Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
File:                     a9240f31-54b4-373e-9a62-3ebd7223baae.roa (raw, json)
Hash identifier:          dMux7FgPVEs+0+zkfPuu3fQsGGxy4K70qbxbitfNPyU=
Subject key identifier:   D6:52:A0:11:2A:E1:A8:79:35:C6:F0:16:F1:5F:FC:F2:39:98:47:43
Certificate issuer:       /CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
Certificate serial:       010D0C9F43285849D42F9FD5AD7E47A154B28D80
Authority key identifier: 5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     54606
IP address blocks:        132.212.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:9f:d5:ad:7e:47:a1:54:b2:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9997fd34-06bd-4758-a8a8-358043eb8cfd
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=7da8b988-d4a5-4b69-8b13-91d4da3713ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:49:fa:51:90:42:c8:4d:02:8f:4b:41:78:20:
                    99:48:3a:38:c8:42:c7:1d:38:9d:8e:17:65:26:04:
                    bc:a5:41:0f:65:f5:b0:29:56:fa:15:59:fd:9f:14:
                    0b:89:4d:f6:38:80:03:5f:9d:20:0a:39:2d:3f:07:
                    0c:3a:a5:6d:77:9e:8e:a9:b8:bd:d0:8f:24:2d:fb:
                    02:d8:c7:af:26:16:84:ff:c0:c0:91:9d:ef:e0:f2:
                    00:d6:32:47:6c:1b:e2:75:9f:ba:d9:19:f5:5d:a3:
                    76:4b:f2:d1:50:d6:3b:cc:65:8f:25:2d:84:b2:cb:
                    f8:45:66:b6:89:ef:2b:6b:c0:3e:47:cc:b1:91:6c:
                    76:2d:21:32:ec:45:ce:17:0e:4a:34:4e:a3:1e:36:
                    a4:cb:8b:16:8b:f2:db:42:ae:40:3d:10:cf:6b:84:
                    b1:90:90:df:8e:60:68:3e:cc:d2:47:d2:57:32:24:
                    40:68:b6:f5:1e:3e:57:00:8f:3f:ad:61:cc:89:c3:
                    f7:14:da:33:15:65:86:40:03:5b:8d:28:fd:ff:cc:
                    e6:92:85:6b:d5:56:f0:f7:ee:aa:a9:09:65:b7:16:
                    22:09:a5:84:f8:10:2d:be:f7:6a:6f:20:94:a9:6c:
                    8a:e6:35:3d:99:01:ef:ef:82:53:4a:9a:6f:12:55:
                    b4:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:52:A0:11:2A:E1:A8:79:35:C6:F0:16:F1:5F:FC:F2:39:98:47:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/a9240f31-54b4-373e-9a62-3ebd7223baae.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd/9997fd34-06bd-4758-a8a8-358043eb8cfd.crl

            X509v3 Authority Key Identifier:
                keyid:5C:A6:4A:51:2E:14:13:0A:BB:00:66:BC:21:A0:A3:83:B7:FC:EA:D9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/9997fd34-06bd-4758-a8a8-358043eb8cfd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.212.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:a3:8c:e8:a1:12:79:57:fe:8f:cc:22:04:93:2d:53:5f:e8:
         ff:c3:54:4b:e3:5d:ba:81:52:63:b5:54:3d:b9:d3:02:14:8f:
         96:df:0c:9e:49:3c:4e:c7:cb:5b:6c:b6:be:19:32:f7:63:af:
         a4:a3:ee:45:c5:00:96:a2:b1:1d:da:bc:d4:97:26:ea:51:c1:
         b7:ae:05:f3:14:06:a5:7c:ce:02:3f:2d:b5:98:39:30:81:32:
         a4:7c:83:82:ca:3e:01:3b:bd:1a:a6:7e:e3:81:44:90:ff:ec:
         b9:a0:52:7f:bd:6f:76:19:16:9e:ba:4a:5b:06:1e:54:e7:c7:
         76:f4:6d:86:f3:ad:cf:f4:23:e3:aa:04:3b:cf:f3:e2:06:84:
         ca:5f:24:ef:4f:a9:46:70:ec:51:6a:3d:62:26:d2:a9:1a:1f:
         60:1d:74:7e:14:45:31:a6:54:c1:bd:d3:17:80:f7:e6:11:de:
         0d:83:c6:36:42:16:05:4a:b7:c2:86:5e:f6:e9:2d:ac:9f:a7:
         8d:be:4d:94:fa:6a:05:81:0e:50:60:a2:0b:60:05:04:74:ae:
         6d:33:42:26:4f:a2:22:dc:6e:cb:e8:cb:7b:93:2c:17:dd:78:
         e1:0d:56:88:77:62:2f:e7:58:ab:3e:24:53:21:66:84:15:9e:
         58:b0:cb:60
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnUL5/VrX5HoVSyjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTk5N2ZkMzQtMDZiZC00NzU4LWE4YTgtMzU4MDQzZWI4
Y2ZkMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
N2RhOGI5ODgtZDRhNS00YjY5LThiMTMtOTFkNGRhMzcxM2ZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv0n6UZBCyE0Cj0tBeCCZSDo4yELHHTidjhdl
JgS8pUEPZfWwKVb6FVn9nxQLiU32OIADX50gCjktPwcMOqVtd56Oqbi90I8kLfsC
2MevJhaE/8DAkZ3v4PIA1jJHbBvidZ+62Rn1XaN2S/LRUNY7zGWPJS2Essv4RWa2
ie8ra8A+R8yxkWx2LSEy7EXOFw5KNE6jHjaky4sWi/LbQq5APRDPa4SxkJDfjmBo
PszSR9JXMiRAaLb1Hj5XAI8/rWHMicP3FNozFWWGQANbjSj9/8zmkoVr1Vbw9+6q
qQlltxYiCaWE+BAtvvdqbyCUqWyK5jU9mQHv74JTSppvElW0gQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFNZSoBEq4ah5NcbwFvFf/PI5mEdDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi85OTk3
ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgwNDNlYjhjZmQvYTkyNDBmMzEtNTRiNC0z
NzNlLTlhNjItM2ViZDcyMjNiYWFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvOTk5N2ZkMzQtMDZiZC00NzU4LWE4
YTgtMzU4MDQzZWI4Y2ZkLzk5OTdmZDM0LTA2YmQtNDc1OC1hOGE4LTM1ODA0M2Vi
OGNmZC5jcmwwHwYDVR0jBBgwFoAUXKZKUS4UEwq7AGa8IaCjg7f86tkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi85OTk3ZmQzNC0wNmJkLTQ3NTgtYThhOC0zNTgw
NDNlYjhjZmQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAhNQwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAGaOM6KESeVf+j8wiBJMtU1/o/8NUS+NduoFSY7VUPbnTAhSPlt8Mnkk8
TsfLW2y2vhky92OvpKPuRcUAlqKxHdq81Jcm6lHBt64F8xQGpXzOAj8ttZg5MIEy
pHyDgso+ATu9GqZ+44FEkP/suaBSf71vdhkWnrpKWwYeVOfHdvRthvOtz/Qj46oE
O8/z4gaEyl8k70+pRnDsUWo9YibSqRofYB10fhRFMaZUwb3TF4D35hHeDYPGNkIW
BUq3woZe9uktrJ+njb5NlPpqBYEOUGCiC2AFBHSubTNCJk+iItxuy+jLe5MsF914
4Q1WiHdiL+dYqz4kUyFmhBWeWLDLYA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 02:04:30 2025 by rpki-client