Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
File:                     b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa (raw, json)
Hash identifier:          QyZnt0HRVeEPzQsXanKBUqsEK6HO1+Akomc0ZQwDrtY=
Subject key identifier:   1E:63:4E:E2:D9:73:D3:F2:E6:FE:7C:9F:8A:8A:87:C1:7A:EF:66:50
Certificate issuer:       /CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
Certificate serial:       010D0C9F4328584986046780826D12A7D056E9C0
Authority key identifier: 6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa
Signing time:             Mon 14 Apr 2025 13:00:59 +0000
ROA not before:           Mon 14 Apr 2025 13:00:59 +0000
ROA not after:            Sun 13 Jul 2025 13:00:59 +0000
asID:                     22299
IP address blocks:        65.254.160.0/19 maxlen: 24
                          162.249.84.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 09 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:86:04:67:80:82:6d:12:a7:d0:56:e9:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=bc6146e0-ac7c-49f0-a39f-f40759de0b5d
        Validity
            Not Before: Apr 14 13:00:59 2025 GMT
            Not After : Jul 13 13:00:59 2025 GMT
        Subject: CN=1a07b03c-bfb7-41c5-b4fe-38ea871e3565
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e2:f8:a8:57:91:70:58:a7:c5:fb:3b:1a:af:
                    98:01:96:1e:35:42:23:4d:97:66:dc:fa:4b:9f:96:
                    a1:bb:d0:9b:aa:eb:dc:c5:06:03:87:74:ae:fe:35:
                    3f:fd:2c:79:07:81:6c:c5:85:d1:8a:43:aa:21:cd:
                    33:1b:aa:e6:bc:fb:57:0b:08:10:dd:d8:b1:ed:fa:
                    9c:ba:e3:44:bb:89:fc:54:41:31:8c:0f:23:d1:18:
                    86:83:04:7f:dc:cc:2b:15:f8:56:d3:08:a8:fa:65:
                    7b:a0:68:df:e2:91:c7:30:e3:a0:79:cc:73:ad:da:
                    25:01:2b:08:87:46:1e:93:33:52:85:35:53:b8:06:
                    1b:1d:56:ce:af:45:59:20:95:0c:df:d8:15:d8:ef:
                    73:25:34:da:7a:03:dc:65:2e:e4:ff:f2:10:2d:76:
                    87:24:48:46:ef:29:50:56:85:4c:c6:a0:64:0d:d4:
                    18:ff:cc:6d:63:1e:41:f4:40:ec:3e:b8:f8:74:db:
                    a6:51:d0:42:12:46:9e:68:c0:4c:23:bb:10:d6:80:
                    a2:f6:2e:ed:55:46:c2:53:f9:0a:2e:4d:7c:71:e8:
                    23:74:60:b9:9a:54:0d:e2:6b:3a:3f:e2:f5:1a:c0:
                    0d:d9:f4:c7:bd:9a:2d:bf:4c:bd:68:30:1f:b1:f3:
                    1b:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:63:4E:E2:D9:73:D3:F2:E6:FE:7C:9F:8A:8A:87:C1:7A:EF:66:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/b9d5984a-a4c2-345c-8fe4-317ce73d86ba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.crl

            X509v3 Authority Key Identifier:
                keyid:6F:35:45:A6:31:FD:EC:B9:3A:FD:94:AD:E8:F5:F2:3E:EF:94:DA:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/bc6146e0-ac7c-49f0-a39f-f40759de0b5d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.254.160.0/19
                  162.249.84.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:87:b1:22:55:3d:a0:4d:89:01:8c:2e:18:c1:a2:e5:b9:7d:
         49:2f:2e:3d:55:d4:a9:b9:e4:bc:cb:cb:a1:f8:56:4c:c8:f8:
         87:56:23:b4:07:b4:8a:d7:9d:ca:d5:13:c5:f4:90:db:b0:65:
         28:99:13:00:9b:55:ed:7d:6a:04:1c:36:82:99:f0:bc:df:1c:
         2c:f0:6d:be:f6:80:79:12:20:08:2d:d3:bc:ba:cd:9c:51:ac:
         0f:dc:e3:b3:a5:e0:24:7b:ea:29:3d:1e:e3:00:3c:68:75:6e:
         45:d8:29:db:1a:2b:36:48:44:02:b6:4d:e9:2e:6f:ef:bb:22:
         2d:9e:e0:e1:58:05:1b:ea:1b:93:19:ae:1e:ed:98:26:73:32:
         43:f3:2f:6a:e8:19:50:af:70:02:40:d4:be:d3:54:05:c3:85:
         d6:80:01:cf:e0:4e:be:42:26:cb:04:95:ae:a8:2e:92:6b:17:
         f3:32:ed:2e:b0:73:ef:56:aa:75:e3:b5:16:76:3d:a0:ac:ce:
         5e:dd:ad:e9:be:40:f5:7a:3e:ed:76:c2:74:d3:e9:3f:8b:27:
         01:6b:af:2d:cb:fe:63:5b:de:2e:fe:ec:f6:02:e9:4b:5b:d1:
         59:47:85:f2:b9:49:4a:07:a0:6f:54:ec:1f:8d:2e:5e:e6:7b:
         99:52:78:b0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmGBGeAgm0Sp9BW6cAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmM2MTQ2ZTAtYWM3Yy00OWYwLWEzOWYtZjQwNzU5ZGUw
YjVkMB4XDTI1MDQxNDEzMDA1OVoXDTI1MDcxMzEzMDA1OVowLzEtMCsGA1UEAxMk
MWEwN2IwM2MtYmZiNy00MWM1LWI0ZmUtMzhlYTg3MWUzNTY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0eL4qFeRcFinxfs7Gq+YAZYeNUIjTZdm3PpL
n5ahu9CbquvcxQYDh3Su/jU//Sx5B4FsxYXRikOqIc0zG6rmvPtXCwgQ3dix7fqc
uuNEu4n8VEExjA8j0RiGgwR/3MwrFfhW0wio+mV7oGjf4pHHMOOgecxzrdolASsI
h0YekzNShTVTuAYbHVbOr0VZIJUM39gV2O9zJTTaegPcZS7k//IQLXaHJEhG7ylQ
VoVMxqBkDdQY/8xtYx5B9EDsPrj4dNumUdBCEkaeaMBMI7sQ1oCi9i7tVUbCU/kK
Lk18cegjdGC5mlQN4ms6P+L1GsAN2fTHvZotv0y9aDAfsfMbnQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB5jTuLZc9Py5v58n4qKh8F672ZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iYzYx
NDZlMC1hYzdjLTQ5ZjAtYTM5Zi1mNDA3NTlkZTBiNWQvYjlkNTk4NGEtYTRjMi0z
NDVjLThmZTQtMzE3Y2U3M2Q4NmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYmM2MTQ2ZTAtYWM3Yy00OWYwLWEz
OWYtZjQwNzU5ZGUwYjVkL2JjNjE0NmUwLWFjN2MtNDlmMC1hMzlmLWY0MDc1OWRl
MGI1ZC5jcmwwHwYDVR0jBBgwFoAUbzVFpjH97Lk6/ZSt6PXyPu+U2tswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iYzYxNDZlMC1hYzdjLTQ5ZjAtYTM5Zi1mNDA3
NTlkZTBiNWQuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFQf6gAwQC
ovlUMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAF2HsSJVPaBNiQGMLhjBouW5fUkvLj1V1Km55LzLy6H4VkzI
+IdWI7QHtIrXncrVE8X0kNuwZSiZEwCbVe19agQcNoKZ8LzfHCzwbb72gHkSIAgt
07y6zZxRrA/c47Ol4CR76ik9HuMAPGh1bkXYKdsaKzZIRAK2Tekub++7Ii2e4OFY
BRvqG5MZrh7tmCZzMkPzL2roGVCvcAJA1L7TVAXDhdaAAc/gTr5CJssEla6oLpJr
F/My7S6wc+9WqnXjtRZ2PaCszl7drem+QPV6Pu12wnTT6T+LJwFrry3L/mNb3i7+
7PYC6Utb0VlHhfK5SUoHoG9U7B+NLl7me5lSeLA=
-----END CERTIFICATE-----
Generated at Thu May 8 06:08:01 2025 by rpki-client