Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
File:                     e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa (raw, json)
Hash identifier:          bE6c1FRNy8qQxt0v66Syzr+jB5uBcBEHPYJtAgdTKfk=
Subject key identifier:   D0:55:8A:B3:9F:71:7C:40:05:69:8B:EC:1D:0F:65:ED:E4:6D:BD:F4
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C36B78CBF6464C2B40500
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        96.224.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:36:b7:8c:bf:64:64:c2:b4:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=f62bd096-8ade-4cd8-b0d3-352eb2f847a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:6c:62:db:fc:70:56:bb:12:51:bf:a3:e2:29:
                    f5:59:3d:e4:51:96:ab:16:c2:f3:be:e1:9d:84:b5:
                    50:a7:94:9e:74:d1:db:db:fc:c3:36:2a:98:59:48:
                    4f:18:57:45:d0:96:64:2c:2a:0f:2a:c2:89:ea:ca:
                    e0:e4:ba:ae:21:28:e9:b3:90:59:3e:98:a3:1c:0e:
                    54:88:ae:48:9b:63:9e:54:fd:ca:ee:15:d3:3f:19:
                    c8:b1:88:0d:bf:1d:45:44:ee:62:6c:1c:7c:c6:bc:
                    2e:a5:60:c5:55:dd:c6:7b:31:56:12:54:8e:d0:5a:
                    3e:56:0a:bd:16:76:01:88:7d:45:f7:21:85:d9:21:
                    94:55:bf:b7:a9:78:4d:00:6d:99:f4:bf:9f:d6:1d:
                    70:bd:a0:29:75:79:e8:85:24:52:e9:07:68:01:fc:
                    e3:4e:4e:5a:56:79:2c:b3:e4:2b:85:84:69:ca:e1:
                    62:07:5a:dd:50:8b:d4:1e:e3:9c:36:96:2e:b5:0a:
                    5d:34:fd:00:77:0b:03:17:55:8e:c0:3c:25:10:5d:
                    d6:83:3e:02:a1:72:6f:4a:15:8a:8b:4a:4b:57:20:
                    82:56:10:a9:1a:95:d1:49:d9:d2:58:35:ad:6c:61:
                    30:ce:96:9d:56:06:f9:fe:a3:69:6f:9b:40:3d:70:
                    a6:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:55:8A:B3:9F:71:7C:40:05:69:8B:EC:1D:0F:65:ED:E4:6D:BD:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e5b3bfa1-51fe-3ce7-92ae-88942aaf143e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  96.224.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:e1:7c:72:fd:fd:d9:dc:6a:7c:ee:42:b6:88:a0:70:a5:a9:
         31:c0:50:1b:84:63:c1:29:61:b4:d9:35:84:59:8e:72:84:d2:
         06:bc:b2:55:0e:57:2e:d4:15:42:d1:5b:1d:15:f2:ae:29:00:
         7b:95:d4:0e:37:64:a5:c9:a3:cd:49:44:f1:26:07:6a:a8:68:
         27:6b:6c:2d:e7:a7:78:d2:58:e0:f3:14:f0:25:64:6f:ce:50:
         1c:5f:ba:21:eb:5e:e9:34:49:7f:5c:68:ef:bf:8a:38:0e:cf:
         fe:66:16:25:b6:cb:2c:11:6a:b0:db:54:e5:46:35:e7:de:a0:
         c2:57:dc:41:22:92:1f:31:01:6f:66:73:c9:0d:20:e5:17:fc:
         b0:6a:86:a9:34:f1:28:7f:73:af:70:79:7f:4d:e9:10:65:8c:
         92:6b:88:85:44:80:cf:84:8f:1a:f1:1a:47:27:3f:64:31:86:
         9a:db:4c:da:63:d5:cb:da:5d:19:71:70:ca:b1:a4:68:15:82:
         4b:e0:b3:c2:78:6a:c9:a7:25:ae:b6:4d:69:ea:d4:ef:c5:db:
         54:d9:02:c2:b5:62:95:c7:05:c5:1f:f9:d3:2e:68:d0:f3:da:
         42:fb:ed:a4:88:b2:5f:ab:1e:53:bf:f1:d5:13:5c:af:fa:f2:
         f6:ad:ea:8c
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkLTDa3jL9kZMK0BQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjYyYmQwOTYtOGFkZS00Y2Q4LWIwZDMtMzUyZWIyZjg0N2E4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA02xi2/xwVrsSUb+j4in1WT3kUZarFsLzvuGd
hLVQp5SedNHb2/zDNiqYWUhPGFdF0JZkLCoPKsKJ6srg5LquISjps5BZPpijHA5U
iK5Im2OeVP3K7hXTPxnIsYgNvx1FRO5ibBx8xrwupWDFVd3GezFWElSO0Fo+Vgq9
FnYBiH1F9yGF2SGUVb+3qXhNAG2Z9L+f1h1wvaApdXnohSRS6QdoAfzjTk5aVnks
s+QrhYRpyuFiB1rdUIvUHuOcNpYutQpdNP0AdwsDF1WOwDwlEF3Wgz4CoXJvShWK
i0pLVyCCVhCpGpXRSdnSWDWtbGEwzpadVgb5/qNpb5tAPXCmmwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNBVirOfcXxABWmL7B0PZe3kbb30MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTViM2JmYTEtNTFmZS0z
Y2U3LTkyYWUtODg5NDJhYWYxNDNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAYOAwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAr+F8cv392dxqfO5CtoigcKWpMcBQG4RjwSlhtNk1hFmOcoTSBryyVQ5X
LtQVQtFbHRXyrikAe5XUDjdkpcmjzUlE8SYHaqhoJ2tsLeeneNJY4PMU8CVkb85Q
HF+6Iete6TRJf1xo77+KOA7P/mYWJbbLLBFqsNtU5UY1596gwlfcQSKSHzEBb2Zz
yQ0g5Rf8sGqGqTTxKH9zr3B5f03pEGWMkmuIhUSAz4SPGvEaRyc/ZDGGmttM2mPV
y9pdGXFwyrGkaBWCS+CzwnhqyaclrrZNaerU78XbVNkCwrVilccFxR/50y5o0PPa
QvvtpIiyX6seU7/x1RNcr/ry9q3qjA==
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:22:00 2025 by rpki-client