Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7265aa5-309b-3aa1-9a1a-9a1ea2c96b15.roa
File:                     a7265aa5-309b-3aa1-9a1a-9a1ea2c96b15.roa (raw, json)
Hash identifier:          HKCKLWw+atpCYZEzoPhmuvMdXAehp090k9cVRtVrqIY=
Subject key identifier:   7B:1D:44:58:AC:5E:3B:E4:77:18:BA:90:EF:6F:74:1B:46:22:CF:69
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F432858499829E0D27BA3E8EEA765CE80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7265aa5-309b-3aa1-9a1a-9a1ea2c96b15.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     33602
IP address blocks:        207.162.28.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:e0:d2:7b:a3:e8:ee:a7:65:ce:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=290cef6b-136a-43fe-a5fb-fb3cb6d69717
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:9b:20:18:9d:b7:c9:13:a5:ea:26:90:6c:69:
                    82:78:f2:0a:83:11:da:ac:6f:6b:fb:5a:dc:f4:6d:
                    b0:85:04:56:8f:95:f1:91:35:2a:4c:33:0b:9e:52:
                    af:85:b5:80:78:b0:ca:71:38:a5:f9:a2:35:ab:2a:
                    f3:cc:02:83:0c:31:fe:18:c0:1e:97:d6:39:e6:38:
                    f8:d4:41:25:72:6b:08:5b:09:69:e1:8e:81:07:d2:
                    7e:52:80:50:42:75:49:42:ca:2a:28:0a:91:8a:ef:
                    8c:e0:02:d6:ef:bb:65:7c:0a:3a:11:41:20:ec:71:
                    c2:db:9e:30:ed:5f:7f:91:88:56:40:24:63:27:09:
                    e6:46:9c:35:19:0d:14:70:fb:ef:69:4f:c7:d2:df:
                    f8:db:bb:af:f7:ea:1b:69:55:e5:57:82:26:81:77:
                    e3:19:f9:87:bc:a4:ff:ad:bc:f4:5b:94:70:86:d6:
                    69:6f:a8:50:5b:56:66:27:b3:99:be:e1:fb:0b:57:
                    40:65:1a:04:a5:14:02:4e:3a:d1:30:83:78:45:f4:
                    e0:56:fa:29:37:4f:e6:3a:12:21:1b:36:b6:aa:11:
                    9b:ed:12:48:46:f5:a6:a3:de:e8:c3:7c:66:ad:87:
                    28:57:95:20:f8:c0:79:ba:a6:ed:c8:09:fd:67:0a:
                    e9:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:1D:44:58:AC:5E:3B:E4:77:18:BA:90:EF:6F:74:1B:46:22:CF:69
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a7265aa5-309b-3aa1-9a1a-9a1ea2c96b15.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.28.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         64:f2:aa:47:d1:fd:47:07:59:9b:72:df:f0:7f:d7:ce:53:a7:
         55:75:26:e7:79:ee:63:4f:90:dd:09:97:e1:9b:34:52:86:3f:
         8c:3f:ba:da:07:3b:ae:27:87:91:0c:2e:50:7c:88:9f:d5:1a:
         67:05:79:8a:37:a6:dc:61:47:a7:8a:62:d2:3d:40:f7:ca:e5:
         fd:66:a7:ba:57:1f:9e:00:e5:27:8e:6a:e9:ef:14:e6:99:8b:
         a2:41:75:46:44:16:fd:b3:37:2d:a2:c7:dc:3f:bd:ea:df:b7:
         67:03:59:0a:af:7e:9f:57:b8:f7:24:96:00:69:b3:d4:10:23:
         6d:3b:86:c2:c1:f4:73:77:e8:47:09:c1:68:8c:2f:c7:2f:ea:
         17:59:01:d2:0e:34:4e:c3:c4:e0:e2:ad:0a:06:90:7a:b0:53:
         98:22:d7:9a:02:0a:9b:b3:b2:81:d4:ab:c9:9f:b6:17:38:9e:
         a6:21:2c:10:63:fe:19:69:ed:ae:6c:9d:f6:33:64:ee:49:10:
         1d:eb:e5:44:74:1a:09:51:6f:4b:f7:6c:38:1b:8e:e2:d6:ec:
         e6:29:f8:ca:3a:0c:ed:36:86:f8:c4:26:ca:20:77:7f:a6:fb:
         50:32:a8:65:da:be:c0:43:23:25:85:e4:d9:5a:26:ef:f0:51:
         9a:3e:7f:5c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKeDSe6Po7qdlzoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
MjkwY2VmNmItMTM2YS00M2ZlLWE1ZmItZmIzY2I2ZDY5NzE3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5psgGJ23yROl6iaQbGmCePIKgxHarG9r+1rc
9G2whQRWj5XxkTUqTDMLnlKvhbWAeLDKcTil+aI1qyrzzAKDDDH+GMAel9Y55jj4
1EElcmsIWwlp4Y6BB9J+UoBQQnVJQsoqKAqRiu+M4ALW77tlfAo6EUEg7HHC254w
7V9/kYhWQCRjJwnmRpw1GQ0UcPvvaU/H0t/427uv9+obaVXlV4ImgXfjGfmHvKT/
rbz0W5RwhtZpb6hQW1ZmJ7OZvuH7C1dAZRoEpRQCTjrRMIN4RfTgVvopN0/mOhIh
Gza2qhGb7RJIRvWmo97ow3xmrYcoV5Ug+MB5uqbtyAn9ZwrpvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsdRFisXjvkdxi6kO9vdBtGIs9pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTcyNjVhYTUtMzA5Yi0z
YWExLTlhMWEtOWExZWEyYzk2YjE1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6IcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGTyqkfR/UcHWZty3/B/185Tp1V1Jud57mNPkN0Jl+GbNFKGP4w/utoH
O64nh5EMLlB8iJ/VGmcFeYo3ptxhR6eKYtI9QPfK5f1mp7pXH54A5SeOaunvFOaZ
i6JBdUZEFv2zNy2ix9w/verft2cDWQqvfp9XuPcklgBps9QQI207hsLB9HN36EcJ
wWiML8cv6hdZAdIONE7DxODirQoGkHqwU5gi15oCCpuzsoHUq8mfthc4nqYhLBBj
/hlp7a5snfYzZO5JEB3r5UR0GglRb0v3bDgbjuLW7OYp+Mo6DO02hvjEJsogd3+m
+1AyqGXavsBDIyWF5NlaJu/wUZo+f1w=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:23:53 2025 by rpki-client