Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
File:                     950373ec-0593-386e-8602-37c09d8513c1.roa (raw, json)
Hash identifier:          Ld7NigR8wBHKG10jMJc/xMa/KWhEWa8K/ZIYmN+/ziQ=
Subject key identifier:   8C:F8:34:46:64:AE:F6:BE:CE:D6:B7:03:20:BE:80:F0:E6:81:CF:41
Certificate issuer:       /CN=f4f85718-cda0-442f-9727-709a536e1e27
Certificate serial:       010D0C9F43285848EF61553CFD15B2EFBC07B4C0
Authority key identifier: 6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa
Signing time:             Wed 19 Feb 2025 14:00:52 +0000
ROA not before:           Wed 19 Feb 2025 14:00:52 +0000
ROA not after:            Tue 20 May 2025 13:00:52 +0000
asID:                     6639
IP address blocks:        162.211.136.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:ef:61:55:3c:fd:15:b2:ef:bc:07:b4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4f85718-cda0-442f-9727-709a536e1e27
        Validity
            Not Before: Feb 19 14:00:52 2025 GMT
            Not After : May 20 13:00:52 2025 GMT
        Subject: CN=f4f7a6c5-53a8-4852-8e12-e6626e16cdfe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:55:70:d6:1c:ef:07:1a:10:15:c3:4e:09:29:
                    6d:0b:eb:e4:1f:60:b0:d6:f6:d5:3d:0f:37:0e:a8:
                    c4:96:66:cc:82:64:18:22:fb:bf:39:e9:6d:05:27:
                    25:00:88:bf:a7:9f:42:4e:a2:cc:5a:9f:f0:3c:aa:
                    68:53:62:0e:83:75:bc:91:ce:7b:8b:8d:ef:6a:0f:
                    2f:a7:ef:37:5c:08:f0:45:a5:c3:9e:1a:9b:c2:8f:
                    28:e5:9c:eb:43:86:5e:e7:9c:7c:28:28:ae:df:a8:
                    e2:93:e6:ad:bd:14:97:d5:7c:ea:7b:74:63:f7:b1:
                    7c:35:de:0c:16:cd:61:43:e3:a7:4a:c4:80:3f:a0:
                    e5:b5:0c:f6:e8:7f:ac:33:97:18:a9:5a:97:ad:da:
                    fd:54:05:20:70:ca:9b:62:ec:e5:78:6a:79:22:d0:
                    82:50:95:61:d8:f6:10:0d:3a:f9:39:88:25:fc:2c:
                    06:19:86:f1:27:7f:e2:17:0f:df:94:49:17:c5:b4:
                    48:28:88:0d:47:46:6b:ca:d6:3a:d0:90:c0:3c:02:
                    55:b5:e4:78:fd:cd:c5:2a:33:be:71:76:ee:26:8c:
                    3f:30:36:10:07:29:a9:f8:0c:35:29:45:a9:4c:8b:
                    47:cb:dd:d4:bf:1e:df:d0:d5:c0:e5:a9:aa:7d:7c:
                    f4:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:F8:34:46:64:AE:F6:BE:CE:D6:B7:03:20:BE:80:F0:E6:81:CF:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/950373ec-0593-386e-8602-37c09d8513c1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27/f4f85718-cda0-442f-9727-709a536e1e27.crl

            X509v3 Authority Key Identifier:
                keyid:6B:6F:E0:BB:23:06:E8:21:A5:FF:2D:4F:6F:9F:5C:35:AF:3B:42:7F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f4f85718-cda0-442f-9727-709a536e1e27.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.211.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:a9:14:bc:6d:ff:7b:08:2c:39:37:6e:1b:18:d7:1d:74:96:
         f1:5f:f2:82:72:bb:11:75:e2:f3:2e:fa:34:79:85:97:3d:a1:
         cd:68:03:a6:9c:86:f2:ed:29:89:19:09:54:d1:26:fd:1a:1b:
         d0:43:37:25:3e:9b:94:ca:3d:bf:5d:69:4d:a8:b8:24:05:29:
         dd:26:34:26:02:69:63:2f:68:f1:b7:75:98:2e:9b:ae:63:15:
         ac:2b:04:c1:63:4b:5d:97:e1:bc:0c:18:54:a2:98:aa:92:e1:
         1c:32:22:3f:93:0b:c2:2e:4e:e5:04:56:64:ca:3d:d1:45:bb:
         61:cc:29:8c:d3:09:36:92:4e:67:ed:42:fb:95:fd:ad:b2:ad:
         cb:27:8d:c3:aa:33:9a:aa:92:fe:1a:ed:6d:99:2f:fc:39:1b:
         3b:3f:1d:91:22:d4:b3:5a:34:60:4d:ef:a6:61:60:4d:fb:24:
         dd:d4:b7:12:c8:41:dc:1e:11:c2:fb:cb:5e:65:34:79:6f:72:
         47:5c:14:6a:c1:2f:b5:ad:e8:0e:1c:bb:05:b2:99:7e:5c:a8:
         70:93:6c:69:fd:29:bb:4d:9c:ed:a3:58:16:55:0b:00:6e:79:
         2d:75:7e:2f:df:3a:40:a9:1c:5d:f3:09:a8:36:62:a7:06:87:
         75:62:66:95
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjvYVU8/RWy77wHtMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRmODU3MTgtY2RhMC00NDJmLTk3MjctNzA5YTUzNmUx
ZTI3MB4XDTI1MDIxOTE0MDA1MloXDTI1MDUyMDEzMDA1MlowLzEtMCsGA1UEAxMk
ZjRmN2E2YzUtNTNhOC00ODUyLThlMTItZTY2MjZlMTZjZGZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1Vw1hzvBxoQFcNOCSltC+vkH2Cw1vbVPQ83
DqjElmbMgmQYIvu/OeltBSclAIi/p59CTqLMWp/wPKpoU2IOg3W8kc57i43vag8v
p+83XAjwRaXDnhqbwo8o5ZzrQ4Ze55x8KCiu36jik+atvRSX1Xzqe3Rj97F8Nd4M
Fs1hQ+OnSsSAP6DltQz26H+sM5cYqVqXrdr9VAUgcMqbYuzleGp5ItCCUJVh2PYQ
DTr5OYgl/CwGGYbxJ3/iFw/flEkXxbRIKIgNR0ZrytY60JDAPAJVteR4/c3FKjO+
cXbuJow/MDYQBymp+Aw1KUWpTItHy93Uvx7f0NXA5amqfXz05QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIz4NEZkrva+zta3AyC+gPDmgc9BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4
NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlhNTM2ZTFlMjcvOTUwMzczZWMtMDU5My0z
ODZlLTg2MDItMzdjMDlkODUxM2MxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZjRmODU3MTgtY2RhMC00NDJmLTk3
MjctNzA5YTUzNmUxZTI3L2Y0Zjg1NzE4LWNkYTAtNDQyZi05NzI3LTcwOWE1MzZl
MWUyNy5jcmwwHwYDVR0jBBgwFoAUa2/guyMG6CGl/y1Pb59cNa87Qn8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9mNGY4NTcxOC1jZGEwLTQ0MmYtOTcyNy03MDlh
NTM2ZTFlMjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotOIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACWpFLxt/3sILDk3bhsY1x10lvFf8oJyuxF14vMu+jR5hZc9oc1oA6ac
hvLtKYkZCVTRJv0aG9BDNyU+m5TKPb9daU2ouCQFKd0mNCYCaWMvaPG3dZgum65j
FawrBMFjS12X4bwMGFSimKqS4RwyIj+TC8IuTuUEVmTKPdFFu2HMKYzTCTaSTmft
QvuV/a2yrcsnjcOqM5qqkv4a7W2ZL/w5Gzs/HZEi1LNaNGBN76ZhYE37JN3UtxLI
QdweEcL7y15lNHlvckdcFGrBL7Wt6A4cuwWymX5cqHCTbGn9KbtNnO2jWBZVCwBu
eS11fi/fOkCpHF3zCag2YqcGh3ViZpU=
-----END CERTIFICATE-----
Generated at Fri Apr 11 21:49:58 2025 by rpki-client