Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa
File:                     bfa20d88-e643-3754-85a9-587efd05c1bb.roa (raw, json)
Hash identifier:          BXccwkggIjtf9GzJzSe4ziIHQB8oQRo2wNO5BG7GBNI=
Subject key identifier:   D9:10:4D:A1:97:43:65:24:67:5B:5E:5F:27:ED:AF:DA:5D:13:F4:F0
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F43285848C2B6486AF4289D7728FB4560
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa
Signing time:             Mon 03 Feb 2025 14:00:52 +0000
ROA not before:           Mon 03 Feb 2025 14:00:52 +0000
ROA not after:            Sun 04 May 2025 13:00:52 +0000
asID:                     11272
IP address blocks:        199.33.90.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c2:b6:48:6a:f4:28:9d:77:28:fb:45:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Feb  3 14:00:52 2025 GMT
            Not After : May  4 13:00:52 2025 GMT
        Subject: CN=395a5cd6-de18-45ad-bce4-3ac58e2c453a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:63:db:8b:c7:c9:72:44:47:5e:18:a2:5d:7e:
                    7b:48:f0:e0:eb:57:93:12:5e:a8:5e:3b:34:21:1f:
                    a7:9d:79:68:4b:e4:02:72:1e:58:10:a0:80:32:26:
                    7d:ff:65:67:df:29:28:60:93:68:e9:18:22:0e:e6:
                    04:c3:1f:d1:bd:2c:5c:9e:9f:ab:a6:30:d5:3e:66:
                    af:d3:ca:56:3d:7c:b3:84:f8:43:c8:36:ba:ea:3b:
                    71:47:bc:60:5c:52:8e:14:62:2b:81:ab:2a:3b:c0:
                    d3:10:01:80:26:7a:85:96:9c:18:c3:06:93:56:65:
                    c7:af:b3:f1:7b:c0:52:62:4f:be:c0:3f:89:28:dd:
                    f8:bf:c2:0c:e4:e9:16:ed:a0:08:97:99:1c:6a:e7:
                    f9:a9:0a:3c:7f:b7:a7:47:bc:57:30:07:bd:17:e5:
                    7e:d3:1a:be:d8:40:2c:e1:57:6e:60:4c:4d:56:de:
                    b7:49:4d:7b:f4:9b:22:09:bf:a8:91:c0:29:32:73:
                    ee:f6:0b:25:28:92:04:3c:7b:3f:0e:5f:1f:e4:8e:
                    6e:62:52:57:51:d4:c2:a1:d8:ec:76:02:7f:92:cc:
                    c9:51:69:08:18:29:9b:81:cc:37:d3:50:74:52:8f:
                    90:4b:35:14:30:92:d6:d3:e2:d3:25:d5:22:ef:9d:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:10:4D:A1:97:43:65:24:67:5B:5E:5F:27:ED:AF:DA:5D:13:F4:F0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/bfa20d88-e643-3754-85a9-587efd05c1bb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.33.90.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:be:1b:08:bb:65:e8:17:bf:27:e5:78:1a:e1:c2:e3:df:ae:
         fc:11:72:c3:0f:47:be:d3:38:35:fe:ed:e6:9c:03:f0:7a:6d:
         c4:50:83:8f:72:45:dd:a7:56:59:88:c1:9d:ef:2d:54:0e:2d:
         23:2e:63:07:7a:37:07:0c:ac:c5:ab:99:44:51:3e:0b:ff:d3:
         ec:6f:e0:36:10:bb:b2:66:09:dd:49:ce:b0:49:c3:b9:20:5b:
         28:a4:11:6c:e1:d2:e2:1c:46:fa:7f:49:b5:3b:79:f8:7e:b4:
         18:2e:4d:d6:68:95:d7:f0:65:9b:86:55:5a:69:56:36:fc:07:
         c1:b0:74:86:95:6a:5b:57:49:eb:7b:78:3a:1b:30:91:fe:b4:
         ae:4a:ed:f2:ac:f7:9d:4e:3e:34:32:7b:47:19:25:e4:5b:a7:
         74:02:57:f2:78:e1:07:13:44:05:6c:b7:80:72:58:15:38:72:
         05:40:3f:e1:73:1b:10:04:6b:72:4d:98:a4:93:ac:df:ce:cc:
         a4:11:43:a2:76:29:90:59:06:6e:09:f2:17:b8:2a:b2:3f:5d:
         66:39:46:59:df:6c:bd:19:98:06:0f:5f:92:48:30:ae:84:cc:
         a5:85:67:2a:bb:bb:27:19:10:3b:b2:e9:15:5d:41:eb:9a:1b:
         69:29:50:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjCtkhq9Ciddyj7RWAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVmZWVhZjUtYWJmZC00ZjljLTk3MDctOTIzNmNlNTM5
N2JkMB4XDTI1MDIwMzE0MDA1MloXDTI1MDUwNDEzMDA1MlowLzEtMCsGA1UEAxMk
Mzk1YTVjZDYtZGUxOC00NWFkLWJjZTQtM2FjNThlMmM0NTNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlGPbi8fJckRHXhiiXX57SPDg61eTEl6oXjs0
IR+nnXloS+QCch5YEKCAMiZ9/2Vn3ykoYJNo6RgiDuYEwx/RvSxcnp+rpjDVPmav
08pWPXyzhPhDyDa66jtxR7xgXFKOFGIrgasqO8DTEAGAJnqFlpwYwwaTVmXHr7Px
e8BSYk++wD+JKN34v8IM5OkW7aAIl5kcauf5qQo8f7enR7xXMAe9F+V+0xq+2EAs
4VduYExNVt63SU179JsiCb+okcApMnPu9gslKJIEPHs/Dl8f5I5uYlJXUdTCodjs
dgJ/kszJUWkIGCmbgcw301B0Uo+QSzUUMJLW0+LTJdUi75286wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNkQTaGXQ2UkZ1teXyftr9pdE/TwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NWZl
ZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2Y2U1Mzk3YmQvYmZhMjBkODgtZTY0My0z
NzU0LTg1YTktNTg3ZWZkMDVjMWJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTVmZWVhZjUtYWJmZC00ZjljLTk3
MDctOTIzNmNlNTM5N2JkLzU1ZmVlYWY1LWFiZmQtNGY5Yy05NzA3LTkyMzZjZTUz
OTdiZC5jcmwwHwYDVR0jBBgwFoAUye9LATMCXDRmU4YBpwWsA0gFmrowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81NWZlZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2
Y2U1Mzk3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxyFaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEq+Gwi7ZegXvyfleBrhwuPfrvwRcsMPR77TODX+7eacA/B6bcRQg49y
Rd2nVlmIwZ3vLVQOLSMuYwd6NwcMrMWrmURRPgv/0+xv4DYQu7JmCd1JzrBJw7kg
WyikEWzh0uIcRvp/SbU7efh+tBguTdZoldfwZZuGVVppVjb8B8GwdIaValtXSet7
eDobMJH+tK5K7fKs951OPjQye0cZJeRbp3QCV/J44QcTRAVst4ByWBU4cgVAP+Fz
GxAEa3JNmKSTrN/OzKQRQ6J2KZBZBm4J8he4KrI/XWY5RlnfbL0ZmAYPX5JIMK6E
zKWFZyq7uycZEDuy6RVdQeuaG2kpUDs=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:23:27 2025 by rpki-client