Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
File:                     0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa (raw, json)
Hash identifier:          5ruSWZpx3oQI8ZVIiDotFKRvrqq+bbcl8KcOO7fWoy4=
Subject key identifier:   AB:07:AC:6A:D4:F2:75:23:46:4A:D3:7E:DB:48:64:AC:2D:66:A1:CE
Certificate issuer:       /CN=6f8414e5-add5-44f9-ada6-b8c907027195
Certificate serial:       010D0C9F43285848C436167F38B8C58B799AE480
Authority key identifier: 2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa
Signing time:             Tue 04 Feb 2025 02:54:18 +0000
ROA not before:           Tue 04 Feb 2025 02:54:18 +0000
ROA not after:            Mon 05 May 2025 01:54:18 +0000
asID:                     14813
IP address blocks:        69.73.227.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:c4:36:16:7f:38:b8:c5:8b:79:9a:e4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6f8414e5-add5-44f9-ada6-b8c907027195
        Validity
            Not Before: Feb  4 02:54:18 2025 GMT
            Not After : May  5 01:54:18 2025 GMT
        Subject: CN=dfe9ba2c-1a3a-4f62-acab-48f5eb94b70c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:d9:3e:26:3a:78:f6:ed:cf:e0:7f:1a:f7:
                    b1:38:be:0d:9a:0c:44:8d:1e:36:62:5e:ac:64:bd:
                    6d:b9:28:54:d4:5d:16:f1:be:86:db:ee:62:67:21:
                    b0:74:0f:9b:ed:36:1d:b7:f5:38:e2:7c:9b:ad:8d:
                    63:1c:f7:40:ed:3d:cf:08:23:33:1e:f6:07:84:84:
                    a7:82:60:ef:32:4f:02:2c:b3:69:35:eb:1f:d4:a2:
                    59:e9:89:c9:96:ad:1c:34:75:d0:85:49:40:38:f8:
                    55:a0:c2:82:fb:84:09:0d:1a:d3:63:34:2e:0b:db:
                    69:25:17:bf:cd:fe:67:c3:34:26:16:4f:34:da:03:
                    99:45:d6:49:86:8e:42:1b:56:78:9e:95:95:75:3e:
                    90:d5:ff:dd:5c:a2:be:18:d8:1f:a3:4c:44:09:38:
                    ff:e7:47:72:44:c3:5e:43:77:0e:46:d6:53:50:20:
                    88:84:ce:59:3d:7f:f9:fc:c9:eb:ba:c1:0b:26:96:
                    9a:f8:14:07:52:e7:16:5c:a4:95:a7:3d:c1:8b:78:
                    90:09:1b:0c:01:fa:b9:c2:7b:57:7d:c1:75:a3:4d:
                    a6:b6:ac:ea:72:a7:bc:fd:06:79:25:99:28:f2:7d:
                    bf:2b:0e:63:41:6c:21:25:f1:ed:f3:92:8d:0d:c0:
                    a4:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:07:AC:6A:D4:F2:75:23:46:4A:D3:7E:DB:48:64:AC:2D:66:A1:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/0158997d-71e4-3d97-acda-5a5cc55cfb1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195/6f8414e5-add5-44f9-ada6-b8c907027195.crl

            X509v3 Authority Key Identifier:
                keyid:2F:27:9B:1A:A0:8F:8F:99:CB:27:A3:7D:8E:35:2D:6D:96:D2:23:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6f8414e5-add5-44f9-ada6-b8c907027195.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.73.227.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a0:e0:e1:ff:dd:d3:8a:ea:6b:24:35:5c:c4:b4:f9:f5:7b:a7:
         b2:ff:e3:fc:56:41:35:f4:57:d9:c4:ab:2e:9d:df:66:96:3f:
         4f:4d:7b:1f:9f:6a:0c:99:1f:10:70:c9:27:ed:fd:55:ea:ce:
         18:4d:f9:c0:a8:7e:93:d8:38:41:8d:8a:d3:56:c0:34:41:53:
         3d:58:4e:0e:5f:8a:a6:07:75:1c:f0:68:4f:7e:91:e7:3e:c5:
         5e:b3:57:e0:b6:48:d8:60:3a:18:ab:e4:20:a5:68:8e:3b:e5:
         b2:9e:83:48:22:b2:e0:d0:13:55:5a:54:19:d5:84:b5:19:be:
         e3:84:ea:1c:28:ce:ee:fc:a7:18:cf:bf:7d:eb:ab:9f:2a:cb:
         15:0f:23:3b:4e:32:c8:b5:bb:23:e7:00:ad:9d:63:cf:66:15:
         74:81:3b:0a:b6:11:ce:b4:45:55:9f:24:10:20:fe:08:96:03:
         28:6e:c2:ac:cf:26:84:f4:c1:54:25:25:0a:69:60:ec:eb:54:
         9d:10:7b:b8:b5:9e:81:49:2e:8d:74:3e:28:d4:b2:31:bf:1b:
         e8:54:dc:65:62:a5:02:7b:e3:e0:b4:c4:ad:26:92:2a:fc:cc:
         8c:59:0c:a4:b6:51:1d:9c:a3:ee:22:5e:ab:cf:19:20:1f:f1:
         f0:e6:41:a4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjENhZ/OLjFi3ma5IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmY4NDE0ZTUtYWRkNS00NGY5LWFkYTYtYjhjOTA3MDI3
MTk1MB4XDTI1MDIwNDAyNTQxOFoXDTI1MDUwNTAxNTQxOFowLzEtMCsGA1UEAxMk
ZGZlOWJhMmMtMWEzYS00ZjYyLWFjYWItNDhmNWViOTRiNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvbzZPiY6ePbtz+B/GvexOL4NmgxEjR42Yl6s
ZL1tuShU1F0W8b6G2+5iZyGwdA+b7TYdt/U44nybrY1jHPdA7T3PCCMzHvYHhISn
gmDvMk8CLLNpNesf1KJZ6YnJlq0cNHXQhUlAOPhVoMKC+4QJDRrTYzQuC9tpJRe/
zf5nwzQmFk802gOZRdZJho5CG1Z4npWVdT6Q1f/dXKK+GNgfo0xECTj/50dyRMNe
Q3cORtZTUCCIhM5ZPX/5/MnrusELJpaa+BQHUucWXKSVpz3Bi3iQCRsMAfq5wntX
fcF1o02mtqzqcqe8/QZ5JZko8n2/Kw5jQWwhJfHt85KNDcCkUwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKsHrGrU8nUjRkrTfttIZKwtZqHOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82Zjg0
MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5MDcwMjcxOTUvMDE1ODk5N2QtNzFlNC0z
ZDk3LWFjZGEtNWE1Y2M1NWNmYjFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNmY4NDE0ZTUtYWRkNS00NGY5LWFk
YTYtYjhjOTA3MDI3MTk1LzZmODQxNGU1LWFkZDUtNDRmOS1hZGE2LWI4YzkwNzAy
NzE5NS5jcmwwHwYDVR0jBBgwFoAULyebGqCPj5nLJ6N9jjUtbZbSI50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82Zjg0MTRlNS1hZGQ1LTQ0ZjktYWRhNi1iOGM5
MDcwMjcxOTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARUnjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKDg4f/d04rqayQ1XMS0+fV7p7L/4/xWQTX0V9nEqy6d32aWP09Nex+f
agyZHxBwySft/VXqzhhN+cCofpPYOEGNitNWwDRBUz1YTg5fiqYHdRzwaE9+kec+
xV6zV+C2SNhgOhir5CClaI475bKeg0gisuDQE1VaVBnVhLUZvuOE6hwozu78pxjP
v33rq58qyxUPIztOMsi1uyPnAK2dY89mFXSBOwq2Ec60RVWfJBAg/giWAyhuwqzP
JoT0wVQlJQppYOzrVJ0Qe7i1noFJLo10PijUsjG/G+hU3GVipQJ74+C0xK0mkir8
zIxZDKS2UR2co+4iXqvPGSAf8fDmQaQ=
-----END CERTIFICATE-----
Generated at Fri Apr 4 16:30:03 2025 by rpki-client