Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa
File:                     6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa (raw, json)
Hash identifier:          Tu5QsFRfZl9s/cf1R0waT8M02E3KLZnNtEfaivKyZbs=
Subject key identifier:   4E:AB:BC:73:4C:97:9E:C0:23:12:B3:49:86:DA:69:2D:24:3A:C9:6B
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858491246FA5C96390BFDE0667940
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa
Signing time:             Tue 04 Mar 2025 02:00:40 +0000
ROA not before:           Tue 04 Mar 2025 02:00:40 +0000
ROA not after:            Mon 02 Jun 2025 01:00:40 +0000
asID:                     701
IP address blocks:        151.205.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:12:46:fa:5c:96:39:0b:fd:e0:66:79:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  4 02:00:40 2025 GMT
            Not After : Jun  2 01:00:40 2025 GMT
        Subject: CN=512310ff-530b-47af-94d8-bb51332d72e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:c6:e0:b3:27:d1:22:93:39:77:d6:1d:7c:23:
                    06:43:26:1a:d6:16:7b:75:d0:a0:87:fb:1a:78:bd:
                    96:f0:30:22:b9:79:08:84:c6:b8:46:35:08:e1:34:
                    10:ee:19:dd:9d:74:d9:33:94:22:68:64:16:2b:fe:
                    a3:99:ac:5d:a0:7a:11:02:86:e7:08:b6:bc:84:ee:
                    f6:be:f6:91:23:e8:92:1b:e6:6d:ae:f4:54:2f:5a:
                    4b:46:06:30:00:9a:60:5d:aa:89:e1:7e:1d:c6:c7:
                    09:3f:32:93:cc:61:9e:e8:38:45:8a:e7:98:cf:88:
                    1c:98:ad:7b:00:44:5e:dd:65:18:87:2b:0e:71:2f:
                    52:0c:af:9c:5a:54:02:f1:43:94:e1:dc:30:b5:64:
                    d5:2c:c5:da:9f:e4:9d:f2:1c:19:22:6f:f6:fe:cc:
                    24:7a:a9:fa:4c:8c:8b:25:55:8b:56:fb:6a:4e:49:
                    a7:d2:9d:71:e3:96:de:39:83:4d:36:08:38:b8:21:
                    40:82:09:cf:52:bc:56:2f:cc:bf:c7:0d:e8:4e:29:
                    fc:db:65:49:81:61:1c:4e:9a:f6:1b:a4:5c:05:dd:
                    7d:0c:ad:29:cd:6a:9c:ee:f2:71:fb:ef:d7:9b:52:
                    b0:3a:83:cd:94:ed:36:2e:60:a8:e8:56:0d:df:00:
                    9b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:AB:BC:73:4C:97:9E:C0:23:12:B3:49:86:DA:69:2D:24:3A:C9:6B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/6f9b9cd6-cf03-333e-99b6-b0b88e192de5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  151.205.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:01:8c:b4:97:1d:dd:a6:3b:31:2f:b8:2f:48:b9:89:f3:0e:
         b7:16:2d:bd:55:92:b5:ae:fe:47:6f:f4:2d:70:4d:15:e5:22:
         d7:30:ad:fa:f6:26:49:1e:b1:40:7f:84:5f:d5:3d:81:18:f0:
         9e:88:72:2c:19:4e:3c:5f:4d:a2:e1:c5:cd:69:b8:e8:96:30:
         6a:e6:72:37:6d:a8:71:50:e7:19:64:8e:c1:dd:bc:61:ef:d2:
         8e:04:4c:8b:18:47:cd:ae:8c:56:57:5c:1f:6d:87:dc:62:53:
         9b:03:6a:ab:89:b4:bc:48:32:99:57:2a:a5:90:93:01:e4:9b:
         be:2a:a2:d1:77:58:0b:30:b5:38:8b:6f:82:6d:6a:be:ba:de:
         2a:13:32:76:e9:bd:b6:05:fd:20:b2:62:e6:12:59:12:17:bf:
         8d:2f:4e:78:3c:bf:d0:1e:18:7b:c1:44:f3:59:bb:cc:37:08:
         bf:30:64:c7:10:6e:1f:fa:1a:86:c4:c1:0c:32:d7:70:73:cf:
         fe:e2:7b:0d:b2:d8:f2:6d:5d:25:67:55:9d:d1:b4:45:81:e4:
         bb:31:47:e8:51:ab:92:1f:6f:0c:2a:6a:56:fb:2e:51:5b:fb:
         8d:03:c3:29:3a:08:7f:f8:93:11:da:74:1d:b5:15:2d:37:93:
         a5:2f:9c:06
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkSRvpcljkL/eBmeUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwNDAyMDA0MFoXDTI1MDYwMjAxMDA0MFowLzEtMCsGA1UEAxMk
NTEyMzEwZmYtNTMwYi00N2FmLTk0ZDgtYmI1MTMzMmQ3MmU2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmMbgsyfRIpM5d9YdfCMGQyYa1hZ7ddCgh/sa
eL2W8DAiuXkIhMa4RjUI4TQQ7hndnXTZM5QiaGQWK/6jmaxdoHoRAobnCLa8hO72
vvaRI+iSG+ZtrvRUL1pLRgYwAJpgXaqJ4X4dxscJPzKTzGGe6DhFiueYz4gcmK17
AERe3WUYhysOcS9SDK+cWlQC8UOU4dwwtWTVLMXan+Sd8hwZIm/2/swkeqn6TIyL
JVWLVvtqTkmn0p1x45beOYNNNgg4uCFAggnPUrxWL8y/xw3oTin822VJgWEcTpr2
G6RcBd19DK0pzWqc7vJx++/Xm1KwOoPNlO02LmCo6FYN3wCbdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFE6rvHNMl57AIxKzSYbaaS0kOslrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNmY5YjljZDYtY2YwMy0z
MzNlLTk5YjYtYjBiODhlMTkyZGU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFl82AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHkBjLSXHd2mOzEvuC9IuYnzDrcWLb1VkrWu/kdv9C1wTRXlItcwrfr2
JkkesUB/hF/VPYEY8J6IciwZTjxfTaLhxc1puOiWMGrmcjdtqHFQ5xlkjsHdvGHv
0o4ETIsYR82ujFZXXB9th9xiU5sDaquJtLxIMplXKqWQkwHkm74qotF3WAswtTiL
b4Jtar663ioTMnbpvbYF/SCyYuYSWRIXv40vTng8v9AeGHvBRPNZu8w3CL8wZMcQ
bh/6GobEwQwy13Bzz/7iew2y2PJtXSVnVZ3RtEWB5LsxR+hRq5Ifbwwqalb7LlFb
+40Dwyk6CH/4kxHadB21FS03k6UvnAY=
-----END CERTIFICATE-----
Generated at Sun Apr 6 02:10:49 2025 by rpki-client