Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa
File:                     7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa (raw, json)
Hash identifier:          V4p+v/8x0tw1U9CaUfAnrQZrLcSG6Epien530r93VH4=
Subject key identifier:   E6:8C:9B:A8:6B:FC:7D:CB:01:C7:58:56:CA:D0:B4:3A:71:2C:EA:36
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AFB6E47D770A182F2000
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa
Signing time:             Thu 23 Jan 2025 06:13:23 +0000
ROA not before:           Thu 23 Jan 2025 06:13:23 +0000
ROA not after:            Wed 23 Apr 2025 05:13:23 +0000
asID:                     16591
IP address blocks:        216.21.160.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:af:b6:e4:7d:77:0a:18:2f:20:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:23 2025 GMT
            Not After : Apr 23 05:13:23 2025 GMT
        Subject: CN=b988e93c-2043-4229-b242-3c3f9ff5d9f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:42:a6:29:89:b7:99:5d:e1:92:21:4e:1c:fd:
                    1d:7f:42:d4:9c:7a:f3:dc:71:c2:ed:21:ef:e3:2a:
                    8d:49:6e:cf:32:14:1b:85:ca:75:64:ab:53:cc:5c:
                    af:3e:82:5f:23:1c:12:5a:be:3b:4f:c0:42:2c:be:
                    1e:24:f6:e8:12:7a:77:1a:f5:79:3a:f0:c7:08:e7:
                    30:95:62:42:ee:18:01:1e:db:52:37:eb:03:96:93:
                    75:95:3d:c8:da:53:0f:d4:55:f9:95:ee:3a:e9:30:
                    73:57:33:3e:82:7f:f1:d8:ca:86:81:ae:57:38:5a:
                    15:b0:b9:1f:70:21:ad:3c:8b:9e:80:a2:45:df:e9:
                    9a:c9:a4:65:ac:e3:df:46:78:7d:07:f0:15:ae:13:
                    42:94:f9:b3:ca:65:de:bb:ec:2c:7b:72:23:bf:a7:
                    39:96:ef:27:e7:2e:ef:f8:0a:59:80:58:84:5e:59:
                    e3:7e:43:52:7f:07:a8:11:08:96:f6:31:91:76:83:
                    df:c9:80:8c:c8:b2:31:e3:91:11:16:6b:e7:ec:15:
                    b8:61:15:fa:7f:10:f8:4f:a8:e9:38:5e:7b:57:ee:
                    0b:5a:48:1c:5e:e2:8b:ab:10:be:45:89:ac:f2:62:
                    57:69:5d:5d:b7:c0:91:88:19:ec:23:da:83:60:cc:
                    12:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:8C:9B:A8:6B:FC:7D:CB:01:C7:58:56:CA:D0:B4:3A:71:2C:EA:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/7d8ceba9-1594-3c62-a612-2c79c11cd18e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.21.160.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:bf:7e:fe:b3:8d:19:fc:96:cd:0f:b6:21:f9:21:14:e4:20:
         5f:64:9d:76:07:75:49:10:ae:f1:20:5e:4a:e4:a0:ad:3a:a8:
         36:fa:e3:38:ae:57:63:c0:d5:dd:5f:0c:93:26:c7:e6:04:5a:
         96:c2:ff:62:b9:3b:94:04:a4:f7:6d:ea:b5:0c:0f:ea:7c:8c:
         94:4e:84:88:2c:c4:9e:27:17:e3:82:0b:de:29:ef:ca:ca:be:
         d3:34:b9:be:55:e6:be:fc:83:20:64:90:ea:c3:18:67:8b:1f:
         58:4a:08:0f:2a:b1:39:20:d7:58:32:5a:69:bd:f5:ec:33:88:
         e3:01:9c:4f:66:d8:1a:62:51:2f:0c:47:a9:5a:43:4f:db:9c:
         9d:08:4c:ab:2b:7b:c6:ff:de:6d:59:57:e8:d5:4c:c8:11:59:
         e9:4b:14:9b:2c:54:8b:8a:c4:66:4d:b2:99:5b:84:83:90:38:
         67:a7:aa:60:4c:60:1c:39:57:9c:0b:0b:dd:80:62:a1:10:54:
         7b:0b:4a:ee:4d:5d:ba:64:a0:96:a7:48:ee:98:04:59:b7:18:
         47:89:59:d7:f1:36:a9:3a:f7:23:d0:82:ef:13:15:f4:8d:75:
         08:d3:e6:69:f1:a7:0d:a8:15:b9:46:bf:b0:89:45:e2:53:33:
         6b:25:ad:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGK+25H13ChgvIAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyM1oXDTI1MDQyMzA1MTMyM1owLzEtMCsGA1UEAxMk
Yjk4OGU5M2MtMjA0My00MjI5LWIyNDItM2MzZjlmZjVkOWYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0KmKYm3mV3hkiFOHP0df0LUnHrz3HHC7SHv
4yqNSW7PMhQbhcp1ZKtTzFyvPoJfIxwSWr47T8BCLL4eJPboEnp3GvV5OvDHCOcw
lWJC7hgBHttSN+sDlpN1lT3I2lMP1FX5le466TBzVzM+gn/x2MqGga5XOFoVsLkf
cCGtPIuegKJF3+mayaRlrOPfRnh9B/AVrhNClPmzymXeu+wse3Ijv6c5lu8n5y7v
+ApZgFiEXlnjfkNSfweoEQiW9jGRdoPfyYCMyLIx45ERFmvn7BW4YRX6fxD4T6jp
OF57V+4LWkgcXuKLqxC+RYms8mJXaV1dt8CRiBnsI9qDYMwSWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaMm6hr/H3LAcdYVsrQtDpxLOo2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvN2Q4Y2ViYTktMTU5NC0z
YzYyLWE2MTItMmM3OWMxMWNkMThlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2BWgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABa/fv6zjRn8ls0PtiH5IRTkIF9knXYHdUkQrvEgXkrkoK06qDb64ziu
V2PA1d1fDJMmx+YEWpbC/2K5O5QEpPdt6rUMD+p8jJROhIgsxJ4nF+OCC94p78rK
vtM0ub5V5r78gyBkkOrDGGeLH1hKCA8qsTkg11gyWmm99ewziOMBnE9m2BpiUS8M
R6laQ0/bnJ0ITKsre8b/3m1ZV+jVTMgRWelLFJssVIuKxGZNsplbhIOQOGenqmBM
YBw5V5wLC92AYqEQVHsLSu5NXbpkoJanSO6YBFm3GEeJWdfxNqk69yPQgu8TFfSN
dQjT5mnxpw2oFblGv7CJReJTM2slrYk=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:43:35 2025 by rpki-client