Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/81a5a034-504c-3a80-8c53-d38bb4ee5a98.roa
File:                     81a5a034-504c-3a80-8c53-d38bb4ee5a98.roa (raw, json)
Hash identifier:          +7U0MuhV+0muuyOlqSw1OQvyW0UACQW5DVPS2waQRSw=
Subject key identifier:   C4:28:0E:6B:10:04:E4:B5:C6:67:0F:3C:ED:F7:FC:BA:C7:1C:FE:D2
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F432858494733E20E5BF7921CEE2FAEC0
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/81a5a034-504c-3a80-8c53-d38bb4ee5a98.roa
Signing time:             Sun 23 Mar 2025 01:00:39 +0000
ROA not before:           Sun 23 Mar 2025 01:00:39 +0000
ROA not after:            Sat 21 Jun 2025 01:00:39 +0000
asID:                     23154
IP address blocks:        143.116.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:47:33:e2:0e:5b:f7:92:1c:ee:2f:ae:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Mar 23 01:00:39 2025 GMT
            Not After : Jun 21 01:00:39 2025 GMT
        Subject: CN=fed241b3-c08b-4d1d-b3be-4dd86a39611b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:5f:ec:af:be:01:a3:be:33:56:0f:9e:20:53:
                    c2:04:ee:1f:d2:96:5e:cc:53:96:00:cb:85:27:8f:
                    29:83:08:43:7b:ad:ec:5e:b2:f1:70:36:19:37:37:
                    3b:68:96:8d:b8:38:dd:ba:1f:25:3c:1e:d3:89:26:
                    b3:4f:5f:f3:f8:12:e8:86:bc:e2:e0:a1:2e:ab:9f:
                    f9:49:99:4b:bb:2f:c9:5f:18:df:0a:e2:f2:dc:8d:
                    13:2f:ab:34:25:8a:68:47:ed:cb:0c:7a:e7:d0:11:
                    be:47:10:a0:e0:a1:d4:46:cf:1f:ad:a2:71:39:ae:
                    61:55:a4:c3:bb:3b:d3:cf:f8:b9:07:db:b3:0c:f8:
                    20:32:78:25:78:1f:d3:09:32:34:95:dd:c5:c7:84:
                    ef:53:e6:a0:7b:87:df:54:cc:53:93:df:58:9a:66:
                    44:78:e4:7b:29:cd:35:b4:d6:4b:18:1e:d3:a0:d4:
                    93:37:63:ec:66:d0:92:6b:0a:7c:e6:28:0b:a0:1a:
                    fb:d1:48:00:de:90:c8:3f:e1:61:ea:31:9c:54:a5:
                    39:b7:d6:a7:67:4c:13:0e:db:ff:5f:4e:a9:65:98:
                    a8:da:ae:76:99:e8:29:87:29:fc:35:3e:6b:93:ca:
                    77:99:7e:00:1f:46:aa:6b:ce:8c:d7:8b:a6:4f:97:
                    46:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:28:0E:6B:10:04:E4:B5:C6:67:0F:3C:ED:F7:FC:BA:C7:1C:FE:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/81a5a034-504c-3a80-8c53-d38bb4ee5a98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c3:1e:38:0f:98:7f:45:69:e0:11:cb:53:9a:b4:75:f3:df:89:
         ac:87:0c:b1:b8:e7:9e:91:51:f3:da:95:64:61:69:82:2a:ca:
         fd:1f:3b:37:27:67:f3:c8:d9:d6:d1:b8:1d:b2:47:10:f9:92:
         a7:5a:95:da:76:f8:d2:46:a8:cc:f0:f1:8f:32:60:1e:6a:f5:
         4a:49:c0:11:bf:2f:53:1e:60:77:ad:d7:cb:45:47:10:b1:08:
         ac:bd:ef:a9:49:a2:58:13:f2:b1:8c:8f:93:3f:5d:3a:0f:70:
         19:fd:ca:64:1e:fb:0a:70:22:d0:91:d0:e6:e9:73:7e:07:34:
         9a:15:0e:38:b6:c9:f8:fd:18:40:67:da:69:cb:f4:86:fc:b7:
         2a:69:6c:0f:52:1b:85:25:64:69:d8:32:2f:b0:b0:4a:c4:8a:
         6f:33:ed:da:47:8f:7b:4f:2e:5b:eb:80:2d:13:9c:8d:e4:35:
         b2:9a:e5:f5:3b:87:29:d5:7d:7d:5a:4c:7d:47:ee:1a:05:c9:
         7d:20:8b:46:af:2a:bb:e0:e6:e9:9c:51:f5:93:91:41:11:4e:
         a0:76:4f:f1:e5:4b:12:4d:9b:71:e1:98:2e:17:59:73:18:3e:
         e6:f4:80:6d:ca:b3:2b:d2:84:bd:40:24:32:86:c4:a0:13:bd:
         e8:97:cb:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElHM+IOW/eSHO4vrsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ0YjhkNmItYzZkNC00N2NjLTk5NjYtNzc3MDY1NjA5
ZTkwMB4XDTI1MDMyMzAxMDAzOVoXDTI1MDYyMTAxMDAzOVowLzEtMCsGA1UEAxMk
ZmVkMjQxYjMtYzA4Yi00ZDFkLWIzYmUtNGRkODZhMzk2MTFiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg1/sr74Bo74zVg+eIFPCBO4f0pZezFOWAMuF
J48pgwhDe63sXrLxcDYZNzc7aJaNuDjduh8lPB7TiSazT1/z+BLohrzi4KEuq5/5
SZlLuy/JXxjfCuLy3I0TL6s0JYpoR+3LDHrn0BG+RxCg4KHURs8fraJxOa5hVaTD
uzvTz/i5B9uzDPggMngleB/TCTI0ld3Fx4TvU+age4ffVMxTk99YmmZEeOR7Kc01
tNZLGB7ToNSTN2PsZtCSawp85igLoBr70UgA3pDIP+Fh6jGcVKU5t9anZ0wTDtv/
X06pZZio2q52megphyn8NT5rk8p3mX4AH0aqa86M14umT5dGRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMQoDmsQBOS1xmcPPO33/LrHHP7SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRi
OGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03NzcwNjU2MDllOTAvODFhNWEwMzQtNTA0Yy0z
YTgwLThjNTMtZDM4YmI0ZWU1YTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQ0YjhkNmItYzZkNC00N2NjLTk5
NjYtNzc3MDY1NjA5ZTkwL2E0NGI4ZDZiLWM2ZDQtNDdjYy05OTY2LTc3NzA2NTYw
OWU5MC5jcmwwHwYDVR0jBBgwFoAUAbszEM/IbpG9J5hf9i/TfsnLdsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRiOGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03Nzcw
NjU2MDllOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj3T6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMMeOA+Yf0Vp4BHLU5q0dfPfiayHDLG4556RUfPalWRhaYIqyv0fOzcn
Z/PI2dbRuB2yRxD5kqdaldp2+NJGqMzw8Y8yYB5q9UpJwBG/L1MeYHet18tFRxCx
CKy976lJolgT8rGMj5M/XToPcBn9ymQe+wpwItCR0Obpc34HNJoVDji2yfj9GEBn
2mnL9Ib8typpbA9SG4UlZGnYMi+wsErEim8z7dpHj3tPLlvrgC0TnI3kNbKa5fU7
hynVfX1aTH1H7hoFyX0gi0avKrvg5umcUfWTkUERTqB2T/HlSxJNm3HhmC4XWXMY
Pub0gG3KsyvShL1AJDKGxKATveiXy88=
-----END CERTIFICATE-----
Generated at Mon Apr 7 01:13:03 2025 by rpki-client