Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa
File:                     bb792bb3-1eea-353d-9c44-282070fccca5.roa (raw, json)
Hash identifier:          j1VrnS9zDKDzMDzHqZ7HB//VhLE5cRJ1t2zC3LI8iDw=
Subject key identifier:   3F:41:C2:22:82:4A:C5:B0:09:09:E8:BE:DB:11:25:92:3B:24:ED:55
Certificate issuer:       /CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
Certificate serial:       010D0C9F43285849797441A97AE77826F28A33C0
Authority key identifier: CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa
Signing time:             Thu 10 Apr 2025 01:00:46 +0000
ROA not before:           Thu 10 Apr 2025 01:00:46 +0000
ROA not after:            Wed 09 Jul 2025 01:00:46 +0000
asID:                     5650
IP address blocks:        107.161.116.0/23 maxlen: 23
                          107.161.120.0/23 maxlen: 23
                          158.51.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:79:74:41:a9:7a:e7:78:26:f2:8a:33:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55c9af4a-e2e4-4fb9-9f53-869c87710e31
        Validity
            Not Before: Apr 10 01:00:46 2025 GMT
            Not After : Jul  9 01:00:46 2025 GMT
        Subject: CN=857bb63b-381d-416f-b135-79d4625f4fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:41:83:f6:9b:bb:31:3b:e6:35:e5:0a:84:d1:
                    55:e6:5b:27:4b:33:0b:02:55:c3:f7:0f:e0:80:ac:
                    d1:83:b1:0c:b8:06:27:3c:d4:86:de:4c:3f:22:ea:
                    b9:d6:0e:7d:fc:48:70:b7:1f:6c:fe:fd:13:39:a8:
                    d3:06:37:15:58:2c:7f:06:cf:37:97:e3:40:51:e9:
                    3f:c7:b0:43:f5:94:70:e1:7c:04:8e:c1:18:95:cc:
                    89:0e:a5:d5:bf:db:39:0a:5a:b1:80:db:6c:04:0d:
                    4a:dc:52:5e:86:0e:35:be:f6:c1:31:89:b2:aa:74:
                    52:30:ff:18:ac:3d:07:16:da:dd:f0:91:07:97:96:
                    55:a9:95:3a:b2:a3:9d:93:ff:26:9c:90:a7:7b:b8:
                    fc:62:1f:ae:d1:d2:cf:89:14:31:fa:d3:3b:13:1b:
                    84:71:5e:f7:72:2e:ad:f5:3a:38:18:b0:c9:4a:95:
                    ed:16:10:00:03:b9:bc:0b:fc:56:fe:3b:ce:c8:f2:
                    20:e8:5f:1f:9c:10:16:b1:aa:b8:f6:78:9f:36:d6:
                    df:b4:38:c6:d9:3c:d2:68:38:18:67:a0:d8:fd:06:
                    0b:70:ed:12:fd:e1:0c:a5:0c:da:eb:61:61:74:5a:
                    8b:4c:a6:51:f1:18:a3:5d:39:44:e3:71:38:90:4f:
                    c9:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:41:C2:22:82:4A:C5:B0:09:09:E8:BE:DB:11:25:92:3B:24:ED:55
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/bb792bb3-1eea-353d-9c44-282070fccca5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31/55c9af4a-e2e4-4fb9-9f53-869c87710e31.crl

            X509v3 Authority Key Identifier:
                keyid:CE:0E:A4:D7:05:EC:89:A2:4E:D5:E2:D0:EC:5A:D1:C5:E2:1D:5B:C6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/55c9af4a-e2e4-4fb9-9f53-869c87710e31.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.161.116.0/23
                  107.161.120.0/23
                  158.51.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         63:77:ea:de:d1:4a:8c:32:0f:05:10:b6:66:b2:84:48:bc:3f:
         4f:74:be:bc:49:62:8f:fe:71:7f:9c:95:a8:b9:64:74:4c:1c:
         cb:50:8d:ab:2c:e8:fd:52:e0:1d:95:97:ad:11:99:1a:44:58:
         88:a9:57:45:ee:da:87:39:34:5e:f8:54:99:4e:2e:a3:1e:94:
         27:5b:d4:0d:6c:96:58:c0:de:c1:80:d6:40:3c:18:82:2d:8a:
         19:75:04:96:b2:6d:94:ee:be:29:ff:0b:87:1e:6d:07:dc:73:
         eb:56:f6:83:c2:5e:cf:11:22:b3:fb:5c:36:f1:be:f1:8b:31:
         a0:32:33:d1:fe:45:d5:ee:8a:80:58:1e:7f:32:5a:15:89:fa:
         a2:9d:f2:a0:ac:1d:03:72:d9:ef:57:38:d6:74:61:47:7a:40:
         92:cf:5e:c7:84:e6:d7:a7:a8:54:eb:b6:3d:45:14:15:a2:55:
         ec:6a:6f:af:b2:e6:a5:4a:92:3e:a4:c0:4e:af:ed:4e:e3:08:
         2d:ff:00:ba:76:54:34:37:78:bc:45:ae:f1:f1:66:a5:85:c0:
         df:e4:c3:dc:e6:7c:08:59:04:87:a6:b7:76:ad:70:6a:72:62:
         1d:bb:60:58:35:73:04:84:63:c8:33:69:d2:4a:4e:b5:4e:4a:
         96:d4:4f:67
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEl5dEGpeud4JvKKM8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVjOWFmNGEtZTJlNC00ZmI5LTlmNTMtODY5Yzg3NzEw
ZTMxMB4XDTI1MDQxMDAxMDA0NloXDTI1MDcwOTAxMDA0NlowLzEtMCsGA1UEAxMk
ODU3YmI2M2ItMzgxZC00MTZmLWIxMzUtNzlkNDYyNWY0ZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkGD9pu7MTvmNeUKhNFV5lsnSzMLAlXD9w/g
gKzRg7EMuAYnPNSG3kw/Iuq51g59/Ehwtx9s/v0TOajTBjcVWCx/Bs83l+NAUek/
x7BD9ZRw4XwEjsEYlcyJDqXVv9s5ClqxgNtsBA1K3FJehg41vvbBMYmyqnRSMP8Y
rD0HFtrd8JEHl5ZVqZU6sqOdk/8mnJCne7j8Yh+u0dLPiRQx+tM7ExuEcV73ci6t
9To4GLDJSpXtFhAAA7m8C/xW/jvOyPIg6F8fnBAWsaq49nifNtbftDjG2TzSaDgY
Z6DY/QYLcO0S/eEMpQza62FhdFqLTKZR8RijXTlE43E4kE/JoQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFD9BwiKCSsWwCQnovtsRJZI7JO1VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5
YWY0YS1lMmU0LTRmYjktOWY1My04NjljODc3MTBlMzEvYmI3OTJiYjMtMWVlYS0z
NTNkLTljNDQtMjgyMDcwZmNjY2E1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTVjOWFmNGEtZTJlNC00ZmI5LTlm
NTMtODY5Yzg3NzEwZTMxLzU1YzlhZjRhLWUyZTQtNGZiOS05ZjUzLTg2OWM4Nzcx
MGUzMS5jcmwwHwYDVR0jBBgwFoAUzg6k1wXsiaJO1eLQ7FrRxeIdW8YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81NWM5YWY0YS1lMmU0LTRmYjktOWY1My04Njlj
ODc3MTBlMzEuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBa6F0AwQB
a6F4AwQCnjOQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAGN36t7RSowyDwUQtmayhEi8P090vrxJYo/+cX+c
lai5ZHRMHMtQjass6P1S4B2Vl60RmRpEWIipV0Xu2oc5NF74VJlOLqMelCdb1A1s
lljA3sGA1kA8GIItihl1BJaybZTuvin/C4cebQfcc+tW9oPCXs8RIrP7XDbxvvGL
MaAyM9H+RdXuioBYHn8yWhWJ+qKd8qCsHQNy2e9XONZ0YUd6QJLPXseE5tenqFTr
tj1FFBWiVexqb6+y5qVKkj6kwE6v7U7jCC3/ALp2VDQ3eLxFrvHxZqWFwN/kw9zm
fAhZBIemt3atcGpyYh27YFg1cwSEY8gzadJKTrVOSpbUT2c=
-----END CERTIFICATE-----
Generated at Sun Apr 27 04:00:04 2025 by rpki-client