Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
File:                     deb82444-9814-3ad1-89d4-94623846e812.roa (raw, json)
Hash identifier:          wjJXMc8gG4P7zeG3HZ/JmW8kWslCEtXM04LeXS6YvdQ=
Subject key identifier:   05:F4:7F:3D:5C:72:A4:0B:28:CA:93:4E:12:0D:64:52:CD:BE:71:D4
Certificate issuer:       /CN=137d13b4-f566-472a-a0e3-33b1db18e660
Certificate serial:       010D0C9F432858491511586A43D7E09EC114E0C0
Authority key identifier: A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa
Signing time:             Wed 05 Mar 2025 02:00:40 +0000
ROA not before:           Wed 05 Mar 2025 02:00:40 +0000
ROA not after:            Tue 03 Jun 2025 01:00:40 +0000
asID:                     5664
IP address blocks:        142.55.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:15:11:58:6a:43:d7:e0:9e:c1:14:e0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=137d13b4-f566-472a-a0e3-33b1db18e660
        Validity
            Not Before: Mar  5 02:00:40 2025 GMT
            Not After : Jun  3 01:00:40 2025 GMT
        Subject: CN=3dee7689-9477-488a-be4a-40a87f08e76a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:e2:c6:17:2a:0f:7b:cc:7a:0d:a6:7e:21:2a:
                    b9:43:cb:c6:8b:2b:99:bf:12:53:ec:97:4a:41:8f:
                    b1:4b:c2:df:c4:32:46:91:eb:22:79:42:e9:a7:40:
                    19:3c:b8:f4:b2:74:df:78:67:c0:df:36:36:8e:7c:
                    4b:df:70:45:bb:ef:62:7c:e1:38:33:c4:b4:59:91:
                    ec:11:a0:bf:8f:51:df:01:03:04:e9:4a:f6:c4:af:
                    fb:c2:78:93:85:e8:63:5f:25:51:89:c0:52:a3:23:
                    04:93:86:b0:6f:11:23:d0:41:64:16:43:60:c9:8d:
                    a5:26:dd:fb:4a:59:88:e1:c6:59:7c:eb:54:64:52:
                    0b:1f:e8:f6:db:d1:a9:42:c8:d9:a5:58:5f:60:a5:
                    48:a0:05:c9:31:29:f2:a5:24:ed:03:71:2c:ea:61:
                    83:6b:03:7b:d3:52:7a:7a:47:a8:98:c8:56:a8:7f:
                    3d:db:f9:10:14:85:eb:10:1d:a1:f9:7b:f7:d5:a0:
                    b3:d4:ad:4b:1a:31:3b:fe:9a:58:4b:f7:35:b3:bc:
                    80:96:f9:b2:55:0e:e6:fd:67:86:f4:9a:41:00:2e:
                    7d:d1:72:04:2a:a2:7b:43:84:80:45:58:bb:31:be:
                    7a:f1:d7:a6:fe:7f:c1:6b:7f:b8:18:3e:ed:07:d1:
                    6e:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F4:7F:3D:5C:72:A4:0B:28:CA:93:4E:12:0D:64:52:CD:BE:71:D4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/deb82444-9814-3ad1-89d4-94623846e812.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660/137d13b4-f566-472a-a0e3-33b1db18e660.crl

            X509v3 Authority Key Identifier:
                keyid:A7:FE:83:1A:7E:D1:50:1E:BB:13:21:DB:88:04:6C:CE:A5:46:64:C2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/137d13b4-f566-472a-a0e3-33b1db18e660.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.55.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:8d:7b:32:0f:c7:3b:1a:1f:18:1f:f1:2e:8e:be:83:a0:d1:
         62:fa:b9:2e:31:5e:51:71:64:57:c7:12:4e:01:d8:b7:7a:fd:
         7f:61:19:9b:c6:24:e1:3d:d3:34:c8:09:aa:b5:42:0b:97:23:
         80:f3:33:22:fe:8d:93:e0:20:22:c3:4b:61:ba:33:06:00:3c:
         9e:30:4c:c0:27:94:b0:07:5f:9d:8c:1f:86:83:ad:00:07:57:
         ed:9d:96:68:5a:d0:58:3a:37:25:aa:3c:5f:00:1e:3a:4b:70:
         76:a6:9c:80:5a:98:39:dd:f8:b7:c2:4d:65:be:f4:71:ca:3c:
         43:cb:b2:7a:a5:aa:9c:d6:94:10:20:65:0b:c2:58:0d:4c:36:
         35:2f:18:d5:90:05:41:b2:48:a6:8d:28:27:42:e9:92:e1:d4:
         4a:99:b0:9a:60:0c:4e:73:5e:89:b5:4c:ec:1c:de:2c:37:fb:
         35:66:01:5e:d8:2b:d8:ee:76:16:c1:8e:c1:60:c8:24:62:eb:
         95:e3:20:d7:ca:a3:bb:50:4f:aa:a1:3f:ba:e4:3f:4a:8f:6f:
         ce:ee:63:5c:57:9f:49:ee:f9:ac:27:01:3b:eb:c3:a9:ad:d9:
         07:db:93:f1:ca:fc:f2:6e:e0:ca:fe:87:fe:8d:b0:3c:cc:cf:
         52:ce:8a:b9
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEkVEVhqQ9fgnsEU4MAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTM3ZDEzYjQtZjU2Ni00NzJhLWEwZTMtMzNiMWRiMThl
NjYwMB4XDTI1MDMwNTAyMDA0MFoXDTI1MDYwMzAxMDA0MFowLzEtMCsGA1UEAxMk
M2RlZTc2ODktOTQ3Ny00ODhhLWJlNGEtNDBhODdmMDhlNzZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyeLGFyoPe8x6DaZ+ISq5Q8vGiyuZvxJT7JdK
QY+xS8LfxDJGkesieULpp0AZPLj0snTfeGfA3zY2jnxL33BFu+9ifOE4M8S0WZHs
EaC/j1HfAQME6Ur2xK/7wniThehjXyVRicBSoyMEk4awbxEj0EFkFkNgyY2lJt37
SlmI4cZZfOtUZFILH+j229GpQsjZpVhfYKVIoAXJMSnypSTtA3Es6mGDawN701J6
ekeomMhWqH892/kQFIXrEB2h+Xv31aCz1K1LGjE7/ppYS/c1s7yAlvmyVQ7m/WeG
9JpBAC590XIEKqJ7Q4SARVi7Mb568dem/n/Ba3+4GD7tB9FunwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAX0fz1ccqQLKMqTThINZFLNvnHUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8xMzdk
MTNiNC1mNTY2LTQ3MmEtYTBlMy0zM2IxZGIxOGU2NjAvZGViODI0NDQtOTgxNC0z
YWQxLTg5ZDQtOTQ2MjM4NDZlODEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvMTM3ZDEzYjQtZjU2Ni00NzJhLWEw
ZTMtMzNiMWRiMThlNjYwLzEzN2QxM2I0LWY1NjYtNDcyYS1hMGUzLTMzYjFkYjE4
ZTY2MC5jcmwwHwYDVR0jBBgwFoAUp/6DGn7RUB67EyHbiARszqVGZMIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8xMzdkMTNiNC1mNTY2LTQ3MmEtYTBlMy0zM2Ix
ZGIxOGU2NjAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjjcwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAvY17Mg/HOxofGB/xLo6+g6DRYvq5LjFeUXFkV8cSTgHYt3r9f2EZm8Yk
4T3TNMgJqrVCC5cjgPMzIv6Nk+AgIsNLYbozBgA8njBMwCeUsAdfnYwfhoOtAAdX
7Z2WaFrQWDo3Jao8XwAeOktwdqacgFqYOd34t8JNZb70cco8Q8uyeqWqnNaUECBl
C8JYDUw2NS8Y1ZAFQbJIpo0oJ0LpkuHUSpmwmmAMTnNeibVM7BzeLDf7NWYBXtgr
2O52FsGOwWDIJGLrleMg18qju1BPqqE/uuQ/So9vzu5jXFefSe75rCcBO+vDqa3Z
B9uT8cr88m7gyv6H/o2wPMzPUs6KuQ==
-----END CERTIFICATE-----
Generated at Fri Mar 14 11:16:23 2025 by rpki-client