Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa
File:                     e554991a-5b06-3de2-9fa4-e22a8747951f.roa (raw, json)
Hash identifier:          uqwBHNtmpyLFckKGIkEIck3iuu/d3CYpb78flqsXl7g=
Subject key identifier:   17:27:F5:03:57:BA:29:F0:86:99:0B:98:56:46:2F:35:8F:FE:CB:74
Certificate issuer:       /CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
Certificate serial:       010D0C9F4328584A43DB080C5E11084741B15780
Authority key identifier: 4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     46133
IP address blocks:        2.57.166.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:db:08:0c:5e:11:08:47:41:b1:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=00fd3378-4bc3-4216-94f7-90c7efb47d80
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=432e6780-ca5d-4cfd-ad82-16f1252eb87f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:8e:69:74:a3:d8:e2:b1:df:96:39:77:ac:4b:
                    ca:74:7a:bf:4f:61:c9:91:a3:2e:4a:86:60:38:e4:
                    0d:aa:05:84:63:71:8f:d3:e7:6d:ec:d3:a1:b0:95:
                    9c:c1:80:59:c9:12:87:bb:29:64:52:e2:39:ef:9f:
                    1d:5f:19:a8:bf:4d:ef:b3:ef:6e:90:73:a8:cf:46:
                    87:f7:58:44:46:90:cd:bc:21:ad:36:bf:31:95:d4:
                    cd:a2:aa:1c:c3:8c:f9:b7:1b:ee:36:e0:f3:c5:5f:
                    8a:40:a4:39:d8:c8:c2:12:89:30:9e:da:01:74:5f:
                    12:49:e0:7e:a7:f9:81:9a:03:d4:0b:b6:30:49:cd:
                    76:2d:db:0c:1b:87:a7:87:7e:4d:0d:db:36:08:3c:
                    1c:fe:61:28:d1:9e:49:4a:68:a6:e7:37:7e:08:25:
                    9b:c2:d4:8f:8f:ef:a3:34:af:b0:79:c5:1a:b8:28:
                    88:ad:b8:de:01:51:87:a7:9c:89:dc:2b:67:df:b5:
                    82:c1:39:7f:22:92:3a:98:8e:38:f2:ac:ce:35:50:
                    40:21:d4:64:e0:69:5e:62:20:3b:d5:df:8e:9d:5b:
                    8d:00:30:4d:58:57:e8:2a:57:21:9d:e9:19:fb:7f:
                    61:5f:3d:69:87:45:4b:4f:de:18:34:9c:30:27:16:
                    1b:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:27:F5:03:57:BA:29:F0:86:99:0B:98:56:46:2F:35:8F:FE:CB:74
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/e554991a-5b06-3de2-9fa4-e22a8747951f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80/00fd3378-4bc3-4216-94f7-90c7efb47d80.crl

            X509v3 Authority Key Identifier:
                keyid:4D:E9:9F:C9:83:7E:83:56:13:39:AF:91:96:9A:91:35:BD:08:22:4F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/00fd3378-4bc3-4216-94f7-90c7efb47d80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  2.57.166.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a7:29:fe:86:f2:70:dd:9e:14:cc:d9:e1:26:e7:3f:8e:c9:89:
         f5:f0:2a:b3:7e:af:90:0b:94:22:a0:76:cf:ba:ca:19:e0:96:
         d9:28:60:1f:26:70:94:c8:16:89:19:f1:11:85:c7:9b:2a:fa:
         86:47:63:81:66:75:71:f1:36:a5:6d:37:66:0b:eb:0d:6a:4e:
         f4:c7:69:3a:cb:db:a3:87:ec:fd:4d:1a:8f:79:1d:9c:3d:bd:
         14:75:29:b1:bc:ae:8f:37:35:d5:3c:a9:32:08:53:79:7d:b3:
         3b:e6:0c:c6:bf:48:99:a4:4c:47:e0:f7:55:e9:fa:58:76:f3:
         19:f0:8c:f8:df:29:58:a4:0d:86:31:e8:f0:4a:32:69:7b:a6:
         f2:3a:1c:25:3d:6e:2a:e6:9b:5d:f5:8f:2f:a5:f8:1f:db:42:
         a0:a0:17:92:15:86:db:d1:f9:8d:47:db:32:89:72:2a:dd:af:
         8f:a9:bf:16:e9:de:6e:43:a0:cd:5c:30:d1:35:35:e7:b8:f1:
         1a:8e:d8:98:9a:2b:4b:c9:a0:e8:52:d2:98:1d:56:07:7b:03:
         ed:31:25:b0:8b:be:50:93:ef:30:11:4d:fc:55:5d:0a:09:a6:
         d1:94:d0:d1:99:d5:7f:52:44:30:6e:45:26:2e:3c:15:79:5a:
         16:1c:02:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpD2wgMXhEIR0GxV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDBmZDMzNzgtNGJjMy00MjE2LTk0ZjctOTBjN2VmYjQ3
ZDgwMB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
NDMyZTY3ODAtY2E1ZC00Y2ZkLWFkODItMTZmMTI1MmViODdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAto5pdKPY4rHfljl3rEvKdHq/T2HJkaMuSoZg
OOQNqgWEY3GP0+dt7NOhsJWcwYBZyRKHuylkUuI5758dXxmov03vs+9ukHOoz0aH
91hERpDNvCGtNr8xldTNoqocw4z5txvuNuDzxV+KQKQ52MjCEokwntoBdF8SSeB+
p/mBmgPUC7YwSc12LdsMG4enh35NDds2CDwc/mEo0Z5JSmim5zd+CCWbwtSPj++j
NK+wecUauCiIrbjeAVGHp5yJ3Ctn37WCwTl/IpI6mI448qzONVBAIdRk4GleYiA7
1d+OnVuNADBNWFfoKlchnekZ+39hXz1ph0VLT94YNJwwJxYbHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBcn9QNXuinwhpkLmFZGLzWP/st0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZk
MzM3OC00YmMzLTQyMTYtOTRmNy05MGM3ZWZiNDdkODAvZTU1NDk5MWEtNWIwNi0z
ZGUyLTlmYTQtZTIyYTg3NDc5NTFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDBmZDMzNzgtNGJjMy00MjE2LTk0
ZjctOTBjN2VmYjQ3ZDgwLzAwZmQzMzc4LTRiYzMtNDIxNi05NGY3LTkwYzdlZmI0
N2Q4MC5jcmwwHwYDVR0jBBgwFoAUTemfyYN+g1YTOa+RlpqRNb0IIk8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMGZkMzM3OC00YmMzLTQyMTYtOTRmNy05MGM3
ZWZiNDdkODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBAjmmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKcp/obycN2eFMzZ4SbnP47JifXwKrN+r5ALlCKgds+6yhngltkoYB8m
cJTIFokZ8RGFx5sq+oZHY4FmdXHxNqVtN2YL6w1qTvTHaTrL26OH7P1NGo95HZw9
vRR1KbG8ro83NdU8qTIIU3l9szvmDMa/SJmkTEfg91Xp+lh28xnwjPjfKVikDYYx
6PBKMml7pvI6HCU9birmm131jy+l+B/bQqCgF5IVhtvR+Y1H2zKJcirdr4+pvxbp
3m5DoM1cMNE1Nee48RqO2JiaK0vJoOhS0pgdVgd7A+0xJbCLvlCT7zARTfxVXQoJ
ptGU0NGZ1X9SRDBuRSYuPBV5WhYcAoU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:58:49 2025 by rpki-client