Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fac7a14b-a60b-3a82-ba82-978b7519d81d.roa
File:                     fac7a14b-a60b-3a82-ba82-978b7519d81d.roa (raw, json)
Hash identifier:          yB8/QMwXbyzQ4sehXNOKtnL7KbAOj28lrezm02yiiXg=
Subject key identifier:   E0:3A:A2:49:BF:AE:6B:BD:9A:38:22:35:C8:44:75:A0:68:29:BF:4E
Certificate issuer:       /CN=e605f279-55f4-48ec-ba13-4845c0973a63
Certificate serial:       010D0C9F4328584953C43E65FF410DCFE1409D80
Authority key identifier: 0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fac7a14b-a60b-3a82-ba82-978b7519d81d.roa
Signing time:             Thu 27 Mar 2025 13:00:52 +0000
ROA not before:           Thu 27 Mar 2025 13:00:52 +0000
ROA not after:            Wed 25 Jun 2025 13:00:52 +0000
asID:                     54113
IP address blocks:        151.101.88.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 04 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:53:c4:3e:65:ff:41:0d:cf:e1:40:9d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e605f279-55f4-48ec-ba13-4845c0973a63
        Validity
            Not Before: Mar 27 13:00:52 2025 GMT
            Not After : Jun 25 13:00:52 2025 GMT
        Subject: CN=5c0be462-929e-4888-bb5a-c01693c03b55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:23:f1:0a:24:24:4c:40:a1:4c:f6:62:b1:9e:
                    99:4d:4f:bb:31:c8:34:05:c5:1d:6c:57:e9:eb:ab:
                    58:c1:38:7e:94:fd:97:86:34:12:52:3d:53:e8:61:
                    4b:19:80:7b:22:cb:50:71:9e:a1:72:eb:46:05:72:
                    25:39:e7:5b:db:0d:4b:c3:a1:bd:b1:c7:8a:dc:e3:
                    64:c7:6b:b4:1b:90:e0:27:f4:d2:be:ba:f4:17:a4:
                    45:6b:8d:8c:1b:18:6a:4b:3c:6c:1d:3e:9b:df:a1:
                    3c:3e:cb:56:b0:65:a7:8a:07:0d:5b:5e:15:22:fd:
                    21:88:62:b3:ca:58:1b:f6:56:da:a0:56:77:3b:3e:
                    6d:7e:c3:37:10:ad:88:fb:83:e7:2b:54:f5:22:3b:
                    d6:3d:22:81:5a:fe:e0:8b:64:19:a7:31:96:f1:42:
                    9e:5e:f9:82:27:06:7a:d6:de:a0:b1:a4:f6:35:6e:
                    dd:09:77:bc:87:57:c1:59:a7:bf:2f:41:ae:2a:62:
                    0a:0d:2b:3b:e1:0c:73:bd:7d:96:5d:d5:ce:c8:ca:
                    16:0d:4e:07:67:90:2f:c8:a3:bc:73:f7:b1:11:84:
                    4c:67:a1:15:87:b0:89:13:fa:9e:57:b0:4f:46:1c:
                    55:57:d8:ad:95:4e:d6:60:f0:be:02:ab:5c:3d:4d:
                    0a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:A2:49:BF:AE:6B:BD:9A:38:22:35:C8:44:75:A0:68:29:BF:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/fac7a14b-a60b-3a82-ba82-978b7519d81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63/e605f279-55f4-48ec-ba13-4845c0973a63.crl

            X509v3 Authority Key Identifier:
                keyid:0F:DD:01:7D:DC:6B:33:2E:B9:15:A3:77:E0:93:2A:C4:D2:68:D7:FE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/e605f279-55f4-48ec-ba13-4845c0973a63.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.101.88.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:ad:2a:93:ec:3a:58:a2:b2:c9:94:15:f8:65:c5:34:0d:
         f2:1c:ae:9d:af:de:95:cb:bd:32:21:60:85:c8:47:19:76:24:
         fd:60:68:f9:50:03:3a:da:0c:84:a3:ab:0e:58:48:b5:e4:80:
         58:19:e9:ba:47:41:88:a8:5d:54:a7:0d:dc:60:d9:ce:62:a2:
         ea:27:be:0f:f0:b8:2e:9a:8c:13:2d:c0:ba:59:1f:12:6b:dc:
         34:d7:aa:b6:f0:07:59:19:66:7d:ec:31:4e:9b:a2:a5:97:96:
         26:10:f6:b9:1b:ed:4a:49:1e:64:d2:53:60:1f:37:2d:68:17:
         3c:e3:d5:85:ca:42:c9:04:3b:e1:b0:23:25:b0:74:3e:76:34:
         7e:3d:c3:30:03:4f:ea:09:cd:96:f2:b2:b3:e7:8a:a6:82:30:
         72:e5:1c:3e:87:5d:a9:1d:84:46:a2:12:60:58:db:66:e7:b2:
         be:97:70:ae:5f:ac:9f:37:18:2d:5f:6f:31:d4:36:0e:2b:4a:
         da:21:a5:5e:02:b7:45:2e:da:f0:85:44:12:a7:27:61:e0:9c:
         2e:3c:ce:b3:04:7f:bb:16:06:86:fb:c5:79:df:fc:54:12:b5:
         cf:97:f8:6f:18:d9:f2:c9:74:15:c0:d7:21:85:02:ae:1b:0b:
         ca:1b:72:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElTxD5l/0ENz+FAnYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTYwNWYyNzktNTVmNC00OGVjLWJhMTMtNDg0NWMwOTcz
YTYzMB4XDTI1MDMyNzEzMDA1MloXDTI1MDYyNTEzMDA1MlowLzEtMCsGA1UEAxMk
NWMwYmU0NjItOTI5ZS00ODg4LWJiNWEtYzAxNjkzYzAzYjU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsyPxCiQkTEChTPZisZ6ZTU+7Mcg0BcUdbFfp
66tYwTh+lP2XhjQSUj1T6GFLGYB7IstQcZ6hcutGBXIlOedb2w1Lw6G9sceK3ONk
x2u0G5DgJ/TSvrr0F6RFa42MGxhqSzxsHT6b36E8PstWsGWnigcNW14VIv0hiGKz
ylgb9lbaoFZ3Oz5tfsM3EK2I+4PnK1T1IjvWPSKBWv7gi2QZpzGW8UKeXvmCJwZ6
1t6gsaT2NW7dCXe8h1fBWae/L0GuKmIKDSs74QxzvX2WXdXOyMoWDU4HZ5AvyKO8
c/exEYRMZ6EVh7CJE/qeV7BPRhxVV9itlU7WYPC+AqtcPU0KiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOA6okm/rmu9mjgiNchEdaBoKb9OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1
ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1YzA5NzNhNjMvZmFjN2ExNGItYTYwYi0z
YTgyLWJhODItOTc4Yjc1MTlkODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZTYwNWYyNzktNTVmNC00OGVjLWJh
MTMtNDg0NWMwOTczYTYzL2U2MDVmMjc5LTU1ZjQtNDhlYy1iYTEzLTQ4NDVjMDk3
M2E2My5jcmwwHwYDVR0jBBgwFoAUD90BfdxrMy65FaN34JMqxNJo1/4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lNjA1ZjI3OS01NWY0LTQ4ZWMtYmExMy00ODQ1
YzA5NzNhNjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCl2VYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIS5rSqT7DpYorLJlBX4ZcU0DfIcrp2v3pXLvTIhYIXIRxl2JP1gaPlQ
AzraDISjqw5YSLXkgFgZ6bpHQYioXVSnDdxg2c5iouonvg/wuC6ajBMtwLpZHxJr
3DTXqrbwB1kZZn3sMU6boqWXliYQ9rkb7UpJHmTSU2AfNy1oFzzj1YXKQskEO+Gw
IyWwdD52NH49wzADT+oJzZbysrPniqaCMHLlHD6HXakdhEaiEmBY22bnsr6XcK5f
rJ83GC1fbzHUNg4rStohpV4Ct0Uu2vCFRBKnJ2HgnC48zrMEf7sWBob7xXnf/FQS
tc+X+G8Y2fLJdBXA1yGFAq4bC8obct0=
-----END CERTIFICATE-----
Generated at Thu Apr 3 02:48:09 2025 by rpki-client