Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa
File:                     1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa (raw, json)
Hash identifier:          9TrgmLtRpk8oDoHZ12ROls0E8CVsbHqPISXYd5s1kvA=
Subject key identifier:   BD:18:5E:A5:26:2B:45:14:F6:7C:0C:A9:85:5D:F4:F2:E8:9A:CC:30
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F43285848EF6137AFF862FF87E7A24C00
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        155.63.85.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:37:af:f8:62:ff:87:e7:a2:4c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=484454d6-a01a-4953-b552-5d74fc066522
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:9d:d3:37:fb:55:7a:ea:d6:be:0a:d0:96:6f:
                    ef:0b:0e:b9:91:d1:c1:1b:ee:3d:67:95:c3:0c:50:
                    31:f7:56:bc:9b:3b:0f:df:c9:25:f2:57:7d:35:e2:
                    5b:db:ca:29:24:b2:5f:8c:a3:8a:92:de:de:d9:81:
                    c5:a7:52:d7:a2:ee:0a:5e:ac:52:aa:5a:c7:cf:ef:
                    ed:c9:aa:d8:6c:43:e5:41:47:d9:df:c7:07:65:21:
                    69:d9:13:3c:29:9e:4a:2c:d2:73:41:b9:da:50:e2:
                    67:ce:0a:ac:f9:af:a6:e9:ce:a2:96:3f:64:a3:35:
                    43:91:82:f2:1a:13:26:c9:1a:8e:9f:ce:8a:7f:cf:
                    84:dd:6d:74:c4:2d:15:05:2f:2b:08:d4:d1:41:bb:
                    c0:15:44:ef:3c:86:d4:97:e7:0b:8b:62:df:cc:f1:
                    07:42:8b:68:a3:2d:04:48:e9:0b:e2:33:ac:ec:f0:
                    d6:f4:dd:0e:b7:91:be:9a:67:00:64:41:2a:e1:05:
                    50:a1:3d:70:64:f7:a7:9b:7e:4b:57:ca:f6:46:1e:
                    09:91:61:9b:de:3e:9f:d7:d0:60:b1:8f:8a:f2:53:
                    14:db:0b:e5:f7:50:0a:4e:46:af:bb:64:e0:31:f9:
                    04:6c:86:2d:ac:7a:70:ac:21:e9:6f:a2:a1:2f:ed:
                    cb:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:18:5E:A5:26:2B:45:14:F6:7C:0C:A9:85:5D:F4:F2:E8:9A:CC:30
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1b6579d8-95e2-3cdb-ae21-72bf1d10f9ef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.85.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:f1:f9:33:87:27:58:5d:78:0e:fd:76:7b:d9:24:e8:69:93:
         9c:bc:27:91:df:cc:4f:a3:7f:28:a2:a4:67:86:fe:7a:3e:4e:
         10:4d:4b:22:20:dd:f2:45:51:63:54:31:6e:95:9f:e2:76:d1:
         df:d3:4c:14:34:fd:f1:7a:f8:c2:d4:55:13:b1:04:ff:f2:a2:
         26:df:71:27:ea:fe:78:20:6d:a9:33:31:b5:9d:6f:7b:fe:47:
         f2:f4:a0:62:8d:9d:0d:6f:b4:a1:85:c5:ed:e6:11:c8:02:f4:
         4d:4d:ab:0d:7e:a0:46:55:5e:87:9c:2b:38:4a:cf:8d:81:a1:
         c7:5a:c4:7c:de:5f:1d:86:3a:cf:03:98:f8:76:f9:3b:f0:30:
         a1:dc:27:26:29:54:e0:e9:d4:57:21:7e:eb:7a:d2:00:3c:c1:
         78:85:fb:86:ff:b5:48:02:a9:e8:e7:0b:81:d4:fa:db:be:26:
         dd:32:c4:af:bc:c2:3d:51:17:45:9d:3d:33:1e:3e:6c:d6:88:
         02:d7:08:5b:43:9a:cc:4f:ee:46:3f:ac:56:82:3e:6d:87:4e:
         51:8e:48:d9:73:1d:a2:51:18:ae:b0:d2:54:a0:de:4e:aa:04:
         b5:17:02:fc:58:63:2b:84:8b:f0:9b:8e:a7:e0:04:94:86:26:
         d7:c0:d8:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTev+GL/h+eiTAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1
OGQ2MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
NDg0NDU0ZDYtYTAxYS00OTUzLWI1NTItNWQ3NGZjMDY2NTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Z3TN/tVeurWvgrQlm/vCw65kdHBG+49Z5XD
DFAx91a8mzsP38kl8ld9NeJb28opJLJfjKOKkt7e2YHFp1LXou4KXqxSqlrHz+/t
yarYbEPlQUfZ38cHZSFp2RM8KZ5KLNJzQbnaUOJnzgqs+a+m6c6ilj9kozVDkYLy
GhMmyRqOn86Kf8+E3W10xC0VBS8rCNTRQbvAFUTvPIbUl+cLi2LfzPEHQotooy0E
SOkL4jOs7PDW9N0Ot5G+mmcAZEEq4QVQoT1wZPenm35LV8r2Rh4JkWGb3j6f19Bg
sY+K8lMU2wvl91AKTkavu2TgMfkEbIYtrHpwrCHpb6KhL+3LwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL0YXqUmK0UU9nwMqYVd9PLomswwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4
OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvMWI2NTc5ZDgtOTVlMi0z
Y2RiLWFlMjEtNzJiZjFkMTBmOWVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl
N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk
NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0
YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAmz9VMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADfx+TOHJ1hdeA79dnvZJOhpk5y8J5HfzE+jfyiipGeG/no+ThBNSyIg
3fJFUWNUMW6Vn+J20d/TTBQ0/fF6+MLUVROxBP/yoibfcSfq/nggbakzMbWdb3v+
R/L0oGKNnQ1vtKGFxe3mEcgC9E1Nqw1+oEZVXoecKzhKz42BocdaxHzeXx2GOs8D
mPh2+TvwMKHcJyYpVODp1Fchfut60gA8wXiF+4b/tUgCqejnC4HU+tu+Jt0yxK+8
wj1RF0WdPTMePmzWiALXCFtDmsxP7kY/rFaCPm2HTlGOSNlzHaJRGK6w0lSg3k6q
BLUXAvxYYyuEi/CbjqfgBJSGJtfA2H8=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:26:57 2025 by rpki-client