Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/08715a07-1487-369e-86ca-984c75d151b4.roa
File:                     08715a07-1487-369e-86ca-984c75d151b4.roa (raw, json)
Hash identifier:          N8aR5UpE1CWrH8Ay/d2g2+5LeuEpKv1K8VTcoQFOZtM=
Subject key identifier:   52:C5:46:03:31:68:AA:57:39:E2:75:89:0C:9D:91:D6:C8:16:65:29
Certificate issuer:       /CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
Certificate serial:       010D0C9F43285848424ACD2FEA70DF880D0D2500
Authority key identifier: 1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/08715a07-1487-369e-86ca-984c75d151b4.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     30176
IP address blocks:        204.15.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:cd:2f:ea:70:df:88:0d:0d:25:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e8295820-03bc-4a4e-8072-7cbf748f4c6d
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=2b08f4c0-d1c4-414a-82eb-b5c369114dba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4f:37:c1:56:6b:2b:f2:ce:ca:54:ce:27:66:
                    e7:bd:c2:d2:28:97:ea:95:d0:59:91:b3:f9:f1:c0:
                    e7:33:95:57:89:be:09:1c:8b:91:ab:de:19:89:e6:
                    f0:ef:65:a6:6b:35:cf:d9:b6:2b:91:b5:1b:e7:9b:
                    03:bf:55:a3:4b:44:3a:02:36:e0:aa:f2:ff:eb:cf:
                    e3:d8:7d:b7:2b:aa:07:4e:38:6a:bf:5c:52:13:70:
                    61:3f:fe:5a:3b:60:74:6d:cf:17:60:9b:b2:3b:ed:
                    4c:dd:34:d3:ca:eb:d5:92:a6:5a:04:c4:ee:f2:bf:
                    6d:97:14:19:7a:6b:56:ec:cd:7c:c6:05:9a:5a:98:
                    51:92:56:02:4f:27:c5:57:fb:19:64:76:cc:6d:4d:
                    11:6e:80:6f:b6:c3:aa:fa:c7:44:3f:52:f4:6f:e1:
                    31:63:66:5e:cf:da:bf:d1:59:c4:f8:e2:cd:f2:2e:
                    0a:75:dd:d9:57:77:f6:ab:16:0a:39:20:23:f2:9b:
                    c0:b4:6e:51:03:b8:83:c2:8d:b0:2b:f8:c2:ab:88:
                    92:49:9c:07:40:ff:39:bb:91:64:01:53:c6:2c:4d:
                    17:8c:3e:7e:be:90:b9:7f:eb:47:68:dd:10:e7:76:
                    c4:77:d6:61:4f:8e:e6:b0:4f:96:66:a2:cc:fa:68:
                    f6:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:C5:46:03:31:68:AA:57:39:E2:75:89:0C:9D:91:D6:C8:16:65:29
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/08715a07-1487-369e-86ca-984c75d151b4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d/e8295820-03bc-4a4e-8072-7cbf748f4c6d.crl

            X509v3 Authority Key Identifier:
                keyid:1A:DF:53:58:7E:52:6C:6F:CC:BA:16:03:BC:4D:10:35:18:E8:E6:A4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e8295820-03bc-4a4e-8072-7cbf748f4c6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:91:9b:36:9d:d0:bb:e3:71:e2:cc:71:36:d8:77:f4:e3:76:
         89:64:8c:c3:02:7c:dd:95:10:8a:06:ab:36:e8:89:a4:6d:bc:
         d7:00:e8:67:1e:6c:8c:6d:51:cb:68:e8:cf:29:52:30:fa:dc:
         9f:ce:73:e3:23:97:90:9b:3d:ad:ef:4a:1d:82:92:01:bd:4c:
         92:59:1e:79:a5:09:03:03:e7:1a:04:cc:9c:f3:fd:f3:4f:dc:
         41:f0:5d:b8:be:19:12:98:ec:f3:34:ab:61:29:cc:53:f4:f6:
         09:cd:fa:15:e6:87:1b:d3:ec:cb:ba:5b:01:6f:7d:e4:d9:2b:
         4b:c2:ad:e0:b7:ce:30:72:71:c7:df:43:95:d5:f1:2c:55:12:
         8b:79:04:f5:62:46:16:bf:04:05:e9:73:2e:7d:db:83:f2:51:
         39:07:da:c3:4a:cb:58:bd:fe:82:7f:86:db:0c:6a:1a:fc:f3:
         9a:cd:62:3c:ae:fb:d6:05:f4:b1:64:30:6c:9f:9b:3e:02:cb:
         45:6a:56:2f:74:97:8b:25:03:b1:1b:19:88:40:4a:34:61:30:
         da:e6:34:4d:4c:e5:60:10:f7:a7:4c:94:22:6f:36:12:29:97:
         83:74:02:0c:ca:5d:14:8f:11:da:67:8b:ba:3a:61:ce:33:6c:
         99:62:43:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCSs0v6nDfiA0NJQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTgyOTU4MjAtMDNiYy00YTRlLTgwNzItN2NiZjc0OGY0
YzZkMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
MmIwOGY0YzAtZDFjNC00MTRhLTgyZWItYjVjMzY5MTE0ZGJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0k83wVZrK/LOylTOJ2bnvcLSKJfqldBZkbP5
8cDnM5VXib4JHIuRq94Ziebw72WmazXP2bYrkbUb55sDv1WjS0Q6AjbgqvL/68/j
2H23K6oHTjhqv1xSE3BhP/5aO2B0bc8XYJuyO+1M3TTTyuvVkqZaBMTu8r9tlxQZ
emtW7M18xgWaWphRklYCTyfFV/sZZHbMbU0RboBvtsOq+sdEP1L0b+ExY2Zez9q/
0VnE+OLN8i4Kdd3ZV3f2qxYKOSAj8pvAtG5RA7iDwo2wK/jCq4iSSZwHQP85u5Fk
AVPGLE0XjD5+vpC5f+tHaN0Q53bEd9ZhT47msE+WZqLM+mj2UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFLFRgMxaKpXOeJ1iQydkdbIFmUpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5
NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2JmNzQ4ZjRjNmQvMDg3MTVhMDctMTQ4Ny0z
NjllLTg2Y2EtOTg0Yzc1ZDE1MWI0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTgyOTU4MjAtMDNiYy00YTRlLTgw
NzItN2NiZjc0OGY0YzZkL2U4Mjk1ODIwLTAzYmMtNGE0ZS04MDcyLTdjYmY3NDhm
NGM2ZC5jcmwwHwYDVR0jBBgwFoAUGt9TWH5SbG/MuhYDvE0QNRjo5qQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lODI5NTgyMC0wM2JjLTRhNGUtODA3Mi03Y2Jm
NzQ4ZjRjNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzA/AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGWRmzad0LvjceLMcTbYd/TjdolkjMMCfN2VEIoGqzboiaRtvNcA6Gce
bIxtUcto6M8pUjD63J/Oc+Mjl5CbPa3vSh2CkgG9TJJZHnmlCQMD5xoEzJzz/fNP
3EHwXbi+GRKY7PM0q2EpzFP09gnN+hXmhxvT7Mu6WwFvfeTZK0vCreC3zjByccff
Q5XV8SxVEot5BPViRha/BAXpcy5924PyUTkH2sNKy1i9/oJ/htsMahr885rNYjyu
+9YF9LFkMGyfmz4Cy0VqVi90l4slA7EbGYhASjRhMNrmNE1M5WAQ96dMlCJvNhIp
l4N0AgzKXRSPEdpni7o6Yc4zbJliQwg=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:55:35 2025 by rpki-client