Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
File:                     1aa09281-d649-31c6-be20-6305a6a3137d.roa (raw, json)
Hash identifier:          fczZLcGbJ+30w/9xfhvgvIhEQ29dCVjo3dMoiD57aNE=
Subject key identifier:   98:8F:EC:DD:66:4A:B9:E9:E4:C0:BC:F2:CD:44:33:6E:3C:FC:7F:13
Certificate issuer:       /CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
Certificate serial:       010D0C9F43285849D85FABFA30A47C47099E1180
Authority key identifier: 65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     14618
IP address blocks:        143.223.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:ab:fa:30:a4:7c:47:09:9e:11:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=b3a42a5b-c7b5-411f-8baa-4aeb2121e8a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:38:ab:64:a7:5f:4b:eb:3f:1a:8d:bb:19:3a:
                    97:b3:7b:3f:74:79:a8:e7:1a:93:b6:de:79:cb:6d:
                    ae:b1:6b:b0:9d:05:e7:50:f3:be:24:da:03:98:10:
                    2c:b0:c9:06:8c:85:78:8d:54:e6:bd:61:e8:9b:46:
                    e3:2e:81:89:aa:41:a6:39:be:04:c5:c1:95:7d:2d:
                    52:b8:56:4b:73:f5:8f:68:4c:00:36:ad:40:65:34:
                    c8:d1:96:a4:7f:5f:58:ee:0f:9d:2f:c6:67:2a:c9:
                    ac:e0:5d:11:78:25:14:69:7d:db:b0:3e:f0:30:90:
                    98:92:13:20:c1:53:1c:33:3e:56:f3:d3:32:ff:0c:
                    72:2d:61:60:28:6f:64:6b:91:7e:a5:9d:e0:11:81:
                    19:cd:61:71:f7:41:d7:82:b7:cc:18:d7:40:18:4a:
                    77:08:bf:db:b2:7a:c7:f8:cd:98:62:b7:6c:28:41:
                    6d:59:ba:03:87:67:c0:b2:76:b1:c0:57:23:68:aa:
                    35:e2:6a:3c:2a:8b:4e:7d:06:d7:78:f8:ba:b1:d8:
                    dd:e3:be:f0:ae:52:6c:33:7b:2b:04:b2:60:2b:a1:
                    4b:a2:bd:63:5a:db:8d:9a:bf:15:aa:d2:8e:9b:7c:
                    75:bd:a0:a5:94:97:9e:cd:53:62:72:b9:4d:38:a8:
                    d6:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:8F:EC:DD:66:4A:B9:E9:E4:C0:BC:F2:CD:44:33:6E:3C:FC:7F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/1aa09281-d649-31c6-be20-6305a6a3137d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.crl

            X509v3 Authority Key Identifier:
                keyid:65:22:65:93:F8:61:39:64:98:E2:7A:E5:6C:C2:35:B3:F6:7E:5B:35

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/99fb6c9a-ce29-41ee-a4ad-3dee3f7970a4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.223.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5c:8a:5d:df:b3:e5:cb:fd:7b:59:c5:03:d2:72:b4:cf:32:b3:
         3c:1a:17:3e:66:8f:ba:0c:76:65:22:85:94:9d:78:cc:dd:22:
         a1:87:4f:df:da:2e:b4:bb:23:e2:a2:78:2d:e3:2f:fe:ab:f5:
         f1:ee:c2:ee:1e:d7:b1:2a:50:8d:1e:e7:19:68:cb:ea:54:22:
         f1:2d:b6:c0:0c:55:f9:fa:7e:e1:81:ae:b9:53:94:9c:7b:21:
         dd:0b:cb:b0:82:3d:44:78:b8:73:29:eb:6e:1f:b2:89:6e:04:
         c0:13:f4:a8:6b:a7:5f:95:7a:8c:d6:cf:52:78:39:07:6c:48:
         eb:11:ae:f6:3d:9b:94:23:46:49:97:10:e7:23:ea:9d:38:a7:
         70:0e:11:00:de:7f:98:04:70:89:a9:24:d4:32:fa:49:39:d0:
         50:c5:97:77:dd:29:92:47:60:31:00:98:1e:98:cc:52:37:7d:
         35:ca:4a:63:8c:b9:93:a2:1a:c4:9e:9c:68:0b:a2:95:c0:0e:
         a2:6e:e6:31:0e:24:99:df:38:53:38:14:71:78:48:f0:ac:7f:
         be:d5:32:f8:14:b1:98:1c:54:b9:e1:30:84:be:45:5f:32:a8:
         77:18:97:af:c0:05:f2:5f:fa:f3:49:33:c1:b8:5a:25:e2:da:
         93:98:9b:fe
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX6v6MKR8RwmeEYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTlmYjZjOWEtY2UyOS00MWVlLWE0YWQtM2RlZTNmNzk3
MGE0MB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
YjNhNDJhNWItYzdiNS00MTFmLThiYWEtNGFlYjIxMjFlOGE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzirZKdfS+s/Go27GTqXs3s/dHmo5xqTtt55
y22usWuwnQXnUPO+JNoDmBAssMkGjIV4jVTmvWHom0bjLoGJqkGmOb4ExcGVfS1S
uFZLc/WPaEwANq1AZTTI0Zakf19Y7g+dL8ZnKsms4F0ReCUUaX3bsD7wMJCYkhMg
wVMcMz5W89My/wxyLWFgKG9ka5F+pZ3gEYEZzWFx90HXgrfMGNdAGEp3CL/bsnrH
+M2YYrdsKEFtWboDh2fAsnaxwFcjaKo14mo8KotOfQbXePi6sdjd477wrlJsM3sr
BLJgK6FLor1jWtuNmr8VqtKOm3x1vaCllJeezVNicrlNOKjWnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJiP7N1mSrnp5MC88s1EM248/H8TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZi
NmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVlM2Y3OTcwYTQvMWFhMDkyODEtZDY0OS0z
MWM2LWJlMjAtNjMwNWE2YTMxMzdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvOTlmYjZjOWEtY2UyOS00MWVlLWE0
YWQtM2RlZTNmNzk3MGE0Lzk5ZmI2YzlhLWNlMjktNDFlZS1hNGFkLTNkZWUzZjc5
NzBhNC5jcmwwHwYDVR0jBBgwFoAUZSJlk/hhOWSY4nrlbMI1s/Z+WzUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS85OWZiNmM5YS1jZTI5LTQxZWUtYTRhZC0zZGVl
M2Y3OTcwYTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj9+AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFyKXd+z5cv9e1nFA9JytM8yszwaFz5mj7oMdmUihZSdeMzdIqGHT9/a
LrS7I+KieC3jL/6r9fHuwu4e17EqUI0e5xloy+pUIvEttsAMVfn6fuGBrrlTlJx7
Id0Ly7CCPUR4uHMp624fsoluBMAT9Khrp1+VeozWz1J4OQdsSOsRrvY9m5QjRkmX
EOcj6p04p3AOEQDef5gEcImpJNQy+kk50FDFl3fdKZJHYDEAmB6YzFI3fTXKSmOM
uZOiGsSenGgLopXADqJu5jEOJJnfOFM4FHF4SPCsf77VMvgUsZgcVLnhMIS+RV8y
qHcYl6/ABfJf+vNJM8G4WiXi2pOYm/4=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:43:07 2025 by rpki-client