Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa
File:                     31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa (raw, json)
Hash identifier:          JFGVh2FtFrHCSr3GFoWtXRoNrh59l9+L7Sqp8ndZknc=
Subject key identifier:   45:83:DF:80:7A:D3:A2:8E:E0:FC:54:6F:C1:7D:F2:A2:A8:CD:F6:90
Certificate issuer:       /CN=e0f03377-8cfb-423d-8440-94047c3af049
Certificate serial:       010D0C9F43285849CBCF9EB2F86350C4C42D7680
Authority key identifier: 73:C1:69:51:CA:4C:84:C3:C0:E3:1C:0B:90:E3:2E:24:52:2A:81:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa
Signing time:             Fri 09 May 2025 13:01:00 +0000
ROA not before:           Fri 09 May 2025 13:01:00 +0000
ROA not after:            Thu 07 Aug 2025 13:01:00 +0000
asID:                     21818
IP address blocks:        74.120.56.0/21 maxlen: 24
                          199.255.200.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:cb:cf:9e:b2:f8:63:50:c4:c4:2d:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e0f03377-8cfb-423d-8440-94047c3af049
        Validity
            Not Before: May  9 13:01:00 2025 GMT
            Not After : Aug  7 13:01:00 2025 GMT
        Subject: CN=28645bf9-73d3-444b-a4ac-bc1d5e2ac6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:59:87:86:92:dd:c5:ad:50:58:c0:72:ca:39:
                    38:31:f5:dd:9c:a0:12:01:52:c7:3d:5b:82:f4:f4:
                    f4:09:07:0c:41:b2:c4:2f:e5:cb:e7:a5:15:3d:33:
                    f5:4b:7d:78:60:15:40:d6:30:34:15:4c:db:27:bc:
                    e5:e4:14:2d:ad:72:1f:0d:1c:72:e1:f5:3b:75:a4:
                    14:b9:c6:77:d0:f6:c4:3e:ac:9a:12:ee:6a:02:e7:
                    cd:4f:7f:d8:12:f0:d0:5d:11:37:3d:3a:2a:7d:bf:
                    89:4c:68:da:c6:65:79:d8:d6:ac:a9:b5:86:4b:62:
                    a2:72:49:13:47:70:7e:d3:3a:1e:40:28:2a:af:3f:
                    35:84:6f:11:a1:a1:26:36:cf:81:96:18:ad:93:a7:
                    70:02:54:98:b1:c6:5e:ef:05:70:f6:8a:4c:59:d9:
                    f7:f6:96:75:d7:29:a6:d5:d8:eb:c9:60:66:74:6f:
                    7e:54:fe:57:19:7d:2e:65:28:17:0c:7e:d0:78:27:
                    13:8c:54:9c:12:71:6e:1c:f8:c2:5a:8d:de:79:b2:
                    b5:09:15:03:65:a6:64:1f:28:5d:cd:74:36:93:d2:
                    ee:4d:c4:ca:68:09:03:bb:c5:6f:67:53:e2:b9:50:
                    2a:18:c3:f1:52:68:4a:87:f0:8e:1a:98:7f:a4:da:
                    90:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:83:DF:80:7A:D3:A2:8E:E0:FC:54:6F:C1:7D:F2:A2:A8:CD:F6:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/31bb14d5-6af8-3eac-a6b1-08b30101a1ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049/e0f03377-8cfb-423d-8440-94047c3af049.crl

            X509v3 Authority Key Identifier:
                keyid:73:C1:69:51:CA:4C:84:C3:C0:E3:1C:0B:90:E3:2E:24:52:2A:81:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/e0f03377-8cfb-423d-8440-94047c3af049.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.120.56.0/21
                  199.255.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:2d:44:0c:1e:8f:07:20:30:e3:cb:d7:3d:18:9e:ca:8b:8f:
         0b:17:6c:ab:09:5f:28:6c:7b:6d:78:a0:96:88:78:d5:7b:11:
         c3:b2:dd:0a:91:ee:1d:43:87:71:bd:a7:b8:87:e2:ad:aa:44:
         1b:4a:20:ec:7c:f9:3e:4d:cc:3d:e5:63:c7:73:39:94:43:5b:
         06:ce:ac:be:ff:b6:26:ae:cc:08:cc:31:51:7f:7b:24:5b:b3:
         1a:46:f2:2e:8d:8e:ed:f1:ef:11:ba:36:0c:84:42:27:42:b6:
         d7:37:fe:d6:ce:14:0d:03:f9:82:0d:0d:3d:75:af:0e:dd:c0:
         22:72:b9:b3:63:9c:59:08:c3:91:77:87:96:6c:a0:f7:a5:44:
         ae:0d:db:62:77:a8:94:94:8f:d7:2c:eb:f2:32:09:e7:54:17:
         99:ca:ae:c2:c1:98:f4:78:a0:89:a3:37:b2:0a:0b:a7:1d:eb:
         24:2e:a8:28:ef:6e:a8:e6:a1:f6:8c:c7:2c:2e:5e:b9:cc:0e:
         56:d0:a0:23:45:7b:46:95:11:9b:c8:3d:d0:62:bc:b5:4f:39:
         e4:80:7a:ac:58:13:37:d9:67:55:94:af:38:c1:be:c4:19:52:
         f9:eb:a3:90:37:14:3a:e5:c1:d2:da:0e:da:43:58:2d:13:14:
         30:5c:0a:03
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEnLz56y+GNQxMQtdoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTBmMDMzNzctOGNmYi00MjNkLTg0NDAtOTQwNDdjM2Fm
MDQ5MB4XDTI1MDUwOTEzMDEwMFoXDTI1MDgwNzEzMDEwMFowLzEtMCsGA1UEAxMk
Mjg2NDViZjktNzNkMy00NDRiLWE0YWMtYmMxZDVlMmFjNmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh1mHhpLdxa1QWMByyjk4MfXdnKASAVLHPVuC
9PT0CQcMQbLEL+XL56UVPTP1S314YBVA1jA0FUzbJ7zl5BQtrXIfDRxy4fU7daQU
ucZ30PbEPqyaEu5qAufNT3/YEvDQXRE3PToqfb+JTGjaxmV52NasqbWGS2KickkT
R3B+0zoeQCgqrz81hG8RoaEmNs+Blhitk6dwAlSYscZe7wVw9opMWdn39pZ11ymm
1djryWBmdG9+VP5XGX0uZSgXDH7QeCcTjFScEnFuHPjCWo3eebK1CRUDZaZkHyhd
zXQ2k9LuTcTKaAkDu8VvZ1PiuVAqGMPxUmhKh/COGph/pNqQcQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEWD34B606KO4PxUb8F98qKozfaQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9lMGYw
MzM3Ny04Y2ZiLTQyM2QtODQ0MC05NDA0N2MzYWYwNDkvMzFiYjE0ZDUtNmFmOC0z
ZWFjLWE2YjEtMDhiMzAxMDFhMWVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZTBmMDMzNzctOGNmYi00MjNkLTg0
NDAtOTQwNDdjM2FmMDQ5L2UwZjAzMzc3LThjZmItNDIzZC04NDQwLTk0MDQ3YzNh
ZjA0OS5jcmwwHwYDVR0jBBgwFoAUc8FpUcpMhMPA4xwLkOMuJFIqgeEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9lMGYwMzM3Ny04Y2ZiLTQyM2QtODQ0MC05NDA0
N2MzYWYwNDkuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDSng4AwQC
x//IMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAIgtRAwejwcgMOPL1z0YnsqLjwsXbKsJXyhse214oJaIeNV7
EcOy3QqR7h1Dh3G9p7iH4q2qRBtKIOx8+T5NzD3lY8dzOZRDWwbOrL7/tiauzAjM
MVF/eyRbsxpG8i6Nju3x7xG6NgyEQidCttc3/tbOFA0D+YINDT11rw7dwCJyubNj
nFkIw5F3h5ZsoPelRK4N22J3qJSUj9cs6/IyCedUF5nKrsLBmPR4oImjN7IKC6cd
6yQuqCjvbqjmofaMxywuXrnMDlbQoCNFe0aVEZvIPdBivLVPOeSAeqxYEzfZZ1WU
rzjBvsQZUvnro5A3FDrlwdLaDtpDWC0TFDBcCgM=
-----END CERTIFICATE-----
Generated at Wed May 14 09:04:31 2025 by rpki-client