Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa
File:                     144db5ca-63fd-3501-9729-29848757d150.roa (raw, json)
Hash identifier:          nh2YiT6RgtumsR9BgRqsk37gyZje7YYfY3dfdeh2mcs=
Subject key identifier:   C5:E0:21:FC:AD:AF:11:8B:B8:00:65:32:35:56:6A:00:47:EC:A0:0C
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584A30503D8E789E0056BD6EFF40
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     22612
IP address blocks:        198.54.112.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:3d:8e:78:9e:00:56:bd:6e:ff:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=d30c8db5-2f27-4414-b50a-abf5bf35dd21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d5:50:7a:54:38:c4:10:46:ab:2c:5b:d3:73:
                    c0:93:cd:e0:18:9c:ab:3c:ba:43:39:46:2a:94:42:
                    ea:9d:b6:17:f2:ae:bc:e9:d8:ad:7e:9a:ca:95:53:
                    49:39:e4:2d:40:61:e2:5c:28:66:e9:04:85:49:4c:
                    90:81:32:e2:4c:b2:d8:15:7d:2f:16:fd:fb:20:79:
                    99:5b:51:64:1a:62:56:d9:e1:ed:8e:4b:9c:6c:9e:
                    69:22:a2:1c:0d:8a:16:b0:53:56:34:7b:c6:40:bb:
                    43:7f:db:c4:03:b6:eb:ab:ff:39:bd:7d:a1:a2:11:
                    34:05:12:0d:e4:08:14:52:ab:30:c7:46:cd:6f:86:
                    cb:a2:56:45:46:57:81:12:31:c7:82:2f:ff:3a:40:
                    c5:8c:ae:6d:e4:ac:81:21:a8:05:f4:e1:d1:b7:90:
                    a2:64:f7:d0:f1:dc:e7:5a:79:02:d5:d9:46:8e:45:
                    fb:85:bc:b7:77:d3:ea:7c:c8:75:e3:a3:a2:7d:2b:
                    6f:e6:21:ef:d4:ce:12:fa:5c:78:56:d0:47:c2:1d:
                    84:3f:33:f9:ea:b4:6f:06:cd:16:c3:09:15:92:d8:
                    15:f4:1c:24:cb:c5:6d:4b:0a:9a:07:33:0d:f6:02:
                    a7:c2:ae:51:35:9f:aa:b0:20:f5:5d:ce:ad:64:b7:
                    25:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:E0:21:FC:AD:AF:11:8B:B8:00:65:32:35:56:6A:00:47:EC:A0:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/144db5ca-63fd-3501-9729-29848757d150.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.54.112.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:ba:ab:b6:81:77:e0:bc:6e:75:b6:46:c3:f2:a9:83:46:e3:
         be:3b:bd:19:c0:22:42:c1:0c:2d:37:c0:3f:22:63:0f:c5:97:
         a0:77:09:f1:c7:95:e2:bf:d6:af:10:d5:f4:01:93:c4:df:86:
         93:bc:5b:1c:96:10:ae:19:4c:51:20:aa:20:2c:18:34:cf:23:
         35:97:79:49:57:e5:fa:86:2c:84:0e:b9:52:d3:4e:4c:f4:d4:
         be:98:3a:08:62:5c:ec:34:0e:0e:f6:d8:41:46:80:28:79:97:
         f8:a9:6c:97:93:ba:d7:a4:e5:6e:be:e9:18:c9:8f:5c:7f:40:
         34:60:46:0a:be:2b:c1:d9:82:3a:08:e9:45:ed:20:e5:21:5a:
         d0:d3:8d:fc:60:fd:5d:3b:75:0a:4c:78:96:d3:31:54:c4:01:
         cf:f5:ff:76:78:cd:13:0e:9b:e5:d0:fe:22:b8:e1:d0:70:f3:
         db:59:34:53:79:33:7a:e5:f6:32:39:ae:a7:27:b8:ea:b9:22:
         23:68:61:dd:ca:1f:c5:51:c3:93:4a:20:8e:39:82:53:85:31:
         f6:5c:a1:3d:43:41:72:58:6f:02:bf:eb:19:79:90:a5:51:57:
         7e:c3:c9:8e:70:92:6b:ea:27:b1:53:52:a1:84:cc:d0:93:55:
         2d:94:4c:d9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUD2OeJ4AVr1u/0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
ZDMwYzhkYjUtMmYyNy00NDE0LWI1MGEtYWJmNWJmMzVkZDIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0tVQelQ4xBBGqyxb03PAk83gGJyrPLpDOUYq
lELqnbYX8q686ditfprKlVNJOeQtQGHiXChm6QSFSUyQgTLiTLLYFX0vFv37IHmZ
W1FkGmJW2eHtjkucbJ5pIqIcDYoWsFNWNHvGQLtDf9vEA7brq/85vX2hohE0BRIN
5AgUUqswx0bNb4bLolZFRleBEjHHgi//OkDFjK5t5KyBIagF9OHRt5CiZPfQ8dzn
WnkC1dlGjkX7hby3d9PqfMh146OifStv5iHv1M4S+lx4VtBHwh2EPzP56rRvBs0W
wwkVktgV9Bwky8VtSwqaBzMN9gKnwq5RNZ+qsCD1Xc6tZLclgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXgIfytrxGLuABlMjVWagBH7KAMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvMTQ0ZGI1Y2EtNjNmZC0z
NTAxLTk3MjktMjk4NDg3NTdkMTUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQExjZwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMO6q7aBd+C8bnW2RsPyqYNG4747vRnAIkLBDC03wD8iYw/Fl6B3CfHH
leK/1q8Q1fQBk8TfhpO8WxyWEK4ZTFEgqiAsGDTPIzWXeUlX5fqGLIQOuVLTTkz0
1L6YOghiXOw0Dg722EFGgCh5l/ipbJeTutek5W6+6RjJj1x/QDRgRgq+K8HZgjoI
6UXtIOUhWtDTjfxg/V07dQpMeJbTMVTEAc/1/3Z4zRMOm+XQ/iK44dBw89tZNFN5
M3rl9jI5rqcnuOq5IiNoYd3KH8VRw5NKII45glOFMfZcoT1DQXJYbwK/6xl5kKVR
V37DyY5wkmvqJ7FTUqGEzNCTVS2UTNk=
-----END CERTIFICATE-----
Generated at Tue Jun 17 15:17:06 2025 by rpki-client