Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
File:                     ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa (raw, json)
Hash identifier:          Lh6+rFzDpOSQemcry8RXknCPM0EU2e4GK2Hb0bfYA9M=
Subject key identifier:   E8:90:FB:A3:39:51:E5:E7:0C:4E:7F:C8:93:13:ED:48:0E:E6:0A:63
Certificate issuer:       /CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
Certificate serial:       010D0C9F4328584905B6A53113D4FEAF0BD2CE80
Authority key identifier: DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa
Signing time:             Thu 27 Feb 2025 14:00:51 +0000
ROA not before:           Thu 27 Feb 2025 14:00:51 +0000
ROA not after:            Wed 28 May 2025 13:00:51 +0000
asID:                     16509
IP address blocks:        199.47.128.0/24 maxlen: 24
                          199.47.129.0/24 maxlen: 24
                          199.47.130.0/24 maxlen: 24
                          199.47.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:05:b6:a5:31:13:d4:fe:af:0b:d2:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86bcda68-15fd-4c7d-9887-d9d67f2ca969
        Validity
            Not Before: Feb 27 14:00:51 2025 GMT
            Not After : May 28 13:00:51 2025 GMT
        Subject: CN=59c3e1fb-467e-4b43-99c6-52b6c753d644
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:d1:15:cd:b8:86:b3:7d:02:d0:bb:87:6c:cf:
                    4e:bc:18:18:7b:57:ee:13:26:d1:18:47:f8:a8:12:
                    c0:72:8b:00:b2:25:c7:f8:46:8a:b2:a2:e4:3f:08:
                    71:a3:63:4f:38:e5:7b:ab:2d:9d:54:ae:5b:e0:f1:
                    cf:36:91:ea:99:f8:ce:5b:12:59:62:1c:85:9f:6e:
                    2a:08:2e:29:9d:e5:9f:53:32:f9:1a:55:6e:24:a1:
                    d8:33:9a:90:c1:63:f3:69:85:52:c8:ae:59:d6:91:
                    0d:13:ec:f4:2b:7a:4a:25:55:e4:ff:2d:ae:f7:31:
                    95:4f:12:ce:c9:8b:91:3f:68:06:f0:88:94:d6:93:
                    59:db:9e:4c:b0:c7:da:33:eb:43:24:05:89:f3:fa:
                    9e:3d:7a:c4:9e:a0:a3:50:e7:14:7f:19:6e:01:69:
                    7a:1c:76:b6:7d:26:3f:bf:fe:1b:e1:ee:e0:02:e4:
                    ed:2d:c6:27:b4:f3:60:0f:bb:67:78:94:55:f3:b4:
                    be:03:5c:dd:62:53:61:ce:df:b2:45:f5:5e:c5:71:
                    b3:24:6b:58:ee:45:89:d3:c6:7b:31:49:2b:b0:ed:
                    61:0c:78:e1:fb:44:8f:1e:a2:5c:97:38:31:e0:9c:
                    34:4f:92:b4:93:72:89:35:b6:b0:eb:b0:4b:81:f9:
                    11:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:90:FB:A3:39:51:E5:E7:0C:4E:7F:C8:93:13:ED:48:0E:E6:0A:63
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/ab483ad6-855e-34df-ae7b-22a6f10fdfb7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969/86bcda68-15fd-4c7d-9887-d9d67f2ca969.crl

            X509v3 Authority Key Identifier:
                keyid:DD:A3:C4:F9:8B:14:A0:E9:BE:AA:4F:47:A9:DD:16:AE:3A:F7:FE:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/86bcda68-15fd-4c7d-9887-d9d67f2ca969.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.47.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:7b:66:e3:08:e1:48:93:d6:49:17:7c:03:87:15:70:da:10:
         fa:05:a6:61:0e:79:e5:5c:bc:23:7f:7c:c7:c1:08:c4:9b:6f:
         9a:89:58:9f:27:d6:1b:97:07:0c:16:5a:9e:9d:61:58:cd:1f:
         91:3a:ae:b0:15:12:23:31:1d:7b:34:b4:9c:8d:98:fa:f4:65:
         a8:42:93:0a:b1:5d:5c:e7:0c:2b:5f:fd:14:40:4d:27:92:9b:
         9d:6b:50:66:3f:d8:54:68:d7:45:82:b8:1a:13:e3:55:f5:78:
         81:66:66:96:ce:b1:0f:ab:34:e4:fd:75:bf:9c:45:12:87:a8:
         1f:53:23:67:07:41:a9:e3:4b:16:81:f2:9f:95:88:3c:65:0b:
         d7:d2:8f:3b:e7:af:13:68:6a:21:fe:eb:12:25:da:fa:a0:da:
         fd:3b:1b:93:a7:28:78:1a:2e:ab:f6:b3:0b:dc:9f:39:8b:af:
         b9:06:7c:ef:29:fc:de:32:9b:ca:e2:1d:a9:96:85:d1:a1:db:
         b0:51:82:7c:6c:d1:c3:dd:22:31:d0:ad:64:80:30:60:2f:c9:
         4f:db:0b:df:f1:09:5a:a6:e7:e6:19:3f:75:74:61:1a:8d:ae:
         7b:f5:d3:ab:e3:55:1b:74:59:71:44:b2:7e:6b:77:9f:c6:fa:
         b0:25:f2:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkFtqUxE9T+rwvSzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZiY2RhNjgtMTVmZC00YzdkLTk4ODctZDlkNjdmMmNh
OTY5MB4XDTI1MDIyNzE0MDA1MVoXDTI1MDUyODEzMDA1MVowLzEtMCsGA1UEAxMk
NTljM2UxZmItNDY3ZS00YjQzLTk5YzYtNTJiNmM3NTNkNjQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0dEVzbiGs30C0LuHbM9OvBgYe1fuEybRGEf4
qBLAcosAsiXH+EaKsqLkPwhxo2NPOOV7qy2dVK5b4PHPNpHqmfjOWxJZYhyFn24q
CC4pneWfUzL5GlVuJKHYM5qQwWPzaYVSyK5Z1pENE+z0K3pKJVXk/y2u9zGVTxLO
yYuRP2gG8IiU1pNZ255MsMfaM+tDJAWJ8/qePXrEnqCjUOcUfxluAWl6HHa2fSY/
v/4b4e7gAuTtLcYntPNgD7tneJRV87S+A1zdYlNhzt+yRfVexXGzJGtY7kWJ08Z7
MUkrsO1hDHjh+0SPHqJclzgx4Jw0T5K0k3KJNbaw67BLgfkR0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOiQ+6M5UeXnDE5/yJMT7UgO5gpjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84NmJj
ZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2N2YyY2E5NjkvYWI0ODNhZDYtODU1ZS0z
NGRmLWFlN2ItMjJhNmYxMGZkZmI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODZiY2RhNjgtMTVmZC00YzdkLTk4
ODctZDlkNjdmMmNhOTY5Lzg2YmNkYTY4LTE1ZmQtNGM3ZC05ODg3LWQ5ZDY3ZjJj
YTk2OS5jcmwwHwYDVR0jBBgwFoAU3aPE+YsUoOm+qk9Hqd0Wrjr3/jEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84NmJjZGE2OC0xNWZkLTRjN2QtOTg4Ny1kOWQ2
N2YyY2E5NjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxy+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADB7ZuMI4UiT1kkXfAOHFXDaEPoFpmEOeeVcvCN/fMfBCMSbb5qJWJ8n
1huXBwwWWp6dYVjNH5E6rrAVEiMxHXs0tJyNmPr0ZahCkwqxXVznDCtf/RRATSeS
m51rUGY/2FRo10WCuBoT41X1eIFmZpbOsQ+rNOT9db+cRRKHqB9TI2cHQanjSxaB
8p+ViDxlC9fSjzvnrxNoaiH+6xIl2vqg2v07G5OnKHgaLqv2swvcnzmLr7kGfO8p
/N4ym8riHamWhdGh27BRgnxs0cPdIjHQrWSAMGAvyU/bC9/xCVqm5+YZP3V0YRqN
rnv106vjVRt0WXFEsn5rd5/G+rAl8tY=
-----END CERTIFICATE-----
Generated at Fri Mar 14 13:56:40 2025 by rpki-client