Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa
File:                     c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa (raw, json)
Hash identifier:          3J5U3gUaVvcmO4p/MHYZomM2Yp86A5wTyERp3XHLulg=
Subject key identifier:   45:A5:28:6F:95:96:C1:2F:E5:C0:83:7B:A9:BB:42:61:9F:EA:B1:C0
Certificate issuer:       /CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
Certificate serial:       010D0C9F432858493ED3D074CB629532FA7A1080
Authority key identifier: CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa
Signing time:             Thu 20 Mar 2025 01:00:39 +0000
ROA not before:           Thu 20 Mar 2025 01:00:39 +0000
ROA not after:            Wed 18 Jun 2025 01:00:39 +0000
asID:                     32482
IP address blocks:        216.82.233.0/24 maxlen: 24
                          216.82.235.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:3e:d3:d0:74:cb:62:95:32:fa:7a:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8dbe5e2d-b7f8-4dba-b97b-8b6164e83890
        Validity
            Not Before: Mar 20 01:00:39 2025 GMT
            Not After : Jun 18 01:00:39 2025 GMT
        Subject: CN=39dd39ec-1903-45e6-9120-f74217b67af0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cd:a0:19:a2:27:e3:02:94:3e:55:44:d5:94:
                    70:cc:72:c4:a9:51:6c:4b:02:f9:68:0a:dc:3b:cc:
                    2d:5c:e6:ee:1c:52:d3:1c:eb:99:21:cf:92:e2:2b:
                    80:23:12:f2:b2:f8:a8:59:6e:a0:c1:8e:de:d1:7a:
                    a9:f4:18:6d:91:4b:b4:3c:31:dd:03:39:68:b8:d5:
                    30:2f:35:61:d1:61:e9:42:01:0e:83:1e:3d:42:42:
                    ec:fc:c0:8b:c3:e4:6f:03:cb:fb:56:07:c2:5b:05:
                    7f:6e:48:36:e3:45:b3:d2:94:6f:6f:d6:80:a5:8d:
                    33:43:0c:48:87:ea:99:43:6c:f0:69:b1:f9:b1:9e:
                    41:25:1f:4d:fe:b2:63:0f:0d:af:c4:aa:a8:b6:de:
                    07:2f:bc:f2:d4:d8:19:74:ce:31:45:a5:54:71:db:
                    e4:ce:a3:e0:77:ea:0d:25:cc:9f:ac:b8:fe:4d:f7:
                    6b:03:ee:e6:3c:43:97:a6:07:ad:2f:56:c9:61:69:
                    6e:33:04:64:06:95:bc:e4:2e:fd:97:72:b2:dc:89:
                    3e:74:88:86:d5:bf:5b:9a:79:6b:95:3a:28:f4:85:
                    94:5e:c9:74:b3:d5:4e:98:0f:19:48:d5:e9:75:d9:
                    17:e2:55:d2:f5:11:c2:38:d2:88:c3:71:19:ba:72:
                    9c:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:A5:28:6F:95:96:C1:2F:E5:C0:83:7B:A9:BB:42:61:9F:EA:B1:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/c2ae75aa-22cd-3d5d-a94b-70ad9b53f6cb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.crl

            X509v3 Authority Key Identifier:
                keyid:CC:B0:CB:3A:A6:3A:8F:FA:2A:54:EF:E8:C8:EB:5A:7D:33:60:5C:05

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8dbe5e2d-b7f8-4dba-b97b-8b6164e83890.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.82.233.0/24
                  216.82.235.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:d4:de:2b:b8:6c:7e:1e:f6:02:0f:31:26:38:af:11:83:13:
         34:c8:1e:70:50:ca:d6:5a:f6:e3:6e:c7:68:83:6b:56:c9:a6:
         ff:86:60:23:0a:13:4b:ef:e7:ad:23:97:06:19:4e:93:45:31:
         7b:07:a7:29:a1:44:22:51:2b:b6:39:7a:16:2d:20:7c:a0:4b:
         49:c1:5f:b7:17:c2:51:3a:fa:3b:57:06:13:b8:96:b4:85:ff:
         3b:9e:55:e2:fe:c5:e5:53:e5:21:36:8f:26:57:99:45:9d:3a:
         53:02:87:7e:72:0b:5a:6c:32:86:a6:b2:04:6b:03:46:f0:55:
         a7:3c:3a:4b:e4:5c:98:6d:ad:64:11:01:dd:15:30:31:b2:8c:
         fd:4c:bb:11:51:4b:36:64:54:92:4a:65:e0:e6:94:a0:f4:a1:
         02:24:5c:39:1d:a5:53:c8:c4:46:17:65:a9:2c:da:bf:b2:5f:
         13:1b:7f:61:e7:41:16:75:e1:02:4c:53:d5:43:3c:92:d3:70:
         43:dc:85:ff:76:89:08:7a:11:af:27:55:44:4f:95:2d:61:6d:
         b1:58:bf:a5:0a:c9:e5:70:b7:5f:71:e6:dc:09:eb:46:20:0c:
         11:e0:d1:1b:b7:e5:ca:2d:93:22:43:e8:ea:f5:a3:fe:6e:b5:
         14:31:dc:7e
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEk+09B0y2KVMvp6EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGRiZTVlMmQtYjdmOC00ZGJhLWI5N2ItOGI2MTY0ZTgz
ODkwMB4XDTI1MDMyMDAxMDAzOVoXDTI1MDYxODAxMDAzOVowLzEtMCsGA1UEAxMk
MzlkZDM5ZWMtMTkwMy00NWU2LTkxMjAtZjc0MjE3YjY3YWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjs2gGaIn4wKUPlVE1ZRwzHLEqVFsSwL5aArc
O8wtXObuHFLTHOuZIc+S4iuAIxLysvioWW6gwY7e0Xqp9BhtkUu0PDHdAzlouNUw
LzVh0WHpQgEOgx49QkLs/MCLw+RvA8v7VgfCWwV/bkg240Wz0pRvb9aApY0zQwxI
h+qZQ2zwabH5sZ5BJR9N/rJjDw2vxKqott4HL7zy1NgZdM4xRaVUcdvkzqPgd+oN
JcyfrLj+TfdrA+7mPEOXpgetL1bJYWluMwRkBpW85C79l3Ky3Ik+dIiG1b9bmnlr
lToo9IWUXsl0s9VOmA8ZSNXpddkX4lXS9RHCONKIw3EZunKcpQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEWlKG+VlsEv5cCDe6m7QmGf6rHAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJl
NWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYxNjRlODM4OTAvYzJhZTc1YWEtMjJjZC0z
ZDVkLWE5NGItNzBhZDliNTNmNmNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGRiZTVlMmQtYjdmOC00ZGJhLWI5
N2ItOGI2MTY0ZTgzODkwLzhkYmU1ZTJkLWI3ZjgtNGRiYS1iOTdiLThiNjE2NGU4
Mzg5MC5jcmwwHwYDVR0jBBgwFoAUzLDLOqY6j/oqVO/oyOtafTNgXAUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ZGJlNWUyZC1iN2Y4LTRkYmEtYjk3Yi04YjYx
NjRlODM4OTAuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA2FLpAwQA
2FLrMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAArU3iu4bH4e9gIPMSY4rxGDEzTIHnBQytZa9uNux2iDa1bJ
pv+GYCMKE0vv560jlwYZTpNFMXsHpymhRCJRK7Y5ehYtIHygS0nBX7cXwlE6+jtX
BhO4lrSF/zueVeL+xeVT5SE2jyZXmUWdOlMCh35yC1psMoamsgRrA0bwVac8Okvk
XJhtrWQRAd0VMDGyjP1MuxFRSzZkVJJKZeDmlKD0oQIkXDkdpVPIxEYXZaks2r+y
XxMbf2HnQRZ14QJMU9VDPJLTcEPchf92iQh6Ea8nVURPlS1hbbFYv6UKyeVwt19x
5twJ60YgDBHg0Ru35cotkyJD6Or1o/5utRQx3H4=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:34:06 2025 by rpki-client