Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
File:                     41081f1b-d82b-37ee-bd2d-85ddb0792990.roa (raw, json)
Hash identifier:          ei5wq2Od4S3P5CwLVnWVwFNqhe/m/oQKb/tOVAWHLzk=
Subject key identifier:   ED:9D:55:5C:77:35:D8:AD:C4:CF:C2:4E:2A:FE:41:90:BE:37:40:D8
Certificate issuer:       /CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
Certificate serial:       010D0C9F43285848F65BD5891310F5F6465C5680
Authority key identifier: 6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa
Signing time:             Sat 22 Feb 2025 02:00:38 +0000
ROA not before:           Sat 22 Feb 2025 02:00:38 +0000
ROA not after:            Fri 23 May 2025 01:00:38 +0000
asID:                     16904
IP address blocks:        162.221.56.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 14 Apr 2025 02:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f6:5b:d5:89:13:10:f5:f6:46:5c:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0045c25a-05e3-40ba-a2dc-5c5bdab0131b
        Validity
            Not Before: Feb 22 02:00:38 2025 GMT
            Not After : May 23 01:00:38 2025 GMT
        Subject: CN=bf11cdfc-8865-4f14-a201-9e787ae26cd5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:57:1a:c2:0c:49:5e:54:88:9d:ac:23:6d:9b:
                    52:28:1e:fe:bc:ae:c0:c5:30:98:e2:33:47:0f:72:
                    65:44:44:fd:be:ac:1a:a3:77:45:92:ed:b5:81:b3:
                    64:3d:48:4f:f3:97:ba:ae:40:fd:69:97:84:1e:88:
                    d2:f8:7c:ea:db:79:24:27:c7:c4:01:f3:c8:50:2c:
                    4f:a9:54:a7:a3:a8:33:84:e4:59:bb:97:39:a3:2a:
                    4b:9c:41:5a:95:53:20:d6:fd:a7:69:a1:9a:7b:5c:
                    86:71:e9:65:c0:f1:42:20:ce:f3:75:6b:a5:f9:a9:
                    17:0f:13:45:a7:25:69:70:c5:6b:e2:86:9b:28:e0:
                    d7:33:2c:94:74:41:29:42:4f:97:7a:ff:96:11:48:
                    79:be:a5:08:32:87:82:2a:39:15:0a:5b:c4:4d:42:
                    e9:69:9a:e8:f1:a0:7e:91:d4:3f:ab:95:c1:d6:b7:
                    64:e1:84:50:7b:00:4b:9f:c3:44:18:f5:99:fe:14:
                    00:09:c4:28:9f:e4:b1:71:e4:39:c8:67:ff:7a:ba:
                    b1:62:4d:b6:ca:41:cd:61:5f:08:ce:7c:10:6f:01:
                    41:68:55:77:29:ab:c6:23:16:a3:04:b6:3c:7d:5b:
                    46:56:67:60:df:8f:6d:36:0d:40:dc:4f:12:be:c5:
                    92:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:9D:55:5C:77:35:D8:AD:C4:CF:C2:4E:2A:FE:41:90:BE:37:40:D8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/41081f1b-d82b-37ee-bd2d-85ddb0792990.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.crl

            X509v3 Authority Key Identifier:
                keyid:6D:B8:2B:C5:B4:E3:4F:7E:42:5C:39:41:13:33:6E:7C:68:23:7E:5F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0045c25a-05e3-40ba-a2dc-5c5bdab0131b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.56.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:79:3a:9a:db:97:85:20:16:71:71:35:b2:88:0b:2b:cb:c0:
         59:fb:e7:bf:44:32:9a:14:b3:81:de:a5:09:6d:23:3b:3c:2f:
         18:d1:2a:7a:7c:5a:03:fa:c1:72:f5:35:4f:2c:cb:b3:ee:ac:
         56:bf:23:3a:82:47:47:f4:32:53:35:f2:4b:08:dc:ed:4e:4c:
         21:cb:14:cc:f9:eb:51:25:ee:ea:c7:53:bc:07:30:3d:c7:64:
         95:d1:82:38:17:6f:92:fb:a6:5a:0d:ef:3c:8d:9f:e8:5f:68:
         f5:ab:5e:61:6d:4f:ad:61:a4:9d:64:72:54:3b:33:3e:23:97:
         b3:d4:7f:f8:f2:ed:ba:5c:3d:06:83:2e:7b:04:1c:8b:82:37:
         16:bd:fe:74:cc:fd:64:f9:95:2a:9b:12:cf:76:88:eb:e7:70:
         30:56:60:c6:7a:41:da:29:db:b0:47:0e:07:05:fa:7a:57:c4:
         b1:0c:28:3d:54:ee:4f:c6:a1:e0:41:99:71:c7:5f:2e:3a:31:
         d3:ab:95:7a:57:bb:c3:85:a6:7b:92:fa:1b:c4:88:0f:56:d5:
         33:78:b7:94:58:61:f4:da:c8:3a:23:fe:d6:2e:9f:52:a4:fa:
         65:98:6b:3b:91:84:6f:3d:36:26:c1:c0:75:48:b1:0a:16:da:
         61:c0:db:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEj2W9WJExD19kZcVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0NWMyNWEtMDVlMy00MGJhLWEyZGMtNWM1YmRhYjAx
MzFiMB4XDTI1MDIyMjAyMDAzOFoXDTI1MDUyMzAxMDAzOFowLzEtMCsGA1UEAxMk
YmYxMWNkZmMtODg2NS00ZjE0LWEyMDEtOWU3ODdhZTI2Y2Q1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj1cawgxJXlSInawjbZtSKB7+vK7AxTCY4jNH
D3JlRET9vqwao3dFku21gbNkPUhP85e6rkD9aZeEHojS+Hzq23kkJ8fEAfPIUCxP
qVSno6gzhORZu5c5oypLnEFalVMg1v2naaGae1yGcellwPFCIM7zdWul+akXDxNF
pyVpcMVr4oabKODXMyyUdEEpQk+Xev+WEUh5vqUIMoeCKjkVClvETULpaZro8aB+
kdQ/q5XB1rdk4YRQewBLn8NEGPWZ/hQACcQon+SxceQ5yGf/erqxYk22ykHNYV8I
znwQbwFBaFV3KavGIxajBLY8fVtGVmdg349tNg1A3E8SvsWSKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO2dVVx3NditxM/CTir+QZC+N0DYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1
YzI1YS0wNWUzLTQwYmEtYTJkYy01YzViZGFiMDEzMWIvNDEwODFmMWItZDgyYi0z
N2VlLWJkMmQtODVkZGIwNzkyOTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMDA0NWMyNWEtMDVlMy00MGJhLWEy
ZGMtNWM1YmRhYjAxMzFiLzAwNDVjMjVhLTA1ZTMtNDBiYS1hMmRjLTVjNWJkYWIw
MTMxYi5jcmwwHwYDVR0jBBgwFoAUbbgrxbTjT35CXDlBEzNufGgjfl8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wMDQ1YzI1YS0wNWUzLTQwYmEtYTJkYy01YzVi
ZGFiMDEzMWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCot04MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZ5Oprbl4UgFnFxNbKICyvLwFn7579EMpoUs4HepQltIzs8LxjRKnp8
WgP6wXL1NU8sy7PurFa/IzqCR0f0MlM18ksI3O1OTCHLFMz561El7urHU7wHMD3H
ZJXRgjgXb5L7ploN7zyNn+hfaPWrXmFtT61hpJ1kclQ7Mz4jl7PUf/jy7bpcPQaD
LnsEHIuCNxa9/nTM/WT5lSqbEs92iOvncDBWYMZ6Qdop27BHDgcF+npXxLEMKD1U
7k/GoeBBmXHHXy46MdOrlXpXu8OFpnuS+hvEiA9W1TN4t5RYYfTayDoj/tYun1Kk
+mWYazuRhG89NibBwHVIsQoW2mHA25A=
-----END CERTIFICATE-----
Generated at Sat Apr 12 12:52:10 2025 by rpki-client