Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
File:                     a570bcc4-0473-34be-a001-4329ef970092.roa (raw, json)
Hash identifier:          8qQob4i9X2dAhMQrx3w0Qt5N9r4Xk4QfGd/ZpO/KnbA=
Subject key identifier:   77:FF:86:E1:04:6B:75:3C:9B:E7:C7:5C:8F:E5:66:A6:CB:42:E0:B0
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F43285849D42FA0A5DB7DB1EB0D023880
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa
Signing time:             Mon 12 May 2025 13:01:00 +0000
ROA not before:           Mon 12 May 2025 13:01:00 +0000
ROA not after:            Sun 10 Aug 2025 13:01:00 +0000
asID:                     20718
IP address blocks:        162.252.156.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 15 May 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d4:2f:a0:a5:db:7d:b1:eb:0d:02:38:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: May 12 13:01:00 2025 GMT
            Not After : Aug 10 13:01:00 2025 GMT
        Subject: CN=b3ce4cf8-434f-4096-b72c-81ba122497d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:05:51:5f:5a:a8:bc:c0:76:f2:35:d3:07:11:
                    ec:b2:b1:a3:58:99:bf:41:1f:df:d2:c5:7c:5f:bc:
                    c5:54:ce:8e:1a:9b:5e:65:23:28:da:af:b5:87:dd:
                    c4:f7:19:74:75:fd:e4:d2:d4:00:44:91:ca:c5:92:
                    9a:30:dc:79:d3:1d:59:df:3f:5e:fc:6f:e1:5b:81:
                    4a:a0:0f:e4:6a:a1:f7:1b:27:5c:57:a9:73:c7:40:
                    d8:d2:9b:ff:ba:54:10:19:e5:0e:1a:84:b4:89:42:
                    90:7d:a7:7d:7e:72:1d:a3:07:2b:d0:4f:1d:63:c7:
                    50:2b:ab:0e:00:d8:3c:e6:21:82:24:53:41:ae:8d:
                    dd:79:69:3d:95:48:60:d4:64:a3:98:23:ec:09:9c:
                    a1:ac:61:66:73:f3:5c:08:76:7a:53:e7:f8:f5:23:
                    2d:74:c9:b9:e1:94:28:18:b5:e3:c4:f4:2a:a8:70:
                    1e:9c:7e:b7:72:ec:75:e4:2b:aa:96:aa:15:c0:49:
                    08:bd:e3:f3:bc:fc:84:13:db:01:27:45:a0:f4:0b:
                    1d:8b:0c:b0:c0:71:10:59:47:ca:ed:c7:32:6c:19:
                    6c:2e:a6:8f:e6:88:60:76:98:ff:06:c9:0a:fb:79:
                    07:41:ad:43:03:20:fe:62:20:8d:89:99:a5:5f:82:
                    e1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FF:86:E1:04:6B:75:3C:9B:E7:C7:5C:8F:E5:66:A6:CB:42:E0:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/a570bcc4-0473-34be-a001-4329ef970092.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.252.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:21:95:bf:09:7d:1d:72:d7:5b:33:88:4c:9a:30:8d:30:52:
         e4:bf:c4:3f:e5:4e:61:91:7b:ff:1f:40:6a:f1:2a:83:43:a7:
         f3:c1:fc:0c:cc:83:7d:26:a2:a5:79:53:79:2b:03:f1:d1:e3:
         06:38:47:b4:8c:12:63:6a:26:55:40:f8:3b:5a:9c:f2:b3:fc:
         02:f5:67:74:35:0c:7a:6a:0f:26:7e:36:5a:78:7c:d2:c4:f5:
         72:86:9f:17:b0:03:8d:8e:88:f8:f2:08:20:03:a8:2b:6b:aa:
         d4:7e:31:72:aa:20:86:ed:61:1d:a2:ac:f3:08:8a:ca:a6:bb:
         12:4a:24:7c:1e:0e:3c:15:ed:31:7f:41:95:e4:c4:1e:12:39:
         a3:97:3e:f0:5f:85:f5:9f:d8:f3:70:39:e1:a1:42:9b:2a:9d:
         78:72:92:1f:90:91:16:bb:41:71:8a:08:31:97:16:b1:da:e9:
         e9:57:69:df:36:ae:06:5f:8e:d4:d7:77:34:a2:1c:f5:8a:c4:
         ee:6c:f8:00:7d:63:e9:03:0a:32:aa:e3:1f:1f:83:56:ba:d4:
         49:e1:e0:00:11:47:9b:83:cb:d3:55:21:34:9b:b9:4e:da:9d:
         6b:0f:78:ee:ac:e4:ff:0b:93:e1:84:7b:0e:af:7a:74:a5:ba:
         04:0b:7d:72
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnUL6Cl232x6w0COIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDUxMjEzMDEwMFoXDTI1MDgxMDEzMDEwMFowLzEtMCsGA1UEAxMk
YjNjZTRjZjgtNDM0Zi00MDk2LWI3MmMtODFiYTEyMjQ5N2QzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AVRX1qovMB28jXTBxHssrGjWJm/QR/f0sV8
X7zFVM6OGpteZSMo2q+1h93E9xl0df3k0tQARJHKxZKaMNx50x1Z3z9e/G/hW4FK
oA/kaqH3GydcV6lzx0DY0pv/ulQQGeUOGoS0iUKQfad9fnIdowcr0E8dY8dQK6sO
ANg85iGCJFNBro3deWk9lUhg1GSjmCPsCZyhrGFmc/NcCHZ6U+f49SMtdMm54ZQo
GLXjxPQqqHAenH63cux15CuqlqoVwEkIvePzvPyEE9sBJ0Wg9AsdiwywwHEQWUfK
7ccybBlsLqaP5ohgdpj/BskK+3kHQa1DAyD+YiCNiZmlX4LhIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHf/huEEa3U8m+fHXI/lZqbLQuCwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvYTU3MGJjYzQtMDQ3My0z
NGJlLWEwMDEtNDMyOWVmOTcwMDkyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCovycMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB0hlb8JfR1y11sziEyaMI0wUuS/xD/lTmGRe/8fQGrxKoNDp/PB/AzM
g30moqV5U3krA/HR4wY4R7SMEmNqJlVA+DtanPKz/AL1Z3Q1DHpqDyZ+Nlp4fNLE
9XKGnxewA42OiPjyCCADqCtrqtR+MXKqIIbtYR2irPMIisqmuxJKJHweDjwV7TF/
QZXkxB4SOaOXPvBfhfWf2PNwOeGhQpsqnXhykh+QkRa7QXGKCDGXFrHa6elXad82
rgZfjtTXdzSiHPWKxO5s+AB9Y+kDCjKq4x8fg1a61Enh4AARR5uDy9NVITSbuU7a
nWsPeO6s5P8Lk+GEew6venSlugQLfXI=
-----END CERTIFICATE-----
Generated at Wed May 14 12:39:30 2025 by rpki-client