Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa
File:                     32d5d338-6c80-3c57-b95f-211211f7467e.roa (raw, json)
Hash identifier:          c28QgEwr+HXtO51nVtRwgjKVit5SpbcJOyWS6AaPXiM=
Subject key identifier:   46:89:EA:DD:7D:37:19:2E:12:0F:7F:48:65:F1:03:77:C5:70:01:8D
Certificate issuer:       /CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
Certificate serial:       010D0C9F43285848B9ECFCE10B28216BF8CECD80
Authority key identifier: AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa
Signing time:             Fri 31 Jan 2025 10:28:56 +0000
ROA not before:           Fri 31 Jan 2025 10:28:56 +0000
ROA not after:            Thu 01 May 2025 09:28:56 +0000
asID:                     6762
IP address blocks:        208.84.80.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b9:ec:fc:e1:0b:28:21:6b:f8:ce:cd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f1868fa-3526-44ef-8aae-27ceceb072f9
        Validity
            Not Before: Jan 31 10:28:56 2025 GMT
            Not After : May  1 09:28:56 2025 GMT
        Subject: CN=7a711bd1-1cb8-455b-b0d3-83d45161f05d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:89:18:b3:4a:0f:9f:22:87:1c:1b:a1:31:c1:
                    a3:e4:5d:0e:b2:2f:75:80:e2:92:8b:b3:bf:d3:79:
                    17:7b:0e:4f:fb:89:47:05:35:bc:e0:32:46:30:2e:
                    a3:32:e5:1a:67:90:e5:e8:82:3d:a4:fa:40:c2:e9:
                    6e:86:01:37:5f:5e:9b:e8:7a:a9:97:8d:28:b6:49:
                    b0:12:04:67:44:37:12:1f:55:44:87:0e:8e:93:e2:
                    c0:56:b4:7b:57:66:23:09:cf:62:63:43:ef:36:9c:
                    d5:92:cc:93:0c:af:34:f3:a1:97:c7:1e:6d:03:49:
                    55:56:06:cf:99:77:88:c5:64:70:ac:c6:40:95:bf:
                    d1:37:86:c5:ca:69:5d:36:35:d4:67:13:9a:0d:a8:
                    3b:99:1a:ab:a5:72:e7:41:e7:4f:ff:55:72:99:03:
                    d4:a9:15:25:89:1e:16:47:a7:7c:4f:70:12:e8:8f:
                    f3:39:ae:94:c1:eb:c5:b3:60:2c:3c:16:09:88:4a:
                    68:98:26:40:3f:40:e2:6c:a3:c4:e6:83:62:11:98:
                    c1:e5:25:79:d1:44:c9:15:9a:00:81:1c:9a:d4:5f:
                    4f:28:eb:55:b2:5d:81:1f:a0:6f:1f:19:f0:a2:51:
                    58:21:95:0f:22:14:98:86:b1:4a:03:35:93:48:ab:
                    ae:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:89:EA:DD:7D:37:19:2E:12:0F:7F:48:65:F1:03:77:C5:70:01:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/32d5d338-6c80-3c57-b95f-211211f7467e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9/8f1868fa-3526-44ef-8aae-27ceceb072f9.crl

            X509v3 Authority Key Identifier:
                keyid:AE:0D:29:57:47:6F:8B:F7:CD:9F:09:D8:B5:CD:8A:7C:3F:E4:41:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/8f1868fa-3526-44ef-8aae-27ceceb072f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.84.80.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:55:8c:6a:bb:29:18:ce:13:ba:7b:fa:61:5a:53:49:23:b4:
         04:0a:d1:79:73:a5:23:c3:9f:16:56:84:f9:1b:16:7d:b6:a7:
         ae:bf:22:5d:41:74:c7:4f:b2:f9:08:78:4b:d3:77:24:ee:83:
         3d:b1:cf:35:6f:c7:a8:44:cc:bf:fb:6f:7a:ce:87:8a:c5:66:
         86:5f:5e:db:64:1c:15:d4:9f:21:fc:9a:93:8e:de:ad:96:b1:
         84:45:83:8a:e6:ea:08:2a:04:8f:73:8d:2b:f9:ad:56:0c:b2:
         54:b5:c3:a6:98:2c:a8:51:35:7b:14:93:8a:c3:62:a3:02:87:
         7c:85:d6:ba:96:be:d9:44:f9:1a:ef:c0:bc:e6:88:a4:a6:1e:
         cf:c8:44:06:7b:84:12:d6:39:2c:90:5b:0f:94:2e:d8:8e:97:
         ec:3c:42:71:a1:7a:39:7f:5c:96:3c:76:79:b0:3e:1a:25:c8:
         b0:5a:bf:81:22:1c:cf:fd:e1:c7:bf:63:62:a0:3b:76:18:45:
         4e:14:49:ee:91:4d:02:b7:c2:4c:74:50:8e:fc:72:b3:02:18:
         c4:fc:bd:95:e6:08:10:59:49:2a:1f:e4:ad:be:85:c1:bf:0c:
         b5:c1:2b:83:48:b9:3e:53:32:9a:4d:c1:a5:17:33:8a:5e:2a:
         95:2c:bb:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi57PzhCygha/jOzYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYxODY4ZmEtMzUyNi00NGVmLThhYWUtMjdjZWNlYjA3
MmY5MB4XDTI1MDEzMTEwMjg1NloXDTI1MDUwMTA5Mjg1NlowLzEtMCsGA1UEAxMk
N2E3MTFiZDEtMWNiOC00NTViLWIwZDMtODNkNDUxNjFmMDVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IkYs0oPnyKHHBuhMcGj5F0Osi91gOKSi7O/
03kXew5P+4lHBTW84DJGMC6jMuUaZ5Dl6II9pPpAwuluhgE3X16b6Hqpl40otkmw
EgRnRDcSH1VEhw6Ok+LAVrR7V2YjCc9iY0PvNpzVksyTDK8086GXxx5tA0lVVgbP
mXeIxWRwrMZAlb/RN4bFymldNjXUZxOaDag7mRqrpXLnQedP/1VymQPUqRUliR4W
R6d8T3AS6I/zOa6UwevFs2AsPBYJiEpomCZAP0DibKPE5oNiEZjB5SV50UTJFZoA
gRya1F9PKOtVsl2BH6BvHxnwolFYIZUPIhSYhrFKAzWTSKuuqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEaJ6t19NxkuEg9/SGXxA3fFcAGNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi84ZjE4
NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2NlY2ViMDcyZjkvMzJkNWQzMzgtNmM4MC0z
YzU3LWI5NWYtMjExMjExZjc0NjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOGYxODY4ZmEtMzUyNi00NGVmLThh
YWUtMjdjZWNlYjA3MmY5LzhmMTg2OGZhLTM1MjYtNDRlZi04YWFlLTI3Y2VjZWIw
NzJmOS5jcmwwHwYDVR0jBBgwFoAUrg0pV0dvi/fNnwnYtc2KfD/kQZswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi84ZjE4NjhmYS0zNTI2LTQ0ZWYtOGFhZS0yN2Nl
Y2ViMDcyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD0FRQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADlVjGq7KRjOE7p7+mFaU0kjtAQK0XlzpSPDnxZWhPkbFn22p66/Il1B
dMdPsvkIeEvTdyTugz2xzzVvx6hEzL/7b3rOh4rFZoZfXttkHBXUnyH8mpOO3q2W
sYRFg4rm6ggqBI9zjSv5rVYMslS1w6aYLKhRNXsUk4rDYqMCh3yF1rqWvtlE+Rrv
wLzmiKSmHs/IRAZ7hBLWOSyQWw+ULtiOl+w8QnGhejl/XJY8dnmwPholyLBav4Ei
HM/94ce/Y2KgO3YYRU4USe6RTQK3wkx0UI78crMCGMT8vZXmCBBZSSof5K2+hcG/
DLXBK4NIuT5TMppNwaUXM4peKpUsu1s=
-----END CERTIFICATE-----
Generated at Sat Apr 5 22:41:57 2025 by rpki-client