Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/59f8a82a-d914-3918-8169-a4b50d27db99.roa
File:                     59f8a82a-d914-3918-8169-a4b50d27db99.roa (raw, json)
Hash identifier:          H++5A/NbIQxBwa8lxXFc78KGtgSuZkguh8y7gd/z3go=
Subject key identifier:   98:44:4A:12:F5:0E:8E:9D:3C:6E:52:CD:6F:3F:D1:08:B8:DC:8F:89
Certificate issuer:       /CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
Certificate serial:       010D0C9F4328584943A17345C3F717FF316B9E80
Authority key identifier: 7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/59f8a82a-d914-3918-8169-a4b50d27db99.roa
Signing time:             Fri 21 Mar 2025 18:18:17 +0000
ROA not before:           Fri 21 Mar 2025 18:18:17 +0000
ROA not after:            Thu 19 Jun 2025 18:18:17 +0000
asID:                     6461
IP address blocks:        140.235.20.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:43:a1:73:45:c3:f7:17:ff:31:6b:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b8cec25-d1c2-4372-bf39-1fe2015ee1a9
        Validity
            Not Before: Mar 21 18:18:17 2025 GMT
            Not After : Jun 19 18:18:17 2025 GMT
        Subject: CN=c4f3b304-5156-4c7d-a292-73746c594aa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:1c:8d:90:73:c7:98:1e:29:65:a4:67:c8:09:
                    00:89:8d:27:e7:ce:2a:a7:b9:a5:0e:78:ec:b5:02:
                    cd:d5:50:a0:06:6d:d0:67:9a:4a:b2:ce:f7:e1:5a:
                    dc:99:7e:b5:3c:9f:57:1b:af:f5:0d:eb:5f:0a:e4:
                    c0:69:17:38:3b:18:db:02:f6:f5:ec:ec:bd:8f:bf:
                    32:63:af:1a:29:46:d0:07:ff:82:42:4d:41:fd:8a:
                    39:c8:3f:b7:06:bd:3d:1f:84:c4:95:8c:39:34:13:
                    ac:d7:b7:a0:0a:92:78:9c:2b:6f:31:41:35:22:64:
                    14:51:cd:ae:b2:05:c3:b1:ba:53:ac:01:ad:56:c7:
                    1e:a5:2b:0f:ab:bf:19:e3:73:dd:71:9c:1f:41:67:
                    a7:15:08:9b:9a:bc:8f:43:27:ac:26:cf:5f:49:9f:
                    ed:67:b3:99:f1:95:f7:0d:ba:52:c6:73:e9:55:7f:
                    e2:51:3a:1f:bc:f2:0e:06:ac:84:d8:d7:62:7a:c1:
                    5c:36:68:01:f8:f6:b1:12:f4:fc:4e:e1:a4:0d:c6:
                    fd:14:08:18:f3:d7:0f:3a:b1:9f:f6:be:02:30:5d:
                    2e:34:e4:79:ca:0d:8d:d9:eb:cd:d4:b2:51:77:a6:
                    2f:aa:18:00:72:60:f6:ee:de:0f:8a:75:2e:df:af:
                    16:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:44:4A:12:F5:0E:8E:9D:3C:6E:52:CD:6F:3F:D1:08:B8:DC:8F:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/59f8a82a-d914-3918-8169-a4b50d27db99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.crl

            X509v3 Authority Key Identifier:
                keyid:7C:94:A1:84:50:BD:35:0E:33:CA:66:4A:B4:E0:66:EE:F1:0A:3B:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/3b8cec25-d1c2-4372-bf39-1fe2015ee1a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.20.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8b:7a:5c:92:bd:fc:37:3e:52:ab:04:1a:81:7e:2d:5c:45:
         b3:95:91:0f:1f:98:28:ee:bb:3a:d9:1c:1f:e9:47:e1:f1:ff:
         27:5e:11:8d:52:82:8c:f0:2a:33:4c:ed:ae:a0:e5:9a:66:a6:
         18:dc:cf:a7:d6:b1:68:a8:4f:bf:50:e0:02:79:a7:12:de:36:
         73:20:ae:7d:de:29:fd:5c:30:ec:bf:dc:04:32:c7:d9:4d:14:
         92:ce:6e:75:23:59:a2:5a:eb:29:41:cd:c6:90:35:22:3b:15:
         44:c2:d6:a3:04:9e:14:08:a5:05:96:b2:52:33:d3:2e:06:18:
         ec:67:e6:b1:61:01:87:ab:f6:cc:f5:03:2c:fe:a7:55:c6:66:
         aa:de:1f:f7:d1:5f:eb:c3:2c:f4:a0:7a:87:b2:c0:3c:fe:5d:
         fd:dd:25:31:c9:55:f4:c3:04:a2:d7:80:d1:ed:53:16:dd:0d:
         df:9d:4d:7b:70:4d:7f:54:9a:e5:ed:c0:fe:a9:e3:b0:ba:d9:
         11:d2:f9:75:20:bf:02:80:b6:bf:83:68:dd:61:81:e3:2d:90:
         44:6d:b6:c1:de:c5:ef:ef:b1:1a:4d:66:75:d0:32:9f:97:b9:
         8a:75:a7:b1:f5:fb:b0:40:dd:33:9f:f3:ff:20:08:7e:c8:0d:
         ac:07:0a:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElDoXNFw/cX/zFrnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I4Y2VjMjUtZDFjMi00MzcyLWJmMzktMWZlMjAxNWVl
MWE5MB4XDTI1MDMyMTE4MTgxN1oXDTI1MDYxOTE4MTgxN1owLzEtMCsGA1UEAxMk
YzRmM2IzMDQtNTE1Ni00YzdkLWEyOTItNzM3NDZjNTk0YWExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAthyNkHPHmB4pZaRnyAkAiY0n584qp7mlDnjs
tQLN1VCgBm3QZ5pKss734VrcmX61PJ9XG6/1DetfCuTAaRc4OxjbAvb17Oy9j78y
Y68aKUbQB/+CQk1B/Yo5yD+3Br09H4TElYw5NBOs17egCpJ4nCtvMUE1ImQUUc2u
sgXDsbpTrAGtVscepSsPq78Z43PdcZwfQWenFQibmryPQyesJs9fSZ/tZ7OZ8ZX3
DbpSxnPpVX/iUTofvPIOBqyE2NdiesFcNmgB+PaxEvT8TuGkDcb9FAgY89cPOrGf
9r4CMF0uNOR5yg2N2evN1LJRd6YvqhgAcmD27t4PinUu368WjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJhEShL1Do6dPG5SzW8/0Qi43I+JMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhj
ZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUyMDE1ZWUxYTkvNTlmOGE4MmEtZDkxNC0z
OTE4LTgxNjktYTRiNTBkMjdkYjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvM2I4Y2VjMjUtZDFjMi00MzcyLWJm
MzktMWZlMjAxNWVlMWE5LzNiOGNlYzI1LWQxYzItNDM3Mi1iZjM5LTFmZTIwMTVl
ZTFhOS5jcmwwHwYDVR0jBBgwFoAUfJShhFC9NQ4zymZKtOBm7vEKO+wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS8zYjhjZWMyNS1kMWMyLTQzNzItYmYzOS0xZmUy
MDE1ZWUxYTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOsUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKLelySvfw3PlKrBBqBfi1cRbOVkQ8fmCjuuzrZHB/pR+Hx/ydeEY1S
gozwKjNM7a6g5Zpmphjcz6fWsWioT79Q4AJ5pxLeNnMgrn3eKf1cMOy/3AQyx9lN
FJLObnUjWaJa6ylBzcaQNSI7FUTC1qMEnhQIpQWWslIz0y4GGOxn5rFhAYer9sz1
Ayz+p1XGZqreH/fRX+vDLPSgeoeywDz+Xf3dJTHJVfTDBKLXgNHtUxbdDd+dTXtw
TX9UmuXtwP6p47C62RHS+XUgvwKAtr+DaN1hgeMtkERttsHexe/vsRpNZnXQMp+X
uYp1p7H1+7BA3TOf8/8gCH7IDawHCkw=
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:45:22 2025 by rpki-client