Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/b14b4872-190a-33e3-a47b-8d8191552aaa.roa
File:                     b14b4872-190a-33e3-a47b-8d8191552aaa.roa (raw, json)
Hash identifier:          ORK3sEAulR2uMRUJbXXgIsFOZ7UmCeaUUZ5yMDTRaOU=
Subject key identifier:   C4:C0:C6:8D:A0:9F:90:0D:E0:83:A7:21:DC:07:6C:36:C5:24:DE:AA
Certificate issuer:       /CN=6526224a-84e8-40af-a273-87e57f2e0cc0
Certificate serial:       010D0C9F43285849071BEFD5304D6382E3A55280
Authority key identifier: 65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/b14b4872-190a-33e3-a47b-8d8191552aaa.roa
Signing time:             Fri 28 Feb 2025 02:00:39 +0000
ROA not before:           Fri 28 Feb 2025 02:00:39 +0000
ROA not after:            Thu 29 May 2025 01:00:39 +0000
asID:                     8075
IP address blocks:        144.203.156.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:07:1b:ef:d5:30:4d:63:82:e3:a5:52:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6526224a-84e8-40af-a273-87e57f2e0cc0
        Validity
            Not Before: Feb 28 02:00:39 2025 GMT
            Not After : May 29 01:00:39 2025 GMT
        Subject: CN=79a8458f-3e81-4ed8-ac18-2e9230253f14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ac:0c:72:bd:73:46:ec:63:70:7a:78:fa:ea:
                    61:ac:bb:fa:0a:16:06:a5:7d:a8:bc:2b:a4:65:4c:
                    eb:0e:c9:00:23:d8:df:37:db:7e:9d:22:da:fe:a5:
                    33:24:d4:2c:55:d2:47:08:72:25:ad:99:b3:1c:7a:
                    5f:98:80:f5:d4:4f:d4:13:94:60:3b:61:c7:37:cf:
                    32:1b:63:4f:d7:93:28:b0:c0:dc:2c:75:11:2f:e6:
                    a9:44:e5:54:4f:98:9e:7f:01:46:27:89:42:0f:33:
                    cd:3f:01:d0:a2:52:68:f7:27:ee:7a:03:34:c1:7e:
                    45:2a:f1:cf:04:45:97:e9:c9:37:08:f4:12:fb:25:
                    44:10:ed:bb:9e:16:8d:81:3c:21:b2:af:39:f1:96:
                    85:0f:e1:47:7f:0b:e3:4c:ef:a7:3d:42:98:d8:8d:
                    66:a5:ae:3a:21:66:80:cc:f9:a6:a4:a4:7c:1b:b0:
                    f6:2d:a9:54:fa:d6:11:20:5e:e3:16:5c:de:ae:2c:
                    ba:31:41:94:a8:2c:d2:ac:82:68:f3:ca:7a:13:cf:
                    d6:10:f5:db:54:7f:af:b5:e2:2e:09:f7:9a:b0:69:
                    9c:da:c5:a0:1f:0a:3d:21:ad:7e:1f:e7:37:51:b9:
                    d3:f4:1f:26:99:d5:3a:13:bd:cd:f3:51:53:d6:0f:
                    f5:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:C0:C6:8D:A0:9F:90:0D:E0:83:A7:21:DC:07:6C:36:C5:24:DE:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/b14b4872-190a-33e3-a47b-8d8191552aaa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.203.156.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b9:34:a1:58:d7:58:ac:41:f2:12:18:b5:89:7b:d9:cc:6d:ad:
         ad:1f:1b:87:c8:0b:68:38:8d:fc:b3:5f:02:4b:0b:76:13:f8:
         0d:e4:0e:e9:37:d7:37:0c:1b:fc:5a:cd:ea:ac:3d:ba:2e:ac:
         ed:af:06:47:72:a5:6b:12:c2:d1:1f:d5:7e:c1:56:21:80:d3:
         58:68:50:b9:a8:00:b9:93:fe:93:da:66:5e:6a:c7:ac:78:75:
         1d:15:bf:07:af:d2:2c:00:ba:63:5e:18:2c:1a:53:cb:04:01:
         2d:6c:aa:97:9c:0f:02:00:75:a4:59:4f:55:e2:93:57:e4:ff:
         49:83:4b:f1:21:4a:bc:d8:0d:c2:9d:67:1d:71:07:c4:5a:31:
         c7:d2:a2:ca:b8:57:41:4d:da:92:74:1a:95:1f:78:be:66:43:
         18:05:7b:eb:d7:82:ba:72:a7:6b:6a:8d:9f:25:f9:af:61:80:
         2a:4a:e7:bc:a0:b0:36:fa:b3:7f:b3:87:38:73:13:c6:24:ce:
         5f:c8:31:c3:d9:ee:8e:37:2a:7c:b4:22:72:48:83:1d:c9:35:
         20:09:0d:61:54:e1:4e:c8:4e:49:fc:65:77:bd:06:9b:68:27:
         d7:ce:c2:b3:60:98:9a:da:33:1b:cd:7d:cc:00:ce:76:ed:82:
         fe:4a:1b:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkHG+/VME1jguOlUoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUyNjIyNGEtODRlOC00MGFmLWEyNzMtODdlNTdmMmUw
Y2MwMB4XDTI1MDIyODAyMDAzOVoXDTI1MDUyOTAxMDAzOVowLzEtMCsGA1UEAxMk
NzlhODQ1OGYtM2U4MS00ZWQ4LWFjMTgtMmU5MjMwMjUzZjE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApKwMcr1zRuxjcHp4+uphrLv6ChYGpX2ovCuk
ZUzrDskAI9jfN9t+nSLa/qUzJNQsVdJHCHIlrZmzHHpfmID11E/UE5RgO2HHN88y
G2NP15MosMDcLHURL+apROVUT5iefwFGJ4lCDzPNPwHQolJo9yfuegM0wX5FKvHP
BEWX6ck3CPQS+yVEEO27nhaNgTwhsq858ZaFD+FHfwvjTO+nPUKY2I1mpa46IWaA
zPmmpKR8G7D2LalU+tYRIF7jFlzeriy6MUGUqCzSrIJo88p6E8/WEPXbVH+vteIu
CfeasGmc2sWgHwo9Ia1+H+c3UbnT9B8mmdU6E73N81FT1g/10wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTAxo2gn5AN4IOnIdwHbDbFJN6qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTI2
MjI0YS04NGU4LTQwYWYtYTI3My04N2U1N2YyZTBjYzAvYjE0YjQ4NzItMTkwYS0z
M2UzLWE0N2ItOGQ4MTkxNTUyYWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjUyNjIyNGEtODRlOC00MGFmLWEy
NzMtODdlNTdmMmUwY2MwLzY1MjYyMjRhLTg0ZTgtNDBhZi1hMjczLTg3ZTU3ZjJl
MGNjMC5jcmwwHwYDVR0jBBgwFoAUZfd3Mh8UuulMzg4WdEZOpC5qLmgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NTI2MjI0YS04NGU4LTQwYWYtYTI3My04N2U1
N2YyZTBjYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkMucMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALk0oVjXWKxB8hIYtYl72cxtra0fG4fIC2g4jfyzXwJLC3YT+A3kDuk3
1zcMG/xazeqsPbourO2vBkdypWsSwtEf1X7BViGA01hoULmoALmT/pPaZl5qx6x4
dR0Vvwev0iwAumNeGCwaU8sEAS1sqpecDwIAdaRZT1Xik1fk/0mDS/EhSrzYDcKd
Zx1xB8RaMcfSosq4V0FN2pJ0GpUfeL5mQxgFe+vXgrpyp2tqjZ8l+a9hgCpK57yg
sDb6s3+zhzhzE8Ykzl/IMcPZ7o43Kny0InJIgx3JNSAJDWFU4U7ITkn8ZXe9Bpto
J9fOwrNgmJraMxvNfcwAznbtgv5KG58=
-----END CERTIFICATE-----
Generated at Sun Apr 27 22:11:05 2025 by rpki-client