Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa
File:                     ddca69e6-9438-397c-9f05-162b5ddfce07.roa (raw, json)
Hash identifier:          D2N2P2w03WTPavypvoT4T9Q1Lw4iUtJd0mnil9+aZ78=
Subject key identifier:   3D:BF:7A:7C:61:F2:21:62:E6:3D:16:C1:6B:3D:54:0F:80:F1:00:EC
Certificate issuer:       /CN=ff6475f1-b52e-4c86-8d20-188751c350e8
Certificate serial:       010D0C9F432858498769A704FAF05B4714617080
Authority key identifier: BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     834
IP address blocks:        216.83.32.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:a7:04:fa:f0:5b:47:14:61:70:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ff6475f1-b52e-4c86-8d20-188751c350e8
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=59ece071-584e-4c2b-a159-1a2ff4851dbf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:c8:48:6b:78:6a:35:f4:fd:19:83:c4:ef:97:
                    09:67:e6:8b:11:b2:a8:5f:fb:25:a1:1d:f9:50:33:
                    49:b2:44:33:97:c1:09:6f:c7:68:ac:fc:81:30:0d:
                    37:79:7a:ad:d5:98:b6:af:19:a3:31:50:80:96:05:
                    8a:b9:39:56:d8:6c:4b:7c:a4:3a:bd:04:49:d0:84:
                    a9:6b:8a:15:0b:89:bc:35:3b:3a:95:40:b4:d0:9e:
                    f6:df:1a:c0:2d:a8:f6:73:b2:2a:ec:65:03:59:9a:
                    94:26:3e:3d:af:0c:70:5a:94:6d:6c:a8:b5:98:7d:
                    5b:0e:98:6c:d4:ef:98:7e:4f:be:8e:95:b2:13:96:
                    8a:19:39:a9:0b:c2:40:e3:3b:ca:96:cd:44:6e:5f:
                    d0:14:bb:50:23:90:d6:29:78:bd:3f:93:18:1c:16:
                    b6:e1:3b:2f:d3:bc:14:1d:e0:94:c9:01:17:08:d4:
                    e2:e0:9f:f8:27:a0:5d:0f:43:09:f1:54:99:ed:7a:
                    7c:b1:41:b9:ab:fb:3e:c3:28:0c:e9:69:2a:6e:ff:
                    c4:e4:75:d2:11:71:33:74:b8:f7:fc:65:7d:4a:a1:
                    00:41:d7:43:e4:c5:d4:42:59:c9:93:79:a9:99:e0:
                    ff:59:7b:23:42:6b:4b:eb:a6:2c:8e:f5:a6:3e:5c:
                    51:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:BF:7A:7C:61:F2:21:62:E6:3D:16:C1:6B:3D:54:0F:80:F1:00:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ddca69e6-9438-397c-9f05-162b5ddfce07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8/ff6475f1-b52e-4c86-8d20-188751c350e8.crl

            X509v3 Authority Key Identifier:
                keyid:BC:E0:24:1E:07:9E:B1:95:92:23:D3:28:2A:D6:3C:09:24:C2:3B:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ff6475f1-b52e-4c86-8d20-188751c350e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.32.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:a4:a8:2c:e2:06:52:9d:09:16:92:7e:9b:cb:6f:91:55:41:
         4c:1a:f5:23:d2:ff:60:8b:fd:ec:67:aa:c2:48:21:6d:38:2a:
         cd:4b:8c:70:78:a0:08:61:3c:4b:d4:2f:61:45:2a:a2:66:f1:
         66:9e:ce:ea:d0:af:3e:b3:49:2d:a6:de:6a:ee:19:8a:8b:25:
         d4:3a:33:49:85:37:ff:78:68:42:17:5e:8c:e8:fa:70:7c:ac:
         e7:be:42:c3:75:b9:9a:30:4d:9e:17:98:bf:18:f5:9d:84:a2:
         6a:28:53:80:ba:51:75:a7:e8:7f:02:ac:f0:a4:b0:56:b2:f1:
         12:61:52:70:03:06:19:96:8c:e6:1d:12:42:8c:cd:01:db:f1:
         cb:a9:9f:cd:6f:f7:ab:aa:28:27:5a:46:cd:40:b3:bd:da:a7:
         29:df:52:a9:fa:16:2d:fc:c4:0e:9c:66:6d:e1:90:fb:3a:ae:
         5f:bf:49:ad:42:a7:be:6a:7a:7c:43:fc:00:66:10:2a:35:2f:
         bc:33:63:25:bb:94:37:e0:33:ef:51:4e:cb:33:99:b4:8a:30:
         30:e5:0f:68:11:b7:ea:6a:7f:0b:b3:8a:9f:18:ad:b1:ea:52:
         a8:7a:7b:de:bd:ae:6b:65:34:b1:80:3b:8d:fc:03:93:38:44:
         c8:d6:71:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmHaacE+vBbRxRhcIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmY2NDc1ZjEtYjUyZS00Yzg2LThkMjAtMTg4NzUxYzM1
MGU4MB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
NTllY2UwNzEtNTg0ZS00YzJiLWExNTktMWEyZmY0ODUxZGJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMhIa3hqNfT9GYPE75cJZ+aLEbKoX/sloR35
UDNJskQzl8EJb8dorPyBMA03eXqt1Zi2rxmjMVCAlgWKuTlW2GxLfKQ6vQRJ0ISp
a4oVC4m8NTs6lUC00J723xrALaj2c7Iq7GUDWZqUJj49rwxwWpRtbKi1mH1bDphs
1O+Yfk++jpWyE5aKGTmpC8JA4zvKls1Ebl/QFLtQI5DWKXi9P5MYHBa24Tsv07wU
HeCUyQEXCNTi4J/4J6BdD0MJ8VSZ7Xp8sUG5q/s+wygM6Wkqbv/E5HXSEXEzdLj3
/GV9SqEAQddD5MXUQlnJk3mpmeD/WXsjQmtL66YsjvWmPlxRtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD2/enxh8iFi5j0WwWs9VA+A8QDsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0
NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3NTFjMzUwZTgvZGRjYTY5ZTYtOTQzOC0z
OTdjLTlmMDUtMTYyYjVkZGZjZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmY2NDc1ZjEtYjUyZS00Yzg2LThk
MjAtMTg4NzUxYzM1MGU4L2ZmNjQ3NWYxLWI1MmUtNGM4Ni04ZDIwLTE4ODc1MWMz
NTBlOC5jcmwwHwYDVR0jBBgwFoAUvOAkHgeesZWSI9MoKtY8CSTCO4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZjY0NzVmMS1iNTJlLTRjODYtOGQyMC0xODg3
NTFjMzUwZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2FMgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2kqCziBlKdCRaSfpvLb5FVQUwa9SPS/2CL/exnqsJIIW04Ks1LjHB4
oAhhPEvUL2FFKqJm8WaezurQrz6zSS2m3mruGYqLJdQ6M0mFN/94aEIXXozo+nB8
rOe+QsN1uZowTZ4XmL8Y9Z2EomooU4C6UXWn6H8CrPCksFay8RJhUnADBhmWjOYd
EkKMzQHb8cupn81v96uqKCdaRs1As73apynfUqn6Fi38xA6cZm3hkPs6rl+/Sa1C
p75qenxD/ABmECo1L7wzYyW7lDfgM+9RTsszmbSKMDDlD2gRt+pqfwuzip8YrbHq
Uqh6e969rmtlNLGAO438A5M4RMjWceE=
-----END CERTIFICATE-----
Generated at Sat Apr 26 20:19:51 2025 by rpki-client