Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d12a1170-730f-3ee8-8efb-dbb6a04ae8c7.roa
File:                     d12a1170-730f-3ee8-8efb-dbb6a04ae8c7.roa (raw, json)
Hash identifier:          oxWfpJ6Gb3WVyP3KZ8+GR5K+Zru3X8k7Gtw9TaVyVZI=
Subject key identifier:   E1:FD:65:00:B3:E9:E1:6F:68:6E:25:07:EA:BF:57:DA:90:97:60:35
Certificate issuer:       /CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
Certificate serial:       010D0C9F43285849806F0B44096DB6B3AF44A080
Authority key identifier: E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d12a1170-730f-3ee8-8efb-dbb6a04ae8c7.roa
Signing time:             Sat 12 Apr 2025 13:01:01 +0000
ROA not before:           Sat 12 Apr 2025 13:01:01 +0000
ROA not after:            Fri 11 Jul 2025 13:01:01 +0000
asID:                     19165
IP address blocks:        162.222.102.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:80:6f:0b:44:09:6d:b6:b3:af:44:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1773b91b-a601-4f0d-af4c-93b3f65e6404
        Validity
            Not Before: Apr 12 13:01:01 2025 GMT
            Not After : Jul 11 13:01:01 2025 GMT
        Subject: CN=51931cbc-a906-413e-b72b-fc81e53a03a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5b:07:26:27:bd:47:6e:56:d5:dd:23:97:ad:
                    88:af:5d:15:d8:1c:02:10:fc:24:3e:9f:71:33:e5:
                    ca:87:45:86:e5:f4:f4:99:8b:97:b1:09:95:b9:56:
                    5e:ab:be:ce:a5:b1:ce:7e:5b:6d:2a:c8:1e:4c:6e:
                    7a:16:be:75:0f:06:cc:a9:53:08:14:04:cd:43:1f:
                    91:6f:98:30:59:1e:43:0a:53:e1:07:5e:3d:09:dc:
                    9c:b3:fe:f6:e7:77:81:f0:cb:8b:70:2b:e8:9a:1d:
                    72:15:b1:6d:8a:6a:05:2e:fa:5b:85:59:60:f8:c5:
                    5b:4c:b1:b6:45:c7:37:e0:a0:27:8c:f2:74:94:31:
                    e8:36:97:48:6f:6f:ec:4e:50:e2:4d:e9:9c:99:71:
                    0d:0c:56:a6:6d:94:e3:47:c0:5b:d1:ad:ee:16:48:
                    d5:75:db:1c:41:52:0a:e5:76:c9:3e:17:43:1f:e0:
                    b2:f1:89:14:11:d1:33:52:04:e1:94:68:c2:99:29:
                    7c:3a:42:a0:9c:89:0b:f0:48:5a:b4:e4:5b:06:1f:
                    c2:e8:3f:60:29:cf:c5:35:c4:3b:68:d5:82:85:57:
                    ab:b7:c4:c2:01:28:6b:5f:06:9c:f4:f9:95:43:c8:
                    7b:5a:81:49:8d:a5:0c:1f:82:01:db:4e:cb:7a:f4:
                    85:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:FD:65:00:B3:E9:E1:6F:68:6E:25:07:EA:BF:57:DA:90:97:60:35
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/d12a1170-730f-3ee8-8efb-dbb6a04ae8c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404/1773b91b-a601-4f0d-af4c-93b3f65e6404.crl

            X509v3 Authority Key Identifier:
                keyid:E5:D8:55:1F:4E:B2:C7:DD:84:EF:03:02:86:5A:2E:CF:39:22:F1:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/1773b91b-a601-4f0d-af4c-93b3f65e6404.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.102.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         76:27:a1:3f:03:2e:d9:72:7c:d3:66:91:08:13:1b:15:af:e8:
         62:ee:8a:81:94:2c:7f:64:10:cf:20:3f:72:66:4f:9f:3d:84:
         29:e2:6d:cf:a7:d0:a8:9d:4e:3e:1c:31:dd:75:e2:66:0f:49:
         ea:ae:f5:b2:da:7a:84:b9:ab:91:da:6c:94:71:3f:95:3b:9d:
         f7:5a:fb:7d:39:26:86:57:80:fe:a5:06:3d:c8:4f:e3:60:54:
         44:58:05:8e:d1:77:2c:e5:de:52:98:2a:50:ea:05:b2:c8:5c:
         be:65:ef:99:b8:91:44:ff:f8:af:b7:d1:96:08:15:af:84:15:
         8f:5f:1b:bb:1b:e9:80:34:20:61:d0:ad:24:d2:24:b4:85:a6:
         19:34:2a:af:10:06:79:0f:f9:84:b1:53:ba:52:84:18:2f:a9:
         f4:9a:0b:5a:78:a9:53:c0:e9:74:59:b0:e7:d9:6f:38:05:6e:
         60:3e:bf:da:f3:ac:46:54:ab:1f:9c:7f:22:d9:bf:24:07:0b:
         98:37:26:4b:6b:f6:2a:8d:5e:89:e2:1b:90:2d:c9:38:cd:0e:
         38:f3:01:c3:36:23:b4:e8:37:be:af:72:0f:b3:e5:4e:63:c2:
         e5:5b:c3:6b:1b:d1:f0:74:6e:ec:e4:17:61:2f:e7:d4:a4:01:
         01:11:3b:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmAbwtECW22s69EoIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTc3M2I5MWItYTYwMS00ZjBkLWFmNGMtOTNiM2Y2NWU2
NDA0MB4XDTI1MDQxMjEzMDEwMVoXDTI1MDcxMTEzMDEwMVowLzEtMCsGA1UEAxMk
NTE5MzFjYmMtYTkwNi00MTNlLWI3MmItZmM4MWU1M2EwM2E3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVsHJie9R25W1d0jl62Ir10V2BwCEPwkPp9x
M+XKh0WG5fT0mYuXsQmVuVZeq77OpbHOflttKsgeTG56Fr51DwbMqVMIFATNQx+R
b5gwWR5DClPhB149Cdycs/7253eB8MuLcCvomh1yFbFtimoFLvpbhVlg+MVbTLG2
Rcc34KAnjPJ0lDHoNpdIb2/sTlDiTemcmXENDFambZTjR8Bb0a3uFkjVddscQVIK
5XbJPhdDH+Cy8YkUEdEzUgThlGjCmSl8OkKgnIkL8EhatORbBh/C6D9gKc/FNcQ7
aNWChVert8TCAShrXwac9PmVQ8h7WoFJjaUMH4IB207LevSFwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOH9ZQCz6eFvaG4lB+q/V9qQl2A1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xNzcz
YjkxYi1hNjAxLTRmMGQtYWY0Yy05M2IzZjY1ZTY0MDQvZDEyYTExNzAtNzMwZi0z
ZWU4LThlZmItZGJiNmEwNGFlOGM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTc3M2I5MWItYTYwMS00ZjBkLWFm
NGMtOTNiM2Y2NWU2NDA0LzE3NzNiOTFiLWE2MDEtNGYwZC1hZjRjLTkzYjNmNjVl
NjQwNC5jcmwwHwYDVR0jBBgwFoAU5dhVH06yx92E7wMChlouzzki8a8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xNzczYjkxYi1hNjAxLTRmMGQtYWY0Yy05M2Iz
ZjY1ZTY0MDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBot5mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHYnoT8DLtlyfNNmkQgTGxWv6GLuioGULH9kEM8gP3JmT589hCnibc+n
0KidTj4cMd114mYPSequ9bLaeoS5q5HabJRxP5U7nfda+305JoZXgP6lBj3IT+Ng
VERYBY7Rdyzl3lKYKlDqBbLIXL5l75m4kUT/+K+30ZYIFa+EFY9fG7sb6YA0IGHQ
rSTSJLSFphk0Kq8QBnkP+YSxU7pShBgvqfSaC1p4qVPA6XRZsOfZbzgFbmA+v9rz
rEZUqx+cfyLZvyQHC5g3Jktr9iqNXoniG5AtyTjNDjjzAcM2I7ToN76vcg+z5U5j
wuVbw2sb0fB0buzkF2Ev59SkAQERO9Y=
-----END CERTIFICATE-----
Generated at Mon Apr 28 18:59:38 2025 by rpki-client