Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
File:                     f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa (raw, json)
Hash identifier:          Mli0WlmxhHMG+XZOd9/TBuOomI3XFVqwaVzWXnnuE9c=
Subject key identifier:   E2:94:9A:08:A9:26:24:79:AE:3E:76:9A:67:9E:49:7C:C5:B4:CE:F3
Certificate issuer:       /CN=80688222-2583-4dac-a7df-1d78925c7b53
Certificate serial:       010D0C9F43285849FCAA7D766591D36FB2CE1C00
Authority key identifier: F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     1640
IP address blocks:        199.59.84.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 06 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7d:76:65:91:d3:6f:b2:ce:1c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80688222-2583-4dac-a7df-1d78925c7b53
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=b8bc0ecd-f486-48ef-9d2e-7618f42b7416
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:9e:52:04:94:17:56:fc:16:51:38:cb:2d:17:
                    45:ac:d5:7e:ff:df:74:0d:93:e6:56:43:df:86:87:
                    a4:87:62:9c:e9:01:67:c3:aa:d1:bd:c2:f5:32:f1:
                    35:53:2d:85:d9:d7:2b:9f:8a:b3:f4:bf:f5:9f:d9:
                    ed:1f:66:97:83:22:10:7e:c7:ae:e0:b3:19:95:ed:
                    ed:49:0a:ef:ff:e3:08:ec:5c:f7:98:6c:d7:aa:f0:
                    e3:de:fd:52:95:57:48:5f:e0:1b:a8:d3:62:19:8d:
                    ed:8d:3a:f3:ed:60:08:05:ce:34:a7:93:e7:95:d4:
                    59:89:2a:67:40:43:60:f7:fe:9a:9f:4f:e6:58:4a:
                    20:8e:a7:55:80:27:02:e5:1f:25:7d:73:a8:f8:96:
                    06:c4:06:a0:12:ad:05:69:25:4c:dd:aa:ba:c8:30:
                    e4:6d:58:4d:1d:55:9e:03:42:55:15:27:fa:16:0c:
                    76:81:84:79:68:e0:91:8f:be:a0:73:35:7c:c5:e4:
                    ba:a6:c6:eb:fb:23:82:e3:6e:92:21:92:5d:e8:14:
                    f9:2d:b9:a0:37:3e:6e:06:15:2b:1a:fe:5c:3b:46:
                    1e:a8:dc:a8:ac:19:a6:bf:5b:13:d8:c2:da:6c:84:
                    98:d1:ee:c0:41:5b:66:13:a8:3b:c9:ad:2c:a1:b0:
                    73:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:94:9A:08:A9:26:24:79:AE:3E:76:9A:67:9E:49:7C:C5:B4:CE:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/f9b6b205-1b14-37f3-a97c-c8f542eb50ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53/80688222-2583-4dac-a7df-1d78925c7b53.crl

            X509v3 Authority Key Identifier:
                keyid:F9:A8:61:DD:F7:FB:C2:7A:E5:4F:EE:08:C6:6F:52:8D:6C:CA:5A:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/80688222-2583-4dac-a7df-1d78925c7b53.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.59.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:89:65:1c:13:11:30:c3:47:97:58:a2:3a:ff:50:43:5d:d6:
         4a:7e:74:3e:54:9f:1e:67:c8:f9:86:16:6a:8c:30:f1:4b:cd:
         b4:97:57:2c:7a:8b:18:bf:c2:85:e2:2b:43:fb:fb:1a:ea:2c:
         b7:b4:ee:72:07:ec:1f:75:04:92:53:c1:fd:15:ad:48:cd:97:
         57:87:02:14:e4:46:8d:10:80:95:ab:d3:11:db:51:54:95:d7:
         d5:1b:f3:28:82:51:11:78:39:7f:97:ba:6f:b3:80:13:59:53:
         b2:31:2f:40:13:1b:08:be:d8:e8:9f:2b:f0:12:54:0c:6c:56:
         62:b3:79:c3:06:c7:85:1d:62:4c:50:60:39:58:96:5b:46:54:
         08:99:1e:34:cc:05:60:db:64:09:96:4f:bf:70:3f:a7:ec:77:
         10:eb:72:ce:20:d8:62:1d:39:d5:c2:b0:55:da:22:62:2f:a0:
         28:27:f4:11:3f:fd:99:16:4f:5a:61:4d:e6:31:b8:22:4b:c9:
         90:ae:2d:a6:50:0d:68:29:a9:42:57:30:04:b8:4e:3f:41:56:
         e4:91:26:8a:ac:fe:c6:43:12:3f:b2:2c:7a:68:7a:73:c3:17:
         76:02:ce:4d:65:b5:32:ad:8f:5b:ec:5a:a3:f1:4e:58:01:3b:
         68:24:d5:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qn12ZZHTb7LOHAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA2ODgyMjItMjU4My00ZGFjLWE3ZGYtMWQ3ODkyNWM3
YjUzMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
YjhiYzBlY2QtZjQ4Ni00OGVmLTlkMmUtNzYxOGY0MmI3NDE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2p5SBJQXVvwWUTjLLRdFrNV+/990DZPmVkPf
hoekh2Kc6QFnw6rRvcL1MvE1Uy2F2dcrn4qz9L/1n9ntH2aXgyIQfseu4LMZle3t
SQrv/+MI7Fz3mGzXqvDj3v1SlVdIX+AbqNNiGY3tjTrz7WAIBc40p5PnldRZiSpn
QENg9/6an0/mWEogjqdVgCcC5R8lfXOo+JYGxAagEq0FaSVM3aq6yDDkbVhNHVWe
A0JVFSf6Fgx2gYR5aOCRj76gczV8xeS6psbr+yOC426SIZJd6BT5LbmgNz5uBhUr
Gv5cO0YeqNyorBmmv1sT2MLabISY0e7AQVtmE6g7ya0sobBzuwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOKUmgipJiR5rj52mmeeSXzFtM7zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4
ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4OTI1YzdiNTMvZjliNmIyMDUtMWIxNC0z
N2YzLWE5N2MtYzhmNTQyZWI1MGVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvODA2ODgyMjItMjU4My00ZGFjLWE3
ZGYtMWQ3ODkyNWM3YjUzLzgwNjg4MjIyLTI1ODMtNGRhYy1hN2RmLTFkNzg5MjVj
N2I1My5jcmwwHwYDVR0jBBgwFoAU+ahh3ff7wnrlT+4Ixm9SjWzKWrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84MDY4ODIyMi0yNTgzLTRkYWMtYTdkZi0xZDc4
OTI1YzdiNTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxztUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHSJZRwTETDDR5dYojr/UENd1kp+dD5Unx5nyPmGFmqMMPFLzbSXVyx6
ixi/woXiK0P7+xrqLLe07nIH7B91BJJTwf0VrUjNl1eHAhTkRo0QgJWr0xHbUVSV
19Ub8yiCURF4OX+Xum+zgBNZU7IxL0ATGwi+2OifK/ASVAxsVmKzecMGx4UdYkxQ
YDlYlltGVAiZHjTMBWDbZAmWT79wP6fsdxDrcs4g2GIdOdXCsFXaImIvoCgn9BE/
/ZkWT1phTeYxuCJLyZCuLaZQDWgpqUJXMAS4Tj9BVuSRJoqs/sZDEj+yLHpoenPD
F3YCzk1ltTKtj1vsWqPxTlgBO2gk1Wc=
-----END CERTIFICATE-----
Generated at Thu Jun 5 03:21:42 2025 by rpki-client