Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/311e404d-47f3-35f6-b428-42dd364e9490.roa
File:                     311e404d-47f3-35f6-b428-42dd364e9490.roa (raw, json)
Hash identifier:          y/bJmC0LTHRsW/K7JWkDZ6w6Vcq16tC7PIhQAHPtDTk=
Subject key identifier:   5B:87:9B:4D:D4:3F:3E:66:8B:A7:C8:92:4A:47:23:79:05:F4:25:E6
Certificate issuer:       /CN=58e96099-0986-4573-bb6b-873a9bcb3747
Certificate serial:       010D0C9F4328584922E8F637B3F3B867D114D680
Authority key identifier: 83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/311e404d-47f3-35f6-b428-42dd364e9490.roa
Signing time:             Mon 10 Mar 2025 01:00:39 +0000
ROA not before:           Mon 10 Mar 2025 01:00:39 +0000
ROA not after:            Sun 08 Jun 2025 01:00:39 +0000
asID:                     32160
IP address blocks:        72.9.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:22:e8:f6:37:b3:f3:b8:67:d1:14:d6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=58e96099-0986-4573-bb6b-873a9bcb3747
        Validity
            Not Before: Mar 10 01:00:39 2025 GMT
            Not After : Jun  8 01:00:39 2025 GMT
        Subject: CN=ca7467c4-4bc2-4c64-8e21-c341b18566f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c7:8b:95:c0:d8:3e:ec:76:a5:c9:20:33:4b:
                    b7:45:8d:39:50:32:e5:6d:dc:f3:83:2b:7b:ca:aa:
                    22:3a:ec:fd:f0:60:96:b2:7d:86:34:c2:cc:10:32:
                    20:09:2a:3f:8c:4f:f0:29:2a:3d:55:50:a0:91:d9:
                    38:39:bb:18:74:ca:c4:6d:c4:ee:ae:e1:ab:2f:ce:
                    ff:42:71:fb:b7:58:80:5e:1a:5b:4b:3f:7c:17:6b:
                    ea:61:75:f8:68:14:0a:1a:db:c8:8d:40:e3:4d:fa:
                    8f:7c:b1:04:5c:bb:e6:ee:8f:fe:32:57:1c:82:5d:
                    5f:a1:c1:1a:6c:e4:cf:4d:0a:79:bc:40:89:76:03:
                    e5:2b:c4:b6:57:2f:e0:ee:e4:86:5a:57:ff:a6:f0:
                    4d:6f:b9:1a:ef:85:2b:ca:ec:55:a8:d0:41:e4:be:
                    3d:ad:70:8f:5a:5c:c0:63:a5:89:af:76:be:35:af:
                    54:85:b6:79:8c:9a:77:84:ae:25:f8:00:64:a4:3e:
                    a6:8f:83:1e:52:70:cf:12:c6:83:cd:aa:c4:b4:18:
                    41:64:e9:48:40:1f:48:9a:31:95:82:90:00:0a:43:
                    6d:b4:a8:30:cf:a9:4b:c9:8d:1f:d8:86:17:17:d8:
                    7b:c3:9c:67:32:29:72:04:b7:fe:e1:5b:c9:6b:a0:
                    91:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:87:9B:4D:D4:3F:3E:66:8B:A7:C8:92:4A:47:23:79:05:F4:25:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/311e404d-47f3-35f6-b428-42dd364e9490.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747/58e96099-0986-4573-bb6b-873a9bcb3747.crl

            X509v3 Authority Key Identifier:
                keyid:83:AF:FD:B7:5F:FF:A7:35:A8:70:0C:3E:D8:0A:5E:BF:42:7D:7B:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/58e96099-0986-4573-bb6b-873a9bcb3747.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.9.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:4b:4b:2c:67:b5:3e:82:f3:82:54:eb:f2:95:66:67:92:36:
         7e:42:a7:e3:66:fe:77:1f:9e:57:38:0f:bb:c9:15:95:39:d0:
         dd:c5:ea:fe:a4:e2:dc:6f:db:ad:42:b8:a3:34:e4:0e:ed:20:
         9e:c5:73:0e:90:4e:67:05:6c:61:a1:b2:dc:84:59:6b:55:57:
         9d:73:2f:00:99:23:f6:09:70:d4:cd:ff:5a:14:a9:5e:cf:d2:
         30:32:89:ab:0c:61:a8:b0:ef:b3:0a:0a:3d:d1:de:3a:7d:36:
         7a:7c:0a:40:07:31:26:af:ae:75:55:63:ff:11:34:03:d4:bd:
         a0:ed:6b:70:66:f6:61:a2:2c:a3:dc:6c:ae:da:8a:ea:b3:94:
         62:4d:ee:ac:6b:25:4d:d2:93:35:e8:0d:cc:07:b0:90:22:aa:
         ef:3a:55:67:98:fc:61:6d:11:0b:1a:a1:f6:ba:6a:93:23:e2:
         db:8b:d8:67:27:f3:45:4c:c8:8a:a6:88:3e:6d:42:26:8a:6f:
         68:6c:aa:79:1e:69:b4:fc:4d:89:91:c5:79:40:de:77:a0:a0:
         57:f2:3b:93:a0:25:05:98:11:77:84:a3:07:87:e4:b2:e6:4a:
         77:c5:c8:0d:e7:c3:e9:d0:dd:f8:c0:21:9d:c6:42:6a:3a:db:
         8a:71:07:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEki6PY3s/O4Z9EU1oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNThlOTYwOTktMDk4Ni00NTczLWJiNmItODczYTliY2Iz
NzQ3MB4XDTI1MDMxMDAxMDAzOVoXDTI1MDYwODAxMDAzOVowLzEtMCsGA1UEAxMk
Y2E3NDY3YzQtNGJjMi00YzY0LThlMjEtYzM0MWIxODU2NmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMeLlcDYPux2pckgM0u3RY05UDLlbdzzgyt7
yqoiOuz98GCWsn2GNMLMEDIgCSo/jE/wKSo9VVCgkdk4ObsYdMrEbcTuruGrL87/
QnH7t1iAXhpbSz98F2vqYXX4aBQKGtvIjUDjTfqPfLEEXLvm7o/+Mlccgl1focEa
bOTPTQp5vECJdgPlK8S2Vy/g7uSGWlf/pvBNb7ka74UryuxVqNBB5L49rXCPWlzA
Y6WJr3a+Na9UhbZ5jJp3hK4l+ABkpD6mj4MeUnDPEsaDzarEtBhBZOlIQB9ImjGV
gpAACkNttKgwz6lLyY0f2IYXF9h7w5xnMilyBLf+4VvJa6CRuQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuHm03UPz5mi6fIkkpHI3kF9CXmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi81OGU5
NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNhOWJjYjM3NDcvMzExZTQwNGQtNDdmMy0z
NWY2LWI0MjgtNDJkZDM2NGU5NDkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNThlOTYwOTktMDk4Ni00NTczLWJi
NmItODczYTliY2IzNzQ3LzU4ZTk2MDk5LTA5ODYtNDU3My1iYjZiLTg3M2E5YmNi
Mzc0Ny5jcmwwHwYDVR0jBBgwFoAUg6/9t1//pzWocAw+2Apev0J9e6QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi81OGU5NjA5OS0wOTg2LTQ1NzMtYmI2Yi04NzNh
OWJjYjM3NDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQESAlwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJFLSyxntT6C84JU6/KVZmeSNn5Cp+Nm/ncfnlc4D7vJFZU50N3F6v6k
4txv261CuKM05A7tIJ7Fcw6QTmcFbGGhstyEWWtVV51zLwCZI/YJcNTN/1oUqV7P
0jAyiasMYaiw77MKCj3R3jp9Nnp8CkAHMSavrnVVY/8RNAPUvaDta3Bm9mGiLKPc
bK7aiuqzlGJN7qxrJU3SkzXoDcwHsJAiqu86VWeY/GFtEQsaofa6apMj4tuL2Gcn
80VMyIqmiD5tQiaKb2hsqnkeabT8TYmRxXlA3negoFfyO5OgJQWYEXeEoweH5LLm
SnfFyA3nw+nQ3fjAIZ3GQmo624pxB+4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:30:00 2025 by rpki-client