Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
File:                     0184950f-9c02-3248-a632-9f96a6f085f9.roa (raw, json)
Hash identifier:          WjCWBZSkt4PRRFPzv1WgyTwWhYwatEKgIOTPsVjjrHw=
Subject key identifier:   38:F9:CB:10:31:37:71:D0:DE:BE:65:37:94:86:3E:BC:F4:71:D4:96
Certificate issuer:       /CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
Certificate serial:       010D0C9F43285849350E9673D60147DE32815B00
Authority key identifier: A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa
Signing time:             Sun 16 Mar 2025 13:00:52 +0000
ROA not before:           Sun 16 Mar 2025 13:00:52 +0000
ROA not after:            Sat 14 Jun 2025 13:00:52 +0000
asID:                     398437
IP address blocks:        170.39.36.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:35:0e:96:73:d6:01:47:de:32:81:5b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5599678a-c6a8-4921-aa0a-62a64b2f1631
        Validity
            Not Before: Mar 16 13:00:52 2025 GMT
            Not After : Jun 14 13:00:52 2025 GMT
        Subject: CN=38838980-7e95-4f8d-aa41-29f1c682384b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:a9:7e:50:37:ab:24:95:f1:51:24:7d:65:69:
                    48:ad:c4:43:37:0e:83:cb:f8:8f:94:71:e8:dd:ff:
                    5a:12:ec:35:57:ae:84:a9:f7:19:f1:fd:0e:19:15:
                    7c:dc:b0:18:e5:43:c8:07:72:c6:da:a8:95:dc:8f:
                    3c:cd:ec:96:b7:cd:f1:73:91:68:ef:a1:2d:c1:0a:
                    e9:07:b0:8d:89:0d:ce:a7:a9:b1:e0:58:d0:4b:e3:
                    3d:f6:ef:c2:b0:b6:6b:ef:0f:75:5a:0c:20:b5:8d:
                    6a:de:8a:93:74:77:a0:fe:02:99:7d:d6:53:8d:c1:
                    33:10:c1:b7:53:fe:2f:88:7d:5e:ce:77:32:33:e9:
                    3e:47:29:17:dd:80:93:26:36:6a:d8:95:82:3a:d5:
                    2b:3b:b8:06:27:91:c1:b6:17:45:32:8d:95:e3:5e:
                    50:6e:52:22:c1:52:bc:6f:94:7d:fa:5d:42:51:48:
                    8c:0d:30:8b:58:f0:4f:fa:c3:13:da:4a:18:21:bb:
                    76:f4:f9:2e:79:7b:14:67:39:8b:45:98:56:da:7f:
                    fe:4d:95:d8:31:ca:c1:8c:c8:98:0f:28:2a:9d:4f:
                    1e:e7:9f:4d:0d:2e:7a:c5:bc:3d:de:10:6d:dd:e6:
                    07:5a:d4:a4:5e:28:0c:a6:69:f9:1e:fe:ff:10:e4:
                    22:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:F9:CB:10:31:37:71:D0:DE:BE:65:37:94:86:3E:BC:F4:71:D4:96
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/0184950f-9c02-3248-a632-9f96a6f085f9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631/5599678a-c6a8-4921-aa0a-62a64b2f1631.crl

            X509v3 Authority Key Identifier:
                keyid:A7:57:A4:B1:32:85:CF:43:2E:0E:54:6F:2F:1A:B3:97:5E:12:40:5C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/5599678a-c6a8-4921-aa0a-62a64b2f1631.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.39.36.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         67:5d:fb:cd:37:f1:54:2c:59:c5:f2:a0:16:03:9f:6d:40:b2:
         a8:f3:ad:26:72:2a:17:5d:ec:72:c9:95:40:5e:dd:93:6a:83:
         f0:97:9b:6d:35:8a:ac:9b:97:e7:91:16:9f:7f:a5:cb:58:1f:
         f0:c4:1c:9d:2e:c9:ed:db:79:63:d4:d1:07:71:b7:9d:b2:bd:
         5b:e6:8f:e2:f7:5f:41:d3:26:02:4d:1e:74:c1:6e:c9:b6:8c:
         e0:0e:e3:fe:2b:48:50:13:90:d0:fb:79:1b:bc:dc:61:ec:8b:
         56:53:d9:f4:85:62:0e:b1:bd:86:28:f3:40:c3:41:37:a7:f8:
         92:42:14:b0:a1:ba:a0:c3:0e:ab:dd:d3:f8:e2:6e:67:0e:7b:
         df:08:cf:ce:7f:ed:24:4f:2e:75:2a:5d:c2:ee:20:67:5e:22:
         f6:5c:8a:2e:9f:6a:89:3c:7f:e9:f1:b5:8a:15:46:02:75:72:
         b6:1f:8e:db:24:41:94:9d:f1:3f:46:c3:68:b2:49:2d:80:b7:
         d5:6e:28:8f:f0:c8:b8:0b:44:74:7b:3b:47:9c:c0:61:0b:a6:
         33:6b:49:cc:81:7a:5d:ba:a5:fc:af:cd:a4:57:d3:4d:dd:37:
         8c:2c:ca:3e:6f:e8:b6:2c:f7:60:e7:63:0d:80:07:4b:54:4a:
         98:7c:b8:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEk1DpZz1gFH3jKBWwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU5OTY3OGEtYzZhOC00OTIxLWFhMGEtNjJhNjRiMmYx
NjMxMB4XDTI1MDMxNjEzMDA1MloXDTI1MDYxNDEzMDA1MlowLzEtMCsGA1UEAxMk
Mzg4Mzg5ODAtN2U5NS00ZjhkLWFhNDEtMjlmMWM2ODIzODRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6ql+UDerJJXxUSR9ZWlIrcRDNw6Dy/iPlHHo
3f9aEuw1V66EqfcZ8f0OGRV83LAY5UPIB3LG2qiV3I88zeyWt83xc5Fo76EtwQrp
B7CNiQ3Op6mx4FjQS+M99u/CsLZr7w91WgwgtY1q3oqTdHeg/gKZfdZTjcEzEMG3
U/4viH1ezncyM+k+RykX3YCTJjZq2JWCOtUrO7gGJ5HBthdFMo2V415QblIiwVK8
b5R9+l1CUUiMDTCLWPBP+sMT2koYIbt29PkueXsUZzmLRZhW2n/+TZXYMcrBjMiY
DygqnU8e559NDS56xbw93hBt3eYHWtSkXigMpmn5Hv7/EOQiAQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDj5yxAxN3HQ3r5lN5SGPrz0cdSWMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81NTk5
Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2NGIyZjE2MzEvMDE4NDk1MGYtOWMwMi0z
MjQ4LWE2MzItOWY5NmE2ZjA4NWY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTU5OTY3OGEtYzZhOC00OTIxLWFh
MGEtNjJhNjRiMmYxNjMxLzU1OTk2NzhhLWM2YTgtNDkyMS1hYTBhLTYyYTY0YjJm
MTYzMS5jcmwwHwYDVR0jBBgwFoAUp1eksTKFz0MuDlRvLxqzl14SQFwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81NTk5Njc4YS1jNmE4LTQ5MjEtYWEwYS02MmE2
NGIyZjE2MzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCqickMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGdd+8038VQsWcXyoBYDn21AsqjzrSZyKhdd7HLJlUBe3ZNqg/CXm201
iqybl+eRFp9/pctYH/DEHJ0uye3beWPU0Qdxt52yvVvmj+L3X0HTJgJNHnTBbsm2
jOAO4/4rSFATkND7eRu83GHsi1ZT2fSFYg6xvYYo80DDQTen+JJCFLChuqDDDqvd
0/jibmcOe98Iz85/7SRPLnUqXcLuIGdeIvZcii6faok8f+nxtYoVRgJ1crYfjtsk
QZSd8T9Gw2iySS2At9VuKI/wyLgLRHR7O0ecwGELpjNrScyBel26pfyvzaRX003d
N4wsyj5v6LYs92DnYw2AB0tUSph8uJ8=
-----END CERTIFICATE-----
Generated at Mon Apr 28 15:26:12 2025 by rpki-client