Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa
File:                     b6696447-6e07-3388-99df-856d8b12ae66.roa (raw, json)
Hash identifier:          QVqPSMNAe7bZ6krpHsnZk3MKd2VVQyk/mD1aYJ39flg=
Subject key identifier:   2C:BD:20:31:CC:BF:76:68:A6:6D:17:43:81:46:C0:6C:A5:B8:D1:24
Certificate issuer:       /CN=e0927227-fbc8-4924-89af-1885637cb07c
Certificate serial:       010D0C9F43285849E7BA7C39648FD5CB983425F4
Authority key identifier: 42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     16509
IP address blocks:        107.162.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:7c:39:64:8f:d5:cb:98:34:25:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0927227-fbc8-4924-89af-1885637cb07c
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=b3489ab3-5cdb-4548-9aec-916f606c7498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:6a:e7:9b:41:64:1a:d8:1d:89:5c:4e:23:83:
                    a5:14:f5:d8:f9:49:b5:56:b7:c9:cf:ac:03:47:fd:
                    67:3a:73:60:f6:bb:b2:ac:88:18:9d:1a:97:b1:08:
                    55:55:ed:fb:53:89:ff:4e:d9:5f:8f:f7:2a:cf:f5:
                    9b:c7:80:1c:9f:98:fb:d1:09:24:bf:bf:74:59:93:
                    ad:f3:6d:0d:61:c3:3b:25:85:09:a0:22:f0:f6:cc:
                    35:db:41:16:9d:4f:90:bc:08:1d:43:99:e8:5b:ee:
                    d0:74:cb:90:14:95:23:43:bf:c1:8e:eb:6d:ad:e7:
                    6b:bd:8b:c5:e5:43:ae:df:b9:f7:3d:6a:e8:b8:57:
                    38:a2:0d:5d:5e:76:94:58:87:50:08:d7:2b:2c:20:
                    a5:6e:6a:10:d4:c3:f4:76:0c:52:ca:ef:b5:3a:0d:
                    1e:01:c0:7f:75:c5:41:4f:0a:01:6d:a5:ff:3d:c8:
                    d5:ff:5a:8e:74:c5:95:0d:59:ad:c0:5c:43:36:a2:
                    b2:b4:04:06:3a:13:4e:08:26:a4:5a:e9:0c:41:3e:
                    32:a1:6d:24:56:b8:3f:0c:ac:7c:e8:5f:7d:34:c6:
                    1e:79:8c:df:15:41:f8:f3:00:34:f3:13:4c:7f:30:
                    41:66:6d:4f:50:ac:9d:40:22:2d:b9:d0:b4:eb:2c:
                    3a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:BD:20:31:CC:BF:76:68:A6:6D:17:43:81:46:C0:6C:A5:B8:D1:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/b6696447-6e07-3388-99df-856d8b12ae66.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c/e0927227-fbc8-4924-89af-1885637cb07c.crl

            X509v3 Authority Key Identifier:
                keyid:42:D4:C0:D6:AB:19:EE:81:22:57:BD:C2:B6:88:1C:A1:71:C0:7F:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/e0927227-fbc8-4924-89af-1885637cb07c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.162.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         13:a6:34:a4:ef:fe:7a:7a:f0:58:4e:63:fa:7f:6a:34:14:b7:
         7c:85:ca:8d:f1:b9:b0:2e:a6:83:63:dd:67:28:de:05:ee:fa:
         a0:3f:20:65:f6:89:fc:e1:16:8a:82:4c:a3:ec:02:c3:54:e0:
         13:08:89:19:4d:d5:ce:7f:cb:8e:44:ee:44:05:42:4d:2c:a7:
         7a:75:14:ba:05:e4:33:83:ce:cf:f7:72:0a:08:f4:15:1e:54:
         ec:57:08:fa:d4:c3:e8:84:5c:49:93:1e:6f:dd:c2:de:82:aa:
         38:a9:5e:75:e5:30:52:ce:24:ad:de:18:54:de:30:4b:43:4a:
         32:c9:00:35:a3:e2:e6:ea:55:c3:ab:37:47:38:39:9c:a9:bf:
         c1:1c:12:c9:4e:46:e5:3e:1a:3f:77:57:23:f6:f3:70:5a:3b:
         cc:07:2e:8e:32:f0:e7:be:74:98:e0:b3:3c:d5:f5:01:d1:d5:
         28:e6:67:7c:7a:46:71:ea:1b:73:21:23:1b:94:7e:26:90:7d:
         4c:de:c9:b3:aa:ec:04:cf:7d:e8:a5:6a:4c:34:6d:79:dc:55:
         48:cc:ca:d1:be:77:7c:68:58:7a:d0:e8:0a:df:df:5a:bc:5c:
         ae:4c:de:a5:3d:58:71:25:59:f9:09:f7:f4:45:46:2b:e1:bb:
         5a:c7:50:a8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunw5ZI/Vy5g0JfQwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA5MjcyMjctZmJjOC00OTI0LTg5YWYtMTg4NTYzN2Ni
MDdjMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
YjM0ODlhYjMtNWNkYi00NTQ4LTlhZWMtOTE2ZjYwNmM3NDk4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2rnm0FkGtgdiVxOI4OlFPXY+Um1VrfJz6wD
R/1nOnNg9ruyrIgYnRqXsQhVVe37U4n/Ttlfj/cqz/Wbx4Acn5j70Qkkv790WZOt
820NYcM7JYUJoCLw9sw120EWnU+QvAgdQ5noW+7QdMuQFJUjQ7/BjuttredrvYvF
5UOu37n3PWrouFc4og1dXnaUWIdQCNcrLCClbmoQ1MP0dgxSyu+1Og0eAcB/dcVB
TwoBbaX/PcjV/1qOdMWVDVmtwFxDNqKytAQGOhNOCCakWukMQT4yoW0kVrg/DKx8
6F99NMYeeYzfFUH48wA08xNMfzBBZm1PUKydQCItudC06yw6JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCy9IDHMv3Zopm0XQ4FGwGyluNEkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9lMDky
NzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1NjM3Y2IwN2MvYjY2OTY0NDctNmUwNy0z
Mzg4LTk5ZGYtODU2ZDhiMTJhZTY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZTA5MjcyMjctZmJjOC00OTI0LTg5
YWYtMTg4NTYzN2NiMDdjL2UwOTI3MjI3LWZiYzgtNDkyNC04OWFmLTE4ODU2Mzdj
YjA3Yy5jcmwwHwYDVR0jBBgwFoAUQtTA1qsZ7oEiV73CtogcoXHAf8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9lMDkyNzIyNy1mYmM4LTQ5MjQtODlhZi0xODg1
NjM3Y2IwN2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa6L8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABOmNKTv/np68FhOY/p/ajQUt3yFyo3xubAupoNj3Wco3gXu+qA/IGX2
ifzhFoqCTKPsAsNU4BMIiRlN1c5/y45E7kQFQk0sp3p1FLoF5DODzs/3cgoI9BUe
VOxXCPrUw+iEXEmTHm/dwt6CqjipXnXlMFLOJK3eGFTeMEtDSjLJADWj4ubqVcOr
N0c4OZypv8EcEslORuU+Gj93VyP283BaO8wHLo4y8Oe+dJjgszzV9QHR1SjmZ3x6
RnHqG3MhIxuUfiaQfUzeybOq7ATPfeilakw0bXncVUjMytG+d3xoWHrQ6Arf31q8
XK5M3qU9WHElWfkJ9/RFRivhu1rHUKg=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:57:51 2025 by rpki-client