vZEHIhiWSqx
FE8eSZ0HEZxGu01RkVAKGpf9/sljVjcYPEaKVIo2aNQ/5yd/9XsUH2n2+jHQ5h+W
MrnXTfwn8rqozoyKCxcK3j6wgp0XbA299/0PZHv4kd923lpESfu+TF8wX3wdNP8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:36:33 2025 by rpki-client