Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/513a6577-3d2b-3f30-a6e4-40970319b5cf.roa
File:                     513a6577-3d2b-3f30-a6e4-40970319b5cf.roa (raw, json)
Hash identifier:          q6DgCMmS35Eo3XJRPLSe1GcGjjtQrC70IQYvC0TwBwk=
Subject key identifier:   9B:60:48:BF:FC:1C:7E:4E:D6:D9:53:8C:3E:C8:8C:F9:EB:47:68:CA
Certificate issuer:       /CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
Certificate serial:       010D0C9F43285848A1361C3C824CB500A1A109C0
Authority key identifier: C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/513a6577-3d2b-3f30-a6e4-40970319b5cf.roa
Signing time:             Wed 22 Jan 2025 14:00:52 +0000
ROA not before:           Wed 22 Jan 2025 14:00:52 +0000
ROA not after:            Tue 22 Apr 2025 13:00:52 +0000
asID:                     44382
IP address blocks:        216.9.225.0/24 maxlen: 24
                          216.9.226.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:a1:36:1c:3c:82:4c:b5:00:a1:a1:09:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e11ef213-14f9-4836-8d15-5de5c04f43ed
        Validity
            Not Before: Jan 22 14:00:52 2025 GMT
            Not After : Apr 22 13:00:52 2025 GMT
        Subject: CN=b1e82600-b27c-45cb-b2a5-9ddb147d091f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:b1:3f:dd:3e:d0:4b:75:b9:2a:64:65:10:c0:
                    2a:35:7f:54:0d:e8:53:88:b2:9e:8d:cb:98:2e:77:
                    1c:e3:e2:be:30:03:39:b5:ef:07:fe:b6:c5:7d:7c:
                    d7:83:91:d7:c7:b7:d5:4d:e5:fa:d5:6b:d7:7c:21:
                    27:cc:0b:39:fd:a1:bd:c1:f8:a3:7e:e7:7e:2f:bf:
                    21:9e:a8:ab:04:87:8a:c3:79:87:62:e7:ab:8a:56:
                    39:45:dd:ce:a1:ed:94:0c:c0:bd:de:b3:9b:5e:75:
                    b2:9d:47:73:1c:26:73:f1:d1:c5:67:8b:62:d4:49:
                    3e:7f:e5:14:fc:38:ec:ec:e1:b3:ca:30:fc:82:08:
                    0c:4c:44:4f:8d:00:4e:8b:4b:fd:45:95:f2:95:7f:
                    dc:ae:c5:1e:b7:53:c0:c5:1c:f0:ee:98:22:d8:b3:
                    00:c4:86:ae:98:2b:d3:ba:8b:e6:ab:f5:e3:e6:50:
                    f4:ee:53:63:07:71:20:ff:2c:74:dc:a9:d1:92:cd:
                    38:b6:9c:27:67:4d:e2:3c:a3:d7:9b:16:7f:13:00:
                    ff:a8:f1:14:c7:ee:ae:17:18:0e:61:1b:f7:f5:3e:
                    64:af:ca:ed:de:b2:d6:a6:30:92:5e:21:3f:71:62:
                    d4:65:55:df:d9:b5:3a:46:ff:28:1d:6b:7e:76:9f:
                    4e:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:60:48:BF:FC:1C:7E:4E:D6:D9:53:8C:3E:C8:8C:F9:EB:47:68:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/513a6577-3d2b-3f30-a6e4-40970319b5cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed/e11ef213-14f9-4836-8d15-5de5c04f43ed.crl

            X509v3 Authority Key Identifier:
                keyid:C1:9E:2C:DD:9F:B8:49:9A:57:8B:3A:F5:BF:E3:5E:54:2C:49:4A:1D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e11ef213-14f9-4836-8d15-5de5c04f43ed.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.9.225.0-216.9.226.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:31:3a:45:fd:a4:c5:74:78:9a:ee:f1:24:f7:5e:97:f1:0f:
         8e:9a:e6:42:96:db:19:44:be:32:d2:d0:57:b6:93:53:f9:33:
         16:1a:53:c2:99:06:75:11:22:a5:57:2d:23:54:e1:6d:d6:be:
         ab:59:4e:89:2a:be:ae:24:00:76:d5:bb:7f:a0:6f:7b:6b:53:
         8b:08:12:ca:6f:96:18:d4:da:6e:3f:8a:63:32:a8:e4:a8:43:
         94:96:05:cf:21:10:8e:fb:50:69:70:7f:ec:20:fe:3f:23:09:
         62:f0:c3:2a:39:04:0a:ed:b9:d6:77:46:f8:cb:0b:60:3b:22:
         b0:47:09:46:05:cb:56:49:c6:a1:5c:14:13:52:68:76:9a:f7:
         39:d5:0f:4e:2e:e0:f4:59:a7:a3:02:b8:6e:fa:46:5a:03:9e:
         4a:d1:0a:35:93:2e:18:86:47:b1:94:c0:d0:bd:1a:e7:26:46:
         30:6c:b8:e2:0b:51:61:d6:5a:10:31:3a:5a:34:5f:1d:e9:5b:
         f0:a5:a8:58:a1:a8:47:e6:67:c6:07:ee:2f:b7:93:74:44:fa:
         21:f7:ac:4c:fa:0a:0b:25:85:e7:b3:05:5a:4b:09:7d:a2:51:
         4f:fe:9a:74:d5:d8:7e:64:7a:69:77:44:cb:56:db:20:70:d8:
         de:83:e6:a9
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEihNhw8gky1AKGhCcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTExZWYyMTMtMTRmOS00ODM2LThkMTUtNWRlNWMwNGY0
M2VkMB4XDTI1MDEyMjE0MDA1MloXDTI1MDQyMjEzMDA1MlowLzEtMCsGA1UEAxMk
YjFlODI2MDAtYjI3Yy00NWNiLWIyYTUtOWRkYjE0N2QwOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArrE/3T7QS3W5KmRlEMAqNX9UDehTiLKejcuY
Lncc4+K+MAM5te8H/rbFfXzXg5HXx7fVTeX61WvXfCEnzAs5/aG9wfijfud+L78h
nqirBIeKw3mHYuerilY5Rd3Ooe2UDMC93rObXnWynUdzHCZz8dHFZ4ti1Ek+f+UU
/Djs7OGzyjD8gggMTERPjQBOi0v9RZXylX/crsUet1PAxRzw7pgi2LMAxIaumCvT
uovmq/Xj5lD07lNjB3Eg/yx03KnRks04tpwnZ03iPKPXmxZ/EwD/qPEUx+6uFxgO
YRv39T5kr8rt3rLWpjCSXiE/cWLUZVXf2bU6Rv8oHWt+dp9OTwIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFJtgSL/8HH5O1tlTjD7IjPnrR2jKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFl
ZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1YzA0ZjQzZWQvNTEzYTY1NzctM2QyYi0z
ZjMwLWE2ZTQtNDA5NzAzMTliNWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTExZWYyMTMtMTRmOS00ODM2LThk
MTUtNWRlNWMwNGY0M2VkL2UxMWVmMjEzLTE0ZjktNDgzNi04ZDE1LTVkZTVjMDRm
NDNlZC5jcmwwHwYDVR0jBBgwFoAUwZ4s3Z+4SZpXizr1v+NeVCxJSh0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMTFlZjIxMy0xNGY5LTQ4MzYtOGQxNS01ZGU1
YzA0ZjQzZWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBADYCeED
BADYCeIwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAOjE6Rf2kxXR4mu7xJPdel/EPjprmQpbbGUS+MtLQV7aT
U/kzFhpTwpkGdREipVctI1Thbda+q1lOiSq+riQAdtW7f6Bve2tTiwgSym+WGNTa
bj+KYzKo5KhDlJYFzyEQjvtQaXB/7CD+PyMJYvDDKjkECu251ndG+MsLYDsisEcJ
RgXLVknGoVwUE1Jodpr3OdUPTi7g9FmnowK4bvpGWgOeStEKNZMuGIZHsZTA0L0a
5yZGMGy44gtRYdZaEDE6WjRfHelb8KWoWKGoR+ZnxgfuL7eTdET6IfesTPoKCyWF
57MFWksJfaJRT/6adNXYfmR6aXdEy1bbIHDY3oPmqQ==
-----END CERTIFICATE-----
Generated at Sun Apr 6 20:34:18 2025 by rpki-client