Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa
File:                     573593e1-8382-308a-91d3-e0a5a344e95b.roa (raw, json)
Hash identifier:          m8eR2UubmMT5tK7W2VMCfUtU+fanDeQpKytA1AcqT9Q=
Subject key identifier:   E7:8E:34:9D:2A:30:FF:47:AD:2A:42:E9:5E:72:67:95:1A:6F:F6:8E
Certificate issuer:       /CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa
Certificate serial:       010D0C9F432858494B64201BA54F684FE9A73F80
Authority key identifier: 39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa
Signing time:             Mon 24 Mar 2025 13:00:53 +0000
ROA not before:           Mon 24 Mar 2025 13:00:53 +0000
ROA not after:            Sun 22 Jun 2025 13:00:53 +0000
asID:                     53356
IP address blocks:        140.235.168.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:4b:64:20:1b:a5:4f:68:4f:e9:a7:3f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=997dfd51-5907-4d93-8ce3-05b9bc754eaa
        Validity
            Not Before: Mar 24 13:00:53 2025 GMT
            Not After : Jun 22 13:00:53 2025 GMT
        Subject: CN=6a0fb00d-bd0a-4d86-8f49-6a3e6b0e01af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:47:6d:ee:4e:af:65:19:23:8c:9f:7f:a6:14:
                    ff:90:6f:43:4a:6a:ce:50:af:30:d7:49:c8:fd:6c:
                    7c:4d:a7:88:d9:25:12:de:4f:9e:43:b0:00:fe:44:
                    d4:bb:83:43:d5:34:39:d9:62:d9:b5:8d:a6:46:51:
                    5e:73:d2:fb:21:55:b5:29:33:52:9a:f3:78:c0:26:
                    9f:d2:1a:30:26:39:fd:40:3f:e9:72:fa:6c:57:75:
                    6f:3a:fb:bb:74:b3:d3:08:fb:2e:5e:87:6f:ed:7c:
                    15:45:de:58:12:94:5a:78:fc:90:d7:d4:c3:a6:0e:
                    85:df:86:91:49:2a:5c:dc:9b:9d:c0:f5:5b:e0:b5:
                    13:d3:67:3d:80:c2:a0:04:98:e3:09:3c:ab:21:01:
                    3e:78:ef:f7:56:1a:2d:bc:34:5f:79:c8:eb:d2:f3:
                    dd:2e:b2:33:dc:06:23:a1:ec:12:21:2c:bb:84:28:
                    5f:19:5d:10:53:1e:15:a1:28:e4:29:44:ac:df:f2:
                    cf:05:ed:52:d2:8d:db:cc:99:a5:f3:6a:b5:07:f5:
                    af:7d:b2:a1:7c:69:a9:20:50:5a:51:df:3e:bb:d1:
                    cd:ad:eb:9f:eb:d6:c6:4f:6a:58:e2:7a:05:0b:89:
                    14:71:fa:05:8c:9f:26:d1:86:c2:b5:c8:1e:c5:db:
                    03:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:8E:34:9D:2A:30:FF:47:AD:2A:42:E9:5E:72:67:95:1A:6F:F6:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/573593e1-8382-308a-91d3-e0a5a344e95b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa/997dfd51-5907-4d93-8ce3-05b9bc754eaa.crl

            X509v3 Authority Key Identifier:
                keyid:39:23:B8:33:30:B7:D1:CD:A1:83:63:B8:D4:CF:17:FE:D6:91:64:94

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/997dfd51-5907-4d93-8ce3-05b9bc754eaa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.235.168.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:b4:fa:02:d9:25:ec:61:b2:0b:fe:b7:3f:41:4f:36:90:0e:
         64:36:47:a8:d7:2f:70:70:79:35:65:c0:7a:f1:58:4a:52:e2:
         5e:90:2b:cb:80:e1:4b:83:31:7f:fa:e0:a9:6f:87:61:c2:36:
         70:78:ff:1f:1a:35:ed:aa:9f:61:98:53:8e:15:7c:9e:2f:49:
         3c:f0:38:69:b9:64:87:66:36:df:7a:9b:02:12:a1:af:c5:08:
         bb:b5:be:dc:90:c8:5c:f4:8a:55:6b:0b:f9:dd:22:6b:d0:94:
         b4:b7:cf:85:30:d5:96:5a:24:d7:c8:29:7c:be:25:90:57:09:
         5e:fa:d7:74:b9:2e:cc:af:54:69:a0:32:c1:5a:75:d7:e6:bc:
         9f:5b:7f:c7:fb:5a:bd:fe:57:14:77:4a:4b:5b:1c:bf:4e:89:
         09:35:ef:7f:86:50:49:a6:39:e7:0e:c9:9a:e5:b0:68:60:f0:
         25:18:29:77:6f:ee:00:b9:a3:23:34:a1:83:ca:94:b6:bb:59:
         b4:7c:90:52:e5:79:42:d5:8e:60:ab:9b:4f:bf:5f:94:93:a7:
         07:78:88:e0:1b:08:f1:c2:8b:63:fb:3a:f9:5f:66:2c:d9:73:
         8e:40:31:c6:bb:a7:2e:08:7a:16:bf:d2:bd:86:cd:22:1c:c6:
         86:45:bc:e8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElLZCAbpU9oT+mnP4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk3ZGZkNTEtNTkwNy00ZDkzLThjZTMtMDViOWJjNzU0
ZWFhMB4XDTI1MDMyNDEzMDA1M1oXDTI1MDYyMjEzMDA1M1owLzEtMCsGA1UEAxMk
NmEwZmIwMGQtYmQwYS00ZDg2LThmNDktNmEzZTZiMGUwMWFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkkdt7k6vZRkjjJ9/phT/kG9DSmrOUK8w10nI
/Wx8TaeI2SUS3k+eQ7AA/kTUu4ND1TQ52WLZtY2mRlFec9L7IVW1KTNSmvN4wCaf
0howJjn9QD/pcvpsV3VvOvu7dLPTCPsuXodv7XwVRd5YEpRaePyQ19TDpg6F34aR
SSpc3JudwPVb4LUT02c9gMKgBJjjCTyrIQE+eO/3VhotvDRfecjr0vPdLrIz3AYj
oewSISy7hChfGV0QUx4VoSjkKUSs3/LPBe1S0o3bzJml82q1B/WvfbKhfGmpIFBa
Ud8+u9HNreuf69bGT2pY4noFC4kUcfoFjJ8m0YbCtcgexdsD+wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOeONJ0qMP9HrSpC6V5yZ5Uab/aOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85OTdk
ZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5YmM3NTRlYWEvNTczNTkzZTEtODM4Mi0z
MDhhLTkxZDMtZTBhNWEzNDRlOTViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTk3ZGZkNTEtNTkwNy00ZDkzLThj
ZTMtMDViOWJjNzU0ZWFhLzk5N2RmZDUxLTU5MDctNGQ5My04Y2UzLTA1YjliYzc1
NGVhYS5jcmwwHwYDVR0jBBgwFoAUOSO4MzC30c2hg2O41M8X/taRZJQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85OTdkZmQ1MS01OTA3LTRkOTMtOGNlMy0wNWI5
YmM3NTRlYWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCjOuoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACS0+gLZJexhsgv+tz9BTzaQDmQ2R6jXL3BweTVlwHrxWEpS4l6QK8uA
4UuDMX/64Klvh2HCNnB4/x8aNe2qn2GYU44VfJ4vSTzwOGm5ZIdmNt96mwISoa/F
CLu1vtyQyFz0ilVrC/ndImvQlLS3z4Uw1ZZaJNfIKXy+JZBXCV7613S5LsyvVGmg
MsFaddfmvJ9bf8f7Wr3+VxR3SktbHL9OiQk173+GUEmmOecOyZrlsGhg8CUYKXdv
7gC5oyM0oYPKlLa7WbR8kFLleULVjmCrm0+/X5STpwd4iOAbCPHCi2P7OvlfZizZ
c45AMca7py4Ieha/0r2GzSIcxoZFvOg=
-----END CERTIFICATE-----
Generated at Tue Apr 22 22:03:30 2025 by rpki-client