Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
File:                     2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa (raw, json)
Hash identifier:          WNN7V8Z+f9mPTko7Syk7zB6G24/dk7EZu/EyjrHLbnM=
Subject key identifier:   A0:5A:CF:C2:F3:5A:53:87:38:DE:C9:23:68:53:AE:24:90:97:90:73
Certificate issuer:       /CN=261c40d7-8712-472b-8c28-a09b3f549365
Certificate serial:       010D0C9F4328584A03A5562874E8603D12395D80
Authority key identifier: FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     32564
IP address blocks:        142.216.174.0/24 maxlen: 24
                          205.210.132.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:56:28:74:e8:60:3d:12:39:5d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=261c40d7-8712-472b-8c28-a09b3f549365
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=52fb0b68-59a1-41e7-92c3-d0261d939503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:0f:4a:f9:16:56:de:2d:d7:59:ce:22:8d:
                    ea:23:15:71:ef:87:f5:b3:65:e4:95:dc:4a:19:77:
                    71:0a:39:28:f3:fc:a0:fc:2c:40:4e:a7:28:26:f2:
                    ae:5c:bb:87:05:12:8f:f9:96:28:3c:0d:2e:91:95:
                    51:3b:45:f4:77:a1:af:b3:6d:19:cc:17:68:05:c7:
                    1b:6f:dd:88:63:9a:7c:05:1b:cf:95:cd:95:a7:bf:
                    f7:40:92:e1:b4:d1:fa:4f:3f:e7:2d:7f:bf:71:18:
                    27:e0:26:0b:bf:48:5e:7d:80:ff:f5:02:4c:28:cb:
                    47:90:63:98:62:1a:16:09:cf:5f:6b:33:e6:b9:58:
                    94:91:d6:b0:49:b3:30:30:3e:f5:ff:e4:27:ef:7f:
                    db:bc:08:29:8c:d3:03:e9:d0:5a:43:ff:bb:2e:35:
                    4d:8a:7f:c8:87:ca:84:ce:3f:79:57:64:28:c1:74:
                    d0:15:09:ef:1e:a8:7b:bb:33:e9:b3:47:09:bf:f2:
                    09:d9:7d:eb:dc:91:26:1c:c7:74:43:59:a2:b6:2b:
                    fb:19:10:61:2d:02:94:5a:2b:24:31:4e:4e:7c:be:
                    db:74:1f:9c:3e:55:f1:c6:90:4b:23:63:3a:35:4b:
                    22:77:b9:84:d7:eb:b4:c2:6b:f3:29:ee:ff:02:42:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:5A:CF:C2:F3:5A:53:87:38:DE:C9:23:68:53:AE:24:90:97:90:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/2e721e51-249c-36f4-a8cc-4ec4a45e174e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365/261c40d7-8712-472b-8c28-a09b3f549365.crl

            X509v3 Authority Key Identifier:
                keyid:FA:F8:CB:26:B0:B0:5A:8F:DB:BF:42:DA:6A:30:00:DB:9D:1B:EE:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/261c40d7-8712-472b-8c28-a09b3f549365.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.216.174.0/24
                  205.210.132.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         42:3e:32:90:5c:e7:fd:09:93:04:01:9e:15:03:ff:1a:85:d7:
         45:53:51:b8:fc:c4:04:66:8f:ac:3d:29:5b:5a:49:09:d1:e0:
         c1:72:eb:85:92:7e:e2:41:31:06:14:86:f5:55:e1:46:b5:1e:
         f8:fa:80:fa:95:11:4b:2e:34:cf:07:b0:68:0b:65:f1:c9:be:
         ee:44:fa:ec:c3:c9:a3:aa:d3:b5:80:85:24:36:4e:33:fd:f8:
         77:5b:04:1c:a0:7e:24:37:fc:46:40:5a:26:98:6a:ab:88:10:
         ff:5a:45:62:5b:76:4a:c4:44:1e:d8:87:9b:87:9b:fc:1d:71:
         39:7d:f5:d2:54:51:27:be:1f:d6:e6:b6:66:7e:b0:c1:4f:f6:
         78:fe:e9:5d:15:0c:3f:96:28:c5:e1:99:34:c6:1d:ee:37:16:
         89:d0:80:f4:04:4a:99:a7:ee:f4:4a:7b:c4:f1:e0:40:a6:1f:
         c4:a7:46:de:c8:e1:d6:8f:33:8a:4b:0a:51:fa:86:f0:31:c7:
         73:7e:51:62:ac:62:f1:c8:b8:41:47:f4:80:77:ff:00:a8:35:
         45:be:11:c2:ad:95:52:77:fa:ad:df:aa:eb:8f:60:15:aa:3c:
         8d:9d:b2:23:5b:e9:a9:e2:0d:8e:ed:d9:2c:6b:9a:18:fb:8d:
         b8:c9:42:90
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEoDpVYodOhgPRI5XYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYxYzQwZDctODcxMi00NzJiLThjMjgtYTA5YjNmNTQ5
MzY1MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
NTJmYjBiNjgtNTlhMS00MWU3LTkyYzMtZDAyNjFkOTM5NTAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgCcPSvkWVt4t11nOIo3qIxVx74f1s2XkldxK
GXdxCjko8/yg/CxATqcoJvKuXLuHBRKP+ZYoPA0ukZVRO0X0d6Gvs20ZzBdoBccb
b92IY5p8BRvPlc2Vp7/3QJLhtNH6Tz/nLX+/cRgn4CYLv0hefYD/9QJMKMtHkGOY
YhoWCc9fazPmuViUkdawSbMwMD71/+Qn73/bvAgpjNMD6dBaQ/+7LjVNin/Ih8qE
zj95V2QowXTQFQnvHqh7uzPps0cJv/IJ2X3r3JEmHMd0Q1mitiv7GRBhLQKUWisk
MU5OfL7bdB+cPlXxxpBLI2M6NUsid7mE1+u0wmvzKe7/AkI3MwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFKBaz8LzWlOHON7JI2hTriSQl5BzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjFj
NDBkNy04NzEyLTQ3MmItOGMyOC1hMDliM2Y1NDkzNjUvMmU3MjFlNTEtMjQ5Yy0z
NmY0LWE4Y2MtNGVjNGE0NWUxNzRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjYxYzQwZDctODcxMi00NzJiLThj
MjgtYTA5YjNmNTQ5MzY1LzI2MWM0MGQ3LTg3MTItNDcyYi04YzI4LWEwOWIzZjU0
OTM2NS5jcmwwHwYDVR0jBBgwFoAU+vjLJrCwWo/bv0LaajAA250b7igwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yNjFjNDBkNy04NzEyLTQ3MmItOGMyOC1hMDli
M2Y1NDkzNjUuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjtiuAwQB
zdKEMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEI+MpBc5/0JkwQBnhUD/xqF10VTUbj8xARmj6w9KVtaSQnR
4MFy64WSfuJBMQYUhvVV4Ua1Hvj6gPqVEUsuNM8HsGgLZfHJvu5E+uzDyaOq07WA
hSQ2TjP9+HdbBBygfiQ3/EZAWiaYaquIEP9aRWJbdkrERB7Yh5uHm/wdcTl99dJU
USe+H9bmtmZ+sMFP9nj+6V0VDD+WKMXhmTTGHe43FonQgPQESpmn7vRKe8Tx4ECm
H8SnRt7I4daPM4pLClH6hvAxx3N+UWKsYvHIuEFH9IB3/wCoNUW+EcKtlVJ3+q3f
quuPYBWqPI2dsiNb6aniDY7t2Sxrmhj7jbjJQpA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:21:55 2025 by rpki-client