Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa
File:                     d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa (raw, json)
Hash identifier:          5L1V7WrUEC6VGJ6Nw7GNTYQzivXWx+pR3cFWdC6cIMs=
Subject key identifier:   CA:3E:D4:64:7B:16:C3:8B:75:F4:B0:27:FE:76:53:8D:CB:C5:C1:5E
Certificate issuer:       /CN=53047e29-2570-4585-9e69-b23797196c26
Certificate serial:       010D0C9F43285848F22BE2523034D923F8A4EBC0
Authority key identifier: C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     397183
IP address blocks:        158.116.32.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2b:e2:52:30:34:d9:23:f8:a4:eb:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53047e29-2570-4585-9e69-b23797196c26
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=c9d126bb-8e0f-47a1-8ee7-f64d4d1601b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:31:4d:26:5a:78:c9:50:84:f9:78:91:d6:
                    39:53:51:b4:4f:67:57:c6:72:f3:c6:72:fe:dd:07:
                    30:3d:9a:33:e6:47:a3:db:69:b8:c8:b2:3d:13:c2:
                    17:58:46:da:6b:48:42:0f:15:bc:84:f6:90:58:ac:
                    31:1d:07:af:8f:5d:b8:c3:99:0e:a6:f1:74:c6:64:
                    9c:1f:3f:fa:be:ad:b6:ea:7f:d2:68:01:69:a1:07:
                    dd:69:fd:86:31:f2:8d:b5:ab:11:c0:cd:24:96:d7:
                    65:e3:35:1d:17:42:dc:6f:32:0e:1b:b1:6a:fa:38:
                    54:ad:9c:2a:4e:63:db:51:a6:22:c1:5a:6a:18:0f:
                    bf:60:62:11:d3:e3:0c:c0:de:f5:33:15:32:f5:fb:
                    19:5a:f3:b9:47:da:71:4b:4a:c6:b9:47:b9:f7:26:
                    14:29:d4:e0:2b:d0:b2:16:30:4b:83:06:b5:cc:45:
                    81:4c:0d:81:af:6d:98:0d:bf:46:cf:6f:78:ba:76:
                    7b:45:d0:be:a3:f5:6b:d4:07:9e:7a:b8:6e:40:ed:
                    36:63:15:e5:f4:2e:63:07:cb:fc:59:ed:ab:bb:58:
                    71:9e:cc:d5:c2:be:60:e4:f4:01:05:fa:05:03:4c:
                    68:1d:86:d7:b1:99:cd:19:72:d5:73:23:b4:24:cc:
                    24:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:3E:D4:64:7B:16:C3:8B:75:F4:B0:27:FE:76:53:8D:CB:C5:C1:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/d5aaebb6-4e45-3566-bea3-8e881f0c07bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26/53047e29-2570-4585-9e69-b23797196c26.crl

            X509v3 Authority Key Identifier:
                keyid:C1:B1:C5:FD:AA:78:4E:92:7E:E5:E5:27:7A:CE:EF:A0:FC:B3:11:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/53047e29-2570-4585-9e69-b23797196c26.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.116.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:5f:73:00:fe:63:02:39:a8:0b:d2:42:e7:8e:c2:50:38:00:
         75:51:f3:0a:a4:b3:6c:28:58:84:2f:9c:60:b1:8e:56:e4:82:
         7a:e4:79:1a:bb:11:e3:db:89:00:6e:11:69:28:79:6f:a7:67:
         95:a6:fd:7e:41:f8:01:56:ca:70:65:6e:68:36:23:e9:de:92:
         d1:84:e9:ae:a7:07:c5:71:a6:59:8a:e6:a4:5c:07:e5:d2:a4:
         0a:81:c4:81:78:f6:b3:61:cf:1a:fb:89:19:4a:6a:6c:24:5e:
         71:3e:f4:01:06:89:a7:5b:70:42:f8:74:89:d7:e3:59:1f:c0:
         a2:3c:ed:9e:c7:36:3a:ed:66:4a:f9:df:48:44:65:6e:7c:90:
         92:af:a7:82:ad:c2:6c:24:60:d6:9c:b1:60:0a:48:1f:12:3c:
         55:9b:b3:6d:80:21:c5:0b:7f:b6:c6:dc:75:9b:85:ae:80:13:
         ac:d8:d2:b9:2f:60:8e:d6:c3:63:e8:94:4a:06:38:22:3e:56:
         1d:1a:df:2f:1b:34:ee:48:dc:64:43:64:1c:a1:a7:9c:1c:42:
         8a:e7:1f:28:34:20:1a:43:f4:86:ae:64:e1:75:c0:5a:e9:84:
         dc:44:4f:c8:80:74:29:3b:ba:18:f7:fa:10:56:de:44:5b:74:
         f5:e4:1a:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyK+JSMDTZI/ik68AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTMwNDdlMjktMjU3MC00NTg1LTllNjktYjIzNzk3MTk2
YzI2MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
YzlkMTI2YmItOGUwZi00N2ExLThlZTctZjY0ZDRkMTYwMWI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivExTSZaeMlQhPl4kdY5U1G0T2dXxnLzxnL+
3QcwPZoz5kej22m4yLI9E8IXWEbaa0hCDxW8hPaQWKwxHQevj124w5kOpvF0xmSc
Hz/6vq226n/SaAFpoQfdaf2GMfKNtasRwM0kltdl4zUdF0LcbzIOG7Fq+jhUrZwq
TmPbUaYiwVpqGA+/YGIR0+MMwN71MxUy9fsZWvO5R9pxS0rGuUe59yYUKdTgK9Cy
FjBLgwa1zEWBTA2Br22YDb9Gz294unZ7RdC+o/Vr1AeeerhuQO02YxXl9C5jB8v8
We2ru1hxnszVwr5g5PQBBfoFA0xoHYbXsZnNGXLVcyO0JMwkRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMo+1GR7FsOLdfSwJ/52U43LxcFeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS81MzA0
N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3OTcxOTZjMjYvZDVhYWViYjYtNGU0NS0z
NTY2LWJlYTMtOGU4ODFmMGMwN2JmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNTMwNDdlMjktMjU3MC00NTg1LTll
NjktYjIzNzk3MTk2YzI2LzUzMDQ3ZTI5LTI1NzAtNDU4NS05ZTY5LWIyMzc5NzE5
NmMyNi5jcmwwHwYDVR0jBBgwFoAUwbHF/ap4TpJ+5eUnes7voPyzEdgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS81MzA0N2UyOS0yNTcwLTQ1ODUtOWU2OS1iMjM3
OTcxOTZjMjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnnQgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACNfcwD+YwI5qAvSQueOwlA4AHVR8wqks2woWIQvnGCxjlbkgnrkeRq7
EePbiQBuEWkoeW+nZ5Wm/X5B+AFWynBlbmg2I+nektGE6a6nB8VxplmK5qRcB+XS
pAqBxIF49rNhzxr7iRlKamwkXnE+9AEGiadbcEL4dInX41kfwKI87Z7HNjrtZkr5
30hEZW58kJKvp4KtwmwkYNacsWAKSB8SPFWbs22AIcULf7bG3HWbha6AE6zY0rkv
YI7Ww2PolEoGOCI+Vh0a3y8bNO5I3GRDZByhp5wcQornHyg0IBpD9IauZOF1wFrp
hNxET8iAdCk7uhj3+hBW3kRbdPXkGmM=
-----END CERTIFICATE-----
Generated at Fri Apr 11 23:50:56 2025 by rpki-client