Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa
File:                     03bb8480-7690-3aaf-be33-0289f8d26b99.roa (raw, json)
Hash identifier:          wuXOSim2h0JqhnPEG9MX2LhzqmyXXVDx3cVS5yK011I=
Subject key identifier:   FF:66:4E:FF:9E:E5:88:AC:66:A4:33:F9:9C:18:77:50:EC:2C:94:4E
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F432858488AE08EF6D41804FB4AB91080
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa
Signing time:             Tue 14 Jan 2025 14:00:51 +0000
ROA not before:           Tue 14 Jan 2025 14:00:51 +0000
ROA not after:            Mon 14 Apr 2025 13:00:51 +0000
asID:                     13760
IP address blocks:        142.190.22.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 17 Feb 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:8a:e0:8e:f6:d4:18:04:fb:4a:b9:10:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jan 14 14:00:51 2025 GMT
            Not After : Apr 14 13:00:51 2025 GMT
        Subject: CN=978f898d-15b6-40bd-b773-39bd12871c7a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:22:cd:24:51:9a:eb:fa:60:b0:e5:cd:ff:31:
                    28:10:4c:e6:1d:af:19:98:45:5a:31:11:8c:a7:1f:
                    98:c2:a4:62:5f:26:11:72:3f:84:22:73:c1:bb:09:
                    30:ed:1d:a9:73:fb:0d:91:ca:47:dc:a2:31:e4:a9:
                    89:aa:2c:de:34:eb:e4:dd:ec:a1:c1:7d:be:55:9b:
                    2b:c1:0b:cc:07:df:9d:71:8d:ef:b2:ab:69:e0:2a:
                    f1:51:cd:f1:b2:33:8e:b7:e2:5b:b2:0f:94:e2:09:
                    85:3a:da:2a:ca:ef:7f:24:a6:3d:2d:5a:12:bf:ec:
                    bd:37:d8:5a:3c:a2:66:45:d7:e8:66:45:b8:11:ab:
                    35:8d:0b:52:48:48:4b:d1:92:8b:a7:38:6d:07:77:
                    b2:80:71:6e:6f:80:70:14:3f:4d:a8:08:c7:33:e0:
                    94:5a:92:4d:b3:5a:d4:37:f8:1c:8e:01:61:39:2b:
                    b8:3a:6a:df:7d:63:1e:3b:43:d2:9c:c1:12:26:24:
                    fd:09:8d:a0:4f:7d:3f:e6:01:c5:69:af:d0:3d:b3:
                    0b:7d:2e:e3:ea:c4:56:0b:f6:2b:3e:37:56:6c:80:
                    0a:8c:1c:03:c2:44:d7:4e:ff:3d:ec:13:87:62:dd:
                    50:da:e1:98:c2:5f:3d:1e:5d:e0:20:ec:65:0d:ec:
                    e4:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:66:4E:FF:9E:E5:88:AC:66:A4:33:F9:9C:18:77:50:EC:2C:94:4E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/03bb8480-7690-3aaf-be33-0289f8d26b99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:7a:31:76:21:07:96:0f:d0:f2:35:b9:44:d4:00:d0:fe:24:
         62:eb:c8:8a:bf:d7:87:64:15:19:58:4d:92:51:66:32:76:2e:
         aa:4c:0d:a8:0e:0e:65:1e:b8:cf:f7:b2:a4:d6:09:04:4c:35:
         6a:10:2d:f4:a9:c5:ef:a3:82:32:a4:c4:70:63:c0:d0:5d:c4:
         11:d7:85:81:f5:13:62:44:c2:25:11:de:86:8a:c0:06:39:09:
         17:cd:60:10:5e:cd:76:c4:5d:2c:8f:07:d2:ed:0f:0f:49:f4:
         d5:2e:98:47:ab:ce:77:6c:ea:00:27:87:e2:89:18:27:bb:ff:
         67:4b:80:47:b1:42:36:46:45:80:e1:77:bb:6c:4c:dd:ad:75:
         b6:98:a6:15:da:0a:1d:91:25:f6:64:ab:d2:17:b4:e5:c3:10:
         be:65:d1:31:94:69:35:d6:f3:6c:71:19:13:9b:06:7f:1b:6f:
         55:1a:4d:9a:8e:c7:01:a0:09:cf:4a:1c:dd:80:71:cd:76:83:
         b8:f9:47:2b:e4:b6:0b:45:cf:cf:17:3c:be:2d:0e:ad:29:00:
         28:dd:fd:3d:42:cd:a6:20:99:b9:70:36:a7:59:7f:a8:79:dd:
         bd:f8:37:78:2d:2e:d8:7f:eb:4a:c2:b6:7b:39:68:c9:0d:f5:
         83:0c:14:d0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEiK4I721BgE+0q5EIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDExNDE0MDA1MVoXDTI1MDQxNDEzMDA1MVowLzEtMCsGA1UEAxMk
OTc4Zjg5OGQtMTViNi00MGJkLWI3NzMtMzliZDEyODcxYzdhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAniLNJFGa6/pgsOXN/zEoEEzmHa8ZmEVaMRGM
px+YwqRiXyYRcj+EInPBuwkw7R2pc/sNkcpH3KIx5KmJqizeNOvk3eyhwX2+VZsr
wQvMB9+dcY3vsqtp4CrxUc3xsjOOt+Jbsg+U4gmFOtoqyu9/JKY9LVoSv+y9N9ha
PKJmRdfoZkW4Eas1jQtSSEhL0ZKLpzhtB3eygHFub4BwFD9NqAjHM+CUWpJNs1rU
N/gcjgFhOSu4OmrffWMeO0PSnMESJiT9CY2gT30/5gHFaa/QPbMLfS7j6sRWC/Yr
PjdWbIAKjBwDwkTXTv897BOHYt1Q2uGYwl89Hl3gIOxlDezkGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP9mTv+e5YisZqQz+ZwYd1DsLJROMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMDNiYjg0ODAtNzY5MC0z
YWFmLWJlMzMtMDI4OWY4ZDI2Yjk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjr4WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH56MXYhB5YP0PI1uUTUAND+JGLryIq/14dkFRlYTZJRZjJ2LqpMDagO
DmUeuM/3sqTWCQRMNWoQLfSpxe+jgjKkxHBjwNBdxBHXhYH1E2JEwiUR3oaKwAY5
CRfNYBBezXbEXSyPB9LtDw9J9NUumEerznds6gAnh+KJGCe7/2dLgEexQjZGRYDh
d7tsTN2tdbaYphXaCh2RJfZkq9IXtOXDEL5l0TGUaTXW82xxGRObBn8bb1UaTZqO
xwGgCc9KHN2Acc12g7j5RyvktgtFz88XPL4tDq0pACjd/T1CzaYgmblwNqdZf6h5
3b34N3gtLth/60rCtns5aMkN9YMMFNA=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:10:35 2025 by rpki-client