Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa
File:                     2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa (raw, json)
Hash identifier:          jO0TUuGI//+wIeogGDQU+EFfC68493TKAwiSkcAc/AI=
Subject key identifier:   22:B8:A2:A2:D5:BA:69:B6:91:EF:98:BD:7F:3B:50:36:DD:94:BE:2B
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F43285849EEB5012823D7FFAA4641EB80
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     54363
IP address blocks:        199.193.22.0/24 maxlen: 24
                          199.193.23.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:01:28:23:d7:ff:aa:46:41:eb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=f33ab4b6-671b-4d04-8192-e72e4e61c337
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:d2:c5:ac:88:7b:c1:10:62:5f:49:50:bc:1f:
                    13:3e:4e:db:4f:c8:07:d4:cb:c7:a1:c9:aa:95:78:
                    0d:1c:88:84:ff:1e:63:f2:38:f3:d1:90:4e:ff:f0:
                    c9:76:48:ab:bf:1b:18:8b:45:d9:75:42:ac:a6:ea:
                    05:51:98:64:a4:5d:0c:c8:0b:0b:11:4c:f9:29:54:
                    0d:d8:06:13:01:91:5a:8b:31:b6:7d:a4:a5:d2:1b:
                    f1:ee:b8:f0:f1:33:9c:86:bc:cf:d3:d2:ee:f7:16:
                    61:33:6f:b3:16:13:a6:68:50:e3:28:d7:3a:82:df:
                    ea:a7:93:0e:5a:6e:9e:52:e1:1d:ca:00:7b:0a:29:
                    54:b9:16:f6:07:53:5a:97:53:09:ec:e4:9c:ce:93:
                    93:3a:0a:bf:61:d8:3e:3a:f0:ee:25:49:30:2a:c9:
                    84:1f:28:55:c4:76:48:b1:e0:9c:26:a9:9f:bd:78:
                    0d:b7:6c:64:c2:e3:9d:9b:30:ac:65:49:a7:67:02:
                    ae:01:db:18:00:87:f2:38:32:26:5f:82:cc:fe:58:
                    85:b4:e1:2d:b4:a1:ed:28:2c:2c:f6:f1:16:09:25:
                    a9:52:a8:c0:a3:87:aa:5f:e3:2a:15:2e:d0:c8:9d:
                    0d:8e:58:6f:e3:d3:fd:71:5c:81:41:dd:32:f6:5e:
                    71:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:B8:A2:A2:D5:BA:69:B6:91:EF:98:BD:7F:3B:50:36:DD:94:BE:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/2abf2a4b-6ef1-3bc8-aaba-7f75e3621c82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:e5:90:f7:46:6d:9f:b6:ff:9d:ed:a4:85:47:cb:74:dc:d1:
         6a:bc:b8:7c:3e:60:ec:17:42:1e:6e:90:d4:c5:38:22:51:97:
         4f:01:c5:4f:26:4c:f1:c5:34:f1:fe:03:d0:15:0a:17:eb:96:
         32:98:e3:41:41:81:e6:78:ac:3c:e7:72:d9:ba:d1:8b:05:b7:
         b4:7d:82:d8:b6:81:1e:3b:8d:c6:e4:c9:e4:46:c5:ff:c6:09:
         b2:c7:ae:35:bd:0f:8c:52:99:4a:95:8f:81:4c:27:41:6f:cb:
         a3:d3:3a:43:ce:cc:22:fd:e1:c3:3f:60:06:ba:a0:81:33:1f:
         a9:7d:21:ca:0a:d8:49:18:81:fd:3a:e9:58:02:88:d4:96:93:
         7e:44:67:2b:85:a9:00:69:79:2c:ce:98:af:66:a9:7c:0f:e1:
         e9:ea:88:6a:60:90:f4:9d:df:f3:ca:ff:26:1f:55:14:94:b3:
         07:35:ff:e2:d4:d0:13:69:62:67:54:c8:ac:c5:e5:6d:50:29:
         60:25:fd:e8:fa:51:bf:9d:62:bb:f3:9e:16:16:46:dd:71:4e:
         37:dd:ed:b2:4a:6d:5a:fc:4e:09:23:5e:d5:77:06:6c:0c:09:
         c7:2b:1f:4c:1f:f5:f9:4b:52:a0:86:fe:03:c8:3c:87:55:4b:
         a6:f5:8e:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQEoI9f/qkZB64AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYxODM1MDItOTgzZC00MTE0LWEwNzQtYmYwZWFhOTAx
ZGUzMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
ZjMzYWI0YjYtNjcxYi00ZDA0LTgxOTItZTcyZTRlNjFjMzM3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjtLFrIh7wRBiX0lQvB8TPk7bT8gH1MvHocmq
lXgNHIiE/x5j8jjz0ZBO//DJdkirvxsYi0XZdUKspuoFUZhkpF0MyAsLEUz5KVQN
2AYTAZFaizG2faSl0hvx7rjw8TOchrzP09Lu9xZhM2+zFhOmaFDjKNc6gt/qp5MO
Wm6eUuEdygB7CilUuRb2B1Nal1MJ7OSczpOTOgq/Ydg+OvDuJUkwKsmEHyhVxHZI
seCcJqmfvXgNt2xkwuOdmzCsZUmnZwKuAdsYAIfyODImX4LM/liFtOEttKHtKCws
9vEWCSWpUqjAo4eqX+MqFS7QyJ0Njlhv49P9cVyBQd0y9l5xzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCK4oqLVumm2ke+YvX87UDbdlL4rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81NjE4
MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBlYWE5MDFkZTMvMmFiZjJhNGItNmVmMS0z
YmM4LWFhYmEtN2Y3NWUzNjIxYzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTYxODM1MDItOTgzZC00MTE0LWEw
NzQtYmYwZWFhOTAxZGUzLzU2MTgzNTAyLTk4M2QtNDExNC1hMDc0LWJmMGVhYTkw
MWRlMy5jcmwwHwYDVR0jBBgwFoAUp3AX7rO8kXjkf31jk/Ul2o6ebCcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81NjE4MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBl
YWE5MDFkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8EWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAELlkPdGbZ+2/53tpIVHy3Tc0Wq8uHw+YOwXQh5ukNTFOCJRl08BxU8m
TPHFNPH+A9AVChfrljKY40FBgeZ4rDznctm60YsFt7R9gti2gR47jcbkyeRGxf/G
CbLHrjW9D4xSmUqVj4FMJ0Fvy6PTOkPOzCL94cM/YAa6oIEzH6l9IcoK2EkYgf06
6VgCiNSWk35EZyuFqQBpeSzOmK9mqXwP4enqiGpgkPSd3/PK/yYfVRSUswc1/+LU
0BNpYmdUyKzF5W1QKWAl/ej6Ub+dYrvznhYWRt1xTjfd7bJKbVr8TgkjXtV3BmwM
CccrH0wf9flLUqCG/gPIPIdVS6b1jpY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:17:45 2025 by rpki-client