Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/853165af-249a-3981-8792-fc6d8b211d82.roa
File:                     853165af-249a-3981-8792-fc6d8b211d82.roa (raw, json)
Hash identifier:          mBQnouq5FK3VBXe2JKcNWqI1AADElQUZ+4qj8l6m7PQ=
Subject key identifier:   70:92:13:B0:9A:7F:F6:A3:E3:B2:CD:3F:F4:74:C9:99:E1:49:D5:38
Certificate issuer:       /CN=b76a56d7-e03c-4adc-a642-166acb54d72b
Certificate serial:       010D0C9F43285848D0ABB2325D264624ED80CA00
Authority key identifier: 67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/853165af-249a-3981-8792-fc6d8b211d82.roa
Signing time:             Sat 08 Feb 2025 14:00:52 +0000
ROA not before:           Sat 08 Feb 2025 14:00:52 +0000
ROA not after:            Fri 09 May 2025 13:00:52 +0000
asID:                     32277
IP address blocks:        216.211.0.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:d0:ab:b2:32:5d:26:46:24:ed:80:ca:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b76a56d7-e03c-4adc-a642-166acb54d72b
        Validity
            Not Before: Feb  8 14:00:52 2025 GMT
            Not After : May  9 13:00:52 2025 GMT
        Subject: CN=e8a9f15e-23da-4fbb-8266-2cfbbb9a0354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:c2:ad:f2:8f:1d:91:f8:fd:30:22:e9:b1:b5:
                    e4:7b:56:07:db:b7:95:14:a6:2e:e9:10:e8:f0:3e:
                    da:86:b9:48:bb:8e:19:5f:31:ac:27:92:2b:da:f1:
                    19:95:7e:30:60:b4:78:a0:6f:d9:ac:59:8a:a3:be:
                    3f:61:41:40:df:50:fe:8f:e7:2c:74:37:06:b9:c0:
                    0e:a8:7b:3f:67:e6:4a:e3:93:44:9c:27:42:66:db:
                    c6:85:43:dd:ee:ba:88:9e:bf:6a:8b:77:92:93:f6:
                    f2:aa:13:76:40:c4:63:d3:f6:a5:46:98:77:75:90:
                    ad:14:8b:b1:ed:83:d1:b6:90:ad:50:eb:c1:85:83:
                    6a:01:39:6b:25:11:f7:35:93:c7:ac:89:99:92:d1:
                    7e:c3:98:34:62:e5:bc:fc:7c:77:bc:f5:8d:1d:6e:
                    a6:7c:ad:be:6d:59:91:d4:6c:a9:6a:12:50:6a:4b:
                    83:21:47:07:53:8b:87:7b:0b:e7:91:1a:7a:65:0c:
                    b1:27:b1:ba:68:4f:23:57:91:68:ae:85:28:2f:c8:
                    55:88:2a:3c:e4:cf:0d:34:be:5d:2c:8c:5b:5b:91:
                    72:5b:b5:87:fc:f5:d8:2c:40:cd:12:04:c1:36:13:
                    d8:5e:69:a1:01:8d:ea:4b:c0:ca:12:4a:c2:c9:11:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:92:13:B0:9A:7F:F6:A3:E3:B2:CD:3F:F4:74:C9:99:E1:49:D5:38
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/853165af-249a-3981-8792-fc6d8b211d82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b/b76a56d7-e03c-4adc-a642-166acb54d72b.crl

            X509v3 Authority Key Identifier:
                keyid:67:6B:3E:21:02:05:28:69:31:0F:D6:D0:1C:A6:E1:3E:BB:8F:E8:CB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/b76a56d7-e03c-4adc-a642-166acb54d72b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.211.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:4c:eb:23:a2:82:44:68:90:05:9b:39:80:7b:dd:15:95:26:
         62:c2:a0:33:21:8b:f8:fe:a9:44:33:ca:62:ff:fb:9d:3b:55:
         96:f8:9d:d1:d1:68:77:6d:b7:cf:fb:72:ac:c4:d1:c2:23:3f:
         41:12:eb:53:ec:02:0c:1a:fd:79:14:21:45:ce:f6:21:7e:98:
         b5:b8:b9:3f:77:94:c6:be:4c:ad:2f:82:60:df:7a:c5:96:ff:
         3c:58:56:ba:92:92:40:f3:ad:9f:79:90:b6:26:be:2c:f9:6d:
         0f:4b:a9:03:ac:93:6a:52:f9:3a:72:80:db:f5:bc:21:c0:64:
         84:f6:c5:31:46:3e:a5:2b:3f:a3:ea:ed:9a:a1:7e:bc:44:35:
         56:d9:1f:4a:c1:ba:63:15:27:20:a0:b6:d8:c4:c1:07:1f:7d:
         6c:07:ad:ba:51:8d:c5:88:58:e2:38:b3:70:fd:f8:38:4e:e5:
         4e:5f:f7:de:c6:93:60:28:a8:e2:7c:ea:82:31:df:94:08:c5:
         d6:fc:d8:dd:b9:5f:24:f1:7e:66:1b:60:7d:25:34:e3:cd:2f:
         04:0f:35:1b:c8:45:5d:8c:9f:16:e5:f0:71:7d:92:57:10:ca:
         e1:b6:8a:bf:99:2e:d3:bb:6d:00:cf:24:56:9a:87:9e:bb:d8:
         63:5f:45:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjQq7IyXSZGJO2AygAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjc2YTU2ZDctZTAzYy00YWRjLWE2NDItMTY2YWNiNTRk
NzJiMB4XDTI1MDIwODE0MDA1MloXDTI1MDUwOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZThhOWYxNWUtMjNkYS00ZmJiLTgyNjYtMmNmYmJiOWEwMzU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8Kt8o8dkfj9MCLpsbXke1YH27eVFKYu6RDo
8D7ahrlIu44ZXzGsJ5Ir2vEZlX4wYLR4oG/ZrFmKo74/YUFA31D+j+csdDcGucAO
qHs/Z+ZK45NEnCdCZtvGhUPd7rqInr9qi3eSk/byqhN2QMRj0/alRph3dZCtFIux
7YPRtpCtUOvBhYNqATlrJRH3NZPHrImZktF+w5g0YuW8/Hx3vPWNHW6mfK2+bVmR
1GypahJQakuDIUcHU4uHewvnkRp6ZQyxJ7G6aE8jV5ForoUoL8hViCo85M8NNL5d
LIxbW5FyW7WH/PXYLEDNEgTBNhPYXmmhAY3qS8DKEkrCyRFlpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHCSE7Caf/aj47LNP/R0yZnhSdU4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZh
NTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZhY2I1NGQ3MmIvODUzMTY1YWYtMjQ5YS0z
OTgxLTg3OTItZmM2ZDhiMjExZDgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYjc2YTU2ZDctZTAzYy00YWRjLWE2
NDItMTY2YWNiNTRkNzJiL2I3NmE1NmQ3LWUwM2MtNGFkYy1hNjQyLTE2NmFjYjU0
ZDcyYi5jcmwwHwYDVR0jBBgwFoAUZ2s+IQIFKGkxD9bQHKbhPruP6MswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9iNzZhNTZkNy1lMDNjLTRhZGMtYTY0Mi0xNjZh
Y2I1NGQ3MmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQH2NMAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNM6yOigkRokAWbOYB73RWVJmLCoDMhi/j+qUQzymL/+507VZb4ndHR
aHdtt8/7cqzE0cIjP0ES61PsAgwa/XkUIUXO9iF+mLW4uT93lMa+TK0vgmDfesWW
/zxYVrqSkkDzrZ95kLYmviz5bQ9LqQOsk2pS+TpygNv1vCHAZIT2xTFGPqUrP6Pq
7ZqhfrxENVbZH0rBumMVJyCgttjEwQcffWwHrbpRjcWIWOI4s3D9+DhO5U5f997G
k2AoqOJ86oIx35QIxdb82N25XyTxfmYbYH0lNOPNLwQPNRvIRV2Mnxbl8HF9klcQ
yuG2ir+ZLtO7bQDPJFaah5672GNfRbA=
-----END CERTIFICATE-----
Generated at Wed Apr 9 14:07:28 2025 by rpki-client