Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/16f28bdb-acd8-3ea7-b10c-69f7f15014a0.roa
File:                     16f28bdb-acd8-3ea7-b10c-69f7f15014a0.roa (raw, json)
Hash identifier:          c5bQlNfszH09Ff0lXMjJqv8LAHtl5jUUwalg1pZK1Mo=
Subject key identifier:   67:61:B5:13:C0:21:55:28:05:C8:94:91:BC:AC:97:30:11:24:08:73
Certificate issuer:       /CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
Certificate serial:       010D0C9F43285848159FF2391C65653C68331940
Authority key identifier: 50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/16f28bdb-acd8-3ea7-b10c-69f7f15014a0.roa
Signing time:             Tue 03 Dec 2024 14:00:52 +0000
ROA not before:           Tue 03 Dec 2024 14:00:52 +0000
ROA not after:            Mon 03 Mar 2025 14:00:52 +0000
asID:                     12129
IP address blocks:        216.234.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:15:9f:f2:39:1c:65:65:3c:68:33:19:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c426976e-fbfb-4ad8-a28a-a25f5b0671de
        Validity
            Not Before: Dec  3 14:00:52 2024 GMT
            Not After : Mar  3 14:00:52 2025 GMT
        Subject: CN=ca1a1792-499e-41f8-9f02-e6f12c450f6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c3:b2:c7:b0:18:d7:d4:0f:42:8e:0e:d4:cb:
                    0d:6a:f1:a0:06:7b:1a:d5:e7:d8:0e:d8:b7:b6:14:
                    a3:ed:33:3b:f5:af:c5:5c:25:3b:ad:77:68:c0:df:
                    73:f5:e3:78:c7:0f:49:9c:63:99:14:a1:8e:f4:74:
                    2f:e9:80:e9:08:8c:25:d5:69:41:a5:82:54:88:e3:
                    05:10:b8:12:e3:8a:bc:9e:6b:b5:30:71:cb:c7:e1:
                    da:7f:b8:a7:28:10:ec:e6:9f:52:1a:28:bf:a7:55:
                    80:ec:95:d0:a6:6b:a0:5b:01:a6:c0:6c:32:d8:5d:
                    ed:5c:65:27:9d:2f:e3:6b:31:f2:0c:02:d0:55:f2:
                    d6:8f:37:7e:73:63:22:7c:bc:8e:af:ff:e8:33:a8:
                    c3:98:15:50:1e:14:78:01:44:03:c5:3d:e1:85:d2:
                    da:86:a0:69:a9:f3:9a:35:76:df:35:07:9f:5d:9b:
                    93:37:0b:db:51:c5:00:80:df:ce:c3:b7:0a:3d:85:
                    8c:e4:ff:44:3e:4b:13:b1:17:e3:ce:09:49:4c:3c:
                    3b:63:d8:77:55:00:34:8f:ff:c2:9d:ce:71:55:b2:
                    12:fb:20:7d:56:c9:3f:13:91:1d:7c:c0:79:a0:11:
                    65:4d:1f:dd:b9:5f:e5:be:53:56:ef:7f:85:e0:b4:
                    63:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:61:B5:13:C0:21:55:28:05:C8:94:91:BC:AC:97:30:11:24:08:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/16f28bdb-acd8-3ea7-b10c-69f7f15014a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de/c426976e-fbfb-4ad8-a28a-a25f5b0671de.crl

            X509v3 Authority Key Identifier:
                keyid:50:30:AE:18:14:D4:A2:C0:65:70:1F:F5:74:20:76:D4:86:0D:64:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c426976e-fbfb-4ad8-a28a-a25f5b0671de.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6e:2a:fe:19:7d:f8:a1:30:01:6c:5a:f2:d2:24:22:31:cc:3e:
         f5:3f:2d:7e:7c:b5:d9:9e:72:73:71:3d:a0:58:7b:48:dc:33:
         44:aa:07:d8:64:4c:2e:29:32:70:72:84:ca:19:43:b7:f4:bd:
         29:59:3f:67:de:48:92:fb:5e:14:94:37:38:3e:25:d0:ad:c9:
         37:e5:eb:d3:f4:4f:d5:84:3d:ff:5f:5f:29:56:e3:ed:27:b2:
         55:33:07:35:19:79:f5:3a:c6:9e:95:14:33:3a:40:61:c8:f2:
         88:26:21:f9:4c:92:1b:25:1c:3c:c6:37:3b:a8:c8:4a:84:ca:
         29:4f:98:14:67:86:2f:5e:6a:34:1f:c2:36:da:56:3c:55:bc:
         92:68:8d:52:86:04:c5:47:36:1c:e5:c9:ee:38:e2:15:02:67:
         99:ed:b4:b8:61:da:be:23:02:43:33:46:2d:04:44:49:83:de:
         20:d6:fb:10:4a:c4:a5:a3:0d:b4:91:da:6c:6f:ee:4f:9c:72:
         82:cf:ae:60:97:b6:46:2c:12:67:79:5c:0e:57:34:4d:7f:6f:
         c8:04:45:44:a1:f6:8f:99:5d:be:0d:eb:5d:ed:7e:d5:95:50:
         e2:dd:1a:80:be:bf:c8:2f:3d:52:6e:01:44:24:44:d4:c6:2d:
         e2:e8:0d:6c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEgVn/I5HGVlPGgzGUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQyNjk3NmUtZmJmYi00YWQ4LWEyOGEtYTI1ZjViMDY3
MWRlMB4XDTI0MTIwMzE0MDA1MloXDTI1MDMwMzE0MDA1MlowLzEtMCsGA1UEAxMk
Y2ExYTE3OTItNDk5ZS00MWY4LTlmMDItZTZmMTJjNDUwZjZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjMOyx7AY19QPQo4O1MsNavGgBnsa1efYDti3
thSj7TM79a/FXCU7rXdowN9z9eN4xw9JnGOZFKGO9HQv6YDpCIwl1WlBpYJUiOMF
ELgS44q8nmu1MHHLx+Haf7inKBDs5p9SGii/p1WA7JXQpmugWwGmwGwy2F3tXGUn
nS/jazHyDALQVfLWjzd+c2MifLyOr//oM6jDmBVQHhR4AUQDxT3hhdLahqBpqfOa
NXbfNQefXZuTNwvbUcUAgN/Ow7cKPYWM5P9EPksTsRfjzglJTDw7Y9h3VQA0j//C
nc5xVbIS+yB9Vsk/E5EdfMB5oBFlTR/duV/lvlNW73+F4LRjBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGdhtRPAIVUoBciUkbyslzARJAhzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2
OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVmNWIwNjcxZGUvMTZmMjhiZGItYWNkOC0z
ZWE3LWIxMGMtNjlmN2YxNTAxNGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzQyNjk3NmUtZmJmYi00YWQ4LWEy
OGEtYTI1ZjViMDY3MWRlL2M0MjY5NzZlLWZiZmItNGFkOC1hMjhhLWEyNWY1YjA2
NzFkZS5jcmwwHwYDVR0jBBgwFoAUUDCuGBTUosBlcB/1dCB21IYNZG8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jNDI2OTc2ZS1mYmZiLTRhZDgtYTI4YS1hMjVm
NWIwNjcxZGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2OpgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG4q/hl9+KEwAWxa8tIkIjHMPvU/LX58tdmecnNxPaBYe0jcM0SqB9hk
TC4pMnByhMoZQ7f0vSlZP2feSJL7XhSUNzg+JdCtyTfl69P0T9WEPf9fXylW4+0n
slUzBzUZefU6xp6VFDM6QGHI8ogmIflMkhslHDzGNzuoyEqEyilPmBRnhi9eajQf
wjbaVjxVvJJojVKGBMVHNhzlye444hUCZ5nttLhh2r4jAkMzRi0EREmD3iDW+xBK
xKWjDbSR2mxv7k+ccoLPrmCXtkYsEmd5XA5XNE1/b8gERUSh9o+ZXb4N613tftWV
UOLdGoC+v8gvPVJuAUQkRNTGLeLoDWw=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:25:28 2025 by rpki-client