Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa
File:                     54dc260a-4693-33bd-9183-63d2835feaa9.roa (raw, json)
Hash identifier:          a33HNVyxBPvn3JlQ+QeFGtHiIUXHPh2EO6yVOqbK+CQ=
Subject key identifier:   78:01:70:DC:D0:78:3B:B4:25:F7:F9:7D:45:EF:1D:60:02:C1:51:9B
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F43285849E4EFBC31D3B371CC0881FD80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     13760
IP address blocks:        199.187.136.0/23 maxlen: 23
                          199.187.140.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:bc:31:d3:b3:71:cc:08:81:fd:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=da54ce4f-071c-4778-8489-c6d554220383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:b1:27:e9:0c:65:0d:80:33:41:f1:db:c1:90:
                    9e:ff:85:02:87:fa:1c:14:14:fc:c0:68:a1:2b:08:
                    2d:9c:92:de:89:17:f9:b1:51:71:e1:90:c9:5f:7c:
                    4e:6a:b8:a2:69:78:c4:ce:0e:f2:21:ee:61:38:3a:
                    e7:07:50:0e:7d:9e:88:76:17:31:76:f9:b5:9b:db:
                    1c:eb:9d:1d:2e:a7:f4:73:6f:34:df:d8:16:a1:69:
                    99:d0:0f:6d:fc:0a:ab:e9:11:f0:b4:11:90:3a:a5:
                    92:cb:44:b9:60:f2:73:c2:28:4e:90:93:64:92:d1:
                    6a:8b:85:79:d1:d6:ce:0e:be:3b:e2:0a:b5:fe:63:
                    4b:a0:25:48:e4:10:a3:2e:0b:60:46:b3:c7:4c:01:
                    2d:8a:71:09:1a:f8:52:6d:9b:cd:65:b2:1d:a0:34:
                    09:93:38:38:26:38:64:42:8a:51:2f:56:ae:26:8e:
                    cf:1a:08:2b:a5:71:96:fc:75:ac:34:69:6b:b2:6e:
                    c1:cb:2f:8e:f5:29:34:21:ad:af:d9:f8:83:90:b2:
                    45:03:34:2a:02:36:a4:55:86:c4:32:2d:ab:65:63:
                    8e:f3:f4:e5:83:8c:c5:f0:e6:75:b1:cd:6f:c2:8d:
                    2b:ab:45:4c:e3:82:a4:2d:26:f0:b6:af:4a:e0:38:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:01:70:DC:D0:78:3B:B4:25:F7:F9:7D:45:EF:1D:60:02:C1:51:9B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/54dc260a-4693-33bd-9183-63d2835feaa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.136.0/23
                  199.187.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:9e:b3:69:14:41:bf:80:7a:f0:6e:f5:40:61:e7:fa:d8:6e:
         e8:24:ba:67:2d:78:3d:4d:82:ff:6c:6a:5f:a4:5e:cd:58:db:
         96:05:89:70:55:c6:a2:85:2f:ac:fb:75:9a:78:fd:7c:85:04:
         6e:cd:a9:e5:34:6a:08:d7:e7:79:a8:a3:44:f9:e0:04:02:4c:
         5c:14:81:7f:5e:1c:20:74:78:32:ff:5e:c3:06:dd:4a:1a:52:
         92:84:17:5b:3b:e5:c1:a1:38:85:6e:e0:47:8e:64:56:cf:b5:
         67:d4:12:6e:eb:4c:38:c8:05:69:5d:b7:92:f4:c0:4b:f6:7b:
         10:b6:71:75:b3:ae:de:1d:0f:b5:2b:81:b3:33:28:98:73:8c:
         b7:8d:c3:d2:4c:bf:2f:cf:27:30:f0:f3:4b:5a:39:3d:92:7c:
         8a:91:13:8c:01:31:b0:6a:b8:e3:eb:70:6b:8a:ad:5b:bf:75:
         5a:5e:7f:b5:2a:0c:24:aa:39:7d:fe:9f:01:9f:e8:18:54:24:
         83:46:22:4f:36:d3:7a:dc:83:fe:cb:d9:2d:8d:33:7a:1d:b2:
         1c:0a:0b:e8:99:48:e4:d5:6c:48:d0:c9:c4:0a:e7:f5:71:5f:
         42:6f:97:13:41:87:63:1e:c7:c1:5d:cf:53:8a:16:81:b4:97:
         bd:ce:37:0f
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnk77wx07NxzAiB/YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
ZGE1NGNlNGYtMDcxYy00Nzc4LTg0ODktYzZkNTU0MjIwMzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgLEn6QxlDYAzQfHbwZCe/4UCh/ocFBT8wGih
KwgtnJLeiRf5sVFx4ZDJX3xOariiaXjEzg7yIe5hODrnB1AOfZ6Idhcxdvm1m9sc
650dLqf0c28039gWoWmZ0A9t/Aqr6RHwtBGQOqWSy0S5YPJzwihOkJNkktFqi4V5
0dbODr474gq1/mNLoCVI5BCjLgtgRrPHTAEtinEJGvhSbZvNZbIdoDQJkzg4Jjhk
QopRL1auJo7PGggrpXGW/HWsNGlrsm7Byy+O9Sk0Ia2v2fiDkLJFAzQqAjakVYbE
Mi2rZWOO8/Tlg4zF8OZ1sc1vwo0rq0VM44KkLSbwtq9K4Djg3wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFHgBcNzQeDu0Jff5fUXvHWACwVGbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvNTRkYzI2MGEtNDY5My0z
M2JkLTkxODMtNjNkMjgzNWZlYWE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBx7uIAwQB
x7uMMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBALyes2kUQb+AevBu9UBh5/rYbugkumcteD1Ngv9sal+kXs1Y
25YFiXBVxqKFL6z7dZp4/XyFBG7NqeU0agjX53moo0T54AQCTFwUgX9eHCB0eDL/
XsMG3UoaUpKEF1s75cGhOIVu4EeOZFbPtWfUEm7rTDjIBWldt5L0wEv2exC2cXWz
rt4dD7UrgbMzKJhzjLeNw9JMvy/PJzDw80taOT2SfIqRE4wBMbBquOPrcGuKrVu/
dVpef7UqDCSqOX3+nwGf6BhUJINGIk8203rcg/7L2S2NM3odshwKC+iZSOTVbEjQ
ycQK5/VxX0JvlxNBh2Mex8Fdz1OKFoG0l73ONw8=
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:29:01 2025 by rpki-client