Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
File:                     880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa (raw, json)
Hash identifier:          FW7hhwI5NeQBYmeV/SedtL/S2ZwwAaOnTt5sa8NzOEs=
Subject key identifier:   1B:97:8E:7C:EE:0A:28:48:DA:C2:69:5E:D0:C5:E1:14:81:92:04:1F
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F43285848E59BBFE9E92011F0B6819D00
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
Signing time:             Sun 16 Feb 2025 02:00:40 +0000
ROA not before:           Sun 16 Feb 2025 02:00:40 +0000
ROA not after:            Sat 17 May 2025 01:00:40 +0000
asID:                     7224
IP address blocks:        192.111.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:e5:9b:bf:e9:e9:20:11:f0:b6:81:9d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Feb 16 02:00:40 2025 GMT
            Not After : May 17 01:00:40 2025 GMT
        Subject: CN=f3a39df9-201f-4ef3-b412-f2e9c907f4aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:55:51:36:ab:86:da:16:c4:b9:18:1d:14:ad:
                    9e:85:71:e6:2f:ab:d9:8a:d4:43:c8:d9:f1:7b:d8:
                    0f:25:6c:34:4d:db:9a:1f:55:ec:b0:b2:de:c6:88:
                    81:0f:e9:f0:f4:bc:d4:e1:9a:f6:b6:0e:fa:ec:3f:
                    2d:b7:63:0a:07:9e:fc:fa:1b:e3:69:5d:04:fe:ec:
                    53:4f:74:9b:33:c1:63:98:94:c4:f7:47:ad:e6:82:
                    4d:5e:a3:84:7e:2e:79:76:5b:9e:4a:88:cc:3f:a1:
                    bb:9c:bc:c3:7b:db:bd:8c:cc:31:31:64:7c:b0:9c:
                    06:ea:19:2b:e6:98:c3:4b:d9:10:fd:66:50:6f:3c:
                    dd:bd:22:fc:07:9a:18:27:17:00:66:ac:17:6f:bc:
                    f7:13:cd:43:83:90:c4:5e:61:f1:08:77:e8:32:f7:
                    11:8e:87:80:f7:23:94:57:1f:59:d7:a0:aa:3a:37:
                    00:47:78:86:ed:26:53:53:9f:a9:cb:8f:94:d2:09:
                    40:6a:b4:60:f7:7a:83:f5:16:6e:88:cd:4e:5b:67:
                    01:b9:c1:1f:86:11:5c:a7:36:43:b2:0a:39:60:6c:
                    2e:21:63:6a:48:8b:7e:69:20:9d:07:60:c5:61:20:
                    09:ea:69:a0:5b:bb:d1:b3:45:d4:f3:3d:03:bd:6a:
                    a5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:97:8E:7C:EE:0A:28:48:DA:C2:69:5E:D0:C5:E1:14:81:92:04:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:ba:87:f4:3b:89:eb:70:c4:03:0a:28:77:ef:a8:a1:dc:c9:
         37:39:de:83:e8:84:3e:c3:96:a8:d7:ef:2e:ef:59:f1:07:0a:
         fc:99:04:cf:03:55:87:88:59:c2:6a:90:a2:db:9c:72:f9:cb:
         58:d8:5d:6a:a5:07:8e:c9:8e:6c:11:80:d1:77:8d:6c:c7:90:
         c8:1c:05:81:b2:a6:6d:c3:71:5d:63:f8:cd:c1:77:85:5f:5c:
         22:4f:a3:4c:9a:91:61:c9:5a:d8:34:be:b3:9a:9d:cd:a8:29:
         bb:3b:97:cc:c7:0e:3a:b2:a7:04:5a:35:4a:ce:51:f0:1c:17:
         17:ff:fc:ec:97:96:dd:d8:56:7a:36:9f:40:3c:6f:e9:44:51:
         6f:55:76:89:6c:55:d2:34:a6:1f:dc:a3:e1:ce:3c:87:9b:3c:
         a4:65:a0:4a:83:f8:dc:52:ad:80:62:b2:2a:31:90:9e:2a:ba:
         18:3d:22:c6:0a:76:3e:52:2d:0e:65:c2:d1:c2:6b:3e:cc:7c:
         03:e8:75:b8:b5:e1:9a:8d:7f:ce:63:61:69:af:3e:99:db:28:
         78:ad:8f:69:90:f8:c9:9e:33:ad:15:ad:c2:c3:ce:b5:bb:80:
         41:cb:f3:d5:e4:b6:35:4d:f1:a1:0a:55:90:33:e2:ca:3a:d9:
         55:02:06:9a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjlm7/p6SAR8LaBnQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0
ZmNiMB4XDTI1MDIxNjAyMDA0MFoXDTI1MDUxNzAxMDA0MFowLzEtMCsGA1UEAxMk
ZjNhMzlkZjktMjAxZi00ZWYzLWI0MTItZjJlOWM5MDdmNGFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAklVRNquG2hbEuRgdFK2ehXHmL6vZitRDyNnx
e9gPJWw0TduaH1XssLLexoiBD+nw9LzU4Zr2tg767D8tt2MKB578+hvjaV0E/uxT
T3SbM8FjmJTE90et5oJNXqOEfi55dlueSojMP6G7nLzDe9u9jMwxMWR8sJwG6hkr
5pjDS9kQ/WZQbzzdvSL8B5oYJxcAZqwXb7z3E81Dg5DEXmHxCHfoMvcRjoeA9yOU
Vx9Z16CqOjcAR3iG7SZTU5+py4+U0glAarRg93qD9RZuiM1OW2cBucEfhhFcpzZD
sgo5YGwuIWNqSIt+aSCdB2DFYSAJ6mmgW7vRs0XU8z0DvWql1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBuXjnzuCihI2sJpXtDF4RSBkgQfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy
YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvODgwZWM4ZDUtMWEyOC0z
ZTk5LWI2ZmItODQwYjFiYWFiYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw
NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh
NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi
ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAm6h/Q7ietwxAMKKHfvqKHcyTc53oPohD7DlqjX7y7vWfEHCvyZBM8D
VYeIWcJqkKLbnHL5y1jYXWqlB47JjmwRgNF3jWzHkMgcBYGypm3DcV1j+M3Bd4Vf
XCJPo0yakWHJWtg0vrOanc2oKbs7l8zHDjqypwRaNUrOUfAcFxf//OyXlt3YVno2
n0A8b+lEUW9VdolsVdI0ph/co+HOPIebPKRloEqD+NxSrYBisioxkJ4quhg9IsYK
dj5SLQ5lwtHCaz7MfAPodbi14ZqNf85jYWmvPpnbKHitj2mQ+MmeM60VrcLDzrW7
gEHL89XktjVN8aEKVZAz4so62VUCBpo=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:34 2025 by rpki-client