Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
File:                     002cd295-0845-3e0b-8fc6-6be378b880ee.roa (raw, json)
Hash identifier:          dH0/3dm3o1lW3/lJh3RIhlyibt/1THQxEIhJyBKD3Vw=
Subject key identifier:   B1:01:FE:24:18:61:0D:87:8E:49:38:D4:B7:7D:D6:33:39:54:DE:76
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F43285849ABB49D34DA352CE3180A3880
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     46606
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          162.251.80.0/24 maxlen: 24
                          162.251.85.0/24 maxlen: 24
                          199.79.62.0/23 maxlen: 24
                          204.11.58.0/23 maxlen: 24
                          207.174.212.0/22 maxlen: 24
                          208.91.198.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 02 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9d:34:da:35:2c:e3:18:0a:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=6d75e5c2-ebed-473b-8430-8c6f47e52ccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:71:7c:d0:ff:d8:d8:db:36:7a:9e:8c:ba:6a:
                    81:59:a9:45:f4:ce:d0:46:3d:25:38:68:ac:95:b0:
                    d3:3a:34:75:6a:03:fb:3c:81:cd:7f:98:cc:59:5e:
                    b0:e3:b4:a8:9c:42:92:b8:dc:6f:99:a9:f8:a5:64:
                    fa:df:c8:f3:fd:8f:04:16:e1:3c:0a:37:86:09:3f:
                    94:7a:90:e7:42:f6:65:48:70:a9:11:f6:33:b1:83:
                    8f:dc:39:84:ca:35:b5:08:6e:f3:ea:c6:52:d4:74:
                    26:da:6d:1a:5a:e1:bb:35:45:39:27:47:c9:91:cc:
                    e1:73:48:f4:89:b0:76:eb:4a:44:d2:52:67:4d:6c:
                    98:66:c6:91:78:37:18:52:42:7c:c8:03:04:c3:c8:
                    18:8d:37:1b:00:ae:2c:93:2c:cd:bc:9e:4e:3f:a8:
                    2b:d3:02:3b:08:3b:ae:68:05:74:ee:77:6d:07:26:
                    01:89:1e:26:39:a5:4d:10:1e:8a:b2:3a:5b:5f:db:
                    15:c8:b6:61:83:0b:44:d5:4a:67:06:cf:65:c4:0a:
                    b8:13:65:24:70:aa:6d:47:b0:7a:9d:b4:66:5e:15:
                    00:f1:e5:77:2e:8a:e0:18:30:86:2b:68:c9:ea:05:
                    7a:32:61:68:5d:63:bf:8b:71:05:df:ee:b8:19:3f:
                    e7:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:01:FE:24:18:61:0D:87:8E:49:38:D4:B7:7D:D6:33:39:54:DE:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/002cd295-0845-3e0b-8fc6-6be378b880ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  162.251.80.0/24
                  162.251.85.0/24
                  199.79.62.0/23
                  204.11.58.0/23
                  207.174.212.0/22
                  208.91.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:fd:cd:f3:1a:f9:a9:cf:43:81:5d:e2:b1:dc:80:f2:7c:97:
         ed:89:a9:22:20:a3:c3:b5:e5:fc:22:bd:4a:71:b3:42:c2:07:
         2b:98:e6:83:1c:35:f0:e8:a4:bc:94:01:d1:91:1c:66:52:63:
         3a:b6:0e:82:20:3d:78:b2:00:85:20:2a:35:b6:9d:89:f2:11:
         7e:92:af:18:4f:01:d8:f5:82:c4:5f:09:3a:70:4e:45:61:77:
         e5:7a:f3:9c:0f:82:1b:d3:56:c2:74:95:d1:ae:49:e6:10:91:
         d6:df:56:8f:2c:c4:74:11:9a:6b:aa:99:aa:ec:12:56:36:26:
         9f:98:d9:a9:6f:23:bb:9b:be:59:3d:51:db:1e:38:7f:d6:c3:
         1f:07:f4:bf:78:f7:74:db:e2:36:c2:47:96:81:b6:21:49:08:
         e6:a2:b2:8d:c5:c6:86:6b:66:9d:8e:dc:5b:3e:73:b0:e1:19:
         1f:b4:f3:6e:b2:ea:2b:1f:4d:db:49:87:a9:88:38:f1:28:c4:
         81:90:c2:ed:6b:a5:c4:86:e9:df:5e:c7:f8:83:d4:c0:9e:0e:
         a4:a0:b0:c6:ae:2b:90:8b:81:6f:b4:df:94:c1:e0:f2:be:b5:
         33:48:d9:52:79:55:5f:4e:43:23:41:e2:f8:33:a2:0f:7d:9c:
         69:45:8a:55
-----BEGIN CERTIFICATE-----
MIIGdTCCBV2gAwIBAgIUAQ0Mn0MoWEmrtJ002jUs4xgKOIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw
NTM1MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
NmQ3NWU1YzItZWJlZC00NzNiLTg0MzAtOGM2ZjQ3ZTUyY2NiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjXF80P/Y2Ns2ep6MumqBWalF9M7QRj0lOGis
lbDTOjR1agP7PIHNf5jMWV6w47SonEKSuNxvman4pWT638jz/Y8EFuE8CjeGCT+U
epDnQvZlSHCpEfYzsYOP3DmEyjW1CG7z6sZS1HQm2m0aWuG7NUU5J0fJkczhc0j0
ibB260pE0lJnTWyYZsaReDcYUkJ8yAMEw8gYjTcbAK4skyzNvJ5OP6gr0wI7CDuu
aAV07ndtByYBiR4mOaVNEB6KsjpbX9sVyLZhgwtE1UpnBs9lxAq4E2UkcKptR7B6
nbRmXhUA8eV3LorgGDCGK2jJ6gV6MmFoXWO/i3EF3+64GT/nlwIDAQABo4IDhzCC
A4MwHQYDVR0OBBYEFLEB/iQYYQ2Hjkk41Ld91jM5VN52MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4
NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvMDAyY2QyOTUtMDg0NS0z
ZTBiLThmYzYtNmJlMzc4Yjg4MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj
MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1
MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw
YTY1NTA1MzUuY2VyMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQBotJGMAwD
BACi3uEDBAKi3uADBACi+1ADBACi+1UDBAHHTz4DBAHMCzoDBALPrtQDBAHQW8Yw
VAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczov
L3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0B
AQsFAAOCAQEAff3N8xr5qc9DgV3isdyA8nyX7YmpIiCjw7Xl/CK9SnGzQsIHK5jm
gxw18OikvJQB0ZEcZlJjOrYOgiA9eLIAhSAqNbadifIRfpKvGE8B2PWCxF8JOnBO
RWF35XrznA+CG9NWwnSV0a5J5hCR1t9WjyzEdBGaa6qZquwSVjYmn5jZqW8ju5u+
WT1R2x44f9bDHwf0v3j3dNviNsJHloG2IUkI5qKyjcXGhmtmnY7cWz5zsOEZH7Tz
brLqKx9N20mHqYg48SjEgZDC7WulxIbp317H+IPUwJ4OpKCwxq4rkIuBb7TflMHg
8r61M0jZUnlVX05DI0Hi+DOiD32caUWKVQ==
-----END CERTIFICATE-----
Generated at Wed Apr 30 21:05:12 2025 by rpki-client