Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa
File:                     0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa (raw, json)
Hash identifier:          h1Y7jFGt4Z1C1WEubEg+p4x0sTmrL2BM3no1RbzPKMM=
Subject key identifier:   BE:06:09:CE:36:FF:6D:56:2D:32:9E:DC:98:C9:A8:5E:8B:5F:83:4B
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E76FADB7C6AEB6B2D2080
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        165.227.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:76:fa:db:7c:6a:eb:6b:2d:20:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=5914a354-6181-4a1c-8db7-a6fd05b8c97d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c3:bd:a4:71:c6:36:8f:d9:f3:3c:44:ec:56:
                    84:31:7c:99:09:af:e3:0e:c3:97:ae:2d:de:af:e2:
                    d4:8a:01:5b:bf:68:f9:56:95:b3:55:7e:1e:16:53:
                    93:a0:17:81:53:56:ba:2f:dd:0f:af:4a:7f:70:d5:
                    9e:0b:10:4a:b3:22:e5:25:60:29:3e:42:48:03:31:
                    26:90:a2:ab:d7:ce:a1:62:23:33:ed:a0:28:e2:db:
                    a0:1b:74:4e:9f:c0:26:d0:c0:4a:7c:52:8b:a6:c0:
                    8f:ff:13:de:40:2c:bb:75:47:e4:64:4f:24:f8:91:
                    f6:be:00:6f:37:ce:2c:c2:b5:3f:18:fc:e2:22:09:
                    e4:f8:de:bb:10:f4:1f:c6:1a:e0:e5:86:e6:53:6a:
                    05:d7:14:b3:a7:49:ab:36:99:76:db:ad:18:7a:a1:
                    2a:78:d5:76:ea:c6:22:c3:77:fa:42:91:63:64:aa:
                    bf:d9:97:59:b5:f1:1b:5d:12:d5:cb:39:08:2e:08:
                    32:99:c9:28:a4:dd:8a:cf:30:a7:61:d0:ea:b0:4c:
                    86:da:dc:2f:06:08:56:93:23:55:c9:65:69:55:2a:
                    88:92:02:65:32:ec:b4:b9:87:2f:6e:52:54:88:3c:
                    41:fa:b6:50:9f:da:38:bd:8b:b7:ce:e7:3e:85:6b:
                    39:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:06:09:CE:36:FF:6D:56:2D:32:9E:DC:98:C9:A8:5E:8B:5F:83:4B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/0283d898-a2f1-3e19-b3a1-5bd1536c909e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.227.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:c6:3d:4b:dc:97:4e:b6:6e:32:3c:2d:c0:f8:a3:c6:60:af:
         33:af:62:e9:87:5a:c3:9a:ea:75:b7:fa:96:e9:a1:77:1f:7d:
         bb:5e:8d:17:15:44:b5:6a:ea:df:ad:0a:f6:b3:20:8f:db:a3:
         18:b1:87:a6:8c:f2:ba:67:59:0d:2d:9a:f8:3d:00:22:bd:47:
         91:fe:09:a9:ee:37:6e:f8:c1:3e:f2:dd:4b:95:ba:39:36:7a:
         3f:0a:93:0a:c6:20:08:8a:b7:ed:87:c6:fc:10:3f:1e:44:93:
         d1:b2:67:66:14:d8:f1:a4:8e:04:b0:a0:70:c2:73:ab:3b:83:
         3d:93:ef:d1:d5:91:a1:49:f7:d1:9c:b0:cb:69:a7:ca:c4:b0:
         4d:b6:d4:d6:ea:9e:58:bf:13:e4:6c:bc:87:d0:7e:4d:c8:a0:
         1d:2d:b8:5d:23:89:09:ef:52:c5:2f:7c:c1:d7:30:b1:d2:71:
         43:b3:c0:f9:da:87:e0:7d:2a:21:8c:7a:35:f4:e7:97:91:61:
         e1:a1:49:b6:27:e7:99:f0:87:b4:36:d9:80:c9:cd:9d:de:df:
         dd:56:bc:22:0d:0d:63:e7:c0:be:f0:e7:95:73:76:a7:c8:77:
         f8:40:1c:7c:c4:98:5d:3c:d4:5c:ca:09:4b:b7:8f:cc:82:37:
         85:ef:1d:0b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkkTnb623xq62stIIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
NTkxNGEzNTQtNjE4MS00YTFjLThkYjctYTZmZDA1YjhjOTdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgMO9pHHGNo/Z8zxE7FaEMXyZCa/jDsOXri3e
r+LUigFbv2j5VpWzVX4eFlOToBeBU1a6L90Pr0p/cNWeCxBKsyLlJWApPkJIAzEm
kKKr186hYiMz7aAo4tugG3ROn8Am0MBKfFKLpsCP/xPeQCy7dUfkZE8k+JH2vgBv
N84swrU/GPziIgnk+N67EPQfxhrg5YbmU2oF1xSzp0mrNpl2260YeqEqeNV26sYi
w3f6QpFjZKq/2ZdZtfEbXRLVyzkILggymckopN2KzzCnYdDqsEyG2twvBghWkyNV
yWVpVSqIkgJlMuy0uYcvblJUiDxB+rZQn9o4vYu3zuc+hWs5qwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFL4GCc42/21WLTKe3JjJqF6LX4NLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvMDI4M2Q4OTgtYTJmMS0z
ZTE5LWIzYTEtNWJkMTUzNmM5MDllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMApeMwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAWsY9S9yXTrZuMjwtwPijxmCvM69i6Ydaw5rqdbf6lumhdx99u16NFxVE
tWrq360K9rMgj9ujGLGHpozyumdZDS2a+D0AIr1Hkf4Jqe43bvjBPvLdS5W6OTZ6
PwqTCsYgCIq37YfG/BA/HkST0bJnZhTY8aSOBLCgcMJzqzuDPZPv0dWRoUn30Zyw
y2mnysSwTbbU1uqeWL8T5Gy8h9B+TcigHS24XSOJCe9SxS98wdcwsdJxQ7PA+dqH
4H0qIYx6NfTnl5Fh4aFJtifnmfCHtDbZgMnNnd7f3Va8Ig0NY+fAvvDnlXN2p8h3
+EAcfMSYXTzUXMoJS7ePzII3he8dCw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 09:27:26 2025 by rpki-client