Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f0d50248-97fe-38c6-8060-7fea88551590.roa
File:                     f0d50248-97fe-38c6-8060-7fea88551590.roa (raw, json)
Hash identifier:          GR8djoLDMs5Mt2v5dolPhpqAV3u1jMknkAKZMMU8EBk=
Subject key identifier:   A3:29:08:93:F9:BC:20:D5:83:AB:73:08:90:CC:3F:12:B2:89:C6:DE
Certificate issuer:       /CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
Certificate serial:       010D0C9F4328584871C07AE2BE5CF800E410DC80
Authority key identifier: E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f0d50248-97fe-38c6-8060-7fea88551590.roa
Signing time:             Sun 05 Jan 2025 14:00:52 +0000
ROA not before:           Sun 05 Jan 2025 14:00:52 +0000
ROA not after:            Sat 05 Apr 2025 13:00:52 +0000
asID:                     22612
IP address blocks:        162.213.248.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:71:c0:7a:e2:be:5c:f8:00:e4:10:dc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=53e30d85-4474-43ab-95e5-8d5d53560b6e
        Validity
            Not Before: Jan  5 14:00:52 2025 GMT
            Not After : Apr  5 13:00:52 2025 GMT
        Subject: CN=a7e3b94a-12f7-41f6-80f4-c0df63dbd4da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:53:a5:49:d8:b7:0c:61:80:a4:31:f3:04:91:
                    79:02:5c:37:f1:15:0b:cc:52:95:a8:b9:9c:60:ee:
                    57:05:34:2c:5f:b5:09:0b:b8:27:a9:3e:a6:4d:4c:
                    fa:38:01:09:bd:c7:33:d3:db:07:8d:55:34:85:20:
                    51:6d:d9:26:a5:44:15:c2:db:ab:79:1d:af:97:d3:
                    9f:e5:4b:68:10:9a:2e:2f:e3:09:f5:90:e4:a8:48:
                    1e:05:71:c0:8d:86:16:32:46:a0:33:5a:3f:3a:9a:
                    8b:6f:c0:b5:74:72:8c:df:fe:4d:cb:3c:b3:73:18:
                    92:4c:80:02:44:9e:7a:ed:58:7a:27:2a:71:da:08:
                    34:9b:b3:7b:cf:20:18:46:2e:d8:8b:82:d8:4a:b1:
                    26:fb:06:38:99:78:87:6f:6e:3e:3f:5a:e5:ce:42:
                    7d:c2:f2:4a:61:4a:55:94:52:77:19:b2:46:80:de:
                    a6:53:51:04:b6:14:5d:c4:a9:37:6e:f6:8a:da:14:
                    d5:71:8f:37:d8:d9:53:a9:d7:3b:39:84:c7:d5:f6:
                    50:21:0a:5a:10:c7:e2:ec:b9:47:b0:39:b4:42:76:
                    2b:cf:4e:89:bf:70:2e:c2:19:0b:1a:5c:14:bb:8c:
                    49:23:c0:99:e0:4e:af:5d:b9:d5:2f:6f:5c:ec:f9:
                    f1:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:29:08:93:F9:BC:20:D5:83:AB:73:08:90:CC:3F:12:B2:89:C6:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/f0d50248-97fe-38c6-8060-7fea88551590.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e/53e30d85-4474-43ab-95e5-8d5d53560b6e.crl

            X509v3 Authority Key Identifier:
                keyid:E7:AD:1E:EE:7F:F3:33:28:08:A8:8F:C2:67:AF:03:AB:86:E8:70:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/53e30d85-4474-43ab-95e5-8d5d53560b6e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.213.248.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:da:e4:25:bd:b5:d4:6c:9f:41:a2:e9:75:c7:30:8c:bc:49:
         f5:82:6c:8d:b5:d5:c2:12:31:4e:3c:7b:57:cb:c0:f0:49:6e:
         ac:5e:7b:6c:67:de:17:8d:40:32:46:97:78:2b:19:7d:95:d7:
         e8:46:89:24:4a:4e:4b:43:fd:8e:fe:e1:c0:b7:02:dd:53:07:
         46:22:55:88:e4:42:c5:94:92:db:8d:41:29:01:a7:45:47:4f:
         66:48:a2:84:87:f4:64:ef:36:9c:f4:8d:b6:73:06:96:89:5c:
         aa:76:01:a6:24:4d:a7:71:cd:be:c5:35:15:a4:dd:0d:c6:bc:
         c0:56:21:4e:1b:33:f7:ac:25:91:be:66:f2:34:14:40:37:15:
         e5:84:3c:57:bc:45:bd:b6:1f:28:f8:96:a5:e2:37:da:6b:da:
         0c:a4:33:64:51:9c:f7:1d:a7:ab:88:5c:61:53:45:12:d5:61:
         7b:e7:05:95:cd:a3:a8:7f:ae:9f:9f:98:51:f8:ac:ea:0d:bd:
         32:07:79:68:6b:af:e9:c0:b1:a4:54:f6:de:7e:5e:af:68:f3:
         a2:91:61:70:5a:71:07:ed:73:d6:71:f6:ed:14:3d:3b:d1:8c:
         e4:38:ca:7d:90:94:07:7d:69:62:7c:15:dc:27:f8:a7:f2:69:
         93:c3:6e:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhxwHrivlz4AOQQ3IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTNlMzBkODUtNDQ3NC00M2FiLTk1ZTUtOGQ1ZDUzNTYw
YjZlMB4XDTI1MDEwNTE0MDA1MloXDTI1MDQwNTEzMDA1MlowLzEtMCsGA1UEAxMk
YTdlM2I5NGEtMTJmNy00MWY2LTgwZjQtYzBkZjYzZGJkNGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwlOlSdi3DGGApDHzBJF5Alw38RULzFKVqLmc
YO5XBTQsX7UJC7gnqT6mTUz6OAEJvccz09sHjVU0hSBRbdkmpUQVwtureR2vl9Of
5UtoEJouL+MJ9ZDkqEgeBXHAjYYWMkagM1o/OpqLb8C1dHKM3/5NyzyzcxiSTIAC
RJ567Vh6Jypx2gg0m7N7zyAYRi7Yi4LYSrEm+wY4mXiHb24+P1rlzkJ9wvJKYUpV
lFJ3GbJGgN6mU1EEthRdxKk3bvaK2hTVcY832NlTqdc7OYTH1fZQIQpaEMfi7LlH
sDm0QnYrz06Jv3AuwhkLGlwUu4xJI8CZ4E6vXbnVL29c7PnxpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKMpCJP5vCDVg6tzCJDMPxKyicbeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81M2Uz
MGQ4NS00NDc0LTQzYWItOTVlNS04ZDVkNTM1NjBiNmUvZjBkNTAyNDgtOTdmZS0z
OGM2LTgwNjAtN2ZlYTg4NTUxNTkwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTNlMzBkODUtNDQ3NC00M2FiLTk1
ZTUtOGQ1ZDUzNTYwYjZlLzUzZTMwZDg1LTQ0NzQtNDNhYi05NWU1LThkNWQ1MzU2
MGI2ZS5jcmwwHwYDVR0jBBgwFoAU560e7n/zMygIqI/CZ68Dq4bocGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81M2UzMGQ4NS00NDc0LTQzYWItOTVlNS04ZDVk
NTM1NjBiNmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDotX4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfa5CW9tdRsn0Gi6XXHMIy8SfWCbI211cISMU48e1fLwPBJbqxee2xn
3heNQDJGl3grGX2V1+hGiSRKTktD/Y7+4cC3At1TB0YiVYjkQsWUktuNQSkBp0VH
T2ZIooSH9GTvNpz0jbZzBpaJXKp2AaYkTadxzb7FNRWk3Q3GvMBWIU4bM/esJZG+
ZvI0FEA3FeWEPFe8Rb22Hyj4lqXiN9pr2gykM2RRnPcdp6uIXGFTRRLVYXvnBZXN
o6h/rp+fmFH4rOoNvTIHeWhrr+nAsaRU9t5+Xq9o86KRYXBacQftc9Zx9u0UPTvR
jOQ4yn2QlAd9aWJ8Fdwn+KfyaZPDbgM=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:59 2025 by rpki-client