Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa
File:                     459cc33f-b493-32c6-9593-641920d148a2.roa (raw, json)
Hash identifier:          RJOXTEu00SGVUWLYaB5JLqr9CLlLwQbjTkr4V9EPYxw=
Subject key identifier:   F7:59:ED:90:0C:C1:71:17:88:E2:EF:52:DD:DC:FF:73:19:12:67:AE
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848C6E62CC66FB281FECC5921C0
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa
Signing time:             Wed 05 Feb 2025 02:00:39 +0000
ROA not before:           Wed 05 Feb 2025 02:00:39 +0000
ROA not after:            Tue 06 May 2025 01:00:39 +0000
asID:                     16509
IP address blocks:        170.114.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c6:e6:2c:c6:6f:b2:81:fe:cc:59:21:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Feb  5 02:00:39 2025 GMT
            Not After : May  6 01:00:39 2025 GMT
        Subject: CN=a7f11621-3e55-418e-aa65-b0a31b8957a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:2c:da:ee:18:80:ad:7e:28:bc:c0:61:ec:e1:
                    ed:0b:da:b1:9d:2c:0e:4d:ac:32:df:7d:0d:b5:75:
                    da:87:c2:86:a1:14:6d:6e:26:71:fe:46:02:9b:60:
                    14:2d:e0:7f:3d:06:0f:fe:97:b1:62:60:cd:08:c1:
                    df:19:10:3f:45:64:6c:85:73:c3:60:ea:cb:bf:78:
                    fd:8d:0d:21:17:2d:f6:12:ec:88:27:0c:7b:97:85:
                    68:df:c9:75:64:c7:08:d0:cb:73:97:a0:68:68:7f:
                    d7:c2:21:9c:17:01:51:46:66:fb:74:48:65:4e:d8:
                    45:3f:45:a3:44:b4:d9:cc:c2:95:fa:10:07:b8:90:
                    94:ac:e8:2a:7a:80:0d:65:6c:98:00:93:be:12:5d:
                    42:59:68:a9:43:ed:be:bb:98:a8:67:66:73:84:3c:
                    7e:fd:c8:fd:4f:18:16:c7:87:2c:83:92:e5:83:43:
                    c5:f7:a9:92:e3:43:5a:ad:2c:85:f1:e6:15:33:f3:
                    57:8a:dd:cf:3b:e1:24:91:29:0a:93:c8:45:33:21:
                    8f:ad:d1:2f:44:64:92:52:73:e2:5d:56:57:4e:b1:
                    8d:37:c4:df:c1:28:41:90:8e:1e:c6:26:3e:bd:58:
                    be:19:ec:dc:46:a6:c8:75:fa:12:65:55:f4:e3:9c:
                    cf:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:59:ED:90:0C:C1:71:17:88:E2:EF:52:DD:DC:FF:73:19:12:67:AE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/459cc33f-b493-32c6-9593-641920d148a2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.61.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:7e:e1:52:fe:e6:88:fb:41:03:40:ea:0c:ff:f8:fe:91:98:
         39:ba:db:94:32:dc:8d:35:86:2a:eb:bb:23:04:45:e3:cd:21:
         3e:e9:ac:7d:19:f9:e2:a2:d3:95:7c:bb:c9:e0:6f:f9:96:86:
         43:bf:b1:a5:b1:aa:51:8a:14:1a:08:0a:92:9a:42:36:82:3e:
         0b:9e:c1:82:40:0d:c5:0d:df:50:34:72:da:37:f0:06:7e:91:
         25:01:b2:7d:f0:fd:1f:89:5f:24:d1:2f:89:2f:39:79:14:c5:
         bb:5b:8a:8c:d5:14:cb:a4:f9:1c:36:9d:83:80:dc:ac:eb:d0:
         b8:5a:45:3e:ec:ad:c5:78:1a:d8:89:26:f1:e4:7d:e1:6a:92:
         be:c1:c2:99:00:15:12:c8:22:45:4f:fe:75:71:25:c0:ee:e0:
         fc:90:00:89:c0:7e:4a:29:0b:ff:f3:76:c5:11:72:10:d7:36:
         d9:f0:8c:55:48:29:7f:c3:33:e2:da:81:fb:2a:78:48:e6:70:
         d1:8b:d0:9f:b8:4c:86:8e:49:52:b8:6d:5e:34:e0:95:dc:65:
         9d:9f:03:0b:30:d1:fb:5c:58:a6:5a:48:75:7a:2a:d4:77:bd:
         12:b6:d4:cc:4c:1e:ca:5f:a4:63:98:5a:1e:b7:43:16:5b:dc:
         5b:b0:51:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjG5izGb7KB/sxZIcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDIwNTAyMDAzOVoXDTI1MDUwNjAxMDAzOVowLzEtMCsGA1UEAxMk
YTdmMTE2MjEtM2U1NS00MThlLWFhNjUtYjBhMzFiODk1N2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviza7hiArX4ovMBh7OHtC9qxnSwOTawy330N
tXXah8KGoRRtbiZx/kYCm2AULeB/PQYP/pexYmDNCMHfGRA/RWRshXPDYOrLv3j9
jQ0hFy32EuyIJwx7l4Vo38l1ZMcI0Mtzl6BoaH/XwiGcFwFRRmb7dEhlTthFP0Wj
RLTZzMKV+hAHuJCUrOgqeoANZWyYAJO+El1CWWipQ+2+u5ioZ2ZzhDx+/cj9TxgW
x4csg5Llg0PF96mS40NarSyF8eYVM/NXit3PO+EkkSkKk8hFMyGPrdEvRGSSUnPi
XVZXTrGNN8TfwShBkI4exiY+vVi+GezcRqbIdfoSZVX045zPcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPdZ7ZAMwXEXiOLvUt3c/3MZEmeuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvNDU5Y2MzM2YtYjQ5My0z
MmM2LTk1OTMtNjQxOTIwZDE0OGEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJd+4VL+5oj7QQNA6gz/+P6RmDm625Qy3I01hirruyMERePNIT7prH0Z
+eKi05V8u8ngb/mWhkO/saWxqlGKFBoICpKaQjaCPguewYJADcUN31A0cto38AZ+
kSUBsn3w/R+JXyTRL4kvOXkUxbtbiozVFMuk+Rw2nYOA3Kzr0LhaRT7srcV4GtiJ
JvHkfeFqkr7BwpkAFRLIIkVP/nVxJcDu4PyQAInAfkopC//zdsURchDXNtnwjFVI
KX/DM+LagfsqeEjmcNGL0J+4TIaOSVK4bV404JXcZZ2fAwsw0ftcWKZaSHV6KtR3
vRK21MxMHspfpGOYWh63QxZb3FuwUX8=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:17:03 2025 by rpki-client