Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
File:                     2782020a-b333-378b-976a-19c150b5397c.roa (raw, json)
Hash identifier:          dpQsPlOk0L7AQzl379foWMt91DxHNIzERR+qpQKQiUE=
Subject key identifier:   35:61:A3:C9:C2:9C:9A:9F:4C:10:E1:ED:CE:44:27:48:D3:3C:73:A5
Certificate issuer:       /CN=b5b0edd0-660a-4c59-91a2-146648a973a0
Certificate serial:       010D0C9F43285849F17FB88E290C55C3B7DA6140
Authority key identifier: 99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     8075
IP address blocks:        161.221.2.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b8:8e:29:0c:55:c3:b7:da:61:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b5b0edd0-660a-4c59-91a2-146648a973a0
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=baf283f0-bfc8-4280-acaf-3c717a001e6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:3f:c4:fb:00:ca:a9:b4:ac:7a:6c:98:fb:9f:
                    e9:b5:0d:ec:77:eb:f0:98:90:fe:e2:1d:76:f2:47:
                    43:12:5c:22:3f:69:14:0d:06:ad:76:67:c1:ef:f8:
                    a3:d7:1e:46:2c:d3:b7:0c:99:45:a7:b5:e6:1b:53:
                    13:aa:12:6d:6b:1b:a0:b7:07:36:bd:cb:ee:0d:29:
                    d1:9b:53:43:8b:96:7e:d4:9d:2e:bf:20:15:f8:31:
                    6b:c4:f0:5d:b4:48:13:59:6d:e2:fb:26:f0:fc:22:
                    22:f1:9a:04:85:21:df:88:37:ee:78:b1:f6:0f:6d:
                    59:70:f8:ce:be:e2:6b:f1:97:bc:d9:f5:bc:4f:7b:
                    32:46:fd:bc:7e:32:c8:55:a5:bd:95:ba:b0:47:48:
                    39:7e:1e:70:17:04:40:26:53:6e:25:6d:2f:62:c2:
                    97:ef:06:73:16:04:bb:dd:04:43:e3:0d:63:ed:f6:
                    50:dd:59:0c:fc:a6:f9:d0:77:a2:7b:31:b9:89:eb:
                    ae:44:85:dd:fc:64:78:c7:83:a1:9a:01:c6:42:e1:
                    7b:fb:c0:c8:7a:78:53:17:77:43:cc:91:79:d0:a4:
                    c8:57:68:c4:28:e1:96:45:f3:86:44:53:c4:26:53:
                    21:fb:2c:26:7f:f5:9c:5b:64:a9:05:cf:cb:a3:15:
                    15:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:61:A3:C9:C2:9C:9A:9F:4C:10:E1:ED:CE:44:27:48:D3:3C:73:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/2782020a-b333-378b-976a-19c150b5397c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0/b5b0edd0-660a-4c59-91a2-146648a973a0.crl

            X509v3 Authority Key Identifier:
                keyid:99:73:38:C5:DB:51:DC:45:DA:11:0F:B7:60:1C:84:6D:9B:C2:BD:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b5b0edd0-660a-4c59-91a2-146648a973a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.221.2.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d8:77:0b:37:ed:96:15:c2:2d:8a:38:b3:df:63:9d:27:7e:f2:
         b7:9a:3e:0a:56:bc:95:07:de:e5:aa:35:0d:4a:ea:3f:57:84:
         b5:5e:3a:49:89:19:fe:ef:47:01:68:b6:f9:4c:fb:97:bd:08:
         4e:3d:7c:b4:7a:fb:8c:32:03:80:22:b2:a2:6e:81:02:97:65:
         64:57:7f:58:c9:ec:aa:44:ca:f8:b7:1f:c5:c1:df:24:ab:08:
         6c:c3:a1:0b:5b:33:24:e2:0d:62:61:20:fb:15:8d:2d:27:b9:
         70:ca:de:e2:44:85:86:e5:a0:a6:3d:45:7b:17:ab:3a:cb:53:
         ed:e9:01:a9:ad:37:61:2e:38:17:fb:a8:2a:0a:88:4c:fa:d0:
         3b:c4:66:7a:4e:82:a0:46:34:3b:30:e1:b1:fa:fe:a5:31:a9:
         25:f0:11:c1:c3:5b:b5:6e:b2:8b:dc:5c:df:09:c6:b8:c4:25:
         98:5f:66:77:02:e6:17:f6:fd:81:9c:eb:5e:7a:da:cf:dc:11:
         9c:3d:57:5a:d4:59:2d:f1:f3:d0:dc:cd:dd:6b:f9:30:0f:55:
         99:68:24:ce:bf:75:8e:14:75:5e:78:c2:c7:09:34:9d:bb:a7:
         e8:ce:f1:1b:d9:1f:49:f2:86:5d:3f:39:f2:88:10:fb:71:e6:
         1f:8f:0d:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7iOKQxVw7faYUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjViMGVkZDAtNjYwYS00YzU5LTkxYTItMTQ2NjQ4YTk3
M2EwMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YmFmMjgzZjAtYmZjOC00MjgwLWFjYWYtM2M3MTdhMDAxZTZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlj/E+wDKqbSsemyY+5/ptQ3sd+vwmJD+4h12
8kdDElwiP2kUDQatdmfB7/ij1x5GLNO3DJlFp7XmG1MTqhJtaxugtwc2vcvuDSnR
m1NDi5Z+1J0uvyAV+DFrxPBdtEgTWW3i+ybw/CIi8ZoEhSHfiDfueLH2D21ZcPjO
vuJr8Ze82fW8T3syRv28fjLIVaW9lbqwR0g5fh5wFwRAJlNuJW0vYsKX7wZzFgS7
3QRD4w1j7fZQ3VkM/Kb50HeiezG5ieuuRIXd/GR4x4OhmgHGQuF7+8DIenhTF3dD
zJF50KTIV2jEKOGWRfOGRFPEJlMh+ywmf/WcW2SpBc/LoxUVGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDVho8nCnJqfTBDh7c5EJ0jTPHOlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIw
ZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2NDhhOTczYTAvMjc4MjAyMGEtYjMzMy0z
NzhiLTk3NmEtMTljMTUwYjUzOTdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjViMGVkZDAtNjYwYS00YzU5LTkx
YTItMTQ2NjQ4YTk3M2EwL2I1YjBlZGQwLTY2MGEtNGM1OS05MWEyLTE0NjY0OGE5
NzNhMC5jcmwwHwYDVR0jBBgwFoAUmXM4xdtR3EXaEQ+3YByEbZvCvecwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iNWIwZWRkMC02NjBhLTRjNTktOTFhMi0xNDY2
NDhhOTczYTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAod0CMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANh3CzftlhXCLYo4s99jnSd+8reaPgpWvJUH3uWqNQ1K6j9XhLVeOkmJ
Gf7vRwFotvlM+5e9CE49fLR6+4wyA4AisqJugQKXZWRXf1jJ7KpEyvi3H8XB3ySr
CGzDoQtbMyTiDWJhIPsVjS0nuXDK3uJEhYbloKY9RXsXqzrLU+3pAamtN2EuOBf7
qCoKiEz60DvEZnpOgqBGNDsw4bH6/qUxqSXwEcHDW7VusovcXN8JxrjEJZhfZncC
5hf2/YGc61562s/cEZw9V1rUWS3x89Dczd1r+TAPVZloJM6/dY4UdV54wscJNJ27
p+jO8RvZH0nyhl0/OfKIEPtx5h+PDdU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:06:19 2025 by rpki-client