Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa
File:                     e19adf6a-3a84-313c-9ff3-eea3f710beda.roa (raw, json)
Hash identifier:          RCp4tQLop6gXTXjiprvpSZ3ypo4C5FHjyfLNU+JU9Fw=
Subject key identifier:   90:09:08:DC:57:C4:43:86:C1:DA:EB:DD:F6:48:E4:F0:3A:6D:6B:36
Certificate issuer:       /CN=161143c9-c030-4270-91a4-41e54bbb2357
Certificate serial:       010D0C9F43285848EC969244F7183ED9FE4B7200
Authority key identifier: 3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa
Signing time:             Tue 18 Feb 2025 14:00:52 +0000
ROA not before:           Tue 18 Feb 2025 14:00:52 +0000
ROA not after:            Mon 19 May 2025 13:00:52 +0000
asID:                     14630
IP address blocks:        205.174.0.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ec:96:92:44:f7:18:3e:d9:fe:4b:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=161143c9-c030-4270-91a4-41e54bbb2357
        Validity
            Not Before: Feb 18 14:00:52 2025 GMT
            Not After : May 19 13:00:52 2025 GMT
        Subject: CN=faad7f4c-2c88-4840-aca6-3298b4cb28e0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:48:f3:cc:09:23:b4:3c:46:04:89:42:a6:13:
                    63:fe:ca:0d:b9:85:4c:35:59:ab:f4:e5:db:f6:19:
                    cd:e8:2c:95:f3:39:24:53:17:50:05:b7:90:9b:42:
                    01:b9:86:6f:24:8a:83:13:3c:1b:10:ef:f9:fe:2c:
                    9b:23:6b:c6:50:d3:f4:9a:b0:ab:4d:ed:1a:a7:5e:
                    df:3a:8c:b7:b3:11:4c:a2:e0:36:b6:c3:c7:f5:a4:
                    a6:64:d4:3b:7f:db:93:87:bf:53:2f:36:4e:bd:59:
                    f7:5c:7d:77:64:19:e0:9e:15:b4:5a:38:52:73:65:
                    0c:41:76:47:c6:9e:37:90:64:4c:f6:5b:a6:4c:97:
                    a8:c9:72:7f:72:4c:78:71:91:dd:0a:42:da:e6:a8:
                    35:8d:49:22:f9:fc:44:c0:a0:ae:0e:8e:0a:bd:61:
                    c7:d9:08:c4:70:70:62:cd:24:d7:f7:37:21:6c:5f:
                    f3:29:c0:66:4f:27:3c:fc:c2:08:5e:25:2c:fa:e9:
                    66:c4:b0:83:e4:a8:e0:25:95:35:04:02:08:68:ff:
                    c0:dd:c5:28:ed:76:46:d5:59:d2:01:50:2d:8c:84:
                    46:0b:39:76:1d:d8:49:2d:ec:94:f5:bc:47:62:f8:
                    ab:b5:71:e6:dc:f0:af:51:e9:53:ad:ff:3e:d8:c7:
                    30:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:09:08:DC:57:C4:43:86:C1:DA:EB:DD:F6:48:E4:F0:3A:6D:6B:36
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/e19adf6a-3a84-313c-9ff3-eea3f710beda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357/161143c9-c030-4270-91a4-41e54bbb2357.crl

            X509v3 Authority Key Identifier:
                keyid:3F:1F:91:EE:51:47:94:04:0E:68:02:55:C7:6B:C2:2A:74:D9:CE:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/161143c9-c030-4270-91a4-41e54bbb2357.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.174.0.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:a7:d1:c5:0a:69:61:cc:5b:0c:fe:94:40:e2:44:8f:5a:f9:
         05:37:d5:a0:d2:bc:90:da:32:4a:cb:37:03:59:a2:cd:5e:55:
         73:fb:9f:bd:75:ef:3a:4c:95:05:5b:49:3a:20:52:f8:88:7d:
         53:9f:d0:b5:7c:b2:09:47:5c:71:b4:38:75:0a:e1:88:b4:b1:
         13:08:d6:b1:33:ee:bf:fd:30:21:dc:ee:be:03:14:79:88:2b:
         f9:99:a6:dc:f1:21:67:ba:52:d9:63:c9:3d:55:d1:ab:54:80:
         32:39:82:79:15:88:f0:26:c4:7d:ed:6e:de:a2:29:f1:24:48:
         5a:38:11:81:d6:6d:f7:b0:f0:72:e6:b2:4d:2c:71:46:2f:b8:
         2d:3c:73:27:36:6b:dd:92:e6:ae:f1:d4:c0:53:45:ee:4d:b2:
         07:a2:2f:5f:0c:64:56:3a:d3:ea:b6:b8:db:8a:d0:b9:98:f8:
         72:be:d4:59:6d:a0:1e:3c:fe:88:64:89:4f:f7:41:6a:d5:66:
         8a:e8:a9:86:1d:12:6a:16:84:46:15:fe:2d:91:37:f7:da:a6:
         d4:46:2c:3a:c7:51:00:a7:47:df:21:0d:15:56:76:5b:69:1f:
         f4:ae:d9:74:1a:48:d5:8c:64:e8:f5:db:58:55:a6:73:ae:47:
         d8:1b:09:9f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjslpJE9xg+2f5LcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTYxMTQzYzktYzAzMC00MjcwLTkxYTQtNDFlNTRiYmIy
MzU3MB4XDTI1MDIxODE0MDA1MloXDTI1MDUxOTEzMDA1MlowLzEtMCsGA1UEAxMk
ZmFhZDdmNGMtMmM4OC00ODQwLWFjYTYtMzI5OGI0Y2IyOGUwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUjzzAkjtDxGBIlCphNj/soNuYVMNVmr9OXb
9hnN6CyV8zkkUxdQBbeQm0IBuYZvJIqDEzwbEO/5/iybI2vGUNP0mrCrTe0ap17f
Ooy3sxFMouA2tsPH9aSmZNQ7f9uTh79TLzZOvVn3XH13ZBngnhW0WjhSc2UMQXZH
xp43kGRM9lumTJeoyXJ/ckx4cZHdCkLa5qg1jUki+fxEwKCuDo4KvWHH2QjEcHBi
zSTX9zchbF/zKcBmTyc8/MIIXiUs+ulmxLCD5KjgJZU1BAIIaP/A3cUo7XZG1VnS
AVAtjIRGCzl2HdhJLeyU9bxHYvirtXHm3PCvUelTrf8+2Mcw1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJAJCNxXxEOGwdrr3fZI5PA6bWs2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNjEx
NDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1NGJiYjIzNTcvZTE5YWRmNmEtM2E4NC0z
MTNjLTlmZjMtZWVhM2Y3MTBiZWRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTYxMTQzYzktYzAzMC00MjcwLTkx
YTQtNDFlNTRiYmIyMzU3LzE2MTE0M2M5LWMwMzAtNDI3MC05MWE0LTQxZTU0YmJi
MjM1Ny5jcmwwHwYDVR0jBBgwFoAUPx+R7lFHlAQOaAJVx2vCKnTZzmwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNjExNDNjOS1jMDMwLTQyNzAtOTFhNC00MWU1
NGJiYjIzNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEza4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE6n0cUKaWHMWwz+lEDiRI9a+QU31aDSvJDaMkrLNwNZos1eVXP7n711
7zpMlQVbSTogUviIfVOf0LV8sglHXHG0OHUK4Yi0sRMI1rEz7r/9MCHc7r4DFHmI
K/mZptzxIWe6UtljyT1V0atUgDI5gnkViPAmxH3tbt6iKfEkSFo4EYHWbfew8HLm
sk0scUYvuC08cyc2a92S5q7x1MBTRe5NsgeiL18MZFY60+q2uNuK0LmY+HK+1Flt
oB48/ohkiU/3QWrVZoroqYYdEmoWhEYV/i2RN/faptRGLDrHUQCnR98hDRVWdltp
H/Su2XQaSNWMZOj121hVpnOuR9gbCZ8=
-----END CERTIFICATE-----
Generated at Mon Apr 7 10:31:59 2025 by rpki-client