Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa
File:                     e27231ee-3601-343d-a7ed-8f7cf278493d.roa (raw, json)
Hash identifier:          +CAsZe7JjsYJXTUNBMA8iCFhbVU8ZHaUriZCyvkJ0Lw=
Subject key identifier:   9B:9D:E6:1C:DB:52:BA:E9:02:A0:DA:57:71:59:EF:D7:31:5C:B5:13
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849A089DF9EB38A88C22FF70C80
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa
Signing time:             Thu 24 Apr 2025 01:00:47 +0000
ROA not before:           Thu 24 Apr 2025 01:00:47 +0000
ROA not after:            Wed 23 Jul 2025 01:00:47 +0000
asID:                     6167
IP address blocks:        174.214.184.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 01 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a0:89:df:9e:b3:8a:88:c2:2f:f7:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Apr 24 01:00:47 2025 GMT
            Not After : Jul 23 01:00:47 2025 GMT
        Subject: CN=af96c5bc-81cb-4b74-9c17-8d555a6a0fdb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:8e:46:a6:74:5b:95:0f:50:ad:cb:75:69:dc:
                    ee:de:f1:6f:48:fd:84:09:c3:3e:26:a6:4a:03:7f:
                    6f:bd:3d:e7:97:a6:84:a4:c4:d9:ba:f5:8d:a7:81:
                    90:4f:04:f2:ab:78:5c:1f:d3:7d:bd:52:e5:db:9b:
                    04:da:b8:5f:d0:bd:08:08:f6:2e:dd:f3:f1:69:f9:
                    c0:b6:a8:04:51:3e:74:c0:e4:b6:46:85:bc:bd:a5:
                    78:12:2b:33:f4:c1:00:5b:a5:96:85:38:5a:28:26:
                    9e:58:09:9d:e8:7e:26:f1:06:15:09:46:35:1d:6e:
                    17:14:07:67:ed:e8:cc:ec:a3:38:e8:44:15:a9:d9:
                    97:1f:15:94:92:dd:ee:b0:b8:1a:35:85:8a:e2:7d:
                    db:c3:6b:4c:c0:49:ee:03:7b:7c:7d:b6:57:d1:27:
                    2f:65:f4:33:1c:c2:e6:9c:4c:a3:62:b0:05:80:7a:
                    87:e8:76:88:f4:c9:5c:07:c8:c5:8d:d1:2b:2c:16:
                    e8:d6:d9:96:f4:58:9a:26:47:cd:ac:57:34:2c:62:
                    49:fc:2a:44:3a:45:dc:ae:b5:00:04:ea:fd:60:f2:
                    79:c9:cf:08:e6:96:4e:c7:56:40:1a:57:2c:43:59:
                    05:87:f0:05:0a:d8:e2:8c:b0:8a:a1:dd:fd:26:d1:
                    48:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:9D:E6:1C:DB:52:BA:E9:02:A0:DA:57:71:59:EF:D7:31:5C:B5:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e27231ee-3601-343d-a7ed-8f7cf278493d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.214.184.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ed:ce:6f:d2:98:2a:03:d9:f3:47:28:06:c0:c2:21:89:1a:
         76:31:30:02:98:36:c6:54:f7:c0:07:31:44:c7:c9:70:f7:73:
         54:1c:b1:f9:a4:4c:d9:1d:9c:e0:aa:8d:e2:23:52:01:58:2a:
         44:9e:29:03:c0:fa:32:66:27:f6:cb:a9:c9:c2:9b:f5:a6:9b:
         5a:17:3e:c5:60:93:50:be:24:82:80:d1:8c:4b:e6:3e:85:4f:
         cd:a7:f4:52:27:bd:92:d0:fb:42:92:b5:56:fd:16:1e:b2:f0:
         8e:7e:0f:2a:19:03:22:b0:ba:7b:f0:12:05:71:84:8b:17:9a:
         97:a8:80:dc:bb:f5:40:64:0e:16:68:13:8b:22:c0:a8:48:7d:
         44:45:27:35:ff:4a:a9:54:b3:0d:82:38:3d:ae:f5:cd:0b:06:
         77:65:b4:77:3e:32:c4:e1:22:10:bd:bd:69:e7:04:7f:09:97:
         01:9e:e4:41:f8:0f:e9:ad:dc:d6:52:6f:a1:3c:61:6b:9a:21:
         38:08:d4:02:ca:ee:6f:44:73:5f:50:48:54:c0:c6:35:b0:88:
         3e:0d:0d:44:2c:9a:bb:67:fb:68:9b:85:9e:6d:01:91:0d:49:
         44:06:db:99:76:8d:a6:b5:f8:90:eb:39:0c:b8:69:c9:10:81:
         7d:ac:55:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmgid+es4qIwi/3DIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDQyNDAxMDA0N1oXDTI1MDcyMzAxMDA0N1owLzEtMCsGA1UEAxMk
YWY5NmM1YmMtODFjYi00Yjc0LTljMTctOGQ1NTVhNmEwZmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoI5GpnRblQ9Qrct1adzu3vFvSP2ECcM+JqZK
A39vvT3nl6aEpMTZuvWNp4GQTwTyq3hcH9N9vVLl25sE2rhf0L0ICPYu3fPxafnA
tqgEUT50wOS2RoW8vaV4Eisz9MEAW6WWhThaKCaeWAmd6H4m8QYVCUY1HW4XFAdn
7ejM7KM46EQVqdmXHxWUkt3usLgaNYWK4n3bw2tMwEnuA3t8fbZX0ScvZfQzHMLm
nEyjYrAFgHqH6HaI9MlcB8jFjdErLBbo1tmW9FiaJkfNrFc0LGJJ/CpEOkXcrrUA
BOr9YPJ5yc8I5pZOx1ZAGlcsQ1kFh/AFCtjijLCKod39JtFIwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJud5hzbUrrpAqDaV3FZ79cxXLUTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTI3MjMxZWUtMzYwMS0z
NDNkLWE3ZWQtOGY3Y2YyNzg0OTNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDrta4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADXtzm/SmCoD2fNHKAbAwiGJGnYxMAKYNsZU98AHMUTHyXD3c1Qcsfmk
TNkdnOCqjeIjUgFYKkSeKQPA+jJmJ/bLqcnCm/Wmm1oXPsVgk1C+JIKA0YxL5j6F
T82n9FInvZLQ+0KStVb9Fh6y8I5+DyoZAyKwunvwEgVxhIsXmpeogNy79UBkDhZo
E4siwKhIfURFJzX/SqlUsw2COD2u9c0LBndltHc+MsThIhC9vWnnBH8JlwGe5EH4
D+mt3NZSb6E8YWuaITgI1ALK7m9Ec19QSFTAxjWwiD4NDUQsmrtn+2ibhZ5tAZEN
SUQG25l2jaa1+JDrOQy4ackQgX2sVZU=
-----END CERTIFICATE-----
Generated at Wed Apr 30 22:18:04 2025 by rpki-client