Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0af682c-77fc-3659-81fc-e7d83411c707.roa
File:                     b0af682c-77fc-3659-81fc-e7d83411c707.roa (raw, json)
Hash identifier:          g824/hDx8naXiZhzVhha7zK7UHjoF0YZEhifB9Zs23E=
Subject key identifier:   3D:0A:1B:77:A7:27:51:C4:FF:30:2B:F7:46:4A:6C:96:F5:D5:D9:EB
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584A10F1335C212F838DA76D8B80
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0af682c-77fc-3659-81fc-e7d83411c707.roa
Signing time:             Tue 03 Jun 2025 07:19:41 +0000
ROA not before:           Tue 03 Jun 2025 07:19:41 +0000
ROA not after:            Mon 01 Sep 2025 07:19:41 +0000
asID:                     5065
IP address blocks:        216.27.172.0/24 maxlen: 24
                          216.27.173.0/24 maxlen: 24
                          216.27.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:f1:33:5c:21:2f:83:8d:a7:6d:8b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jun  3 07:19:41 2025 GMT
            Not After : Sep  1 07:19:41 2025 GMT
        Subject: CN=9b7cc7ab-eb58-473e-a80e-1b5eb83b7a40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5b:43:a8:d5:cd:64:43:04:78:09:a6:5d:15:
                    ba:d5:cd:80:cf:0d:fa:a5:b8:74:bf:7e:eb:b2:11:
                    fd:7f:4c:9f:d7:c6:be:3f:dc:94:f8:8e:14:f0:b7:
                    f8:96:fb:13:ac:c5:7c:88:db:75:c9:16:36:6f:12:
                    ee:fd:e0:3d:e4:76:14:af:63:df:bb:64:4c:fd:8a:
                    ba:0e:9c:ea:ea:34:41:1d:c0:e0:97:7b:f0:c4:c2:
                    70:a5:af:8e:49:47:f1:ea:cf:12:e2:31:e6:3c:6e:
                    2e:83:d0:21:09:e2:76:b7:66:bd:b6:35:fe:16:cb:
                    6b:96:f1:be:c7:4f:bd:ed:d7:cd:ae:d3:3b:c2:7f:
                    d7:28:93:98:2a:cb:e5:0d:7e:7a:0f:87:0b:03:36:
                    2d:d9:2b:d1:54:04:d2:dd:1e:2e:50:db:6f:3d:7f:
                    21:6e:f8:d5:3c:07:33:30:f5:c9:81:c0:26:73:96:
                    8e:ad:ad:70:c7:32:e2:34:5c:16:7b:5b:44:ca:3d:
                    60:ef:d4:6c:42:3b:26:5a:fa:bc:06:d8:df:7e:82:
                    d5:7a:c9:aa:10:b4:a3:57:8a:85:ce:0e:79:b4:b6:
                    c2:0d:56:d7:a9:47:12:9a:be:40:a8:ba:d7:a3:a0:
                    f2:ef:ff:bd:4c:51:79:31:cd:2a:a1:2d:b1:66:43:
                    e3:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:0A:1B:77:A7:27:51:C4:FF:30:2B:F7:46:4A:6C:96:F5:D5:D9:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/b0af682c-77fc-3659-81fc-e7d83411c707.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.27.172.0-216.27.174.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:bd:17:32:7e:e0:b4:38:e7:10:a1:00:9c:ec:9e:b8:de:e8:
         d5:e1:b0:70:78:bf:66:17:00:60:2c:29:c7:bc:36:4b:5b:08:
         54:30:f2:39:bc:55:2b:b3:a7:52:49:db:2a:40:3d:06:e6:12:
         49:96:cd:37:a2:0d:8f:80:4d:2f:66:71:39:05:6f:70:32:af:
         41:16:ef:29:ef:6f:00:c1:0c:ac:2e:3a:bf:ba:ca:8d:bf:b9:
         f7:e0:a7:75:36:53:8a:24:99:cf:8f:4c:d6:fd:b2:d5:2d:9f:
         53:35:2f:bc:6e:7f:16:a7:ce:43:ab:30:fe:97:cf:f7:cb:7f:
         ff:42:cd:3a:28:d0:dc:71:7c:da:73:29:88:9a:7b:8f:f9:18:
         84:dd:9b:83:ca:0c:5f:7f:d4:58:52:52:37:9c:cd:cf:75:b7:
         d1:97:56:79:f0:f1:81:0c:a0:35:fd:a6:4d:c4:97:fd:25:5c:
         92:ab:b3:e9:ce:ab:03:d5:61:a4:51:af:9b:51:e4:5c:02:80:
         64:e8:77:6a:33:b3:fc:ee:20:1e:58:ff:0b:e7:19:cd:f2:14:
         aa:09:9e:07:94:59:d3:c4:7e:75:ec:68:72:95:46:60:0c:d7:
         ec:53:8a:d5:84:b1:47:63:b7:5e:5e:1d:d6:dd:3b:11:bb:7b:
         2e:d0:50:50
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEoQ8TNcIS+Djadti4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDYwMzA3MTk0MVoXDTI1MDkwMTA3MTk0MVowLzEtMCsGA1UEAxMk
OWI3Y2M3YWItZWI1OC00NzNlLWE4MGUtMWI1ZWI4M2I3YTQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1tDqNXNZEMEeAmmXRW61c2Azw36pbh0v37r
shH9f0yf18a+P9yU+I4U8Lf4lvsTrMV8iNt1yRY2bxLu/eA95HYUr2Pfu2RM/Yq6
Dpzq6jRBHcDgl3vwxMJwpa+OSUfx6s8S4jHmPG4ug9AhCeJ2t2a9tjX+FstrlvG+
x0+97dfNrtM7wn/XKJOYKsvlDX56D4cLAzYt2SvRVATS3R4uUNtvPX8hbvjVPAcz
MPXJgcAmc5aOra1wxzLiNFwWe1tEyj1g79RsQjsmWvq8BtjffoLVesmqELSjV4qF
zg55tLbCDVbXqUcSmr5AqLrXo6Dy7/+9TFF5Mc0qoS2xZkPjVwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFD0KG3enJ1HE/zAr90ZKbJb11dnrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYjBhZjY4MmMtNzdmYy0z
NjU5LTgxZmMtZTdkODM0MTFjNzA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALYG6wD
BADYG64wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAmr0XMn7gtDjnEKEAnOyeuN7o1eGwcHi/ZhcAYCwpx7w2
S1sIVDDyObxVK7OnUknbKkA9BuYSSZbNN6INj4BNL2ZxOQVvcDKvQRbvKe9vAMEM
rC46v7rKjb+59+CndTZTiiSZz49M1v2y1S2fUzUvvG5/FqfOQ6sw/pfP98t//0LN
OijQ3HF82nMpiJp7j/kYhN2bg8oMX3/UWFJSN5zNz3W30ZdWefDxgQygNf2mTcSX
/SVckquz6c6rA9VhpFGvm1HkXAKAZOh3ajOz/O4gHlj/C+cZzfIUqgmeB5RZ08R+
dexocpVGYAzX7FOK1YSxR2O3Xl4d1t07Ebt7LtBQUA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 19:11:34 2025 by rpki-client