Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
File:                     f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa (raw, json)
Hash identifier:          RJKnIfULDQBCMJ0VZ6LRKnxqg/jYIWF52rbPjvHWP9U=
Subject key identifier:   F1:20:8F:BB:31:09:BB:74:A0:0E:D4:62:13:62:63:46:EB:3C:60:D5
Certificate issuer:       /CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
Certificate serial:       010D0C9F43285849955F1F825335FF6A202E8400
Authority key identifier: 6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     399240
IP address blocks:        206.168.160.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:1f:82:53:35:ff:6a:20:2e:84:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2636a1c-c142-41ee-9f43-99f45ca2dc1d
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=bde13958-f69e-4bf5-b7f7-b14d42ec06c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:67:26:6c:a8:b4:68:f5:8b:3a:f0:2d:fe:18:
                    63:14:ac:91:bc:6b:72:dc:0e:e0:2a:2e:54:db:21:
                    5b:52:8f:03:40:68:6d:06:92:ca:e3:70:ae:34:ae:
                    da:32:88:7d:6d:ef:9e:ac:62:91:11:29:aa:3d:6e:
                    20:6b:6b:b6:c3:d9:d2:d3:01:78:50:29:0f:6f:f2:
                    fb:25:5e:55:1a:ad:eb:07:85:9f:13:3b:a3:4f:c6:
                    78:13:aa:ce:1b:f8:79:11:f3:0b:0d:ae:6f:b3:c6:
                    17:cf:04:c2:48:47:0f:bb:3c:ec:01:81:95:f4:be:
                    40:78:e0:fb:f2:c3:b4:4f:46:b2:65:a3:3e:6d:d3:
                    22:2c:30:97:df:95:de:22:a8:21:d3:ee:f9:01:49:
                    d6:44:2a:69:0e:df:80:82:93:d2:9e:58:d3:bb:de:
                    fe:eb:18:a5:85:4d:d0:b1:4a:ca:c4:bc:38:90:64:
                    54:1d:0c:44:02:1c:3e:ed:55:67:85:79:32:f7:f6:
                    1c:67:7e:d0:16:aa:ff:17:8f:5f:75:75:7e:3b:8e:
                    7c:43:3f:e6:c4:8e:df:64:78:ff:f3:71:c1:34:c5:
                    78:04:62:72:ff:dd:db:43:22:d6:16:60:0b:1f:2a:
                    d7:b2:0d:30:4c:b4:16:cf:b8:59:1c:de:f8:dd:a1:
                    7f:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:20:8F:BB:31:09:BB:74:A0:0E:D4:62:13:62:63:46:EB:3C:60:D5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f70fe370-fa08-3eb1-b537-9f85e1c7cfa9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:73:ED:D1:7D:77:BC:C1:80:8A:46:49:FF:CE:D6:B6:68:F5:D5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f2636a1c-c142-41ee-9f43-99f45ca2dc1d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.160.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         68:dd:b4:98:a1:ab:63:db:9b:c6:d6:e5:d8:62:0f:b6:74:bc:
         2e:bc:97:07:6d:2a:d8:57:3e:59:c0:f6:5b:4a:ce:41:1a:dd:
         f1:d0:5e:83:06:d5:11:8c:a7:1f:62:89:84:87:37:4d:ac:21:
         31:9e:fa:01:93:01:07:06:57:02:c8:23:61:58:67:63:ae:e2:
         c9:4d:6a:04:97:47:c9:c1:7b:1f:da:2a:63:b0:ec:55:73:c0:
         db:27:ea:05:1a:fe:af:2f:4c:a6:7f:a4:8b:d1:ad:da:fb:02:
         04:22:f9:00:57:59:99:fe:2f:cf:1e:b8:1c:96:1e:02:78:88:
         c5:ef:8f:d6:da:53:3c:1d:a6:81:02:0c:1e:d3:ab:a9:85:67:
         08:7a:d7:a5:0e:11:a5:e6:47:19:dc:52:c2:ef:96:85:9b:05:
         25:53:be:fd:67:3d:56:12:82:bc:2c:01:10:09:07:9b:6a:bb:
         cb:5e:44:40:46:55:0e:ab:f2:63:cb:cc:9c:16:34:bb:5f:b7:
         1d:e9:01:d8:fc:39:52:cb:8b:d8:e5:b8:01:7a:ce:c6:c0:9c:
         c0:69:ff:db:09:fc:32:da:78:80:c6:f4:62:79:2e:08:24:db:
         bb:bd:88:c9:99:ac:f1:5f:6b:e6:a7:a4:a4:0b:49:b8:74:c2:
         a9:b9:98:cf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXx+CUzX/aiAuhAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjI2MzZhMWMtYzE0Mi00MWVlLTlmNDMtOTlmNDVjYTJk
YzFkMB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
YmRlMTM5NTgtZjY5ZS00YmY1LWI3ZjctYjE0ZDQyZWMwNmM1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGcmbKi0aPWLOvAt/hhjFKyRvGty3A7gKi5U
2yFbUo8DQGhtBpLK43CuNK7aMoh9be+erGKRESmqPW4ga2u2w9nS0wF4UCkPb/L7
JV5VGq3rB4WfEzujT8Z4E6rOG/h5EfMLDa5vs8YXzwTCSEcPuzzsAYGV9L5AeOD7
8sO0T0ayZaM+bdMiLDCX35XeIqgh0+75AUnWRCppDt+AgpPSnljTu97+6xilhU3Q
sUrKxLw4kGRUHQxEAhw+7VVnhXky9/YcZ37QFqr/F49fdXV+O458Qz/mxI7fZHj/
83HBNMV4BGJy/93bQyLWFmALHyrXsg0wTLQWz7hZHN743aF/DQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPEgj7sxCbt0oA7UYhNiY0brPGDVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMjYz
NmExYy1jMTQyLTQxZWUtOWY0My05OWY0NWNhMmRjMWQvZjcwZmUzNzAtZmEwOC0z
ZWIxLWI1MzctOWY4NWUxYzdjZmE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjI2MzZhMWMtYzE0Mi00MWVlLTlm
NDMtOTlmNDVjYTJkYzFkL2YyNjM2YTFjLWMxNDItNDFlZS05ZjQzLTk5ZjQ1Y2Ey
ZGMxZC5jcmwwHwYDVR0jBBgwFoAUanPt0X13vMGAikZJ/87Wtmj11XAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMjYzNmExYy1jMTQyLTQxZWUtOWY0My05OWY0
NWNhMmRjMWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqigMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGjdtJihq2Pbm8bW5dhiD7Z0vC68lwdtKthXPlnA9ltKzkEa3fHQXoMG
1RGMpx9iiYSHN02sITGe+gGTAQcGVwLII2FYZ2Ou4slNagSXR8nBex/aKmOw7FVz
wNsn6gUa/q8vTKZ/pIvRrdr7AgQi+QBXWZn+L88euByWHgJ4iMXvj9baUzwdpoEC
DB7Tq6mFZwh616UOEaXmRxncUsLvloWbBSVTvv1nPVYSgrwsARAJB5tqu8teREBG
VQ6r8mPLzJwWNLtftx3pAdj8OVLLi9jluAF6zsbAnMBp/9sJ/DLaeIDG9GJ5Lggk
27u9iMmZrPFfa+anpKQLSbh0wqm5mM8=
-----END CERTIFICATE-----
Generated at Fri May 9 08:29:58 2025 by rpki-client