Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
File:                     e48c52b2-2e37-3655-95b9-536384cb2c6d.roa (raw, json)
Hash identifier:          ObJiyvZM5HMVcgubDi2io+s8XqP4ZaAjaTo1sHT0yRA=
Subject key identifier:   13:91:FC:A1:1A:E9:99:CF:B9:8B:FD:6B:40:32:DA:A2:82:07:AF:A7
Certificate issuer:       /CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
Certificate serial:       010D0C9F4328584A17EB02BA8D3186B55862DD40
Authority key identifier: 85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa
Signing time:             Thu 05 Jun 2025 19:17:52 +0000
ROA not before:           Thu 05 Jun 2025 19:17:52 +0000
ROA not after:            Wed 03 Sep 2025 19:17:52 +0000
asID:                     16509
IP address blocks:        207.241.144.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:eb:02:ba:8d:31:86:b5:58:62:dd:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3
        Validity
            Not Before: Jun  5 19:17:52 2025 GMT
            Not After : Sep  3 19:17:52 2025 GMT
        Subject: CN=664196cb-3857-47e9-8a9e-f44ab178452e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:0a:95:cd:89:29:2e:b2:9e:b2:82:cc:3b:7d:
                    9a:d0:17:a8:32:ae:71:f1:f5:95:99:e6:20:71:dd:
                    2c:f8:97:83:9a:49:7b:76:1e:99:55:d0:52:b5:2a:
                    c1:cf:dc:76:4e:23:ae:85:58:a9:f7:89:d7:f7:32:
                    0b:9f:7f:f5:75:56:5d:34:0b:5f:ce:77:d7:71:ed:
                    49:d0:1f:ce:2e:47:ef:f2:2d:a9:78:68:89:a4:41:
                    30:e6:8c:8e:2b:d2:56:d9:f5:52:c3:ac:3a:8c:1c:
                    2a:de:ec:8c:6e:6e:e1:87:07:e4:6c:a4:b5:ad:36:
                    3c:42:1f:05:86:28:a6:3f:af:48:eb:fa:f3:d7:25:
                    82:85:b9:61:62:1b:53:e8:7d:32:cf:47:18:5e:7c:
                    6f:59:99:5f:22:32:cc:2e:51:5e:9c:52:54:f5:9f:
                    42:f1:e7:19:55:6a:5a:7a:be:d5:c1:fb:54:b8:54:
                    d9:70:42:7b:e5:f0:f9:4c:49:7c:31:69:0a:04:35:
                    3e:98:73:e5:17:e3:5c:7a:f3:5d:7d:3e:9b:b8:f0:
                    9a:d4:71:18:da:bf:d5:29:88:58:c4:99:ef:b5:ae:
                    f9:3a:c7:4f:0a:fb:27:4c:1a:cc:6c:e4:f9:c8:d2:
                    91:69:0a:9a:7c:53:cb:d2:b1:fe:de:2d:95:22:cb:
                    ac:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:91:FC:A1:1A:E9:99:CF:B9:8B:FD:6B:40:32:DA:A2:82:07:AF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/e48c52b2-2e37-3655-95b9-536384cb2c6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.crl

            X509v3 Authority Key Identifier:
                keyid:85:EC:6D:C5:EB:8F:FD:22:C3:A2:35:E4:1A:A6:19:F2:0B:6F:3D:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/cdd5c578-2612-4b1a-8c4a-c12bc7c3a1e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.241.144.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:29:1f:c1:46:dc:0e:98:54:d0:c0:d7:75:4d:a8:40:9d:ba:
         37:e7:10:dc:72:59:dd:b3:e6:ef:52:2b:b0:5a:8a:1f:b2:8b:
         2e:70:b2:43:5b:80:e1:15:c3:6d:a5:59:39:ed:5f:9a:62:27:
         b3:f5:ed:c5:f8:35:47:e8:80:3e:70:75:13:18:0e:51:6a:5f:
         a6:9a:46:bb:3a:ca:9f:e2:84:4e:91:b5:fa:9a:eb:da:f5:1b:
         6b:af:3d:7d:fe:66:94:1b:2a:2f:bc:87:94:0a:f5:dd:d3:fb:
         eb:18:5b:8e:27:00:a2:7a:73:70:2b:6d:12:a0:d1:3f:e5:57:
         95:e4:a7:75:45:98:28:e6:74:49:39:b9:80:44:28:df:8c:50:
         ce:9a:69:df:30:68:f4:12:74:cd:19:28:78:3b:54:0e:1f:a7:
         9a:82:6a:1a:62:83:71:e8:e5:2d:e1:f4:12:2d:65:7b:9e:aa:
         2e:cc:1f:a5:2b:75:4a:6f:2f:66:5f:c5:6e:b1:d7:60:ee:a1:
         13:fe:8e:c6:2a:4f:4c:12:e6:b1:c6:75:53:b6:48:09:58:5e:
         98:c0:da:89:6f:b2:7a:78:6c:30:b7:28:2f:45:ee:c7:66:c1:
         3f:4f:76:05:72:fc:8b:d7:6b:a7:b8:fc:22:e7:46:35:81:61:
         aa:9f:0d:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoX6wK6jTGGtVhi3UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2RkNWM1NzgtMjYxMi00YjFhLThjNGEtYzEyYmM3YzNh
MWUzMB4XDTI1MDYwNTE5MTc1MloXDTI1MDkwMzE5MTc1MlowLzEtMCsGA1UEAxMk
NjY0MTk2Y2ItMzg1Ny00N2U5LThhOWUtZjQ0YWIxNzg0NTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlgqVzYkpLrKesoLMO32a0BeoMq5x8fWVmeYg
cd0s+JeDmkl7dh6ZVdBStSrBz9x2TiOuhVip94nX9zILn3/1dVZdNAtfznfXce1J
0B/OLkfv8i2peGiJpEEw5oyOK9JW2fVSw6w6jBwq3uyMbm7hhwfkbKS1rTY8Qh8F
hiimP69I6/rz1yWChblhYhtT6H0yz0cYXnxvWZlfIjLMLlFenFJU9Z9C8ecZVWpa
er7VwftUuFTZcEJ75fD5TEl8MWkKBDU+mHPlF+NcevNdfT6buPCa1HEY2r/VKYhY
xJnvta75OsdPCvsnTBrMbOT5yNKRaQqafFPL0rH+3i2VIsusNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBOR/KEa6ZnPuYv9a0Ay2qKCB6+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1
YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJiYzdjM2ExZTMvZTQ4YzUyYjItMmUzNy0z
NjU1LTk1YjktNTM2Mzg0Y2IyYzZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvY2RkNWM1NzgtMjYxMi00YjFhLThj
NGEtYzEyYmM3YzNhMWUzL2NkZDVjNTc4LTI2MTItNGIxYS04YzRhLWMxMmJjN2Mz
YTFlMy5jcmwwHwYDVR0jBBgwFoAUhextxeuP/SLDojXkGqYZ8gtvPRUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9jZGQ1YzU3OC0yNjEyLTRiMWEtOGM0YS1jMTJi
YzdjM2ExZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEz/GQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcpH8FG3A6YVNDA13VNqECdujfnENxyWd2z5u9SK7Baih+yiy5wskNb
gOEVw22lWTntX5piJ7P17cX4NUfogD5wdRMYDlFqX6aaRrs6yp/ihE6Rtfqa69r1
G2uvPX3+ZpQbKi+8h5QK9d3T++sYW44nAKJ6c3ArbRKg0T/lV5Xkp3VFmCjmdEk5
uYBEKN+MUM6aad8waPQSdM0ZKHg7VA4fp5qCahpig3Ho5S3h9BItZXueqi7MH6Ur
dUpvL2ZfxW6x12DuoRP+jsYqT0wS5rHGdVO2SAlYXpjA2olvsnp4bDC3KC9F7sdm
wT9PdgVy/IvXa6e4/CLnRjWBYaqfDd0=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:47:33 2025 by rpki-client