Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa
File:                     96859fb6-e123-3c38-9ed7-250cc3c60b91.roa (raw, json)
Hash identifier:          A6lbJQOdWCzRmNFHtOJFIEXHP/3A5EEdYqzg9sEX5kQ=
Subject key identifier:   96:6B:90:81:53:CB:3F:2F:51:9C:A0:7C:9F:D2:FA:A5:98:72:8D:AB
Certificate issuer:       /CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
Certificate serial:       010D0C9F43285849DC83F9094904A03A81184480
Authority key identifier: AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa
Signing time:             Thu 15 May 2025 12:37:34 +0000
ROA not before:           Thu 15 May 2025 12:37:34 +0000
ROA not after:            Wed 13 Aug 2025 12:37:34 +0000
asID:                     16509
IP address blocks:        160.32.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:83:f9:09:49:04:a0:3a:81:18:44:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f0657a3e-0c20-4004-9a6b-e66cf7940583
        Validity
            Not Before: May 15 12:37:34 2025 GMT
            Not After : Aug 13 12:37:34 2025 GMT
        Subject: CN=4bc8ad39-a784-4e21-9fda-490a9fdfc9bc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:e0:41:f2:1f:c9:52:cc:8f:be:6b:06:05:85:
                    64:4d:f0:58:73:12:fa:d1:2a:b1:31:e8:1a:5b:a5:
                    55:52:d4:a1:e2:07:74:d1:42:f2:71:1c:2a:fb:ac:
                    91:3d:9e:dc:8c:90:97:9e:47:bd:59:c0:80:e2:d2:
                    ca:3f:12:32:f2:e6:81:da:93:b1:38:6d:42:1b:86:
                    92:bb:87:01:26:12:25:78:b8:23:f6:48:ac:6b:f3:
                    23:da:7a:c5:0e:37:7c:9b:72:87:94:57:e0:4e:11:
                    cf:29:96:ab:c2:4c:e1:2c:52:63:a0:da:d6:c1:23:
                    1c:69:2a:ab:1d:b9:04:4e:72:d9:dd:39:18:ba:c2:
                    e2:73:6e:ff:87:5f:f0:9a:44:94:17:fe:1f:c3:a9:
                    70:31:a6:38:14:4f:40:72:0d:68:73:af:3c:89:3f:
                    6f:37:4b:b1:2f:da:3c:12:ca:5c:fa:25:81:d5:00:
                    97:40:ea:dc:f1:42:40:78:22:f8:8b:a9:e3:ff:ee:
                    30:64:3d:77:57:b0:7f:14:a7:44:11:9c:9d:0f:57:
                    66:93:f6:d7:3a:1a:b0:4e:f1:6f:e8:f4:03:1d:a1:
                    91:81:a0:86:8a:1a:e8:45:3a:9e:4e:68:6f:7f:9e:
                    3f:a7:e2:56:4f:38:22:05:c9:b8:75:30:46:eb:84:
                    5f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:6B:90:81:53:CB:3F:2F:51:9C:A0:7C:9F:D2:FA:A5:98:72:8D:AB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/96859fb6-e123-3c38-9ed7-250cc3c60b91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583/f0657a3e-0c20-4004-9a6b-e66cf7940583.crl

            X509v3 Authority Key Identifier:
                keyid:AE:D2:F6:7D:B9:FB:99:3C:FD:3E:FC:08:0D:5A:9C:AD:EE:62:CD:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/f0657a3e-0c20-4004-9a6b-e66cf7940583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.32.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:c3:23:b5:b6:ed:9e:d0:dd:15:48:92:89:2a:d9:d1:fb:f3:
         ea:c7:cb:91:66:2d:17:e4:43:59:b8:38:57:28:12:cf:5c:0e:
         3f:7f:04:38:05:ce:65:92:dc:fb:7a:de:23:24:67:45:c1:83:
         38:bf:03:42:a5:17:a5:c3:90:6d:b4:50:7b:1e:2a:cc:85:99:
         b0:ef:c7:9a:1c:66:b9:8e:9f:73:cf:15:6d:cc:a6:38:4b:cf:
         83:fd:4e:1a:95:c4:ed:b0:25:90:6c:7a:8e:b7:be:58:e7:71:
         d9:cf:a9:15:cb:85:cd:3c:3d:82:70:43:4a:bc:38:c3:aa:da:
         52:f4:83:48:1d:97:c6:22:c1:75:a5:3e:ad:06:c4:60:e9:5b:
         94:32:16:f5:64:24:e7:67:a0:7d:c8:6b:6f:f6:c9:f5:7c:cd:
         28:9c:6e:70:47:fd:0f:df:b0:d2:88:d0:46:0d:da:97:1f:80:
         8f:9d:28:aa:65:9a:b5:8b:8e:96:cb:dd:77:85:eb:30:c3:e4:
         37:9c:23:44:3e:dc:5c:23:74:89:df:05:e5:98:62:d2:1c:9f:
         cf:a2:f8:f4:09:72:a9:e3:f0:64:51:3e:08:e8:39:aa:73:03:
         fa:3c:45:49:4e:2f:af:20:e1:a6:f1:3c:ba:db:6c:2b:48:77:
         1b:9a:3e:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncg/kJSQSgOoEYRIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjA2NTdhM2UtMGMyMC00MDA0LTlhNmItZTY2Y2Y3OTQw
NTgzMB4XDTI1MDUxNTEyMzczNFoXDTI1MDgxMzEyMzczNFowLzEtMCsGA1UEAxMk
NGJjOGFkMzktYTc4NC00ZTIxLTlmZGEtNDkwYTlmZGZjOWJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAieBB8h/JUsyPvmsGBYVkTfBYcxL60SqxMega
W6VVUtSh4gd00ULycRwq+6yRPZ7cjJCXnke9WcCA4tLKPxIy8uaB2pOxOG1CG4aS
u4cBJhIleLgj9kisa/Mj2nrFDjd8m3KHlFfgThHPKZarwkzhLFJjoNrWwSMcaSqr
HbkETnLZ3TkYusLic27/h1/wmkSUF/4fw6lwMaY4FE9Acg1oc688iT9vN0uxL9o8
Espc+iWB1QCXQOrc8UJAeCL4i6nj/+4wZD13V7B/FKdEEZydD1dmk/bXOhqwTvFv
6PQDHaGRgaCGihroRTqeTmhvf54/p+JWTzgiBcm4dTBG64RfaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZrkIFTyz8vUZygfJ/S+qWYco2rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1
N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZjZjc5NDA1ODMvOTY4NTlmYjYtZTEyMy0z
YzM4LTllZDctMjUwY2MzYzYwYjkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvZjA2NTdhM2UtMGMyMC00MDA0LTlh
NmItZTY2Y2Y3OTQwNTgzL2YwNjU3YTNlLTBjMjAtNDAwNC05YTZiLWU2NmNmNzk0
MDU4My5jcmwwHwYDVR0jBBgwFoAUrtL2fbn7mTz9PvwIDVqcre5izRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9mMDY1N2EzZS0wYzIwLTQwMDQtOWE2Yi1lNjZj
Zjc5NDA1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoCALMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFLDI7W27Z7Q3RVIkokq2dH78+rHy5FmLRfkQ1m4OFcoEs9cDj9/BDgF
zmWS3Pt63iMkZ0XBgzi/A0KlF6XDkG20UHseKsyFmbDvx5ocZrmOn3PPFW3MpjhL
z4P9ThqVxO2wJZBseo63vljncdnPqRXLhc08PYJwQ0q8OMOq2lL0g0gdl8YiwXWl
Pq0GxGDpW5QyFvVkJOdnoH3Ia2/2yfV8zSicbnBH/Q/fsNKI0EYN2pcfgI+dKKpl
mrWLjpbL3XeF6zDD5DecI0Q+3FwjdInfBeWYYtIcn8+i+PQJcqnj8GRRPgjoOapz
A/o8RUlOL68g4abxPLrbbCtIdxuaPjw=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:11:56 2025 by rpki-client