Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1acbc61-abb2-3bad-afd8-0f75fc91dc42.roa
File:                     f1acbc61-abb2-3bad-afd8-0f75fc91dc42.roa (raw, json)
Hash identifier:          v2Qp+MUQqoICABsUZG8HVGKYqKboAOqTqdgmE+0sPvY=
Subject key identifier:   47:AD:8B:BA:11:5A:71:2E:69:39:91:3A:AC:4D:D2:B0:B0:4F:65:D3
Certificate issuer:       /CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
Certificate serial:       010D0C9F432858497DA61081A948817315D482E0
Authority key identifier: 55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1acbc61-abb2-3bad-afd8-0f75fc91dc42.roa
Signing time:             Fri 11 Apr 2025 13:01:00 +0000
ROA not before:           Fri 11 Apr 2025 13:01:00 +0000
ROA not after:            Thu 10 Jul 2025 13:01:00 +0000
asID:                     20214
IP address blocks:        75.144.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:a6:10:81:a9:48:81:73:15:d4:82:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e95a28e-27fe-479a-b086-2cc9809d54f6
        Validity
            Not Before: Apr 11 13:01:00 2025 GMT
            Not After : Jul 10 13:01:00 2025 GMT
        Subject: CN=6c73bb08-6bf4-422f-87ba-0b57430cb886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c9:25:93:bc:bf:0c:ed:c9:96:dd:00:aa:19:
                    8c:2a:fe:6b:40:6a:79:c5:f5:fe:f3:7a:54:cb:46:
                    05:65:25:ba:16:52:78:43:e3:7e:03:53:91:5a:49:
                    e9:e2:d8:6f:ee:4a:24:22:7c:de:95:5d:58:eb:c1:
                    d9:e7:ed:83:f0:74:8e:75:aa:1f:62:88:0f:8c:36:
                    eb:85:e3:86:58:01:18:e1:20:3e:81:c5:45:9f:3f:
                    eb:80:3a:b3:f2:f8:a6:01:68:6d:bb:df:26:6d:61:
                    c9:ee:24:d1:0d:21:67:e5:6a:5b:ec:75:74:e0:b9:
                    2e:47:20:40:08:c0:4a:1f:89:79:1f:1c:6e:e0:de:
                    10:aa:1c:6f:78:7e:41:0c:fe:8c:ad:30:f2:42:84:
                    43:d7:2a:8f:58:3d:de:a4:4e:e8:77:e0:6a:a6:b3:
                    f0:d0:0f:f6:86:e3:ba:9c:b4:cc:05:d7:c4:28:39:
                    85:ff:d8:de:bd:4f:fb:c7:67:d4:c2:98:cf:2b:b4:
                    05:a3:5b:ed:11:a2:de:6e:e7:b2:30:2d:e1:ac:9e:
                    3a:e7:e6:f6:e7:65:9a:c1:72:68:55:96:9f:c0:71:
                    d9:8c:a1:58:3d:3f:44:12:72:4d:86:65:61:55:54:
                    86:d9:35:20:7d:2e:5c:ce:38:bb:bc:05:ac:3c:17:
                    38:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:AD:8B:BA:11:5A:71:2E:69:39:91:3A:AC:4D:D2:B0:B0:4F:65:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/f1acbc61-abb2-3bad-afd8-0f75fc91dc42.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6/4e95a28e-27fe-479a-b086-2cc9809d54f6.crl

            X509v3 Authority Key Identifier:
                keyid:55:43:28:31:2B:A2:11:E9:0C:63:2A:6B:C1:7E:0D:D6:92:76:3E:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e95a28e-27fe-479a-b086-2cc9809d54f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.144.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:6a:8c:c6:d8:b4:58:a6:bb:ec:7a:b4:fa:64:f9:a1:7e:0c:
         f4:db:5e:cb:93:3d:b8:49:75:11:a7:6c:8b:35:df:bf:2e:83:
         05:7f:25:b5:95:0c:6a:eb:91:85:4c:43:c9:5f:ae:56:89:fb:
         fa:5b:8a:51:d8:07:38:1d:b6:1b:ef:1a:18:69:a7:32:3e:35:
         85:ee:c3:a9:27:cb:54:5b:38:3e:f3:09:3d:bb:cd:6a:16:25:
         9f:2e:c6:d0:0f:68:80:64:d6:87:ae:82:41:70:f4:af:cf:51:
         ce:92:e3:00:eb:6d:dc:a5:ef:96:df:72:06:38:89:62:12:e2:
         3c:9e:89:39:3b:4f:d8:35:c8:1c:f9:fd:bd:50:4d:bb:b7:a1:
         e1:23:99:6c:db:94:00:9d:27:39:38:74:12:78:64:3b:e2:7a:
         e8:13:69:3e:00:01:c0:5f:55:29:c8:86:08:78:23:7c:4b:f9:
         a5:f7:68:60:fd:6a:b4:b7:b0:3b:11:ad:5f:3d:34:76:8a:95:
         a9:19:58:a4:58:2e:3b:b0:ff:90:92:b7:25:ef:e0:2e:81:23:
         73:83:4c:c8:a3:49:f9:0a:fd:41:5b:7c:08:c5:9e:4b:1c:73:
         39:36:f5:2b:8e:8d:77:12:bb:6f:d6:36:d8:f6:fa:3b:82:a5:
         b2:29:96:6b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl9phCBqUiBcxXUguAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU5NWEyOGUtMjdmZS00NzlhLWIwODYtMmNjOTgwOWQ1
NGY2MB4XDTI1MDQxMTEzMDEwMFoXDTI1MDcxMDEzMDEwMFowLzEtMCsGA1UEAxMk
NmM3M2JiMDgtNmJmNC00MjJmLTg3YmEtMGI1NzQzMGNiODg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusklk7y/DO3Jlt0AqhmMKv5rQGp5xfX+83pU
y0YFZSW6FlJ4Q+N+A1ORWknp4thv7kokInzelV1Y68HZ5+2D8HSOdaofYogPjDbr
heOGWAEY4SA+gcVFnz/rgDqz8vimAWhtu98mbWHJ7iTRDSFn5Wpb7HV04LkuRyBA
CMBKH4l5Hxxu4N4QqhxveH5BDP6MrTDyQoRD1yqPWD3epE7od+BqprPw0A/2huO6
nLTMBdfEKDmF/9jevU/7x2fUwpjPK7QFo1vtEaLebueyMC3hrJ465+b252WawXJo
VZafwHHZjKFYPT9EEnJNhmVhVVSG2TUgfS5czji7vAWsPBc45wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeti7oRWnEuaTmROqxN0rCwT2XTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1
YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5ODA5ZDU0ZjYvZjFhY2JjNjEtYWJiMi0z
YmFkLWFmZDgtMGY3NWZjOTFkYzQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU5NWEyOGUtMjdmZS00NzlhLWIw
ODYtMmNjOTgwOWQ1NGY2LzRlOTVhMjhlLTI3ZmUtNDc5YS1iMDg2LTJjYzk4MDlk
NTRmNi5jcmwwHwYDVR0jBBgwFoAUVUMoMSuiEekMYyprwX4N1pJ2PmEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTk1YTI4ZS0yN2ZlLTQ3OWEtYjA4Ni0yY2M5
ODA5ZDU0ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES5DQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE5qjMbYtFimu+x6tPpk+aF+DPTbXsuTPbhJdRGnbIs1378ugwV/JbWV
DGrrkYVMQ8lfrlaJ+/pbilHYBzgdthvvGhhppzI+NYXuw6kny1RbOD7zCT27zWoW
JZ8uxtAPaIBk1oeugkFw9K/PUc6S4wDrbdyl75bfcgY4iWIS4jyeiTk7T9g1yBz5
/b1QTbu3oeEjmWzblACdJzk4dBJ4ZDvieugTaT4AAcBfVSnIhgh4I3xL+aX3aGD9
arS3sDsRrV89NHaKlakZWKRYLjuw/5CStyXv4C6BI3ODTMijSfkK/UFbfAjFnksc
czk29SuOjXcSu2/WNtj2+juCpbIplms=
-----END CERTIFICATE-----
Generated at Sat Apr 12 13:35:53 2025 by rpki-client