Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/37fe69e9-30cb-3cd9-b7f3-1ece4d2e1358.roa
File:                     37fe69e9-30cb-3cd9-b7f3-1ece4d2e1358.roa (raw, json)
Hash identifier:          PGMcEgAFYBjudsbKOnO0TqS0mStVjf5VpnMw6DkwGS8=
Subject key identifier:   B4:BD:A5:8B:B8:1B:36:EB:12:4C:4E:ED:25:71:23:2B:2F:EA:EB:E4
Certificate issuer:       /CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
Certificate serial:       010D0C9F432858497DEDA7A681DB3F76F750ED00
Authority key identifier: 73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/37fe69e9-30cb-3cd9-b7f3-1ece4d2e1358.roa
Signing time:             Fri 11 Apr 2025 15:28:43 +0000
ROA not before:           Fri 11 Apr 2025 15:28:43 +0000
ROA not after:            Thu 10 Jul 2025 15:28:43 +0000
asID:                     40934
IP address blocks:        69.167.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 16 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:7d:ed:a7:a6:81:db:3f:76:f7:50:ed:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=23b590e8-30c5-4997-bbf3-f2fe10a29e87
        Validity
            Not Before: Apr 11 15:28:43 2025 GMT
            Not After : Jul 10 15:28:43 2025 GMT
        Subject: CN=274c76c3-7f31-4f58-a424-59353ef0f63b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:72:44:9c:c0:b5:c1:85:24:76:de:4c:e2:04:
                    b7:e4:bb:f6:da:4c:95:d0:3b:31:6f:87:6e:b1:b7:
                    02:39:4b:52:87:23:e5:bd:71:54:a9:b8:58:eb:c4:
                    fe:e4:8c:fd:b7:65:75:2b:ae:8c:74:f0:fb:48:c9:
                    d1:74:96:39:d8:f9:66:b9:fc:1b:c1:ab:f0:a0:5c:
                    8a:9f:40:a1:a2:a4:39:fb:88:e6:97:ff:b8:ef:5d:
                    ee:d4:80:be:13:a4:e5:c8:ef:64:76:ff:4f:ec:48:
                    1d:27:82:aa:a3:69:f0:46:a9:c9:f0:61:a1:fc:be:
                    3b:f6:dd:25:05:19:70:76:7d:5b:38:6d:a6:02:2e:
                    7f:6c:c8:7a:47:39:9a:a6:f9:cc:d9:46:2c:30:a2:
                    b6:58:2a:6a:67:66:5a:35:91:1a:0e:e6:51:03:fa:
                    37:bf:95:9b:f7:22:b1:fe:1d:be:e5:c6:f6:b8:3f:
                    07:b2:22:c5:19:75:69:77:49:62:45:33:8e:61:6d:
                    e1:02:c7:c7:5a:c4:9b:a1:a4:4d:d1:b5:86:03:47:
                    f9:6c:d0:40:9f:a1:d1:de:a7:bc:bc:f3:08:cd:c1:
                    aa:4e:b4:ee:77:2e:e4:cf:5b:73:36:9b:61:3c:08:
                    85:b5:e1:4d:ec:83:e1:8e:45:ae:3c:22:6b:8d:07:
                    db:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:BD:A5:8B:B8:1B:36:EB:12:4C:4E:ED:25:71:23:2B:2F:EA:EB:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/37fe69e9-30cb-3cd9-b7f3-1ece4d2e1358.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87/23b590e8-30c5-4997-bbf3-f2fe10a29e87.crl

            X509v3 Authority Key Identifier:
                keyid:73:2D:61:C2:04:C7:94:B0:63:1A:9B:AE:10:B1:61:0A:CE:A3:53:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/23b590e8-30c5-4997-bbf3-f2fe10a29e87.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.167.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3e:85:1a:65:5e:ff:6e:2c:26:b1:e7:2c:c6:1d:41:ac:1e:fe:
         db:dd:91:f5:21:00:30:dd:1e:34:5c:33:bd:13:33:c4:4c:3d:
         e6:15:a4:b7:84:31:55:0c:54:af:5c:83:78:d9:71:ad:23:9f:
         fe:31:04:da:b8:c4:6c:54:7c:54:3d:37:fe:29:3a:46:9f:7e:
         02:65:af:89:05:80:1f:f0:1c:30:68:00:ad:55:79:04:62:2e:
         bc:49:16:0b:72:5f:70:b6:d5:c5:a2:50:79:04:a7:38:6f:7e:
         7a:f3:c2:88:3b:83:39:86:6b:b2:53:f1:f1:db:8b:fa:e6:5c:
         4c:a2:67:6f:75:a3:d1:a6:e4:58:2b:eb:90:3d:37:3e:b6:be:
         f1:e1:e4:57:41:c4:11:ec:3b:7a:8b:aa:46:03:4d:e7:9a:3a:
         37:35:c4:2a:b5:9f:17:cf:00:49:51:1d:4e:57:1b:f9:7b:11:
         4e:89:ca:7f:67:b1:f2:80:e4:8b:ee:00:54:62:a4:66:fe:d6:
         9b:e8:16:c1:89:22:64:e3:78:78:73:0c:34:3a:43:ea:7d:99:
         29:cc:c2:c2:4d:81:18:6f:b6:be:ec:d0:0e:c6:95:b1:ad:73:
         f0:a2:3b:42:f9:09:12:6b:b0:1d:aa:8d:56:25:69:71:ad:c6:
         91:47:b2:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEl97aemgds/dvdQ7QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjNiNTkwZTgtMzBjNS00OTk3LWJiZjMtZjJmZTEwYTI5
ZTg3MB4XDTI1MDQxMTE1Mjg0M1oXDTI1MDcxMDE1Mjg0M1owLzEtMCsGA1UEAxMk
Mjc0Yzc2YzMtN2YzMS00ZjU4LWE0MjQtNTkzNTNlZjBmNjNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHJEnMC1wYUkdt5M4gS35Lv22kyV0Dsxb4du
sbcCOUtShyPlvXFUqbhY68T+5Iz9t2V1K66MdPD7SMnRdJY52PlmufwbwavwoFyK
n0ChoqQ5+4jml/+4713u1IC+E6TlyO9kdv9P7EgdJ4Kqo2nwRqnJ8GGh/L479t0l
BRlwdn1bOG2mAi5/bMh6RzmapvnM2UYsMKK2WCpqZ2ZaNZEaDuZRA/o3v5Wb9yKx
/h2+5cb2uD8HsiLFGXVpd0liRTOOYW3hAsfHWsSboaRN0bWGA0f5bNBAn6HR3qe8
vPMIzcGqTrTudy7kz1tzNpthPAiFteFN7IPhjkWuPCJrjQfbtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLS9pYu4GzbrEkxO7SVxIysv6uvkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1
OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZlMTBhMjllODcvMzdmZTY5ZTktMzBjYi0z
Y2Q5LWI3ZjMtMWVjZTRkMmUxMzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMjNiNTkwZTgtMzBjNS00OTk3LWJi
ZjMtZjJmZTEwYTI5ZTg3LzIzYjU5MGU4LTMwYzUtNDk5Ny1iYmYzLWYyZmUxMGEy
OWU4Ny5jcmwwHwYDVR0jBBgwFoAUcy1hwgTHlLBjGpuuELFhCs6jUygwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8yM2I1OTBlOC0zMGM1LTQ5OTctYmJmMy1mMmZl
MTBhMjllODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARad0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD6FGmVe/24sJrHnLMYdQawe/tvdkfUhADDdHjRcM70TM8RMPeYVpLeE
MVUMVK9cg3jZca0jn/4xBNq4xGxUfFQ9N/4pOkaffgJlr4kFgB/wHDBoAK1VeQRi
LrxJFgtyX3C21cWiUHkEpzhvfnrzwog7gzmGa7JT8fHbi/rmXEyiZ291o9Gm5Fgr
65A9Nz62vvHh5FdBxBHsO3qLqkYDTeeaOjc1xCq1nxfPAElRHU5XG/l7EU6Jyn9n
sfKA5IvuAFRipGb+1pvoFsGJImTjeHhzDDQ6Q+p9mSnMwsJNgRhvtr7s0A7GlbGt
c/CiO0L5CRJrsB2qjVYlaXGtxpFHstY=
-----END CERTIFICATE-----
Generated at Tue Apr 15 11:39:43 2025 by rpki-client