Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa
File:                     d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa (raw, json)
Hash identifier:          t7tF5kP7vO7Y2vYYmk8t9Z1VN/zikbFnQTCxMxAOsDM=
Subject key identifier:   B6:9E:7B:4B:CD:1A:C0:B5:FC:C0:3C:BF:C3:05:A5:0A:56:B2:EC:37
Certificate issuer:       /CN=143e80c3-86ee-4862-b691-1be82bcbf66d
Certificate serial:       010D0C9F43285849B59A997B813D5AB45B76AB00
Authority key identifier: 82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa
Signing time:             Thu 01 May 2025 14:06:38 +0000
ROA not before:           Thu 01 May 2025 14:06:38 +0000
ROA not after:            Wed 30 Jul 2025 14:06:38 +0000
asID:                     398156
IP address blocks:        158.120.198.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b5:9a:99:7b:81:3d:5a:b4:5b:76:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=143e80c3-86ee-4862-b691-1be82bcbf66d
        Validity
            Not Before: May  1 14:06:38 2025 GMT
            Not After : Jul 30 14:06:38 2025 GMT
        Subject: CN=e56c066c-0fdf-40e2-a8d1-d8c131d7db79
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:0c:a1:d2:a5:9d:ff:31:9f:8b:48:d0:c3:75:
                    52:c0:7b:18:fd:ef:88:8e:64:f3:9d:e6:ad:b7:9b:
                    53:46:df:5d:1f:5e:db:a7:57:76:52:7a:2f:71:b2:
                    60:ee:95:19:48:55:23:cf:ba:e4:84:be:04:e2:10:
                    f6:82:d7:f8:e9:7c:b2:29:68:70:ab:d9:c8:6a:69:
                    e6:49:08:80:72:65:63:65:25:e2:03:fb:65:3e:86:
                    5b:fc:12:69:31:4d:01:c7:aa:b6:17:e4:13:ee:f3:
                    1a:31:bb:16:ce:27:9e:c9:13:52:5e:3c:f6:3c:00:
                    2c:5d:1e:ac:3f:5f:57:f5:03:72:f8:25:0f:b9:99:
                    e8:5c:88:52:e0:14:d3:ab:96:fb:84:78:ba:86:c1:
                    ab:23:af:66:d9:10:4a:8e:85:19:f3:04:c0:44:1f:
                    4d:3b:c1:f0:29:14:bf:9c:92:48:26:9f:98:c3:56:
                    ee:ed:16:3c:1c:e5:2b:1b:ad:b1:c4:c7:96:8d:12:
                    36:c8:d6:21:89:6a:f8:39:db:59:6f:16:bf:1d:7b:
                    01:fa:97:0d:64:e7:9b:25:f8:c2:d0:35:b6:1c:87:
                    cd:76:0f:13:21:12:a2:1e:a9:cd:a9:c2:75:37:7c:
                    dc:d5:37:78:bf:3f:4e:70:23:fe:83:27:35:cb:20:
                    82:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9E:7B:4B:CD:1A:C0:B5:FC:C0:3C:BF:C3:05:A5:0A:56:B2:EC:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/d23f9b2f-82b4-39e8-ab71-1da67ae1cdda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d/143e80c3-86ee-4862-b691-1be82bcbf66d.crl

            X509v3 Authority Key Identifier:
                keyid:82:F7:11:A2:52:C8:F0:E7:98:54:BC:65:F0:7F:57:97:12:D0:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/143e80c3-86ee-4862-b691-1be82bcbf66d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.120.198.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:27:99:97:1d:ef:1c:43:cd:30:3f:1f:50:48:d7:06:8a:ca:
         7d:b7:ef:42:56:1e:28:44:d8:f2:6a:a3:12:07:e7:fb:98:ba:
         e4:92:e0:3a:9e:bb:51:ef:f3:26:2c:9a:bb:b4:a2:ca:89:51:
         b3:e2:41:36:4c:13:6b:cf:b7:f9:a6:73:6e:e2:c0:32:9b:84:
         32:e0:43:fb:72:2d:9a:2d:bb:f7:29:72:6e:e4:8b:0b:9a:f6:
         57:d0:48:1c:58:1f:8e:bc:49:0a:99:21:83:41:45:a9:11:ac:
         e2:32:23:42:bd:38:bf:ad:93:1f:96:15:95:ee:a7:fc:d5:5f:
         31:ef:de:96:83:67:22:4d:4f:6b:2f:6d:ea:c8:dd:a0:2e:ff:
         cf:a7:7d:c1:6b:02:52:62:a9:69:80:3f:b3:51:cf:e4:3a:c1:
         3d:c1:ab:5d:3c:2a:e7:5d:25:db:3e:77:c0:df:51:1d:df:9d:
         f1:a1:de:7a:42:64:07:0a:5f:66:b8:db:3b:d8:39:21:ce:dc:
         5d:e6:ad:0a:61:08:c0:6a:53:ba:28:dc:20:5d:d3:20:98:53:
         72:e7:53:c8:29:1b:9f:f7:44:e2:a2:64:28:0c:05:da:21:db:
         e2:4c:f1:dc:32:9c:b3:7b:68:02:65:8f:21:59:74:0a:d0:6b:
         35:07:c8:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm1mpl7gT1atFt2qwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTQzZTgwYzMtODZlZS00ODYyLWI2OTEtMWJlODJiY2Jm
NjZkMB4XDTI1MDUwMTE0MDYzOFoXDTI1MDczMDE0MDYzOFowLzEtMCsGA1UEAxMk
ZTU2YzA2NmMtMGZkZi00MGUyLWE4ZDEtZDhjMTMxZDdkYjc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwyh0qWd/zGfi0jQw3VSwHsY/e+IjmTzneat
t5tTRt9dH17bp1d2UnovcbJg7pUZSFUjz7rkhL4E4hD2gtf46XyyKWhwq9nIamnm
SQiAcmVjZSXiA/tlPoZb/BJpMU0Bx6q2F+QT7vMaMbsWzieeyRNSXjz2PAAsXR6s
P19X9QNy+CUPuZnoXIhS4BTTq5b7hHi6hsGrI69m2RBKjoUZ8wTARB9NO8HwKRS/
nJJIJp+Yw1bu7RY8HOUrG62xxMeWjRI2yNYhiWr4OdtZbxa/HXsB+pcNZOebJfjC
0DW2HIfNdg8TIRKiHqnNqcJ1N3zc1Td4vz9OcCP+gyc1yyCCGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLaee0vNGsC1/MA8v8MFpQpWsuw3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNDNl
ODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4MmJjYmY2NmQvZDIzZjliMmYtODJiNC0z
OWU4LWFiNzEtMWRhNjdhZTFjZGRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTQzZTgwYzMtODZlZS00ODYyLWI2
OTEtMWJlODJiY2JmNjZkLzE0M2U4MGMzLTg2ZWUtNDg2Mi1iNjkxLTFiZTgyYmNi
ZjY2ZC5jcmwwHwYDVR0jBBgwFoAUgvcRolLI8OeYVLxl8H9XlxLQFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNDNlODBjMy04NmVlLTQ4NjItYjY5MS0xYmU4
MmJjYmY2NmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnnjGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFAnmZcd7xxDzTA/H1BI1waKyn2370JWHihE2PJqoxIH5/uYuuSS4Dqe
u1Hv8yYsmru0osqJUbPiQTZME2vPt/mmc27iwDKbhDLgQ/tyLZotu/cpcm7kiwua
9lfQSBxYH468SQqZIYNBRakRrOIyI0K9OL+tkx+WFZXup/zVXzHv3paDZyJNT2sv
berI3aAu/8+nfcFrAlJiqWmAP7NRz+Q6wT3Bq108KuddJds+d8DfUR3fnfGh3npC
ZAcKX2a42zvYOSHO3F3mrQphCMBqU7oo3CBd0yCYU3LnU8gpG5/3ROKiZCgMBdoh
2+JM8dwynLN7aAJljyFZdArQazUHyI8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 15:37:10 2025 by rpki-client