Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/c784d42e-2c47-31bd-bea7-2d1562fa092d.roa
File:                     c784d42e-2c47-31bd-bea7-2d1562fa092d.roa (raw, json)
Hash identifier:          WSu0VVpvgjys3jbm+rBWt8whLz02eSXAkfcv0TO/mWY=
Subject key identifier:   47:8D:79:27:E9:E5:FD:5D:54:04:57:E2:A0:6F:21:9C:52:3C:4E:02
Certificate issuer:       /CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
Certificate serial:       010D0C9F43285849088172F0EECD42BEFF880A60
Authority key identifier: 6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/c784d42e-2c47-31bd-bea7-2d1562fa092d.roa
Signing time:             Fri 28 Feb 2025 14:00:52 +0000
ROA not before:           Fri 28 Feb 2025 14:00:52 +0000
ROA not after:            Thu 29 May 2025 13:00:52 +0000
asID:                     53991
IP address blocks:        162.244.6.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:08:81:72:f0:ee:cd:42:be:ff:88:0a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db2617c0-03f4-4ad7-9d11-36b2c6496b7d
        Validity
            Not Before: Feb 28 14:00:52 2025 GMT
            Not After : May 29 13:00:52 2025 GMT
        Subject: CN=d551e173-c8c3-4b55-8135-390f7559dd41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:52:27:6c:73:ab:2f:cc:39:a9:38:49:31:60:
                    fe:6b:18:58:69:73:63:03:ae:08:8c:af:55:4f:15:
                    bd:fa:ca:0c:b7:53:1b:b6:2f:f6:fe:35:98:d6:e0:
                    72:f6:62:85:99:0c:a2:ba:1b:43:8b:a0:6a:23:06:
                    05:55:ee:3c:7a:dd:ec:37:f4:80:d8:f5:d6:aa:0e:
                    64:2b:ed:8f:f1:93:28:74:f6:49:d3:0a:ed:df:30:
                    e9:77:c5:ca:e0:22:ad:7e:91:b8:36:19:ba:41:98:
                    9e:46:10:86:8b:5f:2d:20:fb:7f:cb:dc:56:5b:68:
                    76:a2:72:34:b6:1f:06:60:80:85:15:e9:ef:2d:ed:
                    00:3c:2b:97:ea:cb:64:28:0d:fc:9b:74:bd:9b:55:
                    12:b8:2e:67:23:d3:ca:9f:64:9b:5c:e0:24:af:20:
                    32:6d:46:1d:de:60:e6:dc:fe:aa:95:4b:32:22:66:
                    bd:79:23:71:03:e9:ca:01:fa:91:fc:ba:5b:66:1f:
                    e8:92:c6:e4:33:e1:35:1e:1b:6a:ec:4c:6a:41:2d:
                    eb:63:64:1e:84:7b:bc:72:31:99:92:9f:07:e9:54:
                    46:fd:fd:a0:19:3c:47:54:78:52:9a:f4:cc:7d:51:
                    6a:f7:8c:5d:bf:36:7b:8d:02:b3:db:55:f6:32:75:
                    6b:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:8D:79:27:E9:E5:FD:5D:54:04:57:E2:A0:6F:21:9C:52:3C:4E:02
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/c784d42e-2c47-31bd-bea7-2d1562fa092d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:8C:BC:63:FE:23:D7:C4:A8:06:09:3A:B5:B6:A1:6A:A3:94:58:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/db2617c0-03f4-4ad7-9d11-36b2c6496b7d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.244.6.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:bc:ab:dc:29:5c:6f:56:7e:c5:fe:0f:cb:be:df:43:09:21:
         46:6d:13:5b:79:89:c3:8f:0f:0f:a9:6d:fc:c8:56:4f:36:41:
         d3:67:f2:97:66:f4:86:2a:40:c5:c9:54:b8:5b:cd:88:ac:c0:
         95:80:f2:e2:57:c9:96:73:57:b2:d3:21:7c:b5:54:7c:9d:ab:
         96:6c:96:25:87:24:71:69:0b:a7:49:98:08:52:3f:2a:6f:c6:
         57:49:b0:1b:13:61:5c:46:73:8a:33:ff:52:1d:ae:b9:63:ee:
         4a:85:5e:11:55:32:16:85:e7:d7:fe:a8:ea:0b:9b:a6:36:96:
         c3:b1:7f:2c:63:36:0e:33:91:5b:54:50:2a:04:06:b1:09:f2:
         70:cc:ba:43:e5:ff:65:ad:fb:c9:55:3a:e3:b5:e8:34:d7:1a:
         99:c6:78:5b:19:60:cc:18:db:dc:a1:ca:9a:b5:75:27:4d:d6:
         44:7d:78:83:89:77:69:87:20:34:da:fe:31:f2:90:31:37:60:
         36:3a:f5:c3:57:35:90:24:d0:ab:6a:91:95:fd:31:d2:5b:e5:
         dd:ab:43:94:77:c3:ce:72:e1:63:97:be:62:22:48:3f:38:30:
         28:4a:4a:ce:df:75:f4:23:90:97:ea:aa:03:8a:e3:97:be:e4:
         e8:b7:04:43
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkIgXLw7s1Cvv+ICmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGIyNjE3YzAtMDNmNC00YWQ3LTlkMTEtMzZiMmM2NDk2
YjdkMB4XDTI1MDIyODE0MDA1MloXDTI1MDUyOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZDU1MWUxNzMtYzhjMy00YjU1LTgxMzUtMzkwZjc1NTlkZDQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkFInbHOrL8w5qThJMWD+axhYaXNjA64IjK9V
TxW9+soMt1Mbti/2/jWY1uBy9mKFmQyiuhtDi6BqIwYFVe48et3sN/SA2PXWqg5k
K+2P8ZModPZJ0wrt3zDpd8XK4CKtfpG4Nhm6QZieRhCGi18tIPt/y9xWW2h2onI0
th8GYICFFenvLe0APCuX6stkKA38m3S9m1USuC5nI9PKn2SbXOAkryAybUYd3mDm
3P6qlUsyIma9eSNxA+nKAfqR/LpbZh/oksbkM+E1Hhtq7ExqQS3rY2QehHu8cjGZ
kp8H6VRG/f2gGTxHVHhSmvTMfVFq94xdvzZ7jQKz21X2MnVrFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEeNeSfp5f1dVARX4qBvIZxSPE4CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2
MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIyYzY0OTZiN2QvYzc4NGQ0MmUtMmM0Ny0z
MWJkLWJlYTctMmQxNTYyZmEwOTJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZGIyNjE3YzAtMDNmNC00YWQ3LTlk
MTEtMzZiMmM2NDk2YjdkL2RiMjYxN2MwLTAzZjQtNGFkNy05ZDExLTM2YjJjNjQ5
NmI3ZC5jcmwwHwYDVR0jBBgwFoAUb4y8Y/4j18SoBgk6tbahaqOUWLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9kYjI2MTdjMC0wM2Y0LTRhZDctOWQxMS0zNmIy
YzY0OTZiN2QuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBovQGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFu8q9wpXG9WfsX+D8u+30MJIUZtE1t5icOPDw+pbfzIVk82QdNn8pdm
9IYqQMXJVLhbzYiswJWA8uJXyZZzV7LTIXy1VHydq5ZsliWHJHFpC6dJmAhSPypv
xldJsBsTYVxGc4oz/1Idrrlj7kqFXhFVMhaF59f+qOoLm6Y2lsOxfyxjNg4zkVtU
UCoEBrEJ8nDMukPl/2Wt+8lVOuO16DTXGpnGeFsZYMwY29yhypq1dSdN1kR9eIOJ
d2mHIDTa/jHykDE3YDY69cNXNZAk0KtqkZX9MdJb5d2rQ5R3w85y4WOXvmIiSD84
MChKSs7fdfQjkJfqqgOK45e+5Oi3BEM=
-----END CERTIFICATE-----
Generated at Wed Apr 9 00:57:58 2025 by rpki-client