Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa
File:                     77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa (raw, json)
Hash identifier:          EcGDsrmywd2+Wk0l7kN58n6ZdY8x/OEe+znTdzryJt4=
Subject key identifier:   42:52:46:B7:A5:E1:AD:E2:50:5E:93:31:DB:EC:46:36:AE:E0:EB:50
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F43285848C581801BA376C231577DE800
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa
Signing time:             Tue 04 Feb 2025 14:00:52 +0000
ROA not before:           Tue 04 Feb 2025 14:00:52 +0000
ROA not after:            Mon 05 May 2025 13:00:52 +0000
asID:                     15169
IP address blocks:        216.58.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c5:81:80:1b:a3:76:c2:31:57:7d:e8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Feb  4 14:00:52 2025 GMT
            Not After : May  5 13:00:52 2025 GMT
        Subject: CN=c16a32a2-df33-4143-933a-51e12cf37a79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fc:73:42:5f:8c:00:61:2a:6f:db:c6:a5:08:
                    33:c8:d9:aa:84:5b:ba:da:0b:91:88:f9:ea:8d:fa:
                    bb:5f:c3:1a:24:cf:77:2a:83:2e:35:15:b9:48:ab:
                    5f:83:75:67:4c:a4:ca:f3:aa:2e:05:48:a7:20:0f:
                    e9:dc:25:9e:a1:26:34:7c:c9:db:f9:85:1f:12:ba:
                    bc:1a:95:f9:32:05:55:a2:ef:1c:d5:bd:0f:f0:b1:
                    dc:6a:1f:ac:fe:a2:fe:ed:7e:a6:32:c0:fd:3c:0f:
                    34:3f:cb:f1:aa:a1:75:9b:0d:f3:78:33:7f:24:e6:
                    15:3e:77:ad:12:44:57:79:6e:b9:2b:1c:7c:72:e9:
                    24:49:5e:59:0a:5b:6f:e1:cf:9a:4d:05:a6:05:af:
                    49:8b:9b:52:4b:a6:5a:bf:b5:56:ee:a4:39:55:62:
                    d9:cb:5c:d9:a0:a4:02:ff:75:4a:41:be:70:c5:12:
                    fe:bd:66:59:c5:12:c9:70:e2:25:cf:d2:2e:16:54:
                    d3:6e:3d:ed:cf:ef:3f:5d:8a:aa:23:03:21:a0:50:
                    11:0a:93:a7:36:4c:a3:45:d5:57:18:4b:c3:bf:16:
                    2b:19:68:7c:9a:15:b9:f4:d6:09:fa:14:76:7d:ff:
                    bd:22:7e:5f:c0:ff:d1:4f:dd:f8:1e:04:ee:2c:1f:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:52:46:B7:A5:E1:AD:E2:50:5E:93:31:DB:EC:46:36:AE:E0:EB:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/77bb7bb2-002f-33a4-9da1-963ec4d7fe35.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.58.209.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:37:a5:4c:b5:76:7a:15:bd:36:b7:7a:74:f8:3a:b3:8e:5b:
         a1:5e:c3:d1:fe:94:b6:69:c2:35:ef:1c:0c:b8:07:96:c8:c1:
         5d:cc:8f:68:d7:b6:56:3b:8e:01:1d:9c:53:8b:da:3f:09:4b:
         ff:39:50:18:a8:14:ea:4e:53:0f:97:9b:b7:9d:ec:4d:67:6e:
         8f:65:f2:67:41:ac:b7:03:39:21:ae:3e:ad:fb:05:f1:ab:09:
         45:74:ce:d3:3f:d1:e1:58:6b:0d:3f:8c:58:46:b6:f8:f3:4a:
         eb:f7:21:08:a2:18:6e:d9:03:fe:3c:36:dc:8f:4e:73:7c:14:
         0e:cc:5b:06:6b:aa:da:85:b2:32:ea:31:57:e7:aa:58:a6:a7:
         47:7e:46:e5:77:da:b6:c5:9f:66:4e:c7:ed:f3:85:af:08:d2:
         a4:4e:8b:a5:a0:61:57:bd:6f:7a:60:1b:d4:c4:a9:92:b1:10:
         9b:92:d3:4d:da:0e:05:ed:be:fa:21:2d:ef:b2:d0:c8:a9:e4:
         95:90:56:ae:7a:6e:70:d5:21:4a:40:5c:06:7c:46:13:52:dc:
         db:65:24:c9:e0:fb:30:a0:6c:1e:5f:8f:30:6d:57:2c:ce:bf:
         a3:c2:fb:01:1f:af:2e:f3:60:79:8d:f6:2e:2d:21:39:4c:d5:
         65:0e:f8:a5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjFgYAbo3bCMVd96AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDIwNDE0MDA1MloXDTI1MDUwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YzE2YTMyYTItZGYzMy00MTQzLTkzM2EtNTFlMTJjZjM3YTc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3PxzQl+MAGEqb9vGpQgzyNmqhFu62guRiPnq
jfq7X8MaJM93KoMuNRW5SKtfg3VnTKTK86ouBUinIA/p3CWeoSY0fMnb+YUfErq8
GpX5MgVVou8c1b0P8LHcah+s/qL+7X6mMsD9PA80P8vxqqF1mw3zeDN/JOYVPnet
EkRXeW65Kxx8cukkSV5ZCltv4c+aTQWmBa9Ji5tSS6Zav7VW7qQ5VWLZy1zZoKQC
/3VKQb5wxRL+vWZZxRLJcOIlz9IuFlTTbj3tz+8/XYqqIwMhoFARCpOnNkyjRdVX
GEvDvxYrGWh8mhW59NYJ+hR2ff+9In5fwP/RT934HgTuLB+oFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEJSRrel4a3iUF6TMdvsRjau4OtQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvNzdiYjdiYjItMDAyZi0z
M2E0LTlkYTEtOTYzZWM0ZDdmZTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2DrRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIg3pUy1dnoVvTa3enT4OrOOW6Few9H+lLZpwjXvHAy4B5bIwV3Mj2jX
tlY7jgEdnFOL2j8JS/85UBioFOpOUw+Xm7ed7E1nbo9l8mdBrLcDOSGuPq37BfGr
CUV0ztM/0eFYaw0/jFhGtvjzSuv3IQiiGG7ZA/48NtyPTnN8FA7MWwZrqtqFsjLq
MVfnqlimp0d+RuV32rbFn2ZOx+3zha8I0qROi6WgYVe9b3pgG9TEqZKxEJuS003a
DgXtvvohLe+y0Mip5JWQVq56bnDVIUpAXAZ8RhNS3NtlJMng+zCgbB5fjzBtVyzO
v6PC+wEfry7zYHmN9i4tITlM1WUO+KU=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:20:02 2025 by rpki-client