Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa
File:                     b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa (raw, json)
Hash identifier:          AFFg/rLq/WPP9/VWiJ4bSIHbJAysVJdXEusj73Duu9g=
Subject key identifier:   83:F2:BE:FC:72:29:6A:F1:C9:32:C2:79:BF:AB:C8:0E:C5:7B:71:CD
Certificate issuer:       /CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
Certificate serial:       010D0C9F43285849DC8FC77C1D429CB23FFE0778
Authority key identifier: 56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     19257
IP address blocks:        162.222.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:c7:7c:1d:42:9c:b2:3f:fe:07:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab35c487-3629-4de4-8ce1-80f9eb60428a
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=0c85d90a-3bc0-4482-8f6b-f38fc489b7a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:9e:b8:46:09:64:e7:da:af:4d:77:59:f3:24:
                    ca:f2:21:c5:0d:21:f2:72:13:93:e3:22:57:8f:56:
                    f3:86:3b:7b:53:1d:e3:3d:30:58:5e:49:c2:11:47:
                    91:60:1b:25:58:69:23:c1:ee:77:5e:dc:9c:b8:99:
                    e0:e5:10:25:93:7e:18:69:b5:22:0e:96:03:2c:ef:
                    f4:01:80:53:6e:fb:20:ff:9f:86:7b:b6:a7:b4:50:
                    06:ae:f8:31:51:ea:2b:94:a5:85:95:3d:49:e9:6b:
                    6d:1b:46:9a:ed:61:ca:40:87:ad:dc:53:4e:f5:0f:
                    b4:34:e0:4a:95:67:fa:a7:d2:5f:12:08:92:d2:4c:
                    e3:48:38:c0:81:54:e7:e9:14:b9:a1:48:80:7c:a7:
                    9b:7c:c6:b4:d6:a1:9a:41:5d:b7:98:46:1f:9f:48:
                    e2:58:5c:fb:75:e5:09:57:97:ac:db:27:8a:29:98:
                    79:e8:a8:dc:33:73:72:c5:d8:74:93:d8:b9:ce:a1:
                    91:87:86:45:a9:0d:29:ba:f1:f0:7b:72:da:d1:5e:
                    7f:46:6b:71:24:a8:81:61:e3:f9:6a:4a:d8:46:ce:
                    1e:48:71:a4:6c:8c:35:3e:6f:aa:2b:55:48:6c:14:
                    74:51:f2:29:bf:9c:49:05:19:2c:4b:35:b7:08:38:
                    3a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:F2:BE:FC:72:29:6A:F1:C9:32:C2:79:BF:AB:C8:0E:C5:7B:71:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/b520695d-97cc-3eaf-915d-f84bb2e16fa6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a/ab35c487-3629-4de4-8ce1-80f9eb60428a.crl

            X509v3 Authority Key Identifier:
                keyid:56:45:9C:04:73:90:DE:AE:3F:57:CF:20:35:2C:99:D9:18:4D:8A:C7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/ab35c487-3629-4de4-8ce1-80f9eb60428a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.222.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0f:4f:87:ac:e6:08:60:6c:fe:71:04:aa:21:75:70:3f:ff:
         2d:b1:4e:df:32:d6:4f:9a:0a:e4:18:97:5d:20:8a:e6:01:67:
         4e:8f:b8:cb:59:d4:c3:fc:46:1b:2e:5c:e4:42:01:35:eb:cb:
         1b:8d:f9:70:66:96:9b:95:c1:1e:19:91:49:2a:29:c8:7a:44:
         7f:9e:a1:52:b6:8b:63:6f:07:4d:2a:88:d2:3f:4c:4b:42:3a:
         9f:a8:b0:e9:42:44:83:4f:3b:b6:bc:4a:13:87:9e:3a:dc:d6:
         34:c5:d8:9c:74:54:e1:90:3f:32:7a:4c:7b:19:ba:3a:12:5c:
         0f:fc:0c:20:ed:56:f2:79:b0:15:8b:e1:35:13:59:b7:79:63:
         e9:8d:8d:a2:53:e4:89:5c:fd:e5:70:f8:9a:ed:3e:ee:03:74:
         02:95:17:d4:af:52:e4:c4:82:0b:da:08:ae:4f:56:51:fa:7f:
         5c:20:b2:8c:46:e2:94:1c:f3:4a:c4:d0:d7:66:44:10:68:82:
         d5:b8:8e:53:b3:2f:9d:13:7f:42:7f:fa:e2:ce:0d:c0:11:d2:
         f1:d3:fb:83:89:fd:44:0d:67:18:b7:97:13:21:37:2b:fc:82:
         18:ad:43:a9:50:91:1e:6b:6d:5c:0d:ca:14:90:c7:54:bf:bb:
         e8:6f:70:2e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj8d8HUKcsj/+B3gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWIzNWM0ODctMzYyOS00ZGU0LThjZTEtODBmOWViNjA0
MjhhMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
MGM4NWQ5MGEtM2JjMC00NDgyLThmNmItZjM4ZmM0ODliN2EwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjZ64Rglk59qvTXdZ8yTK8iHFDSHychOT4yJX
j1bzhjt7Ux3jPTBYXknCEUeRYBslWGkjwe53XtycuJng5RAlk34YabUiDpYDLO/0
AYBTbvsg/5+Ge7antFAGrvgxUeorlKWFlT1J6WttG0aa7WHKQIet3FNO9Q+0NOBK
lWf6p9JfEgiS0kzjSDjAgVTn6RS5oUiAfKebfMa01qGaQV23mEYfn0jiWFz7deUJ
V5es2yeKKZh56KjcM3Nyxdh0k9i5zqGRh4ZFqQ0puvHwe3La0V5/RmtxJKiBYeP5
akrYRs4eSHGkbIw1Pm+qK1VIbBR0UfIpv5xJBRksSzW3CDg6nwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIPyvvxyKWrxyTLCeb+ryA7Fe3HNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1
YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5ZWI2MDQyOGEvYjUyMDY5NWQtOTdjYy0z
ZWFmLTkxNWQtZjg0YmIyZTE2ZmE2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWIzNWM0ODctMzYyOS00ZGU0LThj
ZTEtODBmOWViNjA0MjhhL2FiMzVjNDg3LTM2MjktNGRlNC04Y2UxLTgwZjllYjYw
NDI4YS5jcmwwHwYDVR0jBBgwFoAUVkWcBHOQ3q4/V88gNSyZ2RhNiscwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYjM1YzQ4Ny0zNjI5LTRkZTQtOGNlMS04MGY5
ZWI2MDQyOGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot5bMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAUPT4es5ghgbP5xBKohdXA//y2xTt8y1k+aCuQYl10giuYBZ06PuMtZ
1MP8RhsuXORCATXryxuN+XBmlpuVwR4ZkUkqKch6RH+eoVK2i2NvB00qiNI/TEtC
Op+osOlCRINPO7a8ShOHnjrc1jTF2Jx0VOGQPzJ6THsZujoSXA/8DCDtVvJ5sBWL
4TUTWbd5Y+mNjaJT5Ilc/eVw+JrtPu4DdAKVF9SvUuTEggvaCK5PVlH6f1wgsoxG
4pQc80rE0NdmRBBogtW4jlOzL50Tf0J/+uLODcAR0vHT+4OJ/UQNZxi3lxMhNyv8
ghitQ6lQkR5rbVwNyhSQx1S/u+hvcC4=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:18:34 2025 by rpki-client