Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa
File:                     69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa (raw, json)
Hash identifier:          NuEVmOdcDeEEvwhmTkVr/tg9pv6H3pDQUX1XaNhv9rU=
Subject key identifier:   91:F6:2B:12:79:AE:0D:19:0F:C6:E1:96:AF:F2:2F:AB:4A:B8:38:34
Certificate issuer:       /CN=86fea470-b380-45c0-9f6b-033b7d884388
Certificate serial:       010D0C9F43285849A255D28685FD577014BE9480
Authority key identifier: 08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa
Signing time:             Thu 24 Apr 2025 16:27:42 +0000
ROA not before:           Thu 24 Apr 2025 16:27:42 +0000
ROA not after:            Wed 23 Jul 2025 16:27:42 +0000
asID:                     8100
IP address blocks:        186.190.220.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a2:55:d2:86:85:fd:57:70:14:be:94:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86fea470-b380-45c0-9f6b-033b7d884388
        Validity
            Not Before: Apr 24 16:27:42 2025 GMT
            Not After : Jul 23 16:27:42 2025 GMT
        Subject: CN=13228ff0-3b75-460b-8d82-53c572183ac2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:90:cd:66:b6:81:f0:00:7f:71:ca:34:c8:f9:
                    16:b5:4a:58:9f:83:68:e2:67:33:b7:75:3a:cb:27:
                    9f:64:34:46:38:9e:87:92:82:ec:28:b9:d0:6a:4d:
                    55:df:7b:77:d5:31:31:c6:a3:a1:99:56:89:45:40:
                    1a:11:89:d7:0b:e1:af:02:dc:be:ba:ae:49:c7:23:
                    1f:f5:34:e6:bf:4b:04:f4:da:69:fb:d9:bd:ba:63:
                    68:d2:62:c2:c4:61:5d:57:8f:7a:e7:c5:d6:8b:55:
                    d5:1f:52:af:a9:ff:a9:6d:b1:13:96:09:6c:eb:09:
                    3b:4e:ff:66:0c:9d:2c:c6:ac:9a:e1:4a:e5:30:71:
                    10:52:f4:12:e2:f1:de:15:f3:ff:d0:5f:42:61:1c:
                    64:8e:bd:a0:16:91:c6:17:6f:81:47:80:ce:21:f9:
                    2c:49:e6:60:d1:60:1b:1c:1a:07:69:83:91:c0:04:
                    c9:c7:43:03:a7:b0:3c:d8:13:42:e0:f6:29:11:e3:
                    3c:6c:e0:63:fc:64:20:ab:3e:aa:18:3f:3b:f6:6e:
                    ed:66:86:88:56:40:99:ed:b6:ee:9f:71:50:a9:c9:
                    48:aa:d1:9b:58:4e:32:e0:b8:07:33:d8:6f:39:4f:
                    64:82:92:ee:9b:a0:5d:12:fb:e3:60:40:74:19:15:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:F6:2B:12:79:AE:0D:19:0F:C6:E1:96:AF:F2:2F:AB:4A:B8:38:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/69552b47-13a2-397a-b4b1-1e5f9973ffb0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388/86fea470-b380-45c0-9f6b-033b7d884388.crl

            X509v3 Authority Key Identifier:
                keyid:08:74:8A:31:09:3C:2C:49:44:A1:2E:8A:D6:5C:9E:92:04:01:CF:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/86fea470-b380-45c0-9f6b-033b7d884388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.190.220.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:ee:b8:64:f1:2d:06:f5:1f:c3:47:b0:0b:be:19:bb:44:60:
         1d:88:c1:f4:41:a5:0e:93:71:97:65:71:a3:3f:41:fb:40:d0:
         24:6a:f2:3d:35:86:94:5f:88:9e:7e:03:8e:db:60:43:06:a7:
         f4:43:cd:a2:03:5b:f0:c8:7e:a3:39:8f:a8:99:d5:1a:f9:e5:
         b6:03:ca:bd:4d:9d:3c:b9:49:48:5a:5a:60:ed:ee:42:82:3b:
         86:1f:22:c5:43:b1:7c:8f:39:dd:fe:78:b8:33:51:57:e1:1d:
         1d:a8:9e:ff:a5:8d:ca:e2:a7:9d:04:cc:f2:61:27:de:3e:45:
         ca:4c:00:b0:37:21:b1:1f:ec:0d:99:3f:06:5d:f2:a6:a6:ae:
         cc:c7:c9:a2:cf:90:95:50:d7:20:bb:0a:ec:d4:79:21:35:41:
         7b:fd:0b:4b:1b:23:08:80:6a:f0:7e:55:c2:a3:1b:80:c4:87:
         5e:0f:37:a5:a5:50:a5:10:f0:4a:aa:fa:5d:84:4c:5a:cd:62:
         43:02:5e:8d:1f:21:60:e1:dd:09:13:f5:dd:df:08:e3:ca:9c:
         ee:39:42:2d:6a:80:ee:9b:ca:19:10:3a:17:a4:71:9a:e4:1d:
         0e:f6:c8:82:e8:44:a0:01:ed:58:e1:c1:c1:5a:dd:c9:96:9f:
         ed:78:f8:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmiVdKGhf1XcBS+lIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODZmZWE0NzAtYjM4MC00NWMwLTlmNmItMDMzYjdkODg0
Mzg4MB4XDTI1MDQyNDE2Mjc0MloXDTI1MDcyMzE2Mjc0MlowLzEtMCsGA1UEAxMk
MTMyMjhmZjAtM2I3NS00NjBiLThkODItNTNjNTcyMTgzYWMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAppDNZraB8AB/cco0yPkWtUpYn4No4mczt3U6
yyefZDRGOJ6HkoLsKLnQak1V33t31TExxqOhmVaJRUAaEYnXC+GvAty+uq5JxyMf
9TTmv0sE9Npp+9m9umNo0mLCxGFdV49658XWi1XVH1Kvqf+pbbETlgls6wk7Tv9m
DJ0sxqya4UrlMHEQUvQS4vHeFfP/0F9CYRxkjr2gFpHGF2+BR4DOIfksSeZg0WAb
HBoHaYORwATJx0MDp7A82BNC4PYpEeM8bOBj/GQgqz6qGD879m7tZoaIVkCZ7bbu
n3FQqclIqtGbWE4y4LgHM9hvOU9kgpLum6BdEvvjYEB0GRXWCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJH2KxJ5rg0ZD8bhlq/yL6tKuDg0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84NmZl
YTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNiN2Q4ODQzODgvNjk1NTJiNDctMTNhMi0z
OTdhLWI0YjEtMWU1Zjk5NzNmZmIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvODZmZWE0NzAtYjM4MC00NWMwLTlm
NmItMDMzYjdkODg0Mzg4Lzg2ZmVhNDcwLWIzODAtNDVjMC05ZjZiLTAzM2I3ZDg4
NDM4OC5jcmwwHwYDVR0jBBgwFoAUCHSKMQk8LElEoS6K1lyekgQBzxYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84NmZlYTQ3MC1iMzgwLTQ1YzAtOWY2Yi0wMzNi
N2Q4ODQzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAur7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHLuuGTxLQb1H8NHsAu+GbtEYB2IwfRBpQ6TcZdlcaM/QftA0CRq8j01
hpRfiJ5+A47bYEMGp/RDzaIDW/DIfqM5j6iZ1Rr55bYDyr1NnTy5SUhaWmDt7kKC
O4YfIsVDsXyPOd3+eLgzUVfhHR2onv+ljcrip50EzPJhJ94+RcpMALA3IbEf7A2Z
PwZd8qamrszHyaLPkJVQ1yC7CuzUeSE1QXv9C0sbIwiAavB+VcKjG4DEh14PN6Wl
UKUQ8Eqq+l2ETFrNYkMCXo0fIWDh3QkT9d3fCOPKnO45Qi1qgO6byhkQOhekcZrk
HQ72yILoRKAB7VjhwcFa3cmWn+14+Jc=
-----END CERTIFICATE-----
Generated at Sat Apr 26 16:18:18 2025 by rpki-client