Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa
File:                     50373ebd-ae92-37af-8eb4-a641a874f883.roa (raw, json)
Hash identifier:          exCarMDL+HLTECQ2JYdSFKbxh9izzIm0DgPeCFbFCoo=
Subject key identifier:   F9:CC:93:8C:80:BA:04:D7:D7:57:B1:B0:31:5E:FE:81:41:83:9A:FB
Certificate issuer:       /CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
Certificate serial:       010D0C9F43285848EF61369610B9E7F8F24EE740
Authority key identifier: D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        170.176.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:36:96:10:b9:e7:f8:f2:4e:e7:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=824dfb5f-8580-48ff-b32e-fd393fa7dcc4
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=16e89c65-2ad0-474e-ab64-50cf642d08de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:84:8c:1d:66:ce:af:49:c1:61:24:51:64:94:
                    96:5f:15:1b:72:f3:b4:d7:21:b0:20:d0:fc:04:64:
                    1c:c3:ee:9f:93:53:a9:9a:89:d1:5a:16:04:49:67:
                    98:5a:2f:bc:c5:ca:e4:16:27:62:ae:ce:0d:78:d8:
                    6a:c0:4e:79:da:b1:89:11:0f:a9:6a:5f:e2:5c:6d:
                    02:d5:9f:7a:76:51:f2:49:6d:0b:7c:47:1f:d7:a1:
                    2c:51:b4:9d:8b:1b:65:30:b9:f0:1a:fd:57:70:32:
                    27:31:15:ea:f7:da:a6:19:63:da:ce:0a:d1:a4:87:
                    bc:5e:69:8d:c9:3c:6f:fa:0b:df:82:bc:b4:ae:15:
                    08:37:f2:b2:d3:a0:ba:1b:21:28:b0:0f:65:d1:e8:
                    ab:fc:43:93:ba:d7:6d:60:2f:90:89:19:4f:ad:dc:
                    29:97:4f:31:8d:3e:05:a3:28:26:ac:76:76:06:8a:
                    a7:01:9f:e1:41:97:1b:d0:d7:d2:5d:96:fa:91:35:
                    40:12:03:9d:ad:7a:76:86:fa:1a:ec:96:41:6a:7c:
                    ea:c3:97:64:ac:82:60:a9:5e:52:b2:31:4d:78:87:
                    64:c1:cd:79:aa:81:7f:97:63:86:96:9b:b3:75:6a:
                    b1:d7:8c:1f:13:86:62:cb:4e:6c:ab:00:bd:5e:b0:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:CC:93:8C:80:BA:04:D7:D7:57:B1:B0:31:5E:FE:81:41:83:9A:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/50373ebd-ae92-37af-8eb4-a641a874f883.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.crl

            X509v3 Authority Key Identifier:
                keyid:D9:84:FC:01:25:1A:F5:E5:ED:9B:B3:69:50:58:31:B7:12:47:29:96

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/824dfb5f-8580-48ff-b32e-fd393fa7dcc4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.176.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:96:ac:cc:94:90:01:03:ac:12:84:15:99:59:a3:6c:99:90:
         25:e8:46:97:3f:11:02:2c:94:b2:a4:c7:82:10:32:ca:0d:2a:
         23:1f:06:d2:2a:f0:12:24:81:f6:dd:2c:a9:9b:7b:9d:af:86:
         dc:68:08:8d:4f:3a:f4:e4:59:0e:9c:0c:11:3c:26:c8:cc:d6:
         64:bf:6b:a7:27:83:ca:d2:5a:9f:89:06:c2:8a:4d:2d:e2:d5:
         c2:c9:b3:29:0e:3a:51:e6:41:7c:31:f7:da:5b:00:b3:3a:c3:
         c9:61:d2:c7:9d:13:14:5c:45:88:15:33:ad:4a:b2:5e:13:a9:
         26:9e:47:be:de:be:91:5d:4f:52:63:30:48:90:91:6e:9c:0f:
         22:ba:24:a1:11:b6:4f:13:3c:8d:48:44:b3:83:ac:ff:38:4e:
         5b:c6:8d:61:d6:9d:09:c5:c2:be:13:03:3b:69:f1:11:43:45:
         40:85:0b:05:b7:60:54:6a:14:30:17:97:cd:05:7c:31:05:f2:
         96:fc:01:74:de:83:df:43:9d:c3:58:2c:ba:18:b9:93:93:0f:
         f1:07:01:0b:b5:af:2c:31:57:64:9d:5d:ab:6c:2c:df:5e:8b:
         71:8b:9d:bf:c5:4c:d5:b2:cd:85:cc:41:45:4b:4f:8c:0f:09:
         e2:73:ed:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYTaWELnn+PJO50AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODI0ZGZiNWYtODU4MC00OGZmLWIzMmUtZmQzOTNmYTdk
Y2M0MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
MTZlODljNjUtMmFkMC00NzRlLWFiNjQtNTBjZjY0MmQwOGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYSMHWbOr0nBYSRRZJSWXxUbcvO01yGwIND8
BGQcw+6fk1OpmonRWhYESWeYWi+8xcrkFidirs4NeNhqwE552rGJEQ+pal/iXG0C
1Z96dlHySW0LfEcf16EsUbSdixtlMLnwGv1XcDInMRXq99qmGWPazgrRpIe8XmmN
yTxv+gvfgry0rhUIN/Ky06C6GyEosA9l0eir/EOTutdtYC+QiRlPrdwpl08xjT4F
oygmrHZ2BoqnAZ/hQZcb0NfSXZb6kTVAEgOdrXp2hvoa7JZBanzqw5dkrIJgqV5S
sjFNeIdkwc15qoF/l2OGlpuzdWqx14wfE4Ziy05sqwC9XrDffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPnMk4yAugTX11exsDFe/oFBg5r7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MjRk
ZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5M2ZhN2RjYzQvNTAzNzNlYmQtYWU5Mi0z
N2FmLThlYjQtYTY0MWE4NzRmODgzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODI0ZGZiNWYtODU4MC00OGZmLWIz
MmUtZmQzOTNmYTdkY2M0LzgyNGRmYjVmLTg1ODAtNDhmZi1iMzJlLWZkMzkzZmE3
ZGNjNC5jcmwwHwYDVR0jBBgwFoAU2YT8ASUa9eXtm7NpUFgxtxJHKZYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MjRkZmI1Zi04NTgwLTQ4ZmYtYjMyZS1mZDM5
M2ZhN2RjYzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqrCcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALyWrMyUkAEDrBKEFZlZo2yZkCXoRpc/EQIslLKkx4IQMsoNKiMfBtIq
8BIkgfbdLKmbe52vhtxoCI1POvTkWQ6cDBE8JsjM1mS/a6cng8rSWp+JBsKKTS3i
1cLJsykOOlHmQXwx99pbALM6w8lh0sedExRcRYgVM61Ksl4TqSaeR77evpFdT1Jj
MEiQkW6cDyK6JKERtk8TPI1IRLODrP84TlvGjWHWnQnFwr4TAztp8RFDRUCFCwW3
YFRqFDAXl80FfDEF8pb8AXTeg99DncNYLLoYuZOTD/EHAQu1rywxV2SdXatsLN9e
i3GLnb/FTNWyzYXMQUVLT4wPCeJz7eQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 23:42:11 2025 by rpki-client