Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa
File:                     51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa (raw, json)
Hash identifier:          nHUOSlTIeoiOsuj5vyYcbTYd+wz5KU2OtZv6TWGv4Kc=
Subject key identifier:   5E:F0:64:89:FB:F2:CE:FC:B2:C5:93:A6:61:EB:88:09:17:50:8F:4A
Certificate issuer:       /CN=bb385b0b-5ada-48ff-9c34-3440a6550535
Certificate serial:       010D0C9F43285849ABB49D46BDCED5F5505285A0
Authority key identifier: 20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa
Signing time:             Mon 28 Apr 2025 01:00:48 +0000
ROA not before:           Mon 28 Apr 2025 01:00:48 +0000
ROA not after:            Sun 27 Jul 2025 01:00:48 +0000
asID:                     19871
IP address blocks:        162.210.70.0/23 maxlen: 24
                          162.222.225.0/24 maxlen: 24
                          162.222.226.0/23 maxlen: 24
                          199.79.62.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ab:b4:9d:46:bd:ce:d5:f5:50:52:85:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bb385b0b-5ada-48ff-9c34-3440a6550535
        Validity
            Not Before: Apr 28 01:00:48 2025 GMT
            Not After : Jul 27 01:00:48 2025 GMT
        Subject: CN=b083ce2d-7c03-4ada-aee5-47033ca74347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:eb:5c:d6:88:f1:a3:28:08:68:27:2a:09:5d:
                    a1:68:b5:e6:33:4a:f5:4c:5a:db:72:78:f7:21:5d:
                    8d:4d:f5:d8:17:de:2c:5e:bf:07:89:5d:05:a0:24:
                    35:05:66:79:2b:05:6a:89:a2:96:e3:f7:d6:00:9c:
                    c8:5a:87:9c:7a:60:95:b6:e1:1d:bf:a5:d9:a3:4a:
                    e0:c8:47:17:1b:66:05:77:41:7f:e5:b1:ae:06:5e:
                    83:8e:da:c7:d9:33:1e:ba:63:e4:ef:35:34:0d:eb:
                    94:84:40:fd:b0:26:30:80:fa:bd:83:0f:e6:0c:9d:
                    06:b0:bf:a7:7a:22:67:5b:94:4f:78:0e:4f:3a:c0:
                    07:c7:fc:e2:56:18:f0:33:25:cd:b6:d0:e2:e3:2e:
                    bc:f9:f1:c9:e1:d7:71:b8:21:c4:83:9e:ef:46:b5:
                    84:f9:2f:23:a7:7c:1e:05:73:31:11:3b:43:99:df:
                    00:ec:dc:cf:e7:8a:9d:00:d4:d1:84:05:fc:95:4c:
                    73:05:12:3c:eb:0d:fa:3f:e1:e4:56:3d:3d:ba:90:
                    7b:e7:89:f6:97:45:75:dc:66:98:cc:af:9d:ad:f1:
                    f6:fd:6b:88:36:51:ba:fb:df:6b:03:49:34:fc:a7:
                    b7:f2:3e:3a:66:d8:aa:13:97:55:fd:29:28:0d:89:
                    d7:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F0:64:89:FB:F2:CE:FC:B2:C5:93:A6:61:EB:88:09:17:50:8F:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/51b2bd8f-586c-3dda-b085-04a4ae48aa0b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535/bb385b0b-5ada-48ff-9c34-3440a6550535.crl

            X509v3 Authority Key Identifier:
                keyid:20:46:74:1D:FD:78:9D:19:30:D4:B8:91:3B:3A:2A:90:05:19:39:51

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/bb385b0b-5ada-48ff-9c34-3440a6550535.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.210.70.0/23
                  162.222.225.0-162.222.227.255
                  199.79.62.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:ab:3a:ff:c5:15:be:77:81:54:c6:33:4f:01:b3:c3:2d:d0:
         4c:3e:1c:8c:ea:f4:52:9e:9c:71:d3:17:2b:69:6b:eb:e5:c0:
         e5:8b:5b:bb:55:44:d7:7f:e8:40:58:6e:9e:25:df:5d:9f:6d:
         e1:02:35:36:74:d5:c6:5a:d3:f0:25:a7:0f:01:06:c9:b6:22:
         88:4f:b3:b8:80:d2:0d:85:5f:a8:96:09:e3:e9:93:93:37:52:
         7e:e6:e3:1a:a3:bb:6e:b2:61:29:c2:8d:56:0c:22:f4:36:02:
         ba:95:43:34:20:d8:f8:74:60:3a:96:1d:19:fd:c6:03:ae:b9:
         a4:9b:06:ce:29:54:0a:20:36:16:0b:5e:90:a3:ea:b1:01:5d:
         a0:82:a1:7f:cc:5e:1a:37:e4:86:3c:ab:01:af:b5:b3:35:5c:
         0f:29:c9:b3:99:5a:15:5b:fb:5f:7b:ac:6c:b6:14:47:54:fa:
         38:81:19:d1:ef:bb:98:c1:45:08:15:ce:f0:6e:28:00:5a:a8:
         2d:94:57:d1:cb:f9:6f:28:54:58:b4:42:37:55:c8:05:92:54:
         ed:24:d7:b3:92:ef:0d:1d:f0:d0:34:f5:16:db:bc:65:0c:ae:
         3a:10:b1:5c:cf:9b:99:f6:d9:3a:6e:a3:fd:61:d6:88:ce:32:
         03:12:23:f9
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEmrtJ1Gvc7V9VBShaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmIzODViMGItNWFkYS00OGZmLTljMzQtMzQ0MGE2NTUw
NTM1MB4XDTI1MDQyODAxMDA0OFoXDTI1MDcyNzAxMDA0OFowLzEtMCsGA1UEAxMk
YjA4M2NlMmQtN2MwMy00YWRhLWFlZTUtNDcwMzNjYTc0MzQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApetc1ojxoygIaCcqCV2haLXmM0r1TFrbcnj3
IV2NTfXYF94sXr8HiV0FoCQ1BWZ5KwVqiaKW4/fWAJzIWoecemCVtuEdv6XZo0rg
yEcXG2YFd0F/5bGuBl6DjtrH2TMeumPk7zU0DeuUhED9sCYwgPq9gw/mDJ0GsL+n
eiJnW5RPeA5POsAHx/ziVhjwMyXNttDi4y68+fHJ4ddxuCHEg57vRrWE+S8jp3we
BXMxETtDmd8A7NzP54qdANTRhAX8lUxzBRI86w36P+HkVj09upB754n2l0V13GaY
zK+drfH2/WuINlG6+99rA0k0/Ke38j46ZtiqE5dV/SkoDYnXpQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFF7wZIn78s78ssWTpmHriAkXUI9KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4
NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQwYTY1NTA1MzUvNTFiMmJkOGYtNTg2Yy0z
ZGRhLWIwODUtMDRhNGFlNDhhYTBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYmIzODViMGItNWFkYS00OGZmLTlj
MzQtMzQ0MGE2NTUwNTM1L2JiMzg1YjBiLTVhZGEtNDhmZi05YzM0LTM0NDBhNjU1
MDUzNS5jcmwwHwYDVR0jBBgwFoAUIEZ0Hf14nRkw1LiROzoqkAUZOVEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9iYjM4NWIwYi01YWRhLTQ4ZmYtOWMzNC0zNDQw
YTY1NTA1MzUuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaAwQBotJGMAwD
BACi3uEDBAKi3uADBAHHTz4wVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAN6s6/8UVvneBVMYzTwGzwy3QTD4c
jOr0Up6ccdMXK2lr6+XA5Ytbu1VE13/oQFhuniXfXZ9t4QI1NnTVxlrT8CWnDwEG
ybYiiE+zuIDSDYVfqJYJ4+mTkzdSfubjGqO7brJhKcKNVgwi9DYCupVDNCDY+HRg
OpYdGf3GA665pJsGzilUCiA2FgtekKPqsQFdoIKhf8xeGjfkhjyrAa+1szVcDynJ
s5laFVv7X3usbLYUR1T6OIEZ0e+7mMFFCBXO8G4oAFqoLZRX0cv5byhUWLRCN1XI
BZJU7STXs5LvDR3w0DT1Ftu8ZQyuOhCxXM+bmfbZOm6j/WHWiM4yAxIj+Q==
-----END CERTIFICATE-----
Generated at Sun May 11 01:01:02 2025 by rpki-client