Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa
File:                     04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa (raw, json)
Hash identifier:          6mGlUunHB1yrGygE8IKOBv+cSxC/Ae6BcJngG+yxAWo=
Subject key identifier:   EA:4B:57:62:F0:BE:6E:4E:34:1D:E0:C1:77:4D:05:2E:D4:AC:A9:1B
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F432858498A345E4C19478012850C7500
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa
Signing time:             Wed 16 Apr 2025 01:00:48 +0000
ROA not before:           Wed 16 Apr 2025 01:00:48 +0000
ROA not after:            Tue 15 Jul 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        216.139.80.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8a:34:5e:4c:19:47:80:12:85:0c:75:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Apr 16 01:00:48 2025 GMT
            Not After : Jul 15 01:00:48 2025 GMT
        Subject: CN=4255a9ce-1234-47e7-89c7-6574831083d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:fa:6c:e4:c4:fa:f0:67:72:b9:5e:b6:ef:e6:
                    1b:c8:ea:5a:f3:12:64:1f:ce:dd:aa:e5:6c:7e:e2:
                    4d:b7:6a:6d:b4:26:2f:46:43:31:02:c0:13:d6:a0:
                    c2:36:a9:36:6f:3a:03:e1:6c:90:98:90:37:c8:a8:
                    28:d5:f5:dc:99:19:bf:90:fc:f0:20:2f:31:61:a1:
                    69:d6:73:15:b7:7c:10:af:3d:3e:99:5b:c4:ac:cc:
                    45:ea:d6:3e:7c:a1:c7:30:59:62:e4:83:b5:9b:1e:
                    52:8b:43:fc:a2:17:8c:5f:79:42:3d:eb:b7:7e:7d:
                    76:f2:42:62:18:5f:64:4d:21:7b:18:09:bb:09:c3:
                    f8:48:5a:6c:8d:4a:3d:6f:7c:fe:1e:38:d9:47:f7:
                    d8:b7:ac:01:ff:e4:f1:7c:a8:b1:0a:4d:5d:b2:9d:
                    95:03:5f:76:e9:f3:6c:94:37:f5:93:3f:ba:9e:f9:
                    14:3b:14:6e:39:2f:bb:ba:c0:87:c8:69:03:45:9c:
                    81:56:61:41:61:db:8f:22:8e:50:b1:88:9c:19:07:
                    94:ea:09:76:03:e0:95:0a:60:ab:44:cf:c2:d9:f9:
                    35:d7:8a:f1:67:81:d9:85:bd:a2:69:41:3b:1c:07:
                    1d:f8:1d:2a:30:6f:b5:bc:88:91:33:20:f4:db:2c:
                    f1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4B:57:62:F0:BE:6E:4E:34:1D:E0:C1:77:4D:05:2E:D4:AC:A9:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/04c9ce57-3d57-31bf-b64f-99218c5f7ce7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.80.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:50:03:c4:51:9c:94:b9:4a:c3:46:fb:e6:ed:48:3b:cf:6b:
         22:49:ed:75:10:fd:7d:87:dc:a6:08:27:7c:21:88:02:23:8a:
         92:04:3b:2d:14:d9:be:8c:75:1e:94:ee:13:70:a7:5d:e9:25:
         6b:df:84:b5:70:de:be:31:4c:85:f1:7b:2d:80:92:af:ab:2c:
         db:68:3c:fd:a6:5a:00:0c:72:df:af:78:3d:b8:4d:69:a6:0e:
         48:c3:91:ba:9c:b2:e9:92:cb:cc:26:87:e5:57:16:74:40:ff:
         7b:ab:a6:ee:02:41:48:51:0f:93:67:9d:1e:67:be:e0:b8:83:
         26:1a:de:60:be:f2:a2:86:4f:ff:4c:58:e6:df:d6:65:18:b8:
         43:50:d3:c1:c2:b8:91:9f:23:cd:53:7d:0e:49:a5:73:47:c2:
         0c:8d:0b:03:d4:24:ae:5f:65:13:88:a2:ed:cf:b7:8f:f2:19:
         b1:d0:3f:85:74:2a:8c:cc:08:02:2d:2c:44:ee:f3:79:7a:08:
         b5:12:74:86:21:8e:67:b8:51:23:d9:37:75:eb:5e:60:64:ac:
         c5:27:d2:7b:14:19:94:ab:19:00:51:29:aa:89:44:6d:9c:c1:
         53:77:53:19:56:b7:df:6a:a0:67:ee:8c:19:c8:14:32:28:3b:
         54:49:14:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmKNF5MGUeAEoUMdQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDQxNjAxMDA0OFoXDTI1MDcxNTAxMDA0OFowLzEtMCsGA1UEAxMk
NDI1NWE5Y2UtMTIzNC00N2U3LTg5YzctNjU3NDgzMTA4M2Q3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp/ps5MT68GdyuV627+YbyOpa8xJkH87dquVs
fuJNt2pttCYvRkMxAsAT1qDCNqk2bzoD4WyQmJA3yKgo1fXcmRm/kPzwIC8xYaFp
1nMVt3wQrz0+mVvErMxF6tY+fKHHMFli5IO1mx5Si0P8oheMX3lCPeu3fn128kJi
GF9kTSF7GAm7CcP4SFpsjUo9b3z+HjjZR/fYt6wB/+TxfKixCk1dsp2VA1926fNs
lDf1kz+6nvkUOxRuOS+7usCHyGkDRZyBVmFBYduPIo5QsYicGQeU6gl2A+CVCmCr
RM/C2fk114rxZ4HZhb2iaUE7HAcd+B0qMG+1vIiRMyD02yzxdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOpLV2Lwvm5ONB3gwXdNBS7UrKkbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvMDRjOWNlNTctM2Q1Ny0z
MWJmLWI2NGYtOTkyMThjNWY3Y2U3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2ItQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA9QA8RRnJS5SsNG++btSDvPayJJ7XUQ/X2H3KYIJ3whiAIjipIEOy0U
2b6MdR6U7hNwp13pJWvfhLVw3r4xTIXxey2Akq+rLNtoPP2mWgAMct+veD24TWmm
DkjDkbqcsumSy8wmh+VXFnRA/3urpu4CQUhRD5NnnR5nvuC4gyYa3mC+8qKGT/9M
WObf1mUYuENQ08HCuJGfI81TfQ5JpXNHwgyNCwPUJK5fZROIou3Pt4/yGbHQP4V0
KozMCAItLETu83l6CLUSdIYhjme4USPZN3XrXmBkrMUn0nsUGZSrGQBRKaqJRG2c
wVN3UxlWt99qoGfujBnIFDIoO1RJFOg=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:10:22 2025 by rpki-client