Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa
File:                     528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa (raw, json)
Hash identifier:          n3aYWy5tDTap6fMLB1R/eC3znyyFBZUJpEa1nP0E90Q=
Subject key identifier:   13:37:8C:A5:D4:72:FB:97:68:BC:FA:F9:7D:BA:FF:37:ED:6F:B2:3C
Certificate issuer:       /CN=91544e97-45e8-44e4-8b14-5bf7804e5988
Certificate serial:       010D0C9F432858498FC9B81F1A41C10CAF283C90
Authority key identifier: 2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa
Signing time:             Fri 18 Apr 2025 01:00:47 +0000
ROA not before:           Fri 18 Apr 2025 01:00:47 +0000
ROA not after:            Thu 17 Jul 2025 01:00:47 +0000
asID:                     15164
IP address blocks:        199.200.66.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8f:c9:b8:1f:1a:41:c1:0c:af:28:3c:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91544e97-45e8-44e4-8b14-5bf7804e5988
        Validity
            Not Before: Apr 18 01:00:47 2025 GMT
            Not After : Jul 17 01:00:47 2025 GMT
        Subject: CN=4467a9c6-6c34-48d4-acde-2d2279d205c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:c7:34:2e:6f:9d:23:b2:1d:20:a6:a3:1b:17:
                    c3:83:9c:58:bc:4b:7a:ff:7f:8c:d8:07:8a:a4:a3:
                    6e:de:ce:13:7e:a1:bf:33:68:a7:e7:ea:f1:8f:9c:
                    7d:26:ab:f8:eb:45:da:11:81:03:10:bc:d2:fb:00:
                    46:8c:63:8e:ff:90:da:e5:70:c7:96:ff:9e:67:ba:
                    76:93:84:ae:cb:68:f4:a2:0e:bf:4f:9d:d4:c9:65:
                    88:07:5e:d8:77:8c:d3:5e:32:4c:81:1e:24:2d:f2:
                    82:16:e6:68:18:ab:c0:c4:f6:1a:f1:7d:7a:ca:ab:
                    7d:19:e9:d6:f9:f3:0d:02:6b:e2:80:7a:eb:2c:c1:
                    0d:25:48:90:a8:06:16:9e:13:52:c7:3d:9e:2f:59:
                    86:74:a0:68:16:f1:5b:1d:4b:e0:12:bd:13:cf:92:
                    60:95:62:99:36:95:65:ce:fd:58:bc:d4:74:4f:1b:
                    ea:f4:d9:e5:c3:c1:4c:66:a1:b1:63:5e:60:16:54:
                    0c:d7:6e:65:c2:0e:da:ee:3b:d6:01:2d:9e:6a:84:
                    8a:c8:26:1e:2e:7c:fc:de:c7:35:be:fe:fa:9d:e0:
                    96:ec:8e:6c:f8:2a:24:39:51:d4:3e:d4:be:56:c1:
                    d3:d2:51:30:c4:b5:37:52:aa:5e:dc:b1:7c:5e:64:
                    88:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:37:8C:A5:D4:72:FB:97:68:BC:FA:F9:7D:BA:FF:37:ED:6F:B2:3C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/528bc511-2204-34bf-8f74-f0ffed7dcdf6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988/91544e97-45e8-44e4-8b14-5bf7804e5988.crl

            X509v3 Authority Key Identifier:
                keyid:2F:98:00:FA:1E:9A:4F:1C:EF:63:96:27:70:45:86:16:17:5D:3F:6A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/91544e97-45e8-44e4-8b14-5bf7804e5988.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.66.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:b4:fc:4b:7d:22:4e:41:49:9e:0f:1e:26:88:a4:b3:01:cc:
         7d:d6:95:4b:06:8e:b2:99:ec:2e:f0:3a:3f:1e:2d:a5:29:08:
         7c:8b:e5:2e:5d:1a:82:86:e6:8c:5d:46:c2:79:59:21:2b:00:
         9d:9e:d3:d9:b9:b5:7e:73:e3:b5:04:ab:27:0b:39:19:72:fe:
         99:ad:60:62:e1:dc:82:2f:89:1a:df:fa:c9:d6:bf:4a:24:17:
         ba:9a:33:2d:9d:38:f4:96:08:6c:ee:ab:29:9a:2d:ff:dc:ed:
         4d:cb:ea:7b:fe:c3:1b:58:e8:2f:26:ff:b6:9e:85:e1:12:8d:
         eb:0a:4c:9b:bd:b3:81:f4:62:87:fb:c4:31:e6:93:d0:8f:96:
         06:2e:91:20:24:68:b9:06:3f:5d:2f:59:34:af:1e:6c:1c:66:
         30:a1:0b:70:89:0e:ad:2a:56:ba:ce:59:b8:2c:8d:23:50:f0:
         92:c8:94:4a:45:ed:9e:11:f2:2f:48:ee:84:47:d5:ad:8c:02:
         e4:f6:19:76:3d:3d:3a:1f:98:05:ca:6c:bf:b9:58:4a:80:01:
         7f:e6:b5:4f:54:b6:c5:05:46:cf:18:8f:04:d2:60:83:b8:95:
         4d:94:5d:73:f6:a4:f3:f8:9e:a2:28:41:c5:a1:a8:6f:40:72:
         58:71:92:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmPybgfGkHBDK8oPJAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTE1NDRlOTctNDVlOC00NGU0LThiMTQtNWJmNzgwNGU1
OTg4MB4XDTI1MDQxODAxMDA0N1oXDTI1MDcxNzAxMDA0N1owLzEtMCsGA1UEAxMk
NDQ2N2E5YzYtNmMzNC00OGQ0LWFjZGUtMmQyMjc5ZDIwNWM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArcc0Lm+dI7IdIKajGxfDg5xYvEt6/3+M2AeK
pKNu3s4TfqG/M2in5+rxj5x9Jqv460XaEYEDELzS+wBGjGOO/5Da5XDHlv+eZ7p2
k4Suy2j0og6/T53UyWWIB17Yd4zTXjJMgR4kLfKCFuZoGKvAxPYa8X16yqt9GenW
+fMNAmvigHrrLMENJUiQqAYWnhNSxz2eL1mGdKBoFvFbHUvgEr0Tz5JglWKZNpVl
zv1YvNR0Txvq9Nnlw8FMZqGxY15gFlQM125lwg7a7jvWAS2eaoSKyCYeLnz83sc1
vv76neCW7I5s+CokOVHUPtS+VsHT0lEwxLU3Uqpe3LF8XmSIGQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBM3jKXUcvuXaLz6+X26/zftb7I8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0
NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3ODA0ZTU5ODgvNTI4YmM1MTEtMjIwNC0z
NGJmLThmNzQtZjBmZmVkN2RjZGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOTE1NDRlOTctNDVlOC00NGU0LThi
MTQtNWJmNzgwNGU1OTg4LzkxNTQ0ZTk3LTQ1ZTgtNDRlNC04YjE0LTViZjc4MDRl
NTk4OC5jcmwwHwYDVR0jBBgwFoAUL5gA+h6aTxzvY5YncEWGFhddP2owDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85MTU0NGU5Ny00NWU4LTQ0ZTQtOGIxNC01YmY3
ODA0ZTU5ODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8hCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+0/Et9Ik5BSZ4PHiaIpLMBzH3WlUsGjrKZ7C7wOj8eLaUpCHyL5S5d
GoKG5oxdRsJ5WSErAJ2e09m5tX5z47UEqycLORly/pmtYGLh3IIviRrf+snWv0ok
F7qaMy2dOPSWCGzuqymaLf/c7U3L6nv+wxtY6C8m/7aeheESjesKTJu9s4H0Yof7
xDHmk9CPlgYukSAkaLkGP10vWTSvHmwcZjChC3CJDq0qVrrOWbgsjSNQ8JLIlEpF
7Z4R8i9I7oRH1a2MAuT2GXY9PTofmAXKbL+5WEqAAX/mtU9UtsUFRs8YjwTSYIO4
lU2UXXP2pPP4nqIoQcWhqG9AclhxknA=
-----END CERTIFICATE-----
Generated at Mon May 12 07:11:06 2025 by rpki-client