Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa
File:                     c162e3cc-ebac-30eb-a479-04090b221e04.roa (raw, json)
Hash identifier:          ffoHTi1Y1udS+daFxfhp3vi3RBdT1+Bf/KIkeiAsTEE=
Subject key identifier:   C7:CC:65:6F:65:52:77:88:8B:89:8D:7D:E3:41:7B:DB:E0:91:24:1D
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F432858490B4C29A7572E8D766694AD00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa
Signing time:             Sat 01 Mar 2025 14:00:52 +0000
ROA not before:           Sat 01 Mar 2025 14:00:52 +0000
ROA not after:            Fri 30 May 2025 13:00:52 +0000
asID:                     701
IP address blocks:        71.188.224.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:0b:4c:29:a7:57:2e:8d:76:66:94:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: Mar  1 14:00:52 2025 GMT
            Not After : May 30 13:00:52 2025 GMT
        Subject: CN=18f82797-b325-452e-9b8e-89a42422b8ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:be:bb:cf:57:c2:5f:fa:1f:87:fe:50:f6:0c:
                    78:dd:b3:c5:f3:be:6a:f2:2a:62:f9:93:6b:e9:79:
                    f0:f5:c7:59:0f:de:5f:3d:ab:93:46:f7:ea:da:22:
                    c0:10:b4:24:f8:38:6a:87:da:97:3d:ed:0e:aa:45:
                    30:d3:59:14:7b:89:4e:23:11:79:5f:45:1c:35:cf:
                    28:1c:3a:59:1e:9e:aa:8b:de:01:e7:8a:c2:37:67:
                    8e:bc:c3:d9:b1:da:3b:76:68:58:b3:62:2d:29:3b:
                    69:a6:b8:63:f5:6d:84:0b:07:cd:0f:fa:51:8a:a9:
                    94:c3:29:50:9d:ee:59:49:fb:e3:c2:54:b6:a3:8a:
                    f2:ac:b8:04:61:08:0b:e2:24:b8:39:f4:84:c4:17:
                    d8:1c:06:5d:6c:a1:28:b5:12:73:ab:0b:45:fd:eb:
                    5c:e7:52:f7:de:ed:2e:56:f5:3a:10:1d:79:78:17:
                    57:e6:62:07:5c:6e:aa:ae:06:2f:53:12:61:eb:e1:
                    b4:e6:63:91:ad:72:07:3b:b3:4a:6e:04:d3:8f:83:
                    01:af:7a:b1:6f:cb:71:27:a2:21:db:49:3e:ed:0b:
                    4a:85:0c:30:ab:6d:07:0b:00:e5:c1:f1:02:35:84:
                    5f:86:91:cd:fd:dd:ef:bf:a9:a2:82:f2:cd:b7:96:
                    88:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:CC:65:6F:65:52:77:88:8B:89:8D:7D:E3:41:7B:DB:E0:91:24:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/c162e3cc-ebac-30eb-a479-04090b221e04.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  71.188.224.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         46:71:e2:4d:bc:4b:27:de:c0:eb:e4:ab:32:15:61:5d:a5:ec:
         23:e2:c6:ab:28:58:0d:82:18:0c:eb:15:a6:41:df:92:40:b1:
         0d:55:20:a9:ae:f8:8e:de:4e:ab:de:52:52:3a:38:65:40:5f:
         12:e4:2e:50:66:74:e1:47:98:8d:d6:e6:9c:98:76:0b:7a:9c:
         5a:c3:e1:06:24:ff:ef:52:26:10:c9:7d:d1:03:d4:d7:1a:3f:
         b4:91:65:c1:7d:c7:e8:3e:49:91:0e:ad:78:b2:73:02:75:4a:
         a1:ab:ce:b0:d6:ac:2f:1e:09:23:30:e4:9b:71:61:2f:38:b9:
         8d:30:4f:d7:ef:48:e1:d3:85:6c:92:50:3d:7e:bc:95:b1:16:
         16:da:dc:a9:6f:3d:87:17:f8:97:cb:c8:f2:f5:a6:71:10:8a:
         4f:75:70:27:7d:77:61:ca:bf:a6:62:90:07:ba:5d:aa:c1:71:
         2e:8a:0d:94:49:aa:7d:d8:3a:32:ee:e8:fd:65:6c:a1:f8:4e:
         36:1b:ed:f9:d6:15:ba:a3:9b:10:35:25:da:6a:81:db:0a:7d:
         01:45:e5:a0:ee:c0:0e:7e:1f:13:1a:11:39:b2:55:e1:fe:0e:
         dd:76:42:71:bc:48:9e:82:70:2a:58:86:68:ae:15:89:f0:48:
         d3:86:83:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEkLTCmnVy6NdmaUrQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDMwMTE0MDA1MloXDTI1MDUzMDEzMDA1MlowLzEtMCsGA1UEAxMk
MThmODI3OTctYjMyNS00NTJlLTliOGUtODlhNDI0MjJiOGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyb67z1fCX/ofh/5Q9gx43bPF875q8ipi+ZNr
6Xnw9cdZD95fPauTRvfq2iLAELQk+Dhqh9qXPe0OqkUw01kUe4lOIxF5X0UcNc8o
HDpZHp6qi94B54rCN2eOvMPZsdo7dmhYs2ItKTtpprhj9W2ECwfND/pRiqmUwylQ
ne5ZSfvjwlS2o4ryrLgEYQgL4iS4OfSExBfYHAZdbKEotRJzqwtF/etc51L33u0u
VvU6EB15eBdX5mIHXG6qrgYvUxJh6+G05mORrXIHO7NKbgTTj4MBr3qxb8txJ6Ih
20k+7QtKhQwwq20HCwDlwfECNYRfhpHN/d3vv6migvLNt5aIyQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMfMZW9lUneIi4mNfeNBe9vgkSQdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvYzE2MmUzY2MtZWJhYy0z
MGViLWE0NzktMDQwOTBiMjIxZTA0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQER7zgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEZx4k28SyfewOvkqzIVYV2l7CPixqsoWA2CGAzrFaZB35JAsQ1VIKmu
+I7eTqveUlI6OGVAXxLkLlBmdOFHmI3W5pyYdgt6nFrD4QYk/+9SJhDJfdED1Nca
P7SRZcF9x+g+SZEOrXiycwJ1SqGrzrDWrC8eCSMw5JtxYS84uY0wT9fvSOHThWyS
UD1+vJWxFhba3KlvPYcX+JfLyPL1pnEQik91cCd9d2HKv6ZikAe6XarBcS6KDZRJ
qn3YOjLu6P1lbKH4TjYb7fnWFbqjmxA1JdpqgdsKfQFF5aDuwA5+HxMaETmyVeH+
Dt12QnG8SJ6CcCpYhmiuFYnwSNOGg3o=
-----END CERTIFICATE-----
Generated at Sat Apr 5 21:29:26 2025 by rpki-client