Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa
File:                     cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa (raw, json)
Hash identifier:          fw5hchVLX6tDPLNz5CqW2r4LgjCuBRYGbV5sIlFIhLc=
Subject key identifier:   D2:E4:B6:ED:FF:D9:BA:65:B5:DA:7C:29:5C:BB:21:A8:0D:63:DE:FC
Certificate issuer:       /CN=884cb4e5-9de7-4280-8805-857b1b768548
Certificate serial:       010D0C9F4328584A1035436D464967BCF3943F00
Authority key identifier: 2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa
Signing time:             Tue 03 Jun 2025 01:00:50 +0000
ROA not before:           Tue 03 Jun 2025 01:00:50 +0000
ROA not after:            Mon 01 Sep 2025 01:00:50 +0000
asID:                     2152
IP address blocks:        137.164.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:10:35:43:6d:46:49:67:bc:f3:94:3f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=884cb4e5-9de7-4280-8805-857b1b768548
        Validity
            Not Before: Jun  3 01:00:50 2025 GMT
            Not After : Sep  1 01:00:50 2025 GMT
        Subject: CN=4667fc48-a83d-4ce2-a55a-570a13711a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:0d:d4:af:2f:5c:1e:8f:44:2a:00:b4:df:fc:
                    97:29:6b:ab:99:46:58:2e:f7:05:57:4d:30:df:1d:
                    44:3e:33:13:7a:a4:bc:6e:77:81:47:0a:39:b9:c5:
                    42:87:43:3d:5c:a4:a1:5d:9b:fb:4e:a4:4d:a1:fe:
                    d9:d9:1b:40:08:dd:47:19:df:32:88:70:4d:1d:81:
                    c1:7f:e1:7b:cd:42:42:af:c9:cd:6f:b2:98:65:ab:
                    1d:04:fb:b4:71:6c:de:d7:30:00:79:aa:06:52:8e:
                    88:ee:d9:d9:15:d1:1a:fd:76:0c:ee:30:0b:07:0d:
                    d7:2c:cd:0d:91:5b:19:83:0f:5c:16:cc:51:95:6b:
                    b4:c3:92:2c:78:54:c4:ae:6b:64:ed:ce:c9:20:27:
                    34:a5:42:38:16:11:55:b3:21:93:a8:a9:a1:5f:af:
                    52:b2:f7:6e:68:66:e3:c0:c0:cd:4d:44:10:d9:36:
                    c0:82:43:87:e5:7a:59:8b:74:07:3f:74:e4:69:22:
                    96:a9:04:5c:aa:5c:81:2e:7c:9e:0f:7e:91:f6:af:
                    d9:79:7c:5b:5b:09:2c:af:e9:f2:21:6e:54:e9:82:
                    b5:c4:1c:35:d0:c2:47:72:00:4a:a3:60:d3:c8:2d:
                    0b:07:46:4a:49:f4:5b:d3:9f:73:b6:b6:3e:dc:f4:
                    25:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E4:B6:ED:FF:D9:BA:65:B5:DA:7C:29:5C:BB:21:A8:0D:63:DE:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/cfad5893-ec8c-3a46-bbd7-14e6ccc77a53.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548/884cb4e5-9de7-4280-8805-857b1b768548.crl

            X509v3 Authority Key Identifier:
                keyid:2E:77:E8:15:05:C9:56:4F:2E:1B:DB:D2:21:83:0C:CD:27:FD:7C:B8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/884cb4e5-9de7-4280-8805-857b1b768548.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  137.164.16.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:af:42:f3:b9:87:c5:cd:d7:ff:b1:00:48:17:8b:db:07:cf:
         aa:aa:00:db:3c:27:af:e2:e1:1f:9b:78:14:cf:01:f2:75:12:
         71:b9:f2:c5:f4:7b:e4:00:90:40:8b:5d:c5:d3:22:44:a0:02:
         85:3e:2d:e1:5d:03:f9:5a:75:be:1a:65:c2:cc:cb:1f:4d:41:
         0d:90:4c:e2:46:bc:2e:f2:ca:18:b2:94:5b:16:60:d4:ef:b7:
         0a:dc:3b:c5:b6:e4:f9:bf:9d:b4:fe:c4:0f:b5:1c:50:51:09:
         c9:46:29:6c:ae:fd:35:16:88:29:3c:12:c9:dd:00:4b:f1:0d:
         fa:5b:e5:7d:fb:ac:5e:8e:cf:f4:86:2d:c6:71:ad:c5:ed:c4:
         68:c6:01:c3:45:5d:8e:e4:b9:39:92:c7:d5:85:f6:f8:4e:42:
         62:da:2d:37:fe:de:1e:a1:3d:ed:00:64:ce:51:7d:1b:20:8a:
         eb:23:0a:66:11:19:fc:dd:d1:3e:bd:96:35:b1:9f:bb:76:48:
         5c:6f:75:4e:db:c9:0e:7f:73:d6:81:97:33:97:d1:d4:82:ba:
         0e:e6:0f:46:66:59:1b:9f:73:da:54:da:3f:73:40:d5:66:74:
         85:b4:aa:b1:07:d3:f3:1b:94:71:05:48:81:5a:e2:2a:40:a1:
         f3:15:be:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoQNUNtRklnvPOUPwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODg0Y2I0ZTUtOWRlNy00MjgwLTg4MDUtODU3YjFiNzY4
NTQ4MB4XDTI1MDYwMzAxMDA1MFoXDTI1MDkwMTAxMDA1MFowLzEtMCsGA1UEAxMk
NDY2N2ZjNDgtYTgzZC00Y2UyLWE1NWEtNTcwYTEzNzExYTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApQ3Ury9cHo9EKgC03/yXKWurmUZYLvcFV00w
3x1EPjMTeqS8bneBRwo5ucVCh0M9XKShXZv7TqRNof7Z2RtACN1HGd8yiHBNHYHB
f+F7zUJCr8nNb7KYZasdBPu0cWze1zAAeaoGUo6I7tnZFdEa/XYM7jALBw3XLM0N
kVsZgw9cFsxRlWu0w5IseFTErmtk7c7JICc0pUI4FhFVsyGTqKmhX69SsvduaGbj
wMDNTUQQ2TbAgkOH5XpZi3QHP3TkaSKWqQRcqlyBLnyeD36R9q/ZeXxbWwksr+ny
IW5U6YK1xBw10MJHcgBKo2DTyC0LB0ZKSfRb059ztrY+3PQlWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNLktu3/2bpltdp8KVy7IagNY978MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84ODRj
YjRlNS05ZGU3LTQyODAtODgwNS04NTdiMWI3Njg1NDgvY2ZhZDU4OTMtZWM4Yy0z
YTQ2LWJiZDctMTRlNmNjYzc3YTUzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODg0Y2I0ZTUtOWRlNy00MjgwLTg4
MDUtODU3YjFiNzY4NTQ4Lzg4NGNiNGU1LTlkZTctNDI4MC04ODA1LTg1N2IxYjc2
ODU0OC5jcmwwHwYDVR0jBBgwFoAULnfoFQXJVk8uG9vSIYMMzSf9fLgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84ODRjYjRlNS05ZGU3LTQyODAtODgwNS04NTdi
MWI3Njg1NDguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiaQQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACavQvO5h8XN1/+xAEgXi9sHz6qqANs8J6/i4R+beBTPAfJ1EnG58sX0
e+QAkECLXcXTIkSgAoU+LeFdA/ladb4aZcLMyx9NQQ2QTOJGvC7yyhiylFsWYNTv
twrcO8W25Pm/nbT+xA+1HFBRCclGKWyu/TUWiCk8EsndAEvxDfpb5X37rF6Oz/SG
LcZxrcXtxGjGAcNFXY7kuTmSx9WF9vhOQmLaLTf+3h6hPe0AZM5RfRsgiusjCmYR
Gfzd0T69ljWxn7t2SFxvdU7byQ5/c9aBlzOX0dSCug7mD0ZmWRufc9pU2j9zQNVm
dIW0qrEH0/MblHEFSIFa4ipAofMVvrQ=
-----END CERTIFICATE-----
Generated at Mon Jun 16 11:57:34 2025 by rpki-client