Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa
File:                     bb934193-35d7-39e0-92e0-ab84555335f4.roa (raw, json)
Hash identifier:          cPGu8TcSCEQRcM+/PyyBJmRE+Ud7DM1pLUO4921V39I=
Subject key identifier:   0E:FD:CE:0F:6B:02:9B:1A:4F:4B:E5:EB:1E:92:B4:2D:5C:7A:9A:06
Certificate issuer:       /CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
Certificate serial:       010D0C9F4328584A5CFB1D33D5ECE32CDE150720
Authority key identifier: AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa
Signing time:             Mon 30 Jun 2025 13:01:03 +0000
ROA not before:           Mon 30 Jun 2025 13:01:03 +0000
ROA not after:            Sun 28 Sep 2025 13:01:03 +0000
asID:                     14277
IP address blocks:        65.50.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5c:fb:1d:33:d5:ec:e3:2c:de:15:07:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2d9e57fb-3954-4c2b-a596-a001c34d23dd
        Validity
            Not Before: Jun 30 13:01:03 2025 GMT
            Not After : Sep 28 13:01:03 2025 GMT
        Subject: CN=fa753b7c-8036-4b18-9a57-09af05924635
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:9f:3f:e0:74:64:1e:c1:d8:b0:0c:7d:a9:ce:
                    9e:ed:a4:41:1e:c0:67:dd:60:f0:25:32:6f:90:ee:
                    9c:71:21:25:a3:87:e9:f3:f1:44:b3:38:cf:d9:4f:
                    08:37:d4:0f:43:4a:5c:42:22:68:52:87:85:9f:04:
                    b3:6d:a7:0c:c3:94:50:26:ba:5c:0e:22:bc:65:ef:
                    84:bc:80:06:41:15:d4:ea:47:12:ac:63:34:16:a8:
                    a6:ef:af:8c:97:2a:b5:04:64:47:a1:19:58:9e:23:
                    19:99:98:c1:e4:de:7e:6d:06:2f:b6:59:83:2f:26:
                    70:21:df:f4:a7:2b:de:8e:cd:28:e2:c7:3f:67:9e:
                    a8:e6:35:e9:82:18:e8:3c:8b:0b:58:42:ee:6a:6b:
                    88:3c:56:6d:4c:3e:36:7c:37:03:eb:ce:b9:68:38:
                    3a:48:1b:98:de:d1:1c:de:eb:ad:2d:e1:c9:f8:e5:
                    c4:83:ce:89:ad:7a:a0:80:9b:a7:03:72:64:fb:43:
                    a8:2e:1c:7d:d6:01:95:1b:80:bb:4f:ba:5e:d8:8f:
                    a9:ad:c5:86:c8:cd:cf:b1:90:77:31:8c:a0:00:f8:
                    92:1a:66:cd:86:75:c5:8c:96:0e:44:9b:78:bd:34:
                    70:11:b5:a2:73:b4:7f:c9:31:30:70:ef:c3:cc:99:
                    1d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:FD:CE:0F:6B:02:9B:1A:4F:4B:E5:EB:1E:92:B4:2D:5C:7A:9A:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/bb934193-35d7-39e0-92e0-ab84555335f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd/2d9e57fb-3954-4c2b-a596-a001c34d23dd.crl

            X509v3 Authority Key Identifier:
                keyid:AC:6F:B2:EE:A2:5B:AD:3F:68:7E:B8:71:62:66:7B:23:BB:C2:18:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/2d9e57fb-3954-4c2b-a596-a001c34d23dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.50.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:f4:1e:3e:f0:e9:93:74:44:58:37:ce:88:75:c7:d4:7d:5f:
         5b:86:35:ff:75:e0:b1:32:b1:d0:32:96:d7:f3:92:be:fc:ee:
         92:fd:41:f5:40:7b:02:64:e4:70:a4:19:ee:96:2b:12:29:3f:
         56:ac:f6:29:44:90:58:9b:1b:80:ab:10:bf:01:04:d8:72:54:
         ba:35:0d:a4:64:d2:ce:7f:0b:52:0c:60:e0:42:df:87:96:eb:
         52:f4:ce:ad:5f:54:87:67:12:7d:8a:4c:1f:8a:9e:a0:ae:cd:
         46:de:c4:41:1d:26:86:eb:4f:32:82:16:29:fd:db:08:03:da:
         5c:47:5d:f8:0a:20:53:56:70:d2:4f:8a:a5:4f:df:46:41:a9:
         cb:32:34:ab:9c:e2:2b:42:38:0c:13:ac:91:f3:d7:d3:64:6c:
         1b:0a:d1:e7:d8:6b:aa:19:e1:f5:50:22:6a:11:0d:b6:14:34:
         bf:c3:40:c1:29:ea:d1:70:b6:25:b9:1c:03:21:d4:1d:1c:e4:
         20:00:fe:76:75:99:36:8d:cd:83:71:e8:cc:ec:40:d4:24:6d:
         5b:7c:95:6b:88:03:e4:d4:4a:ef:74:cd:ec:26:74:32:a0:22:
         f8:f8:3c:25:12:5f:97:8d:8e:2a:7f:85:59:f0:4c:d1:04:1b:
         cb:01:20:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpc+x0z1ezjLN4VByAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmQ5ZTU3ZmItMzk1NC00YzJiLWE1OTYtYTAwMWMzNGQy
M2RkMB4XDTI1MDYzMDEzMDEwM1oXDTI1MDkyODEzMDEwM1owLzEtMCsGA1UEAxMk
ZmE3NTNiN2MtODAzNi00YjE4LTlhNTctMDlhZjA1OTI0NjM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoZ8/4HRkHsHYsAx9qc6e7aRBHsBn3WDwJTJv
kO6ccSElo4fp8/FEszjP2U8IN9QPQ0pcQiJoUoeFnwSzbacMw5RQJrpcDiK8Ze+E
vIAGQRXU6kcSrGM0Fqim76+Mlyq1BGRHoRlYniMZmZjB5N5+bQYvtlmDLyZwId/0
pyvejs0o4sc/Z56o5jXpghjoPIsLWELuamuIPFZtTD42fDcD6865aDg6SBuY3tEc
3uutLeHJ+OXEg86JrXqggJunA3Jk+0OoLhx91gGVG4C7T7pe2I+prcWGyM3PsZB3
MYygAPiSGmbNhnXFjJYORJt4vTRwEbWic7R/yTEwcO/DzJkdDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA79zg9rApsaT0vl6x6StC1cepoGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yZDll
NTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAxYzM0ZDIzZGQvYmI5MzQxOTMtMzVkNy0z
OWUwLTkyZTAtYWI4NDU1NTMzNWY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMmQ5ZTU3ZmItMzk1NC00YzJiLWE1
OTYtYTAwMWMzNGQyM2RkLzJkOWU1N2ZiLTM5NTQtNGMyYi1hNTk2LWEwMDFjMzRk
MjNkZC5jcmwwHwYDVR0jBBgwFoAUrG+y7qJbrT9ofrhxYmZ7I7vCGDAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yZDllNTdmYi0zOTU0LTRjMmItYTU5Ni1hMDAx
YzM0ZDIzZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCQTKQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/0Hj7w6ZN0RFg3zoh1x9R9X1uGNf914LEysdAyltfzkr787pL9QfVA
ewJk5HCkGe6WKxIpP1as9ilEkFibG4CrEL8BBNhyVLo1DaRk0s5/C1IMYOBC34eW
61L0zq1fVIdnEn2KTB+KnqCuzUbexEEdJobrTzKCFin92wgD2lxHXfgKIFNWcNJP
iqVP30ZBqcsyNKuc4itCOAwTrJHz19NkbBsK0efYa6oZ4fVQImoRDbYUNL/DQMEp
6tFwtiW5HAMh1B0c5CAA/nZ1mTaNzYNx6MzsQNQkbVt8lWuIA+TUSu90zewmdDKg
Ivj4PCUSX5eNjip/hVnwTNEEG8sBIKc=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:07:33 2025 by rpki-client