Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/86984919-6d52-3b03-b2bd-03f8e811aa97.roa
File:                     86984919-6d52-3b03-b2bd-03f8e811aa97.roa (raw, json)
Hash identifier:          g+Aa+EMRJWiZNn6WurpGOkSYvUDZuVbPAYw4K/NF+3Y=
Subject key identifier:   34:06:2B:7B:C8:39:AF:AD:F3:91:63:60:B5:A7:A5:7C:90:EE:53:CB
Certificate issuer:       /CN=a53680e8-0892-429a-8170-4361c21829bf
Certificate serial:       010D0C9F432858482BF55B9DFEB7E4993D5A4A00
Authority key identifier: 22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/86984919-6d52-3b03-b2bd-03f8e811aa97.roa
Signing time:             Wed 11 Dec 2024 14:00:52 +0000
ROA not before:           Wed 11 Dec 2024 14:00:52 +0000
ROA not after:            Tue 11 Mar 2025 13:00:52 +0000
asID:                     16509
IP address blocks:        216.115.219.0/24 maxlen: 24
                          216.115.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:2b:f5:5b:9d:fe:b7:e4:99:3d:5a:4a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a53680e8-0892-429a-8170-4361c21829bf
        Validity
            Not Before: Dec 11 14:00:52 2024 GMT
            Not After : Mar 11 13:00:52 2025 GMT
        Subject: CN=c43f8263-7d7a-4a63-b5ef-915ab244f435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:57:32:fc:ea:dd:99:4e:ba:46:15:13:fe:36:
                    c2:c8:50:6a:77:84:1d:4c:41:ba:ba:fd:bb:5e:df:
                    1f:d6:f4:7a:50:8e:b0:9c:e7:2d:21:e1:ff:74:47:
                    a8:79:8a:a1:af:04:13:eb:ab:b7:39:68:79:88:92:
                    68:43:13:99:a9:25:4a:08:e4:ea:c3:25:3c:04:b1:
                    1b:65:b2:a4:ad:a3:8e:98:f5:ee:75:b2:c6:22:b8:
                    10:ed:6f:13:50:a2:c2:9c:9b:5c:92:ed:22:55:d9:
                    2d:a3:8a:7b:f8:e4:92:c5:83:86:0d:56:2f:33:55:
                    2e:62:9d:5d:2d:f2:a2:3f:ca:21:e5:ed:e8:02:20:
                    1f:f8:b6:95:a4:0c:5b:63:a8:28:50:43:0a:f3:80:
                    46:92:2c:1e:bf:90:f6:ef:1f:b5:7a:04:29:3a:ff:
                    89:2d:57:5e:e4:13:25:2a:29:3e:4d:47:2a:0a:1a:
                    55:c7:15:ea:2f:b0:9d:4b:38:8d:d7:6c:4e:71:13:
                    46:f2:ad:c4:5a:c7:a5:a7:fb:85:e5:23:61:a8:b4:
                    94:ae:db:7c:36:0b:85:64:65:3e:ad:f9:a0:65:51:
                    d1:1e:1f:6a:85:b0:71:79:73:22:1b:63:31:d3:39:
                    18:ce:df:c6:bb:f6:83:0e:d3:c5:17:db:da:20:20:
                    e6:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:06:2B:7B:C8:39:AF:AD:F3:91:63:60:B5:A7:A5:7C:90:EE:53:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/86984919-6d52-3b03-b2bd-03f8e811aa97.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf/a53680e8-0892-429a-8170-4361c21829bf.crl

            X509v3 Authority Key Identifier:
                keyid:22:68:3C:11:76:B3:1C:0C:73:CF:28:15:36:8F:25:D0:C2:74:AE:CD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a53680e8-0892-429a-8170-4361c21829bf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.115.219.0-216.115.220.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0e:b0:36:b7:d8:ec:9f:65:47:63:63:5b:bf:35:ab:7c:e7:
         73:ac:7f:5e:90:94:9b:64:86:40:d9:31:ac:f0:f7:11:1e:6d:
         cc:cb:38:41:42:90:a5:cd:af:f1:0f:71:c2:2d:dd:e0:ac:b3:
         58:21:0a:54:f0:4f:43:09:d8:28:73:d4:ba:e1:89:f2:b1:77:
         71:ed:e0:99:c7:4e:86:bc:00:52:8f:de:34:95:b7:50:ad:58:
         fd:f2:7f:22:06:ef:1e:9c:f4:6f:d7:9e:23:67:60:40:61:93:
         56:3d:0e:0c:21:08:b9:20:c9:84:af:18:9e:e1:1e:c1:b7:ca:
         f0:be:a7:77:9b:2d:06:b0:1b:97:05:97:8d:e7:3e:83:8c:1b:
         02:f7:cb:12:f5:ff:ae:46:0d:c9:8c:ac:88:22:a1:49:ac:1d:
         ee:70:5c:af:70:b8:14:9d:6c:11:0d:84:0a:40:ba:78:7b:bb:
         a3:05:89:9e:40:9e:44:55:ae:bd:d6:c6:e3:91:33:9e:13:83:
         f0:5f:97:d9:ba:df:ad:22:14:81:5c:8c:41:a0:e1:f9:fb:c3:
         86:af:ff:d0:31:6b:9f:62:00:34:21:c4:ff:11:00:c0:15:8c:
         b6:e9:65:4d:75:08:be:0f:02:e3:bf:52:98:3b:91:a9:09:53:
         ec:94:4e:ca
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEgr9Vud/rfkmT1aSgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTUzNjgwZTgtMDg5Mi00MjlhLTgxNzAtNDM2MWMyMTgy
OWJmMB4XDTI0MTIxMTE0MDA1MloXDTI1MDMxMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzQzZjgyNjMtN2Q3YS00YTYzLWI1ZWYtOTE1YWIyNDRmNDM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6lcy/OrdmU66RhUT/jbCyFBqd4QdTEG6uv27
Xt8f1vR6UI6wnOctIeH/dEeoeYqhrwQT66u3OWh5iJJoQxOZqSVKCOTqwyU8BLEb
ZbKkraOOmPXudbLGIrgQ7W8TUKLCnJtcku0iVdkto4p7+OSSxYOGDVYvM1UuYp1d
LfKiP8oh5e3oAiAf+LaVpAxbY6goUEMK84BGkiwev5D27x+1egQpOv+JLVde5BMl
Kik+TUcqChpVxxXqL7CdSziN12xOcRNG8q3EWselp/uF5SNhqLSUrtt8NguFZGU+
rfmgZVHRHh9qhbBxeXMiG2Mx0zkYzt/Gu/aDDtPFF9vaICDmVwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFDQGK3vIOa+t85FjYLWnpXyQ7lPLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2
ODBlOC0wODkyLTQyOWEtODE3MC00MzYxYzIxODI5YmYvODY5ODQ5MTktNmQ1Mi0z
YjAzLWIyYmQtMDNmOGU4MTFhYTk3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYTUzNjgwZTgtMDg5Mi00MjlhLTgx
NzAtNDM2MWMyMTgyOWJmL2E1MzY4MGU4LTA4OTItNDI5YS04MTcwLTQzNjFjMjE4
MjliZi5jcmwwHwYDVR0jBBgwFoAUImg8EXazHAxzzygVNo8l0MJ0rs0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9hNTM2ODBlOC0wODkyLTQyOWEtODE3MC00MzYx
YzIxODI5YmYuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYc9sD
BADYc9wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEACQ6wNrfY7J9lR2NjW781q3znc6x/XpCUm2SGQNkxrPD3
ER5tzMs4QUKQpc2v8Q9xwi3d4KyzWCEKVPBPQwnYKHPUuuGJ8rF3ce3gmcdOhrwA
Uo/eNJW3UK1Y/fJ/IgbvHpz0b9eeI2dgQGGTVj0ODCEIuSDJhK8YnuEewbfK8L6n
d5stBrAblwWXjec+g4wbAvfLEvX/rkYNyYysiCKhSawd7nBcr3C4FJ1sEQ2ECkC6
eHu7owWJnkCeRFWuvdbG45EznhOD8F+X2brfrSIUgVyMQaDh+fvDhq//0DFrn2IA
NCHE/xEAwBWMtullTXUIvg8C479SmDuRqQlT7JROyg==
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:14:24 2025 by rpki-client