Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e86c643b-61e3-3e16-a7fd-543d5f9793dd.roa
File:                     e86c643b-61e3-3e16-a7fd-543d5f9793dd.roa (raw, json)
Hash identifier:          I4JfDdCYe1T7Y4j8GacXULygTlfybgt75aNLPaThsdU=
Subject key identifier:   70:4C:C2:A2:B4:83:FE:D9:58:67:ED:2C:9F:F8:40:FC:A6:19:A6:26
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849E225432568F0FD3A8407A1A0
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e86c643b-61e3-3e16-a7fd-543d5f9793dd.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     701
IP address blocks:        141.155.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:43:25:68:f0:fd:3a:84:07:a1:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=0fa51394-53e3-40a4-a554-07417679aefd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:9d:b0:b3:cb:0b:62:b7:be:79:4c:75:1a:ca:
                    2e:08:06:23:3e:ea:8c:8d:72:43:d7:97:1a:39:ab:
                    2e:0b:57:86:19:c6:ca:4c:6f:8d:41:65:78:a1:35:
                    ca:bb:db:cd:e4:4e:77:cf:d5:5d:9b:8b:4e:5e:16:
                    9b:5c:6c:68:45:19:22:48:87:2d:79:74:a3:91:c4:
                    40:45:e9:6c:91:9a:9f:9b:65:c3:f0:aa:fd:5c:14:
                    e6:b9:9e:74:ed:2c:87:95:53:d3:25:5e:46:89:26:
                    74:60:fe:25:5d:ff:b0:e8:0b:31:18:15:1f:93:40:
                    a1:aa:bd:26:8c:e7:e3:9a:bf:32:1e:7b:78:cf:53:
                    c1:11:36:8f:92:34:a4:81:ed:38:eb:a6:6b:e4:5c:
                    25:a1:00:66:76:62:ca:a3:e1:27:70:75:ff:9e:f4:
                    41:2c:6f:cf:fc:8e:d1:9f:20:36:7c:ce:6a:e2:b0:
                    8e:ac:9c:af:ea:2e:23:bc:5e:d2:e6:9b:9d:5d:11:
                    f7:28:da:60:67:44:3d:47:cd:65:d7:7f:1b:02:a1:
                    33:51:d4:3d:d2:3f:5f:73:80:0a:db:4a:5f:31:f2:
                    b1:c8:80:8d:de:11:9f:ad:a3:3a:fb:17:e6:94:99:
                    91:ae:7f:17:9a:09:19:0b:98:0c:7e:77:67:52:4e:
                    e2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:4C:C2:A2:B4:83:FE:D9:58:67:ED:2C:9F:F8:40:FC:A6:19:A6:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/e86c643b-61e3-3e16-a7fd-543d5f9793dd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.155.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:8e:c1:db:93:4e:0f:bb:d9:d3:ff:d4:36:f8:8f:1b:4b:7d:
         63:1e:8c:b0:91:45:11:fc:3c:64:34:0a:54:6e:bc:4d:9e:12:
         01:6d:b1:b4:06:3b:db:cf:e5:d5:36:d2:8f:c1:98:4a:63:4f:
         22:5b:5d:01:93:23:ad:a3:fc:50:5c:07:e3:e1:e9:67:22:13:
         95:f6:11:aa:7e:a0:9f:1d:b4:81:9e:dd:79:f4:71:58:5a:cc:
         66:70:25:6f:07:c7:30:78:99:35:5c:11:3f:21:6a:15:27:5e:
         23:33:0a:38:ea:66:45:ad:c7:88:5a:76:78:bc:c9:0a:3b:1a:
         7f:ae:06:7d:82:84:5b:00:00:d5:ff:2f:64:32:af:cf:f7:b2:
         99:39:90:3e:a8:61:c3:54:c7:54:47:74:51:db:cf:2d:cf:b4:
         72:d4:4f:6a:1f:e1:96:de:c8:7d:fd:ff:d5:5f:b7:07:49:55:
         e6:c0:4f:b2:74:7d:5b:a6:11:48:36:68:80:37:4d:e3:6d:8d:
         39:98:2e:ce:6c:d2:6b:da:6c:22:87:99:8a:fa:2b:28:45:74:
         8b:57:17:65:d0:34:dc:51:1c:c4:ec:9d:5c:29:0a:d5:58:89:
         b2:19:cb:5a:32:e3:7e:09:d9:9f:5c:2c:d1:4c:b0:dc:b7:bc:
         22:4f:f9:2d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJUMlaPD9OoQHoaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
MGZhNTEzOTQtNTNlMy00MGE0LWE1NTQtMDc0MTc2NzlhZWZkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqZ2ws8sLYre+eUx1GsouCAYjPuqMjXJD15ca
OasuC1eGGcbKTG+NQWV4oTXKu9vN5E53z9Vdm4tOXhabXGxoRRkiSIcteXSjkcRA
RelskZqfm2XD8Kr9XBTmuZ507SyHlVPTJV5GiSZ0YP4lXf+w6AsxGBUfk0Chqr0m
jOfjmr8yHnt4z1PBETaPkjSkge0466Zr5FwloQBmdmLKo+EncHX/nvRBLG/P/I7R
nyA2fM5q4rCOrJyv6i4jvF7S5pudXRH3KNpgZ0Q9R81l138bAqEzUdQ90j9fc4AK
20pfMfKxyICN3hGfraM6+xfmlJmRrn8XmgkZC5gMfndnUk7itwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBMwqK0g/7ZWGftLJ/4QPymGaYmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvZTg2YzY0M2ItNjFlMy0z
ZTE2LWE3ZmQtNTQzZDVmOTc5M2RkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjZs3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKmOwduTTg+72dP/1Db4jxtLfWMejLCRRRH8PGQ0ClRuvE2eEgFtsbQG
O9vP5dU20o/BmEpjTyJbXQGTI62j/FBcB+Ph6WciE5X2Eap+oJ8dtIGe3Xn0cVha
zGZwJW8HxzB4mTVcET8hahUnXiMzCjjqZkWtx4hadni8yQo7Gn+uBn2ChFsAANX/
L2Qyr8/3spk5kD6oYcNUx1RHdFHbzy3PtHLUT2of4ZbeyH39/9VftwdJVebAT7J0
fVumEUg2aIA3TeNtjTmYLs5s0mvabCKHmYr6KyhFdItXF2XQNNxRHMTsnVwpCtVY
ibIZy1oy434J2Z9cLNFMsNy3vCJP+S0=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:45:29 2025 by rpki-client