Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/d68b75d3-9ac6-32c1-9800-8c62ad78a997.roa
File:                     d68b75d3-9ac6-32c1-9800-8c62ad78a997.roa (raw, json)
Hash identifier:          +m9Pa3Lf2A3GIsIcDzmk+FosKNvzIKHDPogbOaUt6wQ=
Subject key identifier:   B6:62:82:FD:9C:38:D2:12:03:BD:04:AB:47:BE:A5:3A:13:C1:91:B0
Certificate issuer:       /CN=ab5b105c-8dbd-45f0-ac97-15de885200c5
Certificate serial:       010D0C9F43285848A206593166C96ED2334698C0
Authority key identifier: 44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/d68b75d3-9ac6-32c1-9800-8c62ad78a997.roa
Signing time:             Wed 22 Jan 2025 21:00:38 +0000
ROA not before:           Wed 22 Jan 2025 21:00:38 +0000
ROA not after:            Tue 22 Apr 2025 20:00:38 +0000
asID:                     14618
IP address blocks:        69.59.30.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a2:06:59:31:66:c9:6e:d2:33:46:98:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab5b105c-8dbd-45f0-ac97-15de885200c5
        Validity
            Not Before: Jan 22 21:00:38 2025 GMT
            Not After : Apr 22 20:00:38 2025 GMT
        Subject: CN=6882c08e-12ff-4fb3-ba9a-2bfcd04350d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:57:80:2a:00:66:19:11:24:6b:1b:c1:a0:e1:
                    cf:df:42:c5:74:90:64:4b:88:e7:0e:e6:f5:04:5f:
                    b3:74:04:b8:01:4b:07:e3:92:e6:81:35:55:35:a2:
                    1b:82:8d:55:48:cf:91:e8:30:e8:0c:67:fb:8b:9d:
                    c9:69:64:29:5d:04:9a:32:8f:39:ef:3f:29:84:d3:
                    56:1e:d1:90:33:9a:91:87:b0:fc:d9:97:74:a8:da:
                    61:6d:8b:9e:c8:8c:21:e9:c4:bd:7f:d9:67:7c:f2:
                    10:bc:16:ed:d5:f4:db:6a:ea:40:b0:c6:0a:2a:a7:
                    f3:8a:39:57:89:37:03:b5:1d:84:3f:fb:44:f7:76:
                    00:39:b8:bb:fe:27:03:04:33:34:86:64:45:9e:15:
                    e4:c8:e2:17:ce:c3:31:10:ba:3c:09:11:77:a2:22:
                    78:1d:46:f9:02:f0:c3:80:d4:e2:b1:0a:c7:d2:22:
                    61:e9:8e:70:82:f6:0a:3b:3c:43:0d:9a:24:ac:47:
                    a7:cb:63:0c:9c:0f:cf:ff:aa:1c:74:ab:b1:a1:2c:
                    5f:16:97:d0:dc:ad:e2:f0:a3:c0:4e:d3:12:72:02:
                    09:b0:52:d8:ec:e2:d2:9c:0f:37:13:3d:38:e5:c9:
                    82:23:a3:9f:14:20:03:10:51:23:a1:8a:33:a4:1a:
                    d9:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:62:82:FD:9C:38:D2:12:03:BD:04:AB:47:BE:A5:3A:13:C1:91:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/d68b75d3-9ac6-32c1-9800-8c62ad78a997.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5/ab5b105c-8dbd-45f0-ac97-15de885200c5.crl

            X509v3 Authority Key Identifier:
                keyid:44:D3:F7:A3:DF:11:1F:5E:E6:F8:9F:17:2E:A9:27:30:30:E3:96:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/ab5b105c-8dbd-45f0-ac97-15de885200c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.59.30.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:34:61:71:e4:2a:41:2f:7a:5f:55:d9:99:05:95:87:0e:6e:
         78:1d:2c:c2:ef:c5:27:28:bd:a4:51:50:f7:4f:76:ab:7a:d5:
         6c:10:b7:1f:f5:89:3c:a0:7b:56:ab:ad:41:e2:97:89:83:27:
         ac:1a:06:52:bd:f1:9a:07:c3:35:1f:f4:06:1a:04:4d:11:b6:
         25:2c:63:0d:71:d7:a6:90:3d:53:53:ac:78:e8:69:01:22:28:
         17:63:da:32:fd:e2:54:91:98:c9:2f:0b:7b:61:81:61:67:9a:
         dc:53:f1:73:e6:77:18:da:6e:50:b4:9b:2b:ac:3e:77:59:41:
         09:de:d0:58:72:c2:08:d4:9f:8c:c4:25:09:be:9a:76:13:5b:
         45:5b:9e:de:ef:63:07:33:4f:47:28:71:f9:3b:2c:a2:4c:0c:
         a6:3b:9c:c0:15:51:28:1e:91:1c:95:4f:a1:00:99:b6:2a:79:
         ba:97:ce:00:68:9f:a2:10:7f:34:2c:d2:72:76:8f:33:03:78:
         e3:ba:af:85:89:ab:15:4a:84:30:c5:ac:27:fc:1a:ae:68:df:
         27:73:11:08:46:52:1f:cc:5f:e7:75:75:06:07:cf:8f:ee:61:
         be:3b:8f:4f:a8:27:6b:2e:a7:ff:ce:b8:2d:d8:d0:51:84:5b:
         7e:a3:db:4d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiiBlkxZslu0jNGmMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI1YjEwNWMtOGRiZC00NWYwLWFjOTctMTVkZTg4NTIw
MGM1MB4XDTI1MDEyMjIxMDAzOFoXDTI1MDQyMjIwMDAzOFowLzEtMCsGA1UEAxMk
Njg4MmMwOGUtMTJmZi00ZmIzLWJhOWEtMmJmY2QwNDM1MGQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1eAKgBmGREkaxvBoOHP30LFdJBkS4jnDub1
BF+zdAS4AUsH45LmgTVVNaIbgo1VSM+R6DDoDGf7i53JaWQpXQSaMo857z8phNNW
HtGQM5qRh7D82Zd0qNphbYueyIwh6cS9f9lnfPIQvBbt1fTbaupAsMYKKqfzijlX
iTcDtR2EP/tE93YAObi7/icDBDM0hmRFnhXkyOIXzsMxELo8CRF3oiJ4HUb5AvDD
gNTisQrH0iJh6Y5wgvYKOzxDDZokrEeny2MMnA/P/6ocdKuxoSxfFpfQ3K3i8KPA
TtMScgIJsFLY7OLSnA83Ez045cmCI6OfFCADEFEjoYozpBrZ6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLZigv2cONISA70Eq0e+pToTwZGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9hYjVi
MTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRlODg1MjAwYzUvZDY4Yjc1ZDMtOWFjNi0z
MmMxLTk4MDAtOGM2MmFkNzhhOTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYWI1YjEwNWMtOGRiZC00NWYwLWFj
OTctMTVkZTg4NTIwMGM1L2FiNWIxMDVjLThkYmQtNDVmMC1hYzk3LTE1ZGU4ODUy
MDBjNS5jcmwwHwYDVR0jBBgwFoAURNP3o98RH17m+J8XLqknMDDjlmQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9hYjViMTA1Yy04ZGJkLTQ1ZjAtYWM5Ny0xNWRl
ODg1MjAwYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARTseMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAs0YXHkKkEvel9V2ZkFlYcObngdLMLvxScovaRRUPdPdqt61WwQtx/1
iTyge1arrUHil4mDJ6waBlK98ZoHwzUf9AYaBE0RtiUsYw1x16aQPVNTrHjoaQEi
KBdj2jL94lSRmMkvC3thgWFnmtxT8XPmdxjablC0myusPndZQQne0FhywgjUn4zE
JQm+mnYTW0Vbnt7vYwczT0cocfk7LKJMDKY7nMAVUSgekRyVT6EAmbYqebqXzgBo
n6IQfzQs0nJ2jzMDeOO6r4WJqxVKhDDFrCf8Gq5o3ydzEQhGUh/MX+d1dQYHz4/u
Yb47j0+oJ2sup//OuC3Y0FGEW36j200=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:41:03 2025 by rpki-client