Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa
File:                     7d1a97e0-6886-39a7-b96c-b7debcee842c.roa (raw, json)
Hash identifier:          GRj/tWPI8gaMYGDeM9EwaFwZpsuPMxpO/BQ079hb1OE=
Subject key identifier:   BB:2F:53:E4:74:AA:11:6A:82:93:19:04:AF:33:47:8B:06:7B:A4:42
Certificate issuer:       /CN=dc455e58-6189-4f28-b803-61a965a21c65
Certificate serial:       010D0C9F43285848B626199F62010BEA088DA180
Authority key identifier: 66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa
Signing time:             Thu 30 Jan 2025 02:00:40 +0000
ROA not before:           Thu 30 Jan 2025 02:00:40 +0000
ROA not after:            Wed 30 Apr 2025 01:00:40 +0000
asID:                     8075
IP address blocks:        170.114.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:b6:26:19:9f:62:01:0b:ea:08:8d:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dc455e58-6189-4f28-b803-61a965a21c65
        Validity
            Not Before: Jan 30 02:00:40 2025 GMT
            Not After : Apr 30 01:00:40 2025 GMT
        Subject: CN=726f5372-775a-4efd-9dec-cc7d4b3149d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0d:32:59:10:43:37:a7:bf:82:16:03:df:06:
                    ef:68:03:83:91:3e:da:c7:93:84:bd:2d:b0:d1:e4:
                    83:21:d6:79:1b:ef:19:84:cf:16:47:c5:5e:82:ea:
                    1d:b0:e3:42:22:d2:bd:20:4d:d3:b9:4d:fb:21:e7:
                    4d:96:df:b5:4b:61:a8:2d:20:4d:99:57:fb:24:7c:
                    ba:be:5e:0c:13:66:f3:ee:e4:33:53:18:49:fb:12:
                    f1:80:d1:aa:57:4e:ca:da:a6:29:0e:be:75:69:1c:
                    f4:68:de:df:c0:44:2c:d5:73:33:c1:d0:8b:84:7f:
                    4d:ec:b2:1b:ee:9a:25:ed:8f:81:4c:23:83:15:f8:
                    17:f2:cc:87:94:4d:0b:bd:10:4e:69:06:2b:99:66:
                    2f:e0:95:b5:51:1c:38:72:4e:b3:d8:12:3e:cb:a6:
                    42:1b:fd:b6:bb:c4:03:7d:df:79:77:21:6f:ec:3e:
                    d0:40:5d:aa:f6:8a:f9:4d:4d:80:33:1a:1e:0b:3e:
                    2b:c6:b0:30:36:79:5e:99:c3:6e:82:b2:51:86:9f:
                    ca:0d:ac:54:53:7b:02:78:b9:ef:4c:c4:85:8f:f7:
                    e2:df:2a:d7:a6:36:16:60:f3:df:07:ea:7a:d8:4e:
                    bb:be:90:1c:a9:51:b6:08:6b:7f:bc:d8:66:d7:cf:
                    79:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:2F:53:E4:74:AA:11:6A:82:93:19:04:AF:33:47:8B:06:7B:A4:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/7d1a97e0-6886-39a7-b96c-b7debcee842c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65/dc455e58-6189-4f28-b803-61a965a21c65.crl

            X509v3 Authority Key Identifier:
                keyid:66:46:BF:04:CF:10:3E:4C:AE:90:A0:E6:CD:25:36:50:B6:45:BC:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/dc455e58-6189-4f28-b803-61a965a21c65.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.114.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:f9:df:2f:fd:9c:b5:21:87:94:39:d1:3d:72:2c:5d:bf:a2:
         31:33:86:0c:e6:0f:1f:73:13:28:a5:b2:97:fc:5d:39:f4:94:
         29:3c:3c:a1:58:d8:3c:6f:05:41:a6:cd:20:3c:cc:af:0d:10:
         02:20:33:29:91:bc:6e:f2:b3:bb:22:9b:b5:1f:21:52:32:c4:
         dc:1b:4a:2d:eb:c4:9e:e4:e7:9e:17:aa:d8:05:53:7c:50:ca:
         b9:86:99:c3:84:86:ca:c8:16:00:20:1e:8d:aa:d5:04:b3:16:
         83:c6:42:70:36:05:54:91:ff:6a:69:8b:e2:4a:37:33:74:01:
         3b:f7:3e:75:8b:1c:ac:30:61:0b:dd:6c:86:b9:30:38:8d:a4:
         e0:38:fd:b8:0c:ea:cb:e8:9c:d0:98:92:a3:9f:63:c3:4b:9a:
         32:5d:5c:db:e0:07:ac:79:9c:0e:c4:82:74:9a:ef:b9:51:46:
         41:b6:4b:22:7a:43:47:25:c5:c6:7b:22:65:4b:13:4c:f3:33:
         b6:22:0b:22:c9:a5:90:50:df:bf:eb:12:23:79:11:09:cd:bc:
         d4:d1:38:a8:e1:c4:ab:da:6a:5f:63:49:d5:46:be:f5:04:64:
         c8:c8:5b:02:f7:55:cb:38:f2:3a:20:8a:a4:b1:15:2d:49:89:
         c5:ca:53:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEi2JhmfYgEL6giNoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGM0NTVlNTgtNjE4OS00ZjI4LWI4MDMtNjFhOTY1YTIx
YzY1MB4XDTI1MDEzMDAyMDA0MFoXDTI1MDQzMDAxMDA0MFowLzEtMCsGA1UEAxMk
NzI2ZjUzNzItNzc1YS00ZWZkLTlkZWMtY2M3ZDRiMzE0OWQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ0yWRBDN6e/ghYD3wbvaAODkT7ax5OEvS2w
0eSDIdZ5G+8ZhM8WR8VeguodsONCItK9IE3TuU37IedNlt+1S2GoLSBNmVf7JHy6
vl4ME2bz7uQzUxhJ+xLxgNGqV07K2qYpDr51aRz0aN7fwEQs1XMzwdCLhH9N7LIb
7pol7Y+BTCODFfgX8syHlE0LvRBOaQYrmWYv4JW1URw4ck6z2BI+y6ZCG/22u8QD
fd95dyFv7D7QQF2q9or5TU2AMxoeCz4rxrAwNnlemcNugrJRhp/KDaxUU3sCeLnv
TMSFj/fi3yrXpjYWYPPfB+p62E67vpAcqVG2CGt/vNhm1895mQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLsvU+R0qhFqgpMZBK8zR4sGe6RCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1
NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5NjVhMjFjNjUvN2QxYTk3ZTAtNjg4Ni0z
OWE3LWI5NmMtYjdkZWJjZWU4NDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZGM0NTVlNTgtNjE4OS00ZjI4LWI4
MDMtNjFhOTY1YTIxYzY1L2RjNDU1ZTU4LTYxODktNGYyOC1iODAzLTYxYTk2NWEy
MWM2NS5jcmwwHwYDVR0jBBgwFoAUZka/BM8QPkyukKDmzSU2ULZFvD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9kYzQ1NWU1OC02MTg5LTRmMjgtYjgwMy02MWE5
NjVhMjFjNjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAqnI5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI353y/9nLUhh5Q50T1yLF2/ojEzhgzmDx9zEyilspf8XTn0lCk8PKFY
2DxvBUGmzSA8zK8NEAIgMymRvG7ys7sim7UfIVIyxNwbSi3rxJ7k554XqtgFU3xQ
yrmGmcOEhsrIFgAgHo2q1QSzFoPGQnA2BVSR/2ppi+JKNzN0ATv3PnWLHKwwYQvd
bIa5MDiNpOA4/bgM6svonNCYkqOfY8NLmjJdXNvgB6x5nA7EgnSa77lRRkG2SyJ6
Q0clxcZ7ImVLE0zzM7YiCyLJpZBQ37/rEiN5EQnNvNTROKjhxKvaal9jSdVGvvUE
ZMjIWwL3Vcs48jogiqSxFS1JicXKU54=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:08 2025 by rpki-client