Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/2215a7be-035d-385d-8635-9dcd2253d236.roa
File:                     2215a7be-035d-385d-8635-9dcd2253d236.roa (raw, json)
Hash identifier:          gkHHUYSQcMG3XAdJPvmaLntMqOotJFr7wU98ADY8v9w=
Subject key identifier:   48:D5:10:78:62:94:45:6B:2A:80:8B:23:7E:5A:82:91:FF:02:DC:0A
Certificate issuer:       /CN=76315bad-1202-4f19-a255-ee554973714f
Certificate serial:       010D0C9F432858498769A67BD1F4B611C64ADB80
Authority key identifier: 1E:0D:CB:1E:DB:46:B5:DB:72:84:3A:43:A9:54:74:1F:C3:00:76:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/2215a7be-035d-385d-8635-9dcd2253d236.roa
Signing time:             Tue 15 Apr 2025 01:00:47 +0000
ROA not before:           Tue 15 Apr 2025 01:00:47 +0000
ROA not after:            Mon 14 Jul 2025 01:00:47 +0000
asID:                     11714
IP address blocks:        160.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/76315bad-1202-4f19-a255-ee554973714f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/76315bad-1202-4f19-a255-ee554973714f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 13 May 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:87:69:a6:7b:d1:f4:b6:11:c6:4a:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=76315bad-1202-4f19-a255-ee554973714f
        Validity
            Not Before: Apr 15 01:00:47 2025 GMT
            Not After : Jul 14 01:00:47 2025 GMT
        Subject: CN=34c44bf6-6a6c-4465-b82d-2e6b6836d7d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:85:5a:45:fd:c6:02:ff:e6:8e:56:b0:dd:58:
                    63:1d:e9:14:3b:2d:b8:9e:f8:e9:6a:c2:e4:48:47:
                    d0:1b:a8:0e:9f:12:b5:a8:9d:66:37:00:42:cc:e1:
                    05:b0:a8:41:2f:e6:da:06:a7:78:44:b9:b6:5d:10:
                    3d:50:48:f7:de:a3:e8:48:77:43:06:5e:f9:05:59:
                    c8:cb:b8:da:6c:38:f6:43:7c:d0:59:16:1f:58:6f:
                    0a:8b:68:32:69:f6:67:ea:9a:e2:85:08:cb:f9:ab:
                    23:47:25:c3:5b:68:43:c8:96:ab:14:b8:3b:72:1e:
                    7d:bf:6c:25:4a:c0:77:78:70:ce:47:3c:9e:49:d0:
                    ce:95:a9:30:f1:94:ac:ce:9d:96:f0:9e:c0:64:af:
                    c1:a6:c0:6d:f7:9c:fe:cf:5e:9b:fa:ab:3d:2d:16:
                    4e:14:8f:63:2b:c4:e7:cf:02:75:46:f0:23:0f:ff:
                    4d:7c:7b:f9:bd:e0:a8:2c:08:51:0a:44:63:4b:0c:
                    84:fc:70:70:08:be:c9:3f:e4:60:23:78:f0:24:39:
                    36:3f:1b:9f:35:bb:b5:56:3a:bb:9f:66:18:54:ed:
                    43:b7:b3:93:84:d5:6c:19:75:9b:e3:ea:b6:5e:45:
                    f6:28:d3:c4:5e:df:09:6d:4e:cc:91:d5:00:b0:d7:
                    07:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D5:10:78:62:94:45:6B:2A:80:8B:23:7E:5A:82:91:FF:02:DC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/2215a7be-035d-385d-8635-9dcd2253d236.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f/76315bad-1202-4f19-a255-ee554973714f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:0D:CB:1E:DB:46:B5:DB:72:84:3A:43:A9:54:74:1F:C3:00:76:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/76315bad-1202-4f19-a255-ee554973714f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.102.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:fc:68:5d:7b:f9:17:29:18:d6:5d:db:0b:5e:ed:e1:8a:c2:
         d0:ae:59:53:44:9b:88:e7:09:29:f1:62:42:12:e4:c4:a8:64:
         84:1e:b2:a9:b2:d2:32:8f:0d:9c:5c:2b:57:66:3b:42:ea:30:
         6e:94:90:24:2b:4f:88:67:07:a6:df:29:56:52:58:b0:06:84:
         58:10:0a:bf:4a:be:4d:38:5c:b7:bf:11:c5:0f:59:d0:53:1d:
         06:3a:3f:e5:0e:d9:40:f5:c4:20:77:c9:a8:c6:30:97:28:30:
         2d:37:2a:44:5d:fe:01:03:1d:fc:5f:11:a3:dd:1f:ca:48:12:
         7a:c3:c8:b2:26:85:d2:80:16:46:47:fb:e8:2e:ea:5a:52:24:
         b8:f3:c5:ce:70:22:64:a4:e0:51:22:65:15:8b:fa:0a:30:78:
         f3:c1:ee:c4:eb:19:f7:15:d4:a5:1b:93:a1:fc:80:75:c8:0d:
         c7:b2:d7:68:07:c6:fd:c4:30:3b:4f:f1:ef:8d:fc:1d:75:14:
         5f:6e:a1:5b:51:22:84:73:b2:9f:e1:1c:52:94:7b:df:77:38:
         28:61:5b:0f:c3:a5:71:00:01:64:ce:64:c7:89:c3:b8:48:14:
         f7:ca:3b:fa:57:46:3b:50:52:b1:49:de:fa:78:2e:73:f2:bc:
         20:26:16:8a
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEmHaaZ70fS2EcZK24AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzYzMTViYWQtMTIwMi00ZjE5LWEyNTUtZWU1NTQ5NzM3
MTRmMB4XDTI1MDQxNTAxMDA0N1oXDTI1MDcxNDAxMDA0N1owLzEtMCsGA1UEAxMk
MzRjNDRiZjYtNmE2Yy00NDY1LWI4MmQtMmU2YjY4MzZkN2Q0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA44VaRf3GAv/mjlaw3VhjHekUOy24nvjpasLk
SEfQG6gOnxK1qJ1mNwBCzOEFsKhBL+baBqd4RLm2XRA9UEj33qPoSHdDBl75BVnI
y7jabDj2Q3zQWRYfWG8Ki2gyafZn6prihQjL+asjRyXDW2hDyJarFLg7ch59v2wl
SsB3eHDORzyeSdDOlakw8ZSszp2W8J7AZK/BpsBt95z+z16b+qs9LRZOFI9jK8Tn
zwJ1RvAjD/9NfHv5veCoLAhRCkRjSwyE/HBwCL7JP+RgI3jwJDk2PxufNbu1Vjq7
n2YYVO1Dt7OThNVsGXWb4+q2XkX2KNPEXt8JbU7MkdUAsNcHrQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFEjVEHhilEVrKoCLI35agpH/AtwKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83NjMx
NWJhZC0xMjAyLTRmMTktYTI1NS1lZTU1NDk3MzcxNGYvMjIxNWE3YmUtMDM1ZC0z
ODVkLTg2MzUtOWRjZDIyNTNkMjM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzYzMTViYWQtMTIwMi00ZjE5LWEy
NTUtZWU1NTQ5NzM3MTRmLzc2MzE1YmFkLTEyMDItNGYxOS1hMjU1LWVlNTU0OTcz
NzE0Zi5jcmwwHwYDVR0jBBgwFoAUHg3LHttGtdtyhDpDqVR0H8MAduswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83NjMxNWJhZC0xMjAyLTRmMTktYTI1NS1lZTU1
NDk3MzcxNGYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAoGYwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAPvxoXXv5FykY1l3bC17t4YrC0K5ZU0SbiOcJKfFiQhLkxKhkhB6yqbLS
Mo8NnFwrV2Y7QuowbpSQJCtPiGcHpt8pVlJYsAaEWBAKv0q+TThct78RxQ9Z0FMd
Bjo/5Q7ZQPXEIHfJqMYwlygwLTcqRF3+AQMd/F8Ro90fykgSesPIsiaF0oAWRkf7
6C7qWlIkuPPFznAiZKTgUSJlFYv6CjB488HuxOsZ9xXUpRuTofyAdcgNx7LXaAfG
/cQwO0/x7438HXUUX26hW1EihHOyn+EcUpR733c4KGFbD8OlcQABZM5kx4nDuEgU
98o7+ldGO1BSsUne+nguc/K8ICYWig==
-----END CERTIFICATE-----
Generated at Mon May 12 04:08:57 2025 by rpki-client