Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
File:                     9e38af58-44dc-3d4d-8374-4dcd32e76092.roa (raw, json)
Hash identifier:          L0TgN5SjoGfYk4RuWoAVs7Z+vUU8l3riSxvqAk+MfMI=
Subject key identifier:   5D:32:A1:BB:32:E2:CF:49:54:6D:92:55:A8:C8:16:9B:F8:8D:FE:C4
Certificate issuer:       /CN=22f50b3c-0004-4753-bb50-b088e784de4e
Certificate serial:       010D0C9F43285849D42FA938419183D9B3DA4C1E
Authority key identifier: D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     16509
IP address blocks:        158.51.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a9:38:41:91:83:d9:b3:da:4c:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22f50b3c-0004-4753-bb50-b088e784de4e
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=b8e9d677-fc33-473b-be9b-2cfeab099018
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:68:5c:ab:00:ab:db:00:e0:57:20:f7:36:2e:
                    9a:79:3d:48:0c:2d:bf:82:6a:85:30:5d:be:c5:03:
                    26:34:d3:17:1f:c5:e9:21:24:5e:b2:a4:e6:13:3a:
                    f0:4c:c2:4c:1e:e7:ef:46:c4:ca:e1:30:8f:38:7f:
                    7e:b6:9c:a9:c5:e8:37:d3:56:35:ca:a8:8a:89:32:
                    3f:84:76:07:b3:71:1e:65:f4:a5:67:76:3b:6a:f6:
                    3e:2e:ec:12:f5:cc:8e:90:d0:36:ce:28:60:de:a9:
                    ce:e6:9a:d0:71:5d:6c:b5:6b:b9:e4:64:02:5d:35:
                    7b:8e:6a:84:aa:bb:06:ca:37:78:d0:54:34:3d:2a:
                    08:2d:8c:88:5f:63:e2:6e:f3:3a:3d:2d:39:6f:3d:
                    56:c3:ba:1b:b0:9e:82:87:93:9a:e0:27:2f:bb:2e:
                    60:f0:5c:24:dc:4d:0a:8f:6a:2e:15:7c:da:92:fc:
                    57:f5:d1:40:2f:a4:52:20:f8:a9:37:6b:33:38:77:
                    34:ca:1a:c2:de:77:ba:d6:16:5d:ec:63:d1:63:55:
                    e8:46:9a:6b:ae:24:ad:f9:dc:13:b7:8a:c0:85:9e:
                    64:9a:8e:5b:b4:54:37:12:5d:27:a4:7f:15:00:2f:
                    26:6a:e5:5e:6b:81:fb:e7:cc:cb:22:5f:0c:e3:00:
                    7f:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:32:A1:BB:32:E2:CF:49:54:6D:92:55:A8:C8:16:9B:F8:8D:FE:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/9e38af58-44dc-3d4d-8374-4dcd32e76092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e/22f50b3c-0004-4753-bb50-b088e784de4e.crl

            X509v3 Authority Key Identifier:
                keyid:D1:9F:9C:2E:66:BE:43:21:95:4A:AA:9D:14:F8:1E:63:F4:4E:4D:57

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/22f50b3c-0004-4753-bb50-b088e784de4e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:bd:61:aa:71:24:15:4b:b0:a0:fe:e0:f6:8f:eb:02:51:12:
         a2:8b:1f:26:6e:de:3f:55:21:95:5c:47:26:30:b4:a9:e2:d7:
         d2:b4:ac:eb:30:20:18:b8:af:8b:b4:4d:08:d0:ee:70:26:e0:
         9a:53:c1:18:c0:f4:3d:c7:88:95:ee:bf:ad:56:48:d0:86:02:
         3c:68:7e:84:81:84:ab:7a:f7:b0:c4:16:27:2a:99:4b:6c:ee:
         bf:e8:38:05:f5:d0:50:44:73:98:2b:a7:25:55:57:50:c6:dc:
         22:6d:65:3e:e8:45:ca:f4:8b:fe:50:88:b9:a9:80:76:e9:f4:
         74:f4:f4:0d:fe:6d:28:af:66:f7:e7:ee:36:e9:97:4d:e6:53:
         fc:33:63:08:a8:49:24:fc:2a:03:bd:7a:1a:ba:99:df:bf:a8:
         a5:ff:00:2a:1a:60:0f:bf:30:d6:9f:78:b9:e7:fc:79:f7:b6:
         db:ae:5e:e7:8e:ed:9b:fc:71:84:19:b7:0e:3c:75:fe:05:48:
         4c:11:47:5c:62:d5:ca:b1:ed:21:00:ce:7a:78:9b:0e:6f:86:
         a3:6f:16:72:3f:84:65:4f:93:b3:d7:7f:29:36:7a:7f:64:1f:
         29:f6:30:29:04:8e:b1:7a:21:72:8c:99:eb:e3:1b:af:2e:02:
         df:a1:39:ef
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6k4QZGD2bPaTB4wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJmNTBiM2MtMDAwNC00NzUzLWJiNTAtYjA4OGU3ODRk
ZTRlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YjhlOWQ2NzctZmMzMy00NzNiLWJlOWItMmNmZWFiMDk5MDE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2hcqwCr2wDgVyD3Ni6aeT1IDC2/gmqFMF2+
xQMmNNMXH8XpISResqTmEzrwTMJMHufvRsTK4TCPOH9+tpypxeg301Y1yqiKiTI/
hHYHs3EeZfSlZ3Y7avY+LuwS9cyOkNA2zihg3qnO5prQcV1stWu55GQCXTV7jmqE
qrsGyjd40FQ0PSoILYyIX2PibvM6PS05bz1Ww7obsJ6Ch5Oa4Ccvuy5g8Fwk3E0K
j2ouFXzakvxX9dFAL6RSIPipN2szOHc0yhrC3ne61hZd7GPRY1XoRpprriSt+dwT
t4rAhZ5kmo5btFQ3El0npH8VAC8mauVea4H758zLIl8M4wB/tQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFF0yobsy4s9JVG2SVajIFpv4jf7EMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1
MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4ZTc4NGRlNGUvOWUzOGFmNTgtNDRkYy0z
ZDRkLTgzNzQtNGRjZDMyZTc2MDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjJmNTBiM2MtMDAwNC00NzUzLWJi
NTAtYjA4OGU3ODRkZTRlLzIyZjUwYjNjLTAwMDQtNDc1My1iYjUwLWIwODhlNzg0
ZGU0ZS5jcmwwHwYDVR0jBBgwFoAU0Z+cLma+QyGVSqqdFPgeY/ROTVcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMmY1MGIzYy0wMDA0LTQ3NTMtYmI1MC1iMDg4
ZTc4NGRlNGUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnjMJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABm9YapxJBVLsKD+4PaP6wJREqKLHyZu3j9VIZVcRyYwtKni19K0rOsw
IBi4r4u0TQjQ7nAm4JpTwRjA9D3HiJXuv61WSNCGAjxofoSBhKt697DEFicqmUts
7r/oOAX10FBEc5grpyVVV1DG3CJtZT7oRcr0i/5QiLmpgHbp9HT09A3+bSivZvfn
7jbpl03mU/wzYwioSST8KgO9ehq6md+/qKX/ACoaYA+/MNafeLnn/Hn3ttuuXueO
7Zv8cYQZtw48df4FSEwRR1xi1cqx7SEAznp4mw5vhqNvFnI/hGVPk7PXfyk2en9k
Hyn2MCkEjrF6IXKMmevjG68uAt+hOe8=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:19 2025 by rpki-client