Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
File:                     a0f559b4-6239-3212-be83-b4c0773d87e3.roa (raw, json)
Hash identifier:          apJVwVI5oU9ORWCuLecXhVawL2pnckMmKg0/f6yMaNI=
Subject key identifier:   C9:58:87:11:BA:D8:A7:E8:59:18:C8:CF:36:AC:55:34:E7:8E:2B:12
Certificate issuer:       /CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
Certificate serial:       010D0C9F43285849FE25334A6FCA6AB2568CC980
Authority key identifier: 60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa
Signing time:             Sat 24 May 2025 01:00:49 +0000
ROA not before:           Sat 24 May 2025 01:00:49 +0000
ROA not after:            Fri 22 Aug 2025 01:00:49 +0000
asID:                     398875
IP address blocks:        167.153.244.0/24 maxlen: 24
                          167.153.245.0/24 maxlen: 24
                          167.153.246.0/23 maxlen: 23
                          167.153.246.0/24 maxlen: 24
                          167.153.247.0/24 maxlen: 24
                          167.153.248.0/23 maxlen: 23
                          167.153.248.0/24 maxlen: 24
                          167.153.249.0/24 maxlen: 24
                          167.153.250.0/23 maxlen: 23
                          167.153.250.0/24 maxlen: 24
                          167.153.251.0/24 maxlen: 24
                          167.153.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:25:33:4a:6f:ca:6a:b2:56:8c:c9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b
        Validity
            Not Before: May 24 01:00:49 2025 GMT
            Not After : Aug 22 01:00:49 2025 GMT
        Subject: CN=48fa8109-6f6b-4a8d-9834-4b307ca1b78a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:0f:15:b6:32:7a:0e:77:a1:13:ea:83:b1:ef:
                    18:41:09:54:96:a4:66:c5:ed:2a:4c:58:6d:da:f8:
                    a3:67:14:ab:c2:37:11:03:6b:c0:ad:72:17:ac:7c:
                    d1:2d:9a:e4:47:8b:32:68:b9:49:47:74:ce:60:c7:
                    33:1d:df:29:22:25:a2:92:38:e2:f5:a3:49:b2:44:
                    95:5a:59:87:89:71:3e:bc:bb:d1:1f:8d:45:2c:7f:
                    e2:31:b4:0a:c1:d3:fe:08:0f:0a:68:6a:79:51:bf:
                    2c:27:8c:42:8c:f5:fb:ca:56:6f:79:8e:b0:4d:fb:
                    c9:90:6c:46:5c:64:57:f2:e7:b3:8f:64:1f:6d:24:
                    13:6c:88:3b:13:4c:9f:ee:0e:f8:4c:c7:0f:0e:4e:
                    9b:d8:56:c3:c9:3c:fd:d2:e9:a7:82:21:72:cd:fc:
                    3b:a4:ff:b4:82:a8:08:40:24:4e:ed:95:15:a1:bc:
                    2d:ff:ec:c1:68:4f:78:cf:0b:3e:b7:53:f2:ea:10:
                    5b:11:ce:5d:ac:1e:54:7a:42:cf:8b:20:80:9f:d9:
                    15:30:93:e9:bd:f3:fa:2e:31:6f:d9:6a:d7:9a:cc:
                    a6:1a:5e:18:b4:7b:04:22:70:88:85:22:c1:6f:57:
                    db:50:f7:70:dc:7a:b5:0e:16:01:9d:82:8a:01:01:
                    a3:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:58:87:11:BA:D8:A7:E8:59:18:C8:CF:36:AC:55:34:E7:8E:2B:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/a0f559b4-6239-3212-be83-b4c0773d87e3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.crl

            X509v3 Authority Key Identifier:
                keyid:60:87:0B:AF:04:2C:FC:75:F9:1A:BB:8B:C4:9E:4C:35:6F:F7:5F:34

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c391a9e1-4c7f-42f1-90ba-8d29c2c0b30b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.153.244.0-167.153.252.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:01:77:28:14:d1:07:22:d3:39:b5:3a:1d:26:d6:7e:2f:4a:
         8d:fc:84:c5:d2:f7:fa:ec:60:b1:54:0a:b1:ed:16:0c:77:42:
         10:57:16:a2:62:46:9b:da:7e:b1:5b:c0:81:2b:91:7c:1d:e6:
         15:4b:1c:ac:bf:f8:98:14:1d:78:c4:7b:2c:a0:3a:0a:76:87:
         29:dd:44:2a:28:d7:b7:e2:78:1e:6e:a0:f9:ec:b4:c1:53:f9:
         60:1e:9d:fe:c9:c1:55:18:98:26:07:88:53:7a:b9:68:25:ac:
         f9:f0:0b:75:45:42:cc:65:f5:ce:82:76:3f:51:56:45:56:11:
         9b:c8:1c:51:f6:a9:25:54:80:b8:d7:64:1c:e4:c6:f6:77:1f:
         f4:05:1b:e8:74:fc:08:9d:07:eb:f1:15:47:62:c5:1e:cc:0a:
         69:99:86:df:ce:2d:d9:cf:18:4e:5c:c7:fc:a8:78:ff:f0:ae:
         92:92:52:d7:10:63:5b:50:28:f4:86:c7:f1:7d:cf:f0:02:bb:
         b0:16:1e:e8:6a:08:8e:b8:06:22:44:94:a0:77:4f:a5:cd:51:
         04:49:c9:18:d9:cd:5a:ab:a0:0b:4c:3f:81:5f:ca:c2:79:84:
         c1:5c:8d:53:15:bc:a9:63:f7:94:ff:f3:6e:57:1a:9a:2f:97:
         ac:31:a6:f3
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEn+JTNKb8pqslaMyYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzM5MWE5ZTEtNGM3Zi00MmYxLTkwYmEtOGQyOWMyYzBi
MzBiMB4XDTI1MDUyNDAxMDA0OVoXDTI1MDgyMjAxMDA0OVowLzEtMCsGA1UEAxMk
NDhmYTgxMDktNmY2Yi00YThkLTk4MzQtNGIzMDdjYTFiNzhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQ8VtjJ6DnehE+qDse8YQQlUlqRmxe0qTFht
2vijZxSrwjcRA2vArXIXrHzRLZrkR4syaLlJR3TOYMczHd8pIiWikjji9aNJskSV
WlmHiXE+vLvRH41FLH/iMbQKwdP+CA8KaGp5Ub8sJ4xCjPX7ylZveY6wTfvJkGxG
XGRX8uezj2QfbSQTbIg7E0yf7g74TMcPDk6b2FbDyTz90umngiFyzfw7pP+0gqgI
QCRO7ZUVobwt/+zBaE94zws+t1Py6hBbEc5drB5UekLPiyCAn9kVMJPpvfP6LjFv
2WrXmsymGl4YtHsEInCIhSLBb1fbUPdw3Hq1DhYBnYKKAQGjnQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFMlYhxG62KfoWRjIzzasVTTnjisSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkx
YTllMS00YzdmLTQyZjEtOTBiYS04ZDI5YzJjMGIzMGIvYTBmNTU5YjQtNjIzOS0z
MjEyLWJlODMtYjRjMDc3M2Q4N2UzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzM5MWE5ZTEtNGM3Zi00MmYxLTkw
YmEtOGQyOWMyYzBiMzBiL2MzOTFhOWUxLTRjN2YtNDJmMS05MGJhLThkMjljMmMw
YjMwYi5jcmwwHwYDVR0jBBgwFoAUYIcLrwQs/HX5GruLxJ5MNW/3XzQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMzkxYTllMS00YzdmLTQyZjEtOTBiYS04ZDI5
YzJjMGIzMGIuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKnmfQD
BACnmfwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAogF3KBTRByLTObU6HSbWfi9KjfyExdL3+uxgsVQKse0W
DHdCEFcWomJGm9p+sVvAgSuRfB3mFUscrL/4mBQdeMR7LKA6CnaHKd1EKijXt+J4
Hm6g+ey0wVP5YB6d/snBVRiYJgeIU3q5aCWs+fALdUVCzGX1zoJ2P1FWRVYRm8gc
UfapJVSAuNdkHOTG9ncf9AUb6HT8CJ0H6/EVR2LFHswKaZmG384t2c8YTlzH/Kh4
//CukpJS1xBjW1Ao9IbH8X3P8AK7sBYe6GoIjrgGIkSUoHdPpc1RBEnJGNnNWqug
C0w/gV/KwnmEwVyNUxW8qWP3lP/zblcami+XrDGm8w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 19:16:35 2025 by rpki-client