Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa
File:                     b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa (raw, json)
Hash identifier:          U7etUI6J5Gq+Fzt7D5kwTw8QSd9iO3ReTlyUA8nEBOE=
Subject key identifier:   9B:7B:25:DF:6D:D0:9A:EC:E4:D2:37:1B:51:32:40:A4:DB:95:1D:D3
Certificate issuer:       /CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
Certificate serial:       010D0C9F43285848AF2B7B86E318EB96C005FB80
Authority key identifier: D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa
Signing time:             Mon 27 Jan 2025 14:00:52 +0000
ROA not before:           Mon 27 Jan 2025 14:00:52 +0000
ROA not after:            Sun 27 Apr 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        216.185.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:af:2b:7b:86:e3:18:eb:96:c0:05:fb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab18b209-7ecc-4361-b8f6-d86a5a5504da
        Validity
            Not Before: Jan 27 14:00:52 2025 GMT
            Not After : Apr 27 13:00:52 2025 GMT
        Subject: CN=4d3015cc-c095-4bef-968f-c2940d13ba6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7a:0d:34:cd:a8:2c:d2:47:ac:14:cd:7f:4a:
                    55:25:5b:8a:50:c3:17:97:b4:00:ad:5c:be:8c:63:
                    58:63:8e:ab:4a:1e:7b:b3:b1:40:5b:cc:bb:c8:ce:
                    77:43:fb:f9:d7:3d:db:75:60:a1:7a:69:40:8f:0f:
                    15:32:e2:bf:94:98:2f:03:e9:0b:4b:a2:8c:3d:7e:
                    2a:fd:5c:b5:46:40:3f:ca:b6:fb:9b:1d:d1:64:f5:
                    da:aa:09:d6:64:b3:78:53:3a:8f:fc:97:68:a8:fe:
                    de:39:37:d3:55:36:b6:fa:b8:fd:46:3d:c9:1b:cc:
                    a3:6f:2f:09:fe:2a:2a:00:e1:15:90:eb:3c:6b:71:
                    c7:7f:59:3c:15:1a:94:c8:0f:f0:6b:e1:9b:6e:e8:
                    26:0d:c6:fa:c6:54:d7:f2:1a:c3:f3:24:9e:e8:d4:
                    6d:f9:65:64:55:24:2f:d9:21:d8:3e:e9:1e:f2:23:
                    88:96:55:66:da:fa:6f:f2:bd:59:6d:6b:a9:10:92:
                    b6:c4:47:82:3b:b8:18:9f:37:1b:a3:4b:b5:13:35:
                    44:9c:f8:41:f0:8f:0c:7f:4f:40:e3:51:8b:b8:2d:
                    ca:06:46:1c:17:21:0c:14:be:0c:10:4e:4b:62:58:
                    2c:00:42:c1:40:86:8a:e7:6d:a7:e3:62:4f:7e:23:
                    6f:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:7B:25:DF:6D:D0:9A:EC:E4:D2:37:1B:51:32:40:A4:DB:95:1D:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/b06a5bbf-be3a-3890-8546-2dc5a822c28e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da/ab18b209-7ecc-4361-b8f6-d86a5a5504da.crl

            X509v3 Authority Key Identifier:
                keyid:D2:27:71:D0:32:49:A0:9D:80:1E:09:E7:67:60:82:39:3B:69:D2:69

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab18b209-7ecc-4361-b8f6-d86a5a5504da.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:a0:3c:28:b5:24:82:eb:44:55:12:e5:c2:ab:8e:2c:f7:b7:
         0c:a7:ff:04:58:34:9d:cd:77:da:10:68:31:42:55:ff:0e:1a:
         02:19:87:8c:d8:53:74:bf:bc:30:57:0b:57:22:c3:e5:09:c0:
         61:3d:c0:12:b4:cf:65:39:8c:09:d3:c8:39:dd:b9:74:b7:45:
         12:63:d5:9c:d2:38:41:c4:6d:46:d0:a9:d6:6d:78:9a:a6:23:
         ed:7c:ca:61:f5:c9:53:12:96:e5:e0:c8:52:9a:94:81:98:3d:
         af:93:4b:2e:88:f0:d2:3e:9b:a9:51:19:c7:c9:84:96:8d:d7:
         ad:85:1d:fb:13:72:cc:e8:f9:c6:cb:d8:34:14:55:c0:2b:96:
         1a:36:3b:18:f5:68:12:04:87:24:e2:04:5c:99:bd:d1:97:6e:
         f9:d4:b8:fe:d8:7a:b4:61:f3:f4:67:e2:ca:f9:a9:24:23:cb:
         94:1c:63:1a:02:54:a6:7e:7e:2d:83:1b:00:21:c1:9e:b1:c2:
         1d:f5:d1:94:90:41:27:67:84:12:0b:07:aa:47:dc:8c:96:f1:
         ad:94:d6:67:d1:31:05:24:94:d9:2d:f7:70:5c:f7:d6:6b:0e:
         0d:07:89:bd:4f:74:40:d4:3e:da:ba:32:ad:37:3f:b1:cf:fd:
         4e:c0:d6:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEivK3uG4xjrlsAF+4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIxOGIyMDktN2VjYy00MzYxLWI4ZjYtZDg2YTVhNTUw
NGRhMB4XDTI1MDEyNzE0MDA1MloXDTI1MDQyNzEzMDA1MlowLzEtMCsGA1UEAxMk
NGQzMDE1Y2MtYzA5NS00YmVmLTk2OGYtYzI5NDBkMTNiYTZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XoNNM2oLNJHrBTNf0pVJVuKUMMXl7QArVy+
jGNYY46rSh57s7FAW8y7yM53Q/v51z3bdWChemlAjw8VMuK/lJgvA+kLS6KMPX4q
/Vy1RkA/yrb7mx3RZPXaqgnWZLN4UzqP/JdoqP7eOTfTVTa2+rj9Rj3JG8yjby8J
/ioqAOEVkOs8a3HHf1k8FRqUyA/wa+GbbugmDcb6xlTX8hrD8ySe6NRt+WVkVSQv
2SHYPuke8iOIllVm2vpv8r1ZbWupEJK2xEeCO7gYnzcbo0u1EzVEnPhB8I8Mf09A
41GLuC3KBkYcFyEMFL4MEE5LYlgsAELBQIaK522n42JPfiNvhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJt7Jd9t0Jrs5NI3G1EyQKTblR3TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4
YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZhNWE1NTA0ZGEvYjA2YTViYmYtYmUzYS0z
ODkwLTg1NDYtMmRjNWE4MjJjMjhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIxOGIyMDktN2VjYy00MzYxLWI4
ZjYtZDg2YTVhNTUwNGRhL2FiMThiMjA5LTdlY2MtNDM2MS1iOGY2LWQ4NmE1YTU1
MDRkYS5jcmwwHwYDVR0jBBgwFoAU0idx0DJJoJ2AHgnnZ2CCOTtp0mkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjE4YjIwOS03ZWNjLTQzNjEtYjhmNi1kODZh
NWE1NTA0ZGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LnRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGSgPCi1JILrRFUS5cKrjiz3twyn/wRYNJ3Nd9oQaDFCVf8OGgIZh4zY
U3S/vDBXC1ciw+UJwGE9wBK0z2U5jAnTyDnduXS3RRJj1ZzSOEHEbUbQqdZteJqm
I+18ymH1yVMSluXgyFKalIGYPa+TSy6I8NI+m6lRGcfJhJaN162FHfsTcszo+cbL
2DQUVcArlho2Oxj1aBIEhyTiBFyZvdGXbvnUuP7YerRh8/Rn4sr5qSQjy5QcYxoC
VKZ+fi2DGwAhwZ6xwh310ZSQQSdnhBILB6pH3IyW8a2U1mfRMQUklNkt93Bc99Zr
Dg0Hib1PdEDUPtq6Mq03P7HP/U7A1kE=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:51:42 2025 by rpki-client