Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa
File:                     9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa (raw, json)
Hash identifier:          tFHuPNrYvUDeYNjOME3ChTi44vpLFwSyv/mtkVufP5A=
Subject key identifier:   24:EE:28:B7:4E:22:30:5F:02:29:FB:D0:9E:97:2E:1C:B4:6A:2E:89
Certificate issuer:       /CN=934f4dde-b680-46f3-8723-45f78b94fd80
Certificate serial:       010D0C9F43285848EDFBB9142C8581B5AF573480
Authority key identifier: 16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa
Signing time:             Wed 19 Feb 2025 02:00:38 +0000
ROA not before:           Wed 19 Feb 2025 02:00:38 +0000
ROA not after:            Tue 20 May 2025 01:00:38 +0000
asID:                     30058
IP address blocks:        216.227.168.0/23 maxlen: 24
                          2001:49f0:d13e::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ed:fb:b9:14:2c:85:81:b5:af:57:34:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=934f4dde-b680-46f3-8723-45f78b94fd80
        Validity
            Not Before: Feb 19 02:00:38 2025 GMT
            Not After : May 20 01:00:38 2025 GMT
        Subject: CN=3984f13f-7820-4810-8254-c12c908689bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e2:68:1e:80:29:0c:9b:82:68:01:01:41:6e:
                    53:b9:93:d5:3d:83:21:f5:2c:ce:ab:82:bf:ee:1c:
                    7e:8b:7c:f5:43:03:99:a6:ec:79:69:ba:0c:a2:96:
                    c8:46:26:a4:70:ae:33:e2:d8:60:8e:f1:6b:62:87:
                    8e:7b:e1:3a:5e:54:91:85:c5:b2:5c:54:54:31:12:
                    3a:6f:39:04:90:e3:1a:e1:bc:95:61:9c:40:f7:df:
                    38:9e:2d:5b:24:db:94:0f:6e:eb:05:1d:c7:a7:32:
                    0c:c3:cc:22:29:69:a2:cc:3f:12:0c:34:1e:aa:aa:
                    d5:f8:09:a3:12:af:9a:42:21:b2:7d:5c:39:e5:e0:
                    14:c9:15:96:3e:02:08:46:f6:71:af:4f:16:59:c9:
                    71:f3:6f:c7:30:1e:70:6f:2f:4d:8d:c5:a3:9c:e7:
                    5c:14:2f:d5:cc:fc:4e:40:4e:88:75:36:93:81:39:
                    be:59:f2:99:a1:e5:10:b0:e0:16:81:aa:86:d8:04:
                    42:18:a1:7e:03:23:a1:ff:e0:ec:d6:35:6b:e2:6f:
                    b7:8a:a6:e4:31:17:c6:66:f3:40:b0:86:c2:63:7c:
                    e6:30:95:04:e1:00:09:eb:6d:60:cb:96:d4:53:42:
                    61:36:b4:2d:fa:6a:9b:cb:22:39:e1:7c:a9:e9:e2:
                    ea:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:EE:28:B7:4E:22:30:5F:02:29:FB:D0:9E:97:2E:1C:B4:6A:2E:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/9d7a342c-42ba-327c-a6d5-07a5c794d05c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80/934f4dde-b680-46f3-8723-45f78b94fd80.crl

            X509v3 Authority Key Identifier:
                keyid:16:B4:E2:71:87:4C:37:8B:15:7B:48:76:40:D2:36:16:D1:27:13:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/934f4dde-b680-46f3-8723-45f78b94fd80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.227.168.0/23
                IPv6:
                  2001:49f0:d13e::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         96:ed:ac:ac:48:2f:c6:b2:be:98:64:bf:75:86:a7:cb:5a:c6:
         34:f2:af:ec:c5:0c:cc:af:39:67:c3:90:7c:91:54:fc:7e:6c:
         aa:61:2a:ad:d8:b3:61:8d:8b:8f:ac:59:2e:17:02:fb:de:f4:
         31:d2:1c:d6:fa:c5:e4:22:55:f3:c6:e4:93:55:a0:70:75:7f:
         f1:40:3a:94:ac:2b:42:88:3b:bc:bc:13:12:f5:c3:a6:de:c1:
         22:1c:73:fa:80:10:2b:26:1c:4c:8e:b8:b8:0a:20:d2:aa:9c:
         70:af:a3:84:46:36:aa:18:0c:6b:d0:cb:0b:02:02:81:a9:6a:
         1c:d8:38:e9:ae:07:3f:88:87:11:6e:c1:01:63:bc:14:68:bd:
         cb:93:48:e5:ed:28:d6:29:12:c7:27:f6:ab:aa:4c:58:c3:f3:
         6b:74:fc:b7:a6:88:53:c0:02:ec:ff:32:19:3b:88:1c:7c:5c:
         c9:c7:20:d2:db:66:83:fb:b8:9b:fa:c0:75:26:25:19:ee:7b:
         2f:9c:77:44:ae:12:8d:5b:67:3a:c7:17:5c:67:d1:96:b2:88:
         54:c5:65:92:fd:8d:27:67:88:a2:66:c4:10:4e:03:51:a1:d6:
         4c:62:b7:24:1d:f2:88:0a:c6:e6:af:01:3f:6a:e9:33:e2:9d:
         69:47:41:ca
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEjt+7kULIWBta9XNIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0ZjRkZGUtYjY4MC00NmYzLTg3MjMtNDVmNzhiOTRm
ZDgwMB4XDTI1MDIxOTAyMDAzOFoXDTI1MDUyMDAxMDAzOFowLzEtMCsGA1UEAxMk
Mzk4NGYxM2YtNzgyMC00ODEwLTgyNTQtYzEyYzkwODY4OWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOJoHoApDJuCaAEBQW5TuZPVPYMh9SzOq4K/
7hx+i3z1QwOZpux5aboMopbIRiakcK4z4thgjvFrYoeOe+E6XlSRhcWyXFRUMRI6
bzkEkOMa4byVYZxA9984ni1bJNuUD27rBR3HpzIMw8wiKWmizD8SDDQeqqrV+Amj
Eq+aQiGyfVw55eAUyRWWPgIIRvZxr08WWclx82/HMB5wby9NjcWjnOdcFC/VzPxO
QE6IdTaTgTm+WfKZoeUQsOAWgaqG2ARCGKF+AyOh/+Ds1jVr4m+3iqbkMRfGZvNA
sIbCY3zmMJUE4QAJ621gy5bUU0JhNrQt+mqbyyI54Xyp6eLqlQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFCTuKLdOIjBfAin70J6XLhy0ai6JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS85MzRm
NGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3OGI5NGZkODAvOWQ3YTM0MmMtNDJiYS0z
MjdjLWE2ZDUtMDdhNWM3OTRkMDVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOTM0ZjRkZGUtYjY4MC00NmYzLTg3
MjMtNDVmNzhiOTRmZDgwLzkzNGY0ZGRlLWI2ODAtNDZmMy04NzIzLTQ1Zjc4Yjk0
ZmQ4MC5jcmwwHwYDVR0jBBgwFoAUFrTicYdMN4sVe0h2QNI2FtEnExIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS85MzRmNGRkZS1iNjgwLTQ2ZjMtODcyMy00NWY3
OGI5NGZkODAuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQB2OOoMA8E
AgACMAkDBwAgAUnw0T4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAlu2srEgvxrK+mGS/dYany1rGNPKv7MUM
zK85Z8OQfJFU/H5sqmEqrdizYY2Lj6xZLhcC+970MdIc1vrF5CJV88bkk1WgcHV/
8UA6lKwrQog7vLwTEvXDpt7BIhxz+oAQKyYcTI64uAog0qqccK+jhEY2qhgMa9DL
CwICgalqHNg46a4HP4iHEW7BAWO8FGi9y5NI5e0o1ikSxyf2q6pMWMPza3T8t6aI
U8AC7P8yGTuIHHxcyccg0ttmg/u4m/rAdSYlGe57L5x3RK4SjVtnOscXXGfRlrKI
VMVlkv2NJ2eIombEEE4DUaHWTGK3JB3yiArG5q8BP2rpM+KdaUdByg==
-----END CERTIFICATE-----
Generated at Tue Apr 15 06:25:47 2025 by rpki-client