Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
File:                     4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa (raw, json)
Hash identifier:          K20yeUpJTKa72LzpyGVnwIEmR1nPrySESAfCmgaPV8Q=
Subject key identifier:   0F:AB:B9:A9:85:C8:4C:03:6F:3A:76:59:22:F7:FF:B2:B5:16:DD:B5
Certificate issuer:       /CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
Certificate serial:       010D0C9F4328584A1B5FFC0B1A663D2ACBBADDA0
Authority key identifier: 33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     396982
IP address blocks:        162.240.198.0/24 maxlen: 24
                          162.240.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:5f:fc:0b:1a:66:3d:2a:cb:ba:dd:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9b2e7ed0-7310-4ec6-a432-f9ded34ab91b
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=b0ff1697-75da-4d3e-a6b1-7253574db91f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ed:2f:e2:25:1c:b3:5e:24:6f:7d:66:49:89:
                    c2:e6:8a:d5:9d:27:eb:84:77:a4:28:a2:f0:07:c5:
                    f4:c6:62:51:99:fa:2d:a8:7e:2b:82:ec:b6:48:b4:
                    97:3d:ce:e8:35:ad:c2:24:5a:9d:2f:5c:10:72:0e:
                    63:54:f9:ba:e7:7b:f8:11:c1:7a:6d:f6:11:dd:98:
                    49:ad:8c:46:6d:75:e9:a8:92:33:a6:6e:12:99:d8:
                    07:b8:3a:5a:c5:97:d3:e4:21:c6:c4:26:89:56:cc:
                    96:2b:4d:43:a2:0f:ce:3f:5a:24:36:45:df:64:27:
                    23:d8:84:93:cb:f3:82:e2:4b:44:aa:02:ef:ab:26:
                    04:92:99:82:3d:47:9b:a1:52:5b:37:e3:68:c3:4c:
                    fe:27:32:1e:f7:7d:5e:96:45:6f:67:89:02:25:00:
                    46:ab:7d:cd:67:9a:dd:9a:21:2d:1c:00:38:a9:d1:
                    7e:96:ec:a5:9b:d5:35:df:04:f0:58:75:5a:31:7c:
                    c6:a1:a7:68:83:52:1c:8f:ba:06:69:f1:31:e9:22:
                    c0:81:a1:6b:7c:9c:73:fd:80:09:0d:9e:04:70:5d:
                    cb:30:95:ae:f6:86:c7:a9:db:a0:47:bf:61:ed:a9:
                    a8:a5:ed:8f:ab:11:59:3e:98:e6:9e:b9:43:0b:8e:
                    8b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AB:B9:A9:85:C8:4C:03:6F:3A:76:59:22:F7:FF:B2:B5:16:DD:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/4593451c-8cd1-3dbf-9411-f1f005a6f4a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.crl

            X509v3 Authority Key Identifier:
                keyid:33:4A:13:DE:A8:62:44:8E:63:F1:5C:99:1E:16:BB:E5:50:2A:B4:F2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/9b2e7ed0-7310-4ec6-a432-f9ded34ab91b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.240.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:b6:e5:f7:d7:af:c3:6b:8c:ec:68:8e:aa:07:b8:3b:66:cd:
         7c:f5:97:ac:d5:1e:38:f1:65:0c:ba:cb:f3:41:66:52:75:1c:
         e6:99:77:ee:ac:82:7e:d9:f3:f9:0e:ac:98:89:4f:7c:58:c3:
         f9:e3:0b:a2:35:26:82:31:9a:25:2d:b4:68:54:62:9b:15:6b:
         0a:77:5d:6d:a1:4f:3c:bc:6d:a5:ff:6f:e1:c3:32:db:ad:16:
         46:81:ee:bc:54:95:7b:75:bd:19:1c:4d:53:22:1d:e4:4e:d8:
         f3:0b:fb:f6:f1:68:db:84:97:46:4a:d4:86:c8:45:2e:d6:c9:
         56:e2:ff:20:81:1a:88:20:40:42:84:20:7b:1f:3e:15:06:77:
         33:28:6a:39:fe:05:c0:11:19:b4:07:cf:bf:7d:69:b5:57:af:
         2a:a6:c3:4d:f7:25:03:b0:99:65:6d:a0:e5:c2:bf:6c:fa:b6:
         aa:e4:73:4a:2d:a9:d1:92:b5:00:b1:07:db:41:94:97:83:e8:
         55:88:6b:9a:1c:b1:32:aa:fb:5f:7b:17:6d:76:4e:69:bb:bb:
         3e:f7:e2:59:2c:33:c1:07:66:ec:6a:88:66:b1:3d:28:24:09:
         39:0b:f2:50:ac:18:fd:58:f0:01:8b:75:8e:d8:78:80:e0:a1:
         0a:37:0b:c2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobX/wLGmY9Ksu63aAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWIyZTdlZDAtNzMxMC00ZWM2LWE0MzItZjlkZWQzNGFi
OTFiMB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
YjBmZjE2OTctNzVkYS00ZDNlLWE2YjEtNzI1MzU3NGRiOTFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApe0v4iUcs14kb31mSYnC5orVnSfrhHekKKLw
B8X0xmJRmfotqH4rguy2SLSXPc7oNa3CJFqdL1wQcg5jVPm653v4EcF6bfYR3ZhJ
rYxGbXXpqJIzpm4SmdgHuDpaxZfT5CHGxCaJVsyWK01Dog/OP1okNkXfZCcj2IST
y/OC4ktEqgLvqyYEkpmCPUeboVJbN+Now0z+JzIe931elkVvZ4kCJQBGq33NZ5rd
miEtHAA4qdF+luylm9U13wTwWHVaMXzGoadog1Icj7oGafEx6SLAgaFrfJxz/YAJ
DZ4EcF3LMJWu9obHqdugR79h7amope2PqxFZPpjmnrlDC46LmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA+ruamFyEwDbzp2WSL3/7K1Ft21MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJl
N2VkMC03MzEwLTRlYzYtYTQzMi1mOWRlZDM0YWI5MWIvNDU5MzQ1MWMtOGNkMS0z
ZGJmLTk0MTEtZjFmMDA1YTZmNGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOWIyZTdlZDAtNzMxMC00ZWM2LWE0
MzItZjlkZWQzNGFiOTFiLzliMmU3ZWQwLTczMTAtNGVjNi1hNDMyLWY5ZGVkMzRh
YjkxYi5jcmwwHwYDVR0jBBgwFoAUM0oT3qhiRI5j8VyZHha75VAqtPIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85YjJlN2VkMC03MzEwLTRlYzYtYTQzMi1mOWRl
ZDM0YWI5MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovDGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKi25ffXr8NrjOxojqoHuDtmzXz1l6zVHjjxZQy6y/NBZlJ1HOaZd+6s
gn7Z8/kOrJiJT3xYw/njC6I1JoIxmiUttGhUYpsVawp3XW2hTzy8baX/b+HDMtut
FkaB7rxUlXt1vRkcTVMiHeRO2PML+/bxaNuEl0ZK1IbIRS7WyVbi/yCBGoggQEKE
IHsfPhUGdzMoajn+BcARGbQHz799abVXryqmw033JQOwmWVtoOXCv2z6tqrkc0ot
qdGStQCxB9tBlJeD6FWIa5ocsTKq+197F212Tmm7uz734lksM8EHZuxqiGaxPSgk
CTkL8lCsGP1Y8AGLdY7YeIDgoQo3C8I=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:53:57 2025 by rpki-client