Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa
File:                     1eef2e2c-6325-3083-a2ca-8378929a914b.roa (raw, json)
Hash identifier:          Y8u/Bm2fcW/BRd2UBdRSjbWgopjz5gUYMIMwhohVWqQ=
Subject key identifier:   50:17:D2:53:1D:47:3F:57:1C:14:68:08:4C:A4:04:AB:11:08:2A:93
Certificate issuer:       /CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
Certificate serial:       010D0C9F43285848EC9699B5E7847AF5C904EF00
Authority key identifier: C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     26512
IP address blocks:        162.221.25.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:99:b5:e7:84:7a:f5:c9:04:ef:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f5f2c804-b3b9-4b56-a719-dd72262a7a6d
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=758cc135-5fe6-48bf-963f-8bdc3d542e6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:b7:47:ae:05:64:41:18:77:9d:7a:70:31:29:
                    b0:09:1c:1e:fc:9d:39:10:67:40:a0:46:60:49:88:
                    42:f1:c4:b8:ed:1e:11:b4:e0:34:24:93:0e:a1:88:
                    c8:aa:b9:33:3f:48:b0:a7:71:41:62:d7:ac:31:fb:
                    f4:14:51:f9:52:81:ad:cf:4c:8a:a9:f8:52:2f:bf:
                    e2:21:7d:e6:98:4c:35:81:33:5a:a5:96:f5:98:d2:
                    00:7e:79:62:b0:e4:61:21:06:c7:8a:92:72:94:95:
                    fa:c8:c1:f0:8f:e0:3e:67:46:04:ce:4c:bb:a9:94:
                    fc:fc:be:45:6a:bf:17:5d:3d:66:7e:a3:ce:9f:74:
                    5b:f9:df:67:73:a0:30:3f:86:e0:71:f3:ae:81:6c:
                    95:e1:42:27:c1:c0:42:c3:13:22:d3:a3:16:0f:8c:
                    38:96:de:17:64:d5:d3:ce:ec:95:7a:cf:95:06:8c:
                    dd:ca:09:d7:0c:5f:f2:09:be:ff:68:72:e1:26:90:
                    16:32:bf:7c:5e:86:c2:7d:4f:23:3f:ad:56:93:4f:
                    06:d4:1e:c6:e6:b2:a4:1a:2e:9f:1a:fe:67:b4:c3:
                    60:9e:44:79:ed:0a:0f:c5:22:20:6a:90:5b:c7:79:
                    59:64:ae:8c:64:f7:df:e6:87:80:ae:7a:2f:48:29:
                    d8:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:17:D2:53:1D:47:3F:57:1C:14:68:08:4C:A4:04:AB:11:08:2A:93
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/1eef2e2c-6325-3083-a2ca-8378929a914b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.crl

            X509v3 Authority Key Identifier:
                keyid:C4:60:1F:97:B9:F6:89:F4:CF:39:BD:79:3F:D8:3D:23:75:EC:42:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f5f2c804-b3b9-4b56-a719-dd72262a7a6d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.221.25.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:0c:2f:d6:51:36:eb:fb:dd:6f:b1:82:32:b8:e6:12:88:21:
         59:16:a3:31:f6:31:71:6d:0f:4c:d1:8e:0e:79:e6:9b:7f:d4:
         42:3b:01:4a:9b:2b:74:ad:bb:c0:d4:dc:87:18:f5:54:d8:a2:
         8e:6f:a8:e8:07:76:f8:1e:68:b8:9f:1d:e2:d1:24:27:0f:49:
         20:ef:38:fc:7f:62:5c:3b:d1:86:87:8b:7c:e0:69:89:96:73:
         80:f5:cb:d5:2c:2d:1d:99:f4:f4:dd:44:f8:53:21:05:3c:21:
         dc:e6:d2:cf:9d:d2:66:2a:90:60:07:b5:4e:ae:b5:a6:1d:85:
         c8:07:d1:5f:09:20:11:f7:ef:34:90:20:7c:65:b8:69:19:8a:
         cb:dd:ea:23:e0:fc:03:20:5a:df:7f:06:43:00:66:e9:53:a5:
         23:d6:12:15:e4:f1:5b:9d:ff:28:15:8a:f4:3c:64:94:1d:59:
         10:e9:34:f4:ce:51:cc:e9:22:c7:e0:86:8f:27:ca:10:13:41:
         a0:4e:62:4b:e6:1f:51:87:8f:63:a4:54:e1:f7:91:6c:9f:7f:
         4c:eb:08:ec:99:45:7e:f6:1f:ac:f0:6b:97:22:cb:7a:3d:1e:
         55:d0:58:e9:04:a2:57:79:01:c5:9f:ec:dc:01:15:a6:b3:8d:
         ab:4e:d6:30
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpm154R69ckE7wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjVmMmM4MDQtYjNiOS00YjU2LWE3MTktZGQ3MjI2MmE3
YTZkMB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
NzU4Y2MxMzUtNWZlNi00OGJmLTk2M2YtOGJkYzNkNTQyZTZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLdHrgVkQRh3nXpwMSmwCRwe/J05EGdAoEZg
SYhC8cS47R4RtOA0JJMOoYjIqrkzP0iwp3FBYtesMfv0FFH5UoGtz0yKqfhSL7/i
IX3mmEw1gTNapZb1mNIAfnlisORhIQbHipJylJX6yMHwj+A+Z0YEzky7qZT8/L5F
ar8XXT1mfqPOn3Rb+d9nc6AwP4bgcfOugWyV4UInwcBCwxMi06MWD4w4lt4XZNXT
zuyVes+VBozdygnXDF/yCb7/aHLhJpAWMr98XobCfU8jP61Wk08G1B7G5rKkGi6f
Gv5ntMNgnkR57QoPxSIgapBbx3lZZK6MZPff5oeArnovSCnYOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFAX0lMdRz9XHBRoCEykBKsRCCqTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mNWYy
YzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcyMjYyYTdhNmQvMWVlZjJlMmMtNjMyNS0z
MDgzLWEyY2EtODM3ODkyOWE5MTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjVmMmM4MDQtYjNiOS00YjU2LWE3
MTktZGQ3MjI2MmE3YTZkL2Y1ZjJjODA0LWIzYjktNGI1Ni1hNzE5LWRkNzIyNjJh
N2E2ZC5jcmwwHwYDVR0jBBgwFoAUxGAfl7n2ifTPOb15P9g9I3XsQiEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mNWYyYzgwNC1iM2I5LTRiNTYtYTcxOS1kZDcy
MjYyYTdhNmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAot0ZMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0ML9ZRNuv73W+xgjK45hKIIVkWozH2MXFtD0zRjg555pt/1EI7AUqb
K3Stu8DU3IcY9VTYoo5vqOgHdvgeaLifHeLRJCcPSSDvOPx/Ylw70YaHi3zgaYmW
c4D1y9UsLR2Z9PTdRPhTIQU8Idzm0s+d0mYqkGAHtU6utaYdhcgH0V8JIBH37zSQ
IHxluGkZisvd6iPg/AMgWt9/BkMAZulTpSPWEhXk8Vud/ygVivQ8ZJQdWRDpNPTO
UczpIsfgho8nyhATQaBOYkvmH1GHj2OkVOH3kWyff0zrCOyZRX72H6zwa5ciy3o9
HlXQWOkEold5AcWf7NwBFaazjatO1jA=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:17:19 2025 by rpki-client