Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa
File:                     57540e59-06f8-3554-b0ed-f895e16bdb38.roa (raw, json)
Hash identifier:          dm27Y0bUMnIWuZxtP/mxzxaE4ZomvMVL6TMgcMBQ9MQ=
Subject key identifier:   1C:2C:F6:14:B9:9C:F6:06:DB:36:35:D4:D6:DD:F9:39:9F:2C:48:0A
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F43285849244E7739330336591A039800
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa
Signing time:             Mon 10 Mar 2025 13:00:52 +0000
ROA not before:           Mon 10 Mar 2025 13:00:52 +0000
ROA not after:            Sun 08 Jun 2025 13:00:52 +0000
asID:                     14061
IP address blocks:        159.89.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:24:4e:77:39:33:03:36:59:1a:03:98:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: Mar 10 13:00:52 2025 GMT
            Not After : Jun  8 13:00:52 2025 GMT
        Subject: CN=1e544847-8f3b-413f-ae82-6ff78c872801
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:78:20:2f:25:f4:b8:c6:7a:0d:f7:05:13:39:
                    bb:42:77:6e:77:a5:b5:93:8d:e2:f7:e0:bb:4a:e7:
                    7f:67:78:09:ae:63:6b:55:79:db:ec:30:8e:b4:d4:
                    03:29:4d:b8:61:37:71:f0:e3:a7:4e:bd:3b:95:06:
                    15:88:73:cb:e0:33:48:56:b0:6d:41:0d:63:e1:5d:
                    82:76:51:0d:b8:fd:74:e1:2f:95:49:34:09:1b:5c:
                    c4:f0:dc:05:4e:ec:4b:7b:fa:6d:60:85:33:0d:32:
                    16:04:8d:05:e2:64:74:ab:be:bf:1c:c1:b3:1a:42:
                    50:21:92:cb:14:07:c6:6c:58:3b:f2:14:ca:4d:bc:
                    ba:b0:fe:9f:a9:44:75:af:40:23:06:c3:22:90:27:
                    3e:a5:41:41:f1:10:74:93:69:80:1e:3f:fa:d8:65:
                    ef:d4:f9:a8:da:78:e4:b4:85:71:7f:70:6f:dc:c8:
                    6c:33:06:45:7d:4f:e8:9c:2b:e8:9f:b6:ff:71:52:
                    61:dd:93:1d:6c:72:39:35:eb:02:03:fc:52:49:e7:
                    e3:e3:d3:9e:e1:ae:68:eb:21:4c:f1:49:c2:77:b8:
                    f4:ca:11:51:5f:a9:3b:7d:e9:ce:78:47:0d:e8:3f:
                    fa:b9:4f:54:a0:98:c8:1e:cc:f5:62:dc:6e:b1:e2:
                    43:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:2C:F6:14:B9:9C:F6:06:DB:36:35:D4:D6:DD:F9:39:9F:2C:48:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/57540e59-06f8-3554-b0ed-f895e16bdb38.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.89.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b1:12:e2:e0:0e:d0:b9:b6:80:23:70:d9:f2:bc:23:05:ff:8e:
         35:c8:a6:2b:e0:62:5e:65:c7:a4:26:07:61:c8:57:53:81:76:
         51:b0:ce:c5:f2:5f:aa:75:4e:dd:89:a7:ac:77:36:e8:a6:14:
         53:82:7c:2a:43:ba:25:77:b5:ce:34:09:ec:70:5a:a6:18:60:
         65:5f:5d:1c:66:70:d1:6a:3a:fe:ad:28:5e:0c:37:f6:38:fc:
         f8:d0:df:d5:d5:35:ad:8d:b1:d5:11:be:e8:8a:ba:d8:92:df:
         7e:0f:19:89:d9:4e:ef:12:2c:08:e9:52:6d:d1:a2:b0:34:ba:
         a2:60:b5:ef:55:23:f9:ab:da:01:40:76:a7:b7:70:ac:b0:49:
         87:d7:4b:b8:7e:59:6b:e3:8e:50:ce:f5:98:6d:4e:6d:b4:47:
         a5:17:e2:8d:27:c0:43:18:c1:97:61:1c:4e:d4:43:08:b8:c2:
         dc:ad:c6:ec:4d:ef:9e:c5:f5:f7:e5:f5:bc:17:1c:ae:a0:e0:
         cd:7c:6d:33:94:d5:c6:07:96:35:db:99:e7:78:02:1d:97:aa:
         52:f9:5a:63:10:8d:dc:44:c6:2b:72:40:55:b7:e5:17:da:af:
         60:b8:28:90:42:cf:22:f6:d0:d4:5d:10:46:c3:4b:b7:4c:bd:
         a3:cb:26:5b
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkkTnc5MwM2WRoDmAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDMxMDEzMDA1MloXDTI1MDYwODEzMDA1MlowLzEtMCsGA1UEAxMk
MWU1NDQ4NDctOGYzYi00MTNmLWFlODItNmZmNzhjODcyODAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXggLyX0uMZ6DfcFEzm7Qndud6W1k43i9+C7
Sud/Z3gJrmNrVXnb7DCOtNQDKU24YTdx8OOnTr07lQYViHPL4DNIVrBtQQ1j4V2C
dlENuP104S+VSTQJG1zE8NwFTuxLe/ptYIUzDTIWBI0F4mR0q76/HMGzGkJQIZLL
FAfGbFg78hTKTby6sP6fqUR1r0AjBsMikCc+pUFB8RB0k2mAHj/62GXv1Pmo2njk
tIVxf3Bv3MhsMwZFfU/onCvon7b/cVJh3ZMdbHI5NesCA/xSSefj49Oe4a5o6yFM
8UnCd7j0yhFRX6k7fenOeEcN6D/6uU9UoJjIHsz1YtxuseJDZwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFBws9hS5nPYG2zY11Nbd+TmfLEgKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvNTc1NDBlNTktMDZmOC0z
NTU0LWIwZWQtZjg5NWUxNmJkYjM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAn1kwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAsRLi4A7QubaAI3DZ8rwjBf+ONcimK+BiXmXHpCYHYchXU4F2UbDOxfJf
qnVO3YmnrHc26KYUU4J8KkO6JXe1zjQJ7HBaphhgZV9dHGZw0Wo6/q0oXgw39jj8
+NDf1dU1rY2x1RG+6Iq62JLffg8ZidlO7xIsCOlSbdGisDS6omC171Uj+avaAUB2
p7dwrLBJh9dLuH5Za+OOUM71mG1ObbRHpRfijSfAQxjBl2EcTtRDCLjC3K3G7E3v
nsX19+X1vBccrqDgzXxtM5TVxgeWNduZ53gCHZeqUvlaYxCN3ETGK3JAVbflF9qv
YLgokELPIvbQ1F0QRsNLt0y9o8smWw==
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:26:15 2025 by rpki-client