Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
File:                     83e6a022-36ec-38c3-8f95-349b73ff935a.roa (raw, json)
Hash identifier:          S9WKNEU9jaIW8wzNjehiOvK/O3BckfrXOvuDoPmRoZM=
Subject key identifier:   69:87:58:73:6C:BD:00:CE:69:C7:1A:66:B6:FC:18:D0:D6:F9:A4:E6
Certificate issuer:       /CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
Certificate serial:       010D0C9F432858490B4C1A0588D284FF23550300
Authority key identifier: 24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     14618
IP address blocks:        155.63.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 15 Mar 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:1a:05:88:d2:84:ff:23:55:03:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1a689b85-dfe1-417d-be7b-e9d4bcdd58d6
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=9459ce79-c694-4cd3-b018-edda17fcd30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:07:2a:31:e6:01:4e:95:93:e4:64:4b:5a:55:
                    a9:ed:ea:2c:58:b0:0c:5e:d2:69:40:81:c5:20:a7:
                    7b:3e:d7:72:e4:40:4e:13:b9:ac:f3:68:7a:a3:ea:
                    09:62:4f:52:04:2e:6d:26:5d:ba:15:c3:cb:43:1a:
                    5d:28:af:32:69:b3:93:db:6b:b3:39:30:c8:fa:6e:
                    6c:60:40:d6:29:a2:1f:2c:09:fb:26:ac:61:54:26:
                    ea:b0:f6:c0:ac:23:a5:eb:05:e8:48:81:25:cc:d4:
                    9a:50:09:26:80:49:17:db:28:3e:32:d8:3e:1a:0d:
                    47:48:b0:92:52:e1:63:40:83:e5:18:be:46:3c:a8:
                    c9:f4:ce:6b:e2:1a:f8:55:3d:75:97:02:fb:68:a9:
                    e0:54:a1:c6:ee:ff:5c:e3:e0:4e:1b:bf:3d:39:9d:
                    8a:fa:37:79:5b:66:de:af:45:da:2f:45:c5:23:78:
                    46:2a:30:69:4f:26:13:a1:5b:85:95:0f:d0:24:da:
                    0c:0d:4b:e3:cf:f3:21:f7:6a:02:8b:f8:ce:28:a0:
                    75:e3:11:f9:53:03:75:e3:ab:e9:0e:b1:75:41:61:
                    7c:4c:88:2d:10:63:ad:5e:80:f2:26:00:18:ad:9d:
                    38:f3:fb:b9:16:20:8c:64:30:bf:06:a8:4c:86:c5:
                    c5:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:87:58:73:6C:BD:00:CE:69:C7:1A:66:B6:FC:18:D0:D6:F9:A4:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/83e6a022-36ec-38c3-8f95-349b73ff935a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.crl

            X509v3 Authority Key Identifier:
                keyid:24:C3:D5:A0:C7:9D:EE:00:F5:4B:5D:A1:1F:00:5D:DA:AE:3A:8B:F8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/1a689b85-dfe1-417d-be7b-e9d4bcdd58d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  155.63.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:de:36:c5:ff:b0:88:6a:55:31:8f:64:90:f2:6a:6d:4c:02:
         b2:22:e7:09:ac:da:ee:af:3f:3e:6c:03:8f:ad:52:c2:99:a9:
         d8:f0:30:9b:17:dc:ca:e1:37:d8:4b:be:14:a7:08:eb:35:12:
         b6:dd:83:e2:67:82:e5:55:01:5a:20:1e:0e:a6:29:50:3b:9d:
         c8:df:2b:98:63:76:08:85:50:ce:6c:da:c7:78:2f:96:80:c8:
         a0:b9:d4:0b:31:c2:23:53:e4:88:48:59:9b:3b:3d:a5:d2:6b:
         02:1c:c5:5d:fd:31:c8:48:34:b1:89:24:e9:c9:ab:a0:1d:10:
         41:b6:24:86:39:23:44:86:8a:29:76:d3:a9:6a:66:f3:f2:56:
         57:2b:d3:22:b3:b4:84:ea:1a:f6:5d:09:67:c3:6a:a6:8b:87:
         a2:6b:dc:69:32:e0:9b:84:65:2c:fb:49:25:0b:9c:5a:b1:18:
         94:e8:c3:0f:46:60:d9:70:4a:6a:a7:23:83:33:fa:6a:ac:7a:
         51:20:b4:e4:35:1f:67:e8:68:a6:61:a2:b2:eb:96:15:4b:0f:
         e9:ae:56:9e:5f:cf:ff:e7:10:3d:61:6f:14:f6:ff:61:4f:70:
         7f:4e:b6:75:8e:2b:8d:f2:81:46:11:4f:80:88:a9:0c:6d:82:
         a7:95:37:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTBoFiNKE/yNVAwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWE2ODliODUtZGZlMS00MTdkLWJlN2ItZTlkNGJjZGQ1
OGQ2MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
OTQ1OWNlNzktYzY5NC00Y2QzLWIwMTgtZWRkYTE3ZmNkMzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgwcqMeYBTpWT5GRLWlWp7eosWLAMXtJpQIHF
IKd7Ptdy5EBOE7ms82h6o+oJYk9SBC5tJl26FcPLQxpdKK8yabOT22uzOTDI+m5s
YEDWKaIfLAn7JqxhVCbqsPbArCOl6wXoSIElzNSaUAkmgEkX2yg+Mtg+Gg1HSLCS
UuFjQIPlGL5GPKjJ9M5r4hr4VT11lwL7aKngVKHG7v9c4+BOG789OZ2K+jd5W2be
r0XaL0XFI3hGKjBpTyYToVuFlQ/QJNoMDUvjz/Mh92oCi/jOKKB14xH5UwN146vp
DrF1QWF8TIgtEGOtXoDyJgAYrZ048/u5FiCMZDC/BqhMhsXF7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGmHWHNsvQDOaccaZrb8GNDW+aTmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4
OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0YmNkZDU4ZDYvODNlNmEwMjItMzZlYy0z
OGMzLThmOTUtMzQ5YjczZmY5MzVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMWE2ODliODUtZGZlMS00MTdkLWJl
N2ItZTlkNGJjZGQ1OGQ2LzFhNjg5Yjg1LWRmZTEtNDE3ZC1iZTdiLWU5ZDRiY2Rk
NThkNi5jcmwwHwYDVR0jBBgwFoAUJMPVoMed7gD1S12hHwBd2q46i/gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xYTY4OWI4NS1kZmUxLTQxN2QtYmU3Yi1lOWQ0
YmNkZDU4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEmz/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHzeNsX/sIhqVTGPZJDyam1MArIi5wms2u6vPz5sA4+tUsKZqdjwMJsX
3MrhN9hLvhSnCOs1Erbdg+JnguVVAVogHg6mKVA7ncjfK5hjdgiFUM5s2sd4L5aA
yKC51AsxwiNT5IhIWZs7PaXSawIcxV39MchINLGJJOnJq6AdEEG2JIY5I0SGiil2
06lqZvPyVlcr0yKztITqGvZdCWfDaqaLh6Jr3Gky4JuEZSz7SSULnFqxGJToww9G
YNlwSmqnI4Mz+mqselEgtOQ1H2foaKZhorLrlhVLD+muVp5fz//nED1hbxT2/2FP
cH9OtnWOK43ygUYRT4CIqQxtgqeVN/o=
-----END CERTIFICATE-----
Generated at Fri Mar 14 10:33:21 2025 by rpki-client