Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
File:                     c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa (raw, json)
Hash identifier:          1poOGXlFkWR8YWqB6tC/y1SsL+RHiEyBFQ/RK+r7UIQ=
Subject key identifier:   55:79:68:FD:73:87:7E:02:0B:7C:C8:84:A1:25:32:59:D9:6A:33:83
Certificate issuer:       /CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
Certificate serial:       010D0C9F432858493C093F6583327E1302DC031A
Authority key identifier: 89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa
Signing time:             Wed 19 Mar 2025 01:00:40 +0000
ROA not before:           Wed 19 Mar 2025 01:00:40 +0000
ROA not after:            Tue 17 Jun 2025 01:00:40 +0000
asID:                     11472
IP address blocks:        216.7.64.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3c:09:3f:65:83:32:7e:13:02:dc:03:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b194a9ed-65e1-4df1-85aa-9a35c571253b
        Validity
            Not Before: Mar 19 01:00:40 2025 GMT
            Not After : Jun 17 01:00:40 2025 GMT
        Subject: CN=0bcfd490-e6ff-44a8-b972-3d1cf8d15e19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e3:d1:99:8e:5a:17:5e:98:c2:3e:3b:d9:c6:
                    ab:b2:99:9a:7a:dc:c4:e8:38:cc:5b:6f:8e:4e:ae:
                    5a:44:bc:23:6c:2a:ee:7a:4c:00:eb:e4:55:43:3b:
                    56:1b:84:5b:30:7a:80:9b:93:68:26:90:07:9a:7a:
                    60:f2:63:00:86:84:e7:f1:5c:ff:b5:85:fd:51:d0:
                    66:d9:b1:21:6c:00:cf:1d:fd:41:bf:ac:86:ac:45:
                    93:a7:04:e3:76:90:97:fc:c0:25:9a:e8:eb:f0:fb:
                    0f:ac:11:c2:cd:e8:db:1c:27:c6:e2:1c:9e:7d:84:
                    26:6f:f8:76:9a:6d:bb:45:8a:c5:ed:17:81:04:dd:
                    42:a9:07:38:8e:c1:ff:a5:d3:46:dc:a2:81:d6:cf:
                    c1:3b:02:e0:a0:c9:8a:77:0c:03:6c:a0:5d:23:09:
                    ba:27:60:de:89:11:62:5b:45:a8:0d:cc:68:6b:3b:
                    6f:de:b9:09:7e:19:90:69:55:62:22:0f:f5:a7:dc:
                    29:61:2a:07:a7:d3:aa:5b:ee:6a:7c:ca:e3:65:3e:
                    97:97:45:17:77:94:a1:9e:b7:25:29:4d:3a:1c:93:
                    66:ac:42:1d:37:75:11:8a:a3:70:b3:4c:bf:82:a0:
                    e4:1d:ce:c0:cb:87:1a:00:c0:14:c9:73:72:ab:5d:
                    bf:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:79:68:FD:73:87:7E:02:0B:7C:C8:84:A1:25:32:59:D9:6A:33:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/c51ed012-f06e-33a6-a934-b2ef7ad2479a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b/b194a9ed-65e1-4df1-85aa-9a35c571253b.crl

            X509v3 Authority Key Identifier:
                keyid:89:14:EA:E2:30:BC:CF:0D:65:06:C0:1E:7C:34:93:B1:A3:5D:CD:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b194a9ed-65e1-4df1-85aa-9a35c571253b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.7.64.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:1f:e1:29:ee:56:a9:75:18:4e:e0:9d:77:b4:60:c6:9f:b6:
         5e:7a:55:3d:2f:c2:ee:d5:7b:b1:ff:e8:d1:fb:1f:87:15:2c:
         58:91:09:7d:40:1d:2a:20:56:f3:41:be:b5:03:13:02:05:27:
         f0:80:c4:6f:7a:e6:68:91:a7:1c:27:40:6c:e6:86:30:81:e9:
         28:02:40:06:70:d1:2d:48:67:79:a6:e7:47:32:93:53:f2:3d:
         f3:90:93:41:56:09:fa:46:88:26:da:73:74:41:15:37:40:35:
         67:4f:af:2d:da:42:cd:44:ff:42:a4:09:12:e4:d9:21:21:37:
         da:95:1d:20:78:69:83:b7:4d:5d:81:2f:ad:88:55:3a:80:a6:
         4e:d7:1c:e1:96:2a:6d:52:b5:44:55:c2:fd:fe:e3:1a:06:c1:
         47:1b:c7:67:e5:83:36:36:40:2f:ea:c3:5c:0e:f3:9d:ca:27:
         12:73:a9:d9:9b:c9:c1:89:91:61:f1:07:00:18:05:44:15:22:
         e6:28:95:42:15:fc:af:6f:69:25:77:07:82:f3:52:fd:3c:43:
         02:1f:20:5f:35:7a:68:6b:ec:cb:ee:c6:ca:bc:d4:5f:ec:0b:
         99:da:0e:67:7b:2e:1e:c1:64:6a:ca:53:9f:98:d8:44:42:08:
         83:a5:0c:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk8CT9lgzJ+EwLcAxowDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjE5NGE5ZWQtNjVlMS00ZGYxLTg1YWEtOWEzNWM1NzEy
NTNiMB4XDTI1MDMxOTAxMDA0MFoXDTI1MDYxNzAxMDA0MFowLzEtMCsGA1UEAxMk
MGJjZmQ0OTAtZTZmZi00NGE4LWI5NzItM2QxY2Y4ZDE1ZTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOPRmY5aF16Ywj472carspmaetzE6DjMW2+O
Tq5aRLwjbCruekwA6+RVQztWG4RbMHqAm5NoJpAHmnpg8mMAhoTn8Vz/tYX9UdBm
2bEhbADPHf1Bv6yGrEWTpwTjdpCX/MAlmujr8PsPrBHCzejbHCfG4hyefYQmb/h2
mm27RYrF7ReBBN1CqQc4jsH/pdNG3KKB1s/BOwLgoMmKdwwDbKBdIwm6J2DeiRFi
W0WoDcxoaztv3rkJfhmQaVViIg/1p9wpYSoHp9OqW+5qfMrjZT6Xl0UXd5Shnrcl
KU06HJNmrEIdN3URiqNws0y/gqDkHc7Ay4caAMAUyXNyq12/vQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFV5aP1zh34CC3zIhKElMlnZajODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0
YTllZC02NWUxLTRkZjEtODVhYS05YTM1YzU3MTI1M2IvYzUxZWQwMTItZjA2ZS0z
M2E2LWE5MzQtYjJlZjdhZDI0NzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjE5NGE5ZWQtNjVlMS00ZGYxLTg1
YWEtOWEzNWM1NzEyNTNiL2IxOTRhOWVkLTY1ZTEtNGRmMS04NWFhLTlhMzVjNTcx
MjUzYi5jcmwwHwYDVR0jBBgwFoAUiRTq4jC8zw1lBsAefDSTsaNdzYcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iMTk0YTllZC02NWUxLTRkZjEtODVhYS05YTM1
YzU3MTI1M2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2AdAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACIf4SnuVql1GE7gnXe0YMaftl56VT0vwu7Ve7H/6NH7H4cVLFiRCX1A
HSogVvNBvrUDEwIFJ/CAxG965miRpxwnQGzmhjCB6SgCQAZw0S1IZ3mm50cyk1Py
PfOQk0FWCfpGiCbac3RBFTdANWdPry3aQs1E/0KkCRLk2SEhN9qVHSB4aYO3TV2B
L62IVTqApk7XHOGWKm1StURVwv3+4xoGwUcbx2flgzY2QC/qw1wO853KJxJzqdmb
ycGJkWHxBwAYBUQVIuYolUIV/K9vaSV3B4LzUv08QwIfIF81emhr7Mvuxsq81F/s
C5naDmd7Lh7BZGrKU5+Y2ERCCIOlDJ0=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:06:24 2025 by rpki-client