Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e2b6fa7-7af4-312a-b0ef-53e7e37ecd98.roa
File:                     2e2b6fa7-7af4-312a-b0ef-53e7e37ecd98.roa (raw, json)
Hash identifier:          8SgYRUWLFuYIeJt8n4qsT+OBCmg9FQC6ZVsKgVzvniQ=
Subject key identifier:   F2:5C:AA:FF:0F:2F:9C:7A:F7:29:50:85:8C:BE:66:E7:27:74:3D:BE
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089E645FE7FC4616CD3BB00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e2b6fa7-7af4-312a-b0ef-53e7e37ecd98.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.219.240.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:e6:45:fe:7f:c4:61:6c:d3:bb:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=ee2feeb5-7b83-408d-870c-1ceca322407d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f2:92:c7:87:6e:84:81:cd:0b:29:47:61:b8:
                    a9:2e:7f:7a:45:8c:47:56:91:5e:db:a8:5d:e1:86:
                    73:00:6e:4f:b6:b8:d3:2b:79:22:0d:86:b8:9b:81:
                    9e:f1:45:75:8f:b5:a2:23:54:44:6a:1c:df:02:fe:
                    9d:6b:64:08:38:d4:c0:37:98:20:a9:eb:ef:d3:6b:
                    14:24:b0:50:74:df:16:0c:b6:75:94:69:e1:22:ff:
                    85:8a:6a:6d:07:48:e6:99:f8:c2:e8:d2:aa:f3:be:
                    c0:12:a9:c7:b5:de:57:84:7c:53:12:89:f3:d4:d3:
                    14:61:77:4f:50:95:ad:8c:f3:72:62:86:da:79:2a:
                    c2:9a:c1:fa:94:89:75:34:fc:72:0c:96:bf:7b:09:
                    af:06:63:94:c4:bb:b9:24:08:e1:48:40:85:8d:c3:
                    82:75:6a:b5:9e:0a:d7:1d:c4:b8:a2:da:1c:80:ac:
                    39:02:e3:b2:db:a6:7b:ea:ae:6e:bd:08:7f:e5:c7:
                    11:ae:85:43:14:da:48:6b:44:e5:9a:24:b3:70:9e:
                    07:bf:95:cc:fa:ed:84:4f:ea:37:8b:53:a7:4f:2b:
                    41:e0:0a:a7:45:3d:aa:81:f7:27:5a:f0:ed:4a:06:
                    db:85:ef:bf:6e:66:ba:a3:ed:15:a3:2e:61:47:60:
                    c3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:5C:AA:FF:0F:2F:9C:7A:F7:29:50:85:8C:BE:66:E7:27:74:3D:BE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/2e2b6fa7-7af4-312a-b0ef-53e7e37ecd98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.219.240.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:c0:a7:34:05:be:94:b2:b2:b1:33:cf:49:b7:17:9a:ee:01:
         3a:3f:f0:f8:00:2f:d0:5d:d0:4a:68:e1:66:a6:b8:ec:32:b5:
         15:31:62:d4:ce:b8:41:e8:35:4b:cc:fe:ed:49:71:b3:71:cb:
         18:8e:66:82:99:9b:7c:3c:9a:84:00:cd:7e:88:73:c8:cc:4f:
         25:cf:8a:f0:54:7f:b7:02:e6:4f:ed:31:37:1f:79:fd:a2:0e:
         02:fd:39:00:a8:27:5a:e4:12:a0:06:5e:6f:2c:11:78:b3:f2:
         b9:23:7c:06:ec:a7:11:be:40:f8:24:56:03:01:ea:5d:9f:8c:
         9d:2a:16:c0:15:c2:65:88:c8:e3:8f:26:d3:7f:25:7c:2d:78:
         f2:15:54:aa:60:4b:63:1c:71:82:c5:0a:a4:9c:3d:59:71:03:
         9f:7f:e0:8d:8f:53:5c:86:51:45:72:07:ab:e2:66:46:8f:61:
         fd:87:fa:d0:eb:40:86:10:da:01:39:e8:1c:30:41:5f:84:4f:
         37:c7:bc:9f:0d:32:d3:9c:f8:ce:84:1e:43:1d:51:c4:ab:49:
         41:fc:98:b1:8c:32:ae:c3:52:cc:03:76:ec:89:6d:5c:eb:02:
         16:dd:6f:fb:e4:5c:a1:dc:1d:c5:b3:15:4c:33:59:36:fb:3c:
         a1:42:1e:84
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgieZF/n/EYWzTuwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
ZWUyZmVlYjUtN2I4My00MDhkLTg3MGMtMWNlY2EzMjI0MDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2fKSx4duhIHNCylHYbipLn96RYxHVpFe26hd
4YZzAG5PtrjTK3kiDYa4m4Ge8UV1j7WiI1REahzfAv6da2QIONTAN5ggqevv02sU
JLBQdN8WDLZ1lGnhIv+FimptB0jmmfjC6NKq877AEqnHtd5XhHxTEonz1NMUYXdP
UJWtjPNyYobaeSrCmsH6lIl1NPxyDJa/ewmvBmOUxLu5JAjhSECFjcOCdWq1ngrX
HcS4otocgKw5AuOy26Z76q5uvQh/5ccRroVDFNpIa0TlmiSzcJ4Hv5XM+u2ET+o3
i1OnTytB4AqnRT2qgfcnWvDtSgbbhe+/bma6o+0Voy5hR2DDUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJcqv8PL5x69ylQhYy+ZucndD2+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvMmUyYjZmYTctN2FmNC0z
MTJhLWIwZWYtNTNlN2UzN2VjZDk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrtvwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJTApzQFvpSysrEzz0m3F5ruATo/8PgAL9Bd0Epo4WamuOwytRUxYtTO
uEHoNUvM/u1JcbNxyxiOZoKZm3w8moQAzX6Ic8jMTyXPivBUf7cC5k/tMTcfef2i
DgL9OQCoJ1rkEqAGXm8sEXiz8rkjfAbspxG+QPgkVgMB6l2fjJ0qFsAVwmWIyOOP
JtN/JXwtePIVVKpgS2MccYLFCqScPVlxA59/4I2PU1yGUUVyB6viZkaPYf2H+tDr
QIYQ2gE56BwwQV+ETzfHvJ8NMtOc+M6EHkMdUcSrSUH8mLGMMq7DUswDduyJbVzr
Ahbdb/vkXKHcHcWzFUwzWTb7PKFCHoQ=
-----END CERTIFICATE-----
Generated at Sun Apr 27 00:12:19 2025 by rpki-client