Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
File:                     5c1ac775-846b-34c5-befd-aa1852377b7f.roa (raw, json)
Hash identifier:          xeflv8RcuUeTPmyWYxnxewzOMerMehroSfq0IUEBKWM=
Subject key identifier:   5E:F9:2D:FF:A9:30:B5:04:82:79:00:5C:00:26:A3:B1:3A:88:B9:C1
Certificate issuer:       /CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
Certificate serial:       010D0C9F43285849AE7F420113AFD88BE2955F00
Authority key identifier: 0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa
Signing time:             Tue 29 Apr 2025 01:00:47 +0000
ROA not before:           Tue 29 Apr 2025 01:00:47 +0000
ROA not after:            Mon 28 Jul 2025 01:00:47 +0000
asID:                     174
IP address blocks:        162.250.96.0/21 maxlen: 24
                          162.254.0.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ae:7f:42:01:13:af:d8:8b:e2:95:5f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ee2e4b0-6f9a-43c7-b6be-6eff4887663e
        Validity
            Not Before: Apr 29 01:00:47 2025 GMT
            Not After : Jul 28 01:00:47 2025 GMT
        Subject: CN=c9f3c888-1b38-43e4-b006-db53bf8538ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:25:81:6f:6d:3a:3c:fe:8b:c2:30:d5:67:06:
                    db:73:5f:a5:48:28:fd:ad:11:b4:2d:85:57:82:78:
                    72:06:c7:1e:c3:b4:c7:1c:c4:4c:05:94:03:fe:15:
                    fc:35:64:e9:64:c8:e4:4a:47:aa:a1:44:38:f9:fa:
                    47:26:e2:3a:69:46:99:78:ed:38:75:f3:7d:74:80:
                    25:8a:62:d1:2c:1e:36:f7:db:b1:44:59:a4:a7:f2:
                    eb:14:3e:d3:bd:f7:11:81:47:d5:6e:cc:32:f6:8e:
                    52:3f:51:c5:26:5f:05:39:5f:5f:13:68:d5:ce:15:
                    1d:67:72:7a:3e:08:c4:a4:29:e0:f3:14:57:41:6d:
                    e4:66:0a:8f:e2:1c:fa:a6:a0:ad:57:45:a9:3e:4b:
                    e6:ef:c6:dd:c2:50:79:33:1f:a4:7e:56:f3:32:61:
                    9c:74:2f:4a:0b:82:82:f8:8c:a9:d6:90:8e:46:87:
                    ef:3b:a5:21:ce:21:fa:76:30:5d:90:bd:be:61:e6:
                    dd:d3:2d:8f:9a:ee:62:0b:88:a1:35:b8:18:36:88:
                    15:be:bf:e5:05:02:27:7b:51:48:09:7d:94:50:da:
                    ae:b5:38:0e:a4:25:c1:f8:35:cd:62:f1:23:a9:1f:
                    94:38:c8:74:62:78:ed:68:7b:25:96:91:59:21:08:
                    2c:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:F9:2D:FF:A9:30:B5:04:82:79:00:5C:00:26:A3:B1:3A:88:B9:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5c1ac775-846b-34c5-befd-aa1852377b7f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.crl

            X509v3 Authority Key Identifier:
                keyid:0E:19:63:55:8F:44:E3:41:78:7B:54:C0:67:21:48:5E:38:A3:A3:30

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5ee2e4b0-6f9a-43c7-b6be-6eff4887663e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.250.96.0/21
                  162.254.0.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fb:8c:dc:ea:6c:7f:ff:3b:2f:c4:96:38:ea:ea:18:d5:38:
         6e:b1:a5:f9:87:ba:25:e0:a2:db:b1:d8:4f:c4:88:61:a2:25:
         93:64:e8:16:b2:b8:5d:60:18:67:36:6d:8c:80:06:e5:07:f8:
         a3:d2:8a:df:88:1f:00:4a:44:ae:12:61:b1:d8:5c:a0:ad:cc:
         0e:86:bc:41:cb:7e:98:ec:b5:f6:df:8d:34:f3:5a:2f:b5:f4:
         70:b8:91:e6:48:93:da:72:6e:36:b8:b8:19:9e:33:71:7c:d1:
         c4:45:c8:b8:3b:96:76:05:58:b5:d8:ce:d8:c3:35:ae:e6:9a:
         18:8c:cd:cb:eb:dd:3e:24:33:6a:56:05:4b:01:64:88:81:a6:
         cc:01:ec:13:65:b8:d0:5d:fc:75:06:e1:47:54:ca:15:68:e0:
         2e:56:96:43:1e:01:0a:ef:80:05:2d:87:3c:24:f8:f1:bb:98:
         5a:82:8b:72:40:d0:65:46:da:86:c4:c9:ed:3c:20:14:ae:ec:
         50:fb:fb:1b:3e:1c:a8:de:31:f3:36:e0:b1:1d:c0:9a:8b:6e:
         70:27:38:3a:18:70:78:f3:ce:2c:d7:85:03:ac:03:cd:3b:24:
         02:00:25:b5:1b:7a:28:6e:e2:09:c6:5d:bf:e2:ea:5c:95:1d:
         04:47:c8:72
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEmuf0IBE6/Yi+KVXwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWVlMmU0YjAtNmY5YS00M2M3LWI2YmUtNmVmZjQ4ODc2
NjNlMB4XDTI1MDQyOTAxMDA0N1oXDTI1MDcyODAxMDA0N1owLzEtMCsGA1UEAxMk
YzlmM2M4ODgtMWIzOC00M2U0LWIwMDYtZGI1M2JmODUzOGNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCWBb206PP6LwjDVZwbbc1+lSCj9rRG0LYVX
gnhyBscew7THHMRMBZQD/hX8NWTpZMjkSkeqoUQ4+fpHJuI6aUaZeO04dfN9dIAl
imLRLB4299uxRFmkp/LrFD7TvfcRgUfVbswy9o5SP1HFJl8FOV9fE2jVzhUdZ3J6
PgjEpCng8xRXQW3kZgqP4hz6pqCtV0WpPkvm78bdwlB5Mx+kflbzMmGcdC9KC4KC
+Iyp1pCORofvO6UhziH6djBdkL2+Yebd0y2Pmu5iC4ihNbgYNogVvr/lBQIne1FI
CX2UUNqutTgOpCXB+DXNYvEjqR+UOMh0YnjtaHsllpFZIQgsPwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFF75Lf+pMLUEgnkAXAAmo7E6iLnBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUy
ZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZmNDg4NzY2M2UvNWMxYWM3NzUtODQ2Yi0z
NGM1LWJlZmQtYWExODUyMzc3YjdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWVlMmU0YjAtNmY5YS00M2M3LWI2
YmUtNmVmZjQ4ODc2NjNlLzVlZTJlNGIwLTZmOWEtNDNjNy1iNmJlLTZlZmY0ODg3
NjYzZS5jcmwwHwYDVR0jBBgwFoAUDhljVY9E40F4e1TAZyFIXjijozAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZWUyZTRiMC02ZjlhLTQzYzctYjZiZS02ZWZm
NDg4NzY2M2UuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQDovpgAwQD
ov4AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAK77jNzqbH//Oy/Eljjq6hjVOG6xpfmHuiXgotux2E/EiGGi
JZNk6BayuF1gGGc2bYyABuUH+KPSit+IHwBKRK4SYbHYXKCtzA6GvEHLfpjstfbf
jTTzWi+19HC4keZIk9pybja4uBmeM3F80cRFyLg7lnYFWLXYztjDNa7mmhiMzcvr
3T4kM2pWBUsBZIiBpswB7BNluNBd/HUG4UdUyhVo4C5WlkMeAQrvgAUthzwk+PG7
mFqCi3JA0GVG2obEye08IBSu7FD7+xs+HKjeMfM24LEdwJqLbnAnODoYcHjzzizX
hQOsA807JAIAJbUbeihu4gnGXb/i6lyVHQRHyHI=
-----END CERTIFICATE-----
Generated at Sat May 10 19:15:14 2025 by rpki-client