Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
File:                     f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa (raw, json)
Hash identifier:          MMbYdGJzL0p0w5dkHcOoARk8TfsjAiEqLBjOBv89E/o=
Subject key identifier:   E3:36:34:15:C9:8A:A0:06:8B:D6:FA:40:58:99:13:8F:E5:F6:78:6F
Certificate issuer:       /CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
Certificate serial:       010D0C9F43285848A318AB8C8F2705DE65DFDA80
Authority key identifier: DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa
Signing time:             Thu 23 Jan 2025 06:13:21 +0000
ROA not before:           Thu 23 Jan 2025 06:13:21 +0000
ROA not after:            Wed 23 Apr 2025 05:13:21 +0000
asID:                     16591
IP address blocks:        136.33.128.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 21 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a3:18:ab:8c:8f:27:05:de:65:df:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7b65ca5-ead8-4268-bc1a-4ca406f9a34e
        Validity
            Not Before: Jan 23 06:13:21 2025 GMT
            Not After : Apr 23 05:13:21 2025 GMT
        Subject: CN=adc1c8d7-e7a7-4911-bd24-70a831cf3382
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:78:08:a9:e3:1d:18:27:f7:f2:8b:ed:d5:af:
                    34:ba:b1:04:93:3a:a5:94:fa:cb:73:c9:eb:4a:78:
                    1d:3d:89:27:1a:57:3b:70:0e:ad:66:c5:31:d3:bc:
                    5b:4a:2d:99:a8:e7:71:b3:18:3f:5e:21:2d:f6:6f:
                    ef:99:31:8d:60:2d:ec:c5:88:52:fc:fd:65:aa:6f:
                    c0:08:f0:03:4e:ad:e2:de:36:64:c1:ac:2d:07:aa:
                    cc:75:44:8d:dd:e4:71:e3:75:bb:f6:6c:3e:ac:2b:
                    1e:1a:d1:49:f6:25:4c:f7:df:bf:78:0e:d4:d4:32:
                    46:c4:91:9d:1e:ed:61:4a:65:aa:e4:a3:30:da:94:
                    1c:f6:63:e1:f1:c2:09:28:da:87:5f:7d:47:9e:fd:
                    be:59:13:ea:f0:a7:b9:ae:41:fc:9c:1f:21:0f:d4:
                    33:a8:06:8c:8a:03:38:a8:5d:bb:22:b0:e1:36:9b:
                    1e:54:07:a4:de:b1:5e:fc:84:9c:1f:64:0b:81:b5:
                    58:de:3e:6e:f8:e7:52:cf:f0:a6:f8:99:b4:2a:69:
                    3d:cc:06:45:1f:b0:32:ce:05:b1:1f:d3:16:1b:3c:
                    24:79:d9:45:0e:84:d6:a5:66:e0:88:aa:81:7e:31:
                    bb:15:8e:f8:bf:1c:4c:95:36:1d:d8:43:48:e7:0e:
                    e8:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:36:34:15:C9:8A:A0:06:8B:D6:FA:40:58:99:13:8F:E5:F6:78:6F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/f8cb7d1c-f07d-3aa9-9c6a-bc9ee13c3ed2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.crl

            X509v3 Authority Key Identifier:
                keyid:DC:1A:23:3D:66:07:66:A7:83:81:E3:AD:50:E9:63:7D:C3:BA:02:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e7b65ca5-ead8-4268-bc1a-4ca406f9a34e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.33.128.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:53:c6:df:86:b6:cd:bb:ef:5c:9c:e6:f3:99:9a:fd:b1:97:
         17:0f:81:4d:3c:4b:c1:ae:86:52:6b:42:01:e3:95:7d:54:0c:
         c5:ff:e6:e8:31:5d:7f:3e:86:77:83:61:c5:ff:fb:81:42:19:
         56:92:cf:2e:31:c4:36:4d:4b:2b:37:eb:4d:77:18:60:f2:60:
         3a:6f:4f:b4:3c:c4:0d:1d:a1:d2:8c:0f:af:3f:3b:cd:a7:46:
         8f:70:10:46:81:31:2e:1a:73:2d:9d:d6:d2:79:76:b4:1d:ba:
         53:e7:b3:df:a6:e0:83:c2:e2:0b:c0:25:92:46:ed:d3:a8:c2:
         68:2a:7a:2b:d3:10:00:56:b1:90:11:43:5a:0d:0e:91:69:cc:
         ec:88:fe:05:ae:89:f0:55:8f:80:95:0a:89:d9:04:2e:86:62:
         ad:0b:3b:68:fc:9d:6f:97:80:39:59:37:e0:4a:de:cb:d0:44:
         6b:c8:7b:1f:9e:0a:b5:74:73:79:9e:cc:0d:cc:02:fe:54:4f:
         39:c3:18:26:f5:70:49:90:93:24:fc:68:49:8a:d9:a9:26:e6:
         c1:71:c8:c9:dd:a3:d1:31:be:5d:fb:61:ce:3a:4c:47:47:2c:
         b1:22:83:67:57:bf:32:d7:e3:a6:29:37:25:2f:0f:61:f8:79:
         73:d7:3f:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEijGKuMjycF3mXf2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdiNjVjYTUtZWFkOC00MjY4LWJjMWEtNGNhNDA2Zjlh
MzRlMB4XDTI1MDEyMzA2MTMyMVoXDTI1MDQyMzA1MTMyMVowLzEtMCsGA1UEAxMk
YWRjMWM4ZDctZTdhNy00OTExLWJkMjQtNzBhODMxY2YzMzgyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyHgIqeMdGCf38ovt1a80urEEkzqllPrLc8nr
SngdPYknGlc7cA6tZsUx07xbSi2ZqOdxsxg/XiEt9m/vmTGNYC3sxYhS/P1lqm/A
CPADTq3i3jZkwawtB6rMdUSN3eRx43W79mw+rCseGtFJ9iVM99+/eA7U1DJGxJGd
Hu1hSmWq5KMw2pQc9mPh8cIJKNqHX31Hnv2+WRPq8Ke5rkH8nB8hD9QzqAaMigM4
qF27IrDhNpseVAek3rFe/IScH2QLgbVY3j5u+OdSz/Cm+Jm0Kmk9zAZFH7AyzgWx
H9MWGzwkedlFDoTWpWbgiKqBfjG7FY74vxxMlTYd2ENI5w7ohwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOM2NBXJiqAGi9b6QFiZE4/l9nhvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2
NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0MDZmOWEzNGUvZjhjYjdkMWMtZjA3ZC0z
YWE5LTljNmEtYmM5ZWUxM2MzZWQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTdiNjVjYTUtZWFkOC00MjY4LWJj
MWEtNGNhNDA2ZjlhMzRlL2U3YjY1Y2E1LWVhZDgtNDI2OC1iYzFhLTRjYTQwNmY5
YTM0ZS5jcmwwHwYDVR0jBBgwFoAU3BojPWYHZqeDgeOtUOljfcO6AkwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lN2I2NWNhNS1lYWQ4LTQyNjgtYmMxYS00Y2E0
MDZmOWEzNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEiCGAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtTxt+Gts2771yc5vOZmv2xlxcPgU08S8GuhlJrQgHjlX1UDMX/5ugx
XX8+hneDYcX/+4FCGVaSzy4xxDZNSys36013GGDyYDpvT7Q8xA0dodKMD68/O82n
Ro9wEEaBMS4acy2d1tJ5drQdulPns9+m4IPC4gvAJZJG7dOowmgqeivTEABWsZAR
Q1oNDpFpzOyI/gWuifBVj4CVConZBC6GYq0LO2j8nW+XgDlZN+BK3svQRGvIex+e
CrV0c3mezA3MAv5UTznDGCb1cEmQkyT8aEmK2akm5sFxyMndo9Exvl37Yc46TEdH
LLEig2dXvzLX46YpNyUvD2H4eXPXP00=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:35 2025 by rpki-client