Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa
File:                     6fdde3c9-47a8-3cba-bc21-219b161432bf.roa (raw, json)
Hash identifier:          a2QsLGkJ2cTlG83mnml8Kmsz8043YhJJu9Fz51mNJPw=
Subject key identifier:   D3:44:11:02:36:4F:5B:38:7D:F6:70:ED:A7:C5:7E:5B:E8:F0:54:54
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F4328584A00DAF15E5D7F583CFF8BB080
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     22394
IP address blocks:        141.207.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:f1:5e:5d:7f:58:3c:ff:8b:b0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=bc676db2-9ebc-44c3-a705-4baded182079
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:8d:4f:e9:b5:f2:52:ef:98:02:27:9a:fc:83:
                    ff:8a:80:c9:8c:98:6a:13:07:b9:be:87:e0:d6:84:
                    03:b8:7d:f9:06:32:f5:c3:b3:62:5a:6c:51:4f:41:
                    62:8b:ea:99:59:8f:2c:95:78:8e:cb:30:f4:c6:6b:
                    38:71:3c:bc:69:18:ac:0b:aa:b6:25:39:8a:f4:b4:
                    52:ba:3c:36:c2:4a:cb:3d:ab:00:b5:4e:21:d8:00:
                    de:7b:13:53:ca:fd:48:9a:71:cb:1c:70:31:ff:c8:
                    9f:e9:2d:d9:0f:db:36:c4:9b:ec:66:5c:34:fe:d5:
                    81:bb:7d:56:d2:8f:6c:16:0e:de:2b:8c:fb:1e:32:
                    a7:19:59:6a:9f:97:76:12:8d:bf:75:38:d4:ec:6f:
                    b8:10:d6:8f:fe:f8:8d:cf:1a:e5:1d:f5:54:cc:90:
                    e7:26:cb:f8:af:d3:52:70:31:2d:e2:c7:77:89:a2:
                    83:3a:b6:0d:6c:06:62:7e:3c:52:ef:ae:11:32:2a:
                    cf:76:e6:f1:2f:7e:94:32:4b:44:4e:59:48:a2:6d:
                    f5:16:b8:44:1d:2d:72:7f:ce:fb:d2:11:e4:70:3b:
                    8b:09:93:bc:b3:06:75:86:47:3f:fb:ab:f2:7d:e5:
                    12:26:6f:77:71:e1:3c:e4:57:e8:2c:59:82:1f:e3:
                    58:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:44:11:02:36:4F:5B:38:7D:F6:70:ED:A7:C5:7E:5B:E8:F0:54:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6fdde3c9-47a8-3cba-bc21-219b161432bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.207.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:b8:35:14:46:0f:c6:47:8c:6e:86:fb:68:1c:8f:ba:52:57:
         77:d9:70:b6:47:ef:df:13:ce:15:f7:5b:25:ff:8c:be:85:be:
         ef:52:9b:e6:a2:cb:6e:24:c3:d5:00:c0:d6:d1:96:2b:e4:ec:
         b0:5d:04:ac:4f:71:41:6b:62:69:06:66:e4:df:57:04:f8:b6:
         17:9a:6e:7c:33:e4:79:6e:c2:5f:ad:8e:48:89:cd:91:d1:5f:
         82:87:ab:08:78:9f:2c:a3:6c:c4:e4:2e:19:f2:66:6c:cf:c6:
         f5:e2:7b:16:17:81:34:4b:10:08:4d:8b:1c:ae:0a:d9:18:64:
         38:84:4c:de:fe:f4:4a:c9:8d:4c:a1:8f:b4:a6:91:66:89:bf:
         54:3c:8f:e9:b7:79:4b:68:98:ee:7d:23:76:1c:4d:e6:4e:e8:
         3d:c6:03:f1:34:5f:4d:2d:b7:e1:36:f4:e2:34:2b:13:46:c2:
         30:25:5f:ad:ad:4b:ba:51:57:c4:89:6c:a5:47:a0:fe:55:52:
         8a:4a:df:19:99:4a:63:e8:37:89:01:00:a7:0d:9b:be:96:1c:
         43:eb:04:7c:cf:92:20:69:d4:e4:bb:07:51:90:66:9a:a6:44:
         08:bf:4f:04:bd:f9:d2:75:e1:c8:58:f1:90:9b:02:69:53:24:
         d2:cf:d6:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2vFeXX9YPP+LsIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YmM2NzZkYjItOWViYy00NGMzLWE3MDUtNGJhZGVkMTgyMDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnY1P6bXyUu+YAiea/IP/ioDJjJhqEwe5vofg
1oQDuH35BjL1w7NiWmxRT0Fii+qZWY8slXiOyzD0xms4cTy8aRisC6q2JTmK9LRS
ujw2wkrLPasAtU4h2ADeexNTyv1ImnHLHHAx/8if6S3ZD9s2xJvsZlw0/tWBu31W
0o9sFg7eK4z7HjKnGVlqn5d2Eo2/dTjU7G+4ENaP/viNzxrlHfVUzJDnJsv4r9NS
cDEt4sd3iaKDOrYNbAZifjxS764RMirPdubxL36UMktETllIom31FrhEHS1yf877
0hHkcDuLCZO8swZ1hkc/+6vyfeUSJm93ceE85FfoLFmCH+NYWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNNEEQI2T1s4ffZw7afFflvo8FRUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmZkZGUzYzktNDdhOC0z
Y2JhLWJjMjEtMjE5YjE2MTQzMmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjc+MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACq4NRRGD8ZHjG6G+2gcj7pSV3fZcLZH798TzhX3WyX/jL6Fvu9Sm+ai
y24kw9UAwNbRlivk7LBdBKxPcUFrYmkGZuTfVwT4theabnwz5Hluwl+tjkiJzZHR
X4KHqwh4nyyjbMTkLhnyZmzPxvXiexYXgTRLEAhNixyuCtkYZDiETN7+9ErJjUyh
j7SmkWaJv1Q8j+m3eUtomO59I3YcTeZO6D3GA/E0X00tt+E29OI0KxNGwjAlX62t
S7pRV8SJbKVHoP5VUopK3xmZSmPoN4kBAKcNm76WHEPrBHzPkiBp1OS7B1GQZpqm
RAi/TwS9+dJ14chY8ZCbAmlTJNLP1ts=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:04:49 2025 by rpki-client