Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90fd7f3a-b001-35b0-abb1-d4b2faa044f6.roa
File:                     90fd7f3a-b001-35b0-abb1-d4b2faa044f6.roa (raw, json)
Hash identifier:          icwWK1fUjS+48fzegNyh2qdUJ9r3obXwEDWBZrRKVUw=
Subject key identifier:   B3:ED:77:0F:49:D2:1C:E8:C3:18:51:E4:4A:13:19:D0:B0:FD:BA:0E
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F43285849C20AAE63246F484D894B5680
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90fd7f3a-b001-35b0-abb1-d4b2faa044f6.roa
Signing time:             Tue 06 May 2025 01:00:47 +0000
ROA not before:           Tue 06 May 2025 01:00:47 +0000
ROA not after:            Mon 04 Aug 2025 01:00:47 +0000
asID:                     20115
IP address blocks:        159.111.240.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 11 May 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c2:0a:ae:63:24:6f:48:4d:89:4b:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: May  6 01:00:47 2025 GMT
            Not After : Aug  4 01:00:47 2025 GMT
        Subject: CN=28b8aebc-1f8f-4ebd-aa85-dea63f14bc6e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2c:bb:6c:2d:fe:94:69:b6:88:3d:df:03:35:
                    f1:da:91:6c:fa:f4:1b:b4:a1:37:2f:05:65:8c:76:
                    c0:a2:76:c2:3e:c9:03:03:75:75:ef:3e:8b:d9:db:
                    0c:a7:e4:35:d7:a7:72:b9:e8:f4:f2:8e:71:bf:49:
                    d5:13:4b:2f:d1:ef:47:61:3a:16:45:98:b5:33:51:
                    56:92:f6:c3:b9:ac:d1:d1:a0:fd:0b:ac:72:97:23:
                    ed:2d:d0:24:82:b8:ca:d1:8c:02:fa:45:6b:5c:d1:
                    13:dc:64:f8:c1:82:e3:9f:85:1d:72:e9:ec:0b:3f:
                    f2:13:b7:1d:3b:90:5d:72:c8:42:cc:5f:14:98:ea:
                    a1:08:2d:c8:6b:fa:6f:8e:76:75:c9:1d:db:dc:09:
                    d9:8f:3d:f0:be:ff:eb:d6:01:9b:85:58:0e:46:7d:
                    f6:cc:73:ef:46:ca:fe:99:ad:e9:7a:83:c2:99:e5:
                    ed:8d:4f:45:2b:ef:00:0b:26:0b:71:a6:b4:6c:82:
                    7d:a3:8d:6b:9f:d6:0f:d3:f7:2c:02:bf:59:1f:e9:
                    3a:59:ad:cd:bd:6b:4d:e8:dc:be:b0:d2:35:b4:33:
                    82:89:6c:2d:11:56:06:26:cc:61:e2:20:40:4a:cf:
                    96:e1:36:f7:d2:be:a0:30:c4:05:df:fa:9d:e1:48:
                    32:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:ED:77:0F:49:D2:1C:E8:C3:18:51:E4:4A:13:19:D0:B0:FD:BA:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/90fd7f3a-b001-35b0-abb1-d4b2faa044f6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.111.240.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7c:7c:df:80:16:bb:b6:30:d5:ad:93:3b:a6:6a:9f:5e:41:d2:
         9a:b6:6e:05:42:00:0f:62:85:9d:10:d4:1f:5f:f4:77:c3:fa:
         9b:09:70:e9:f3:f7:00:f6:d0:4a:1b:c1:93:4e:b1:fa:64:38:
         bb:84:d2:3f:33:e3:63:ee:39:4e:93:d4:fa:42:1a:73:fe:e9:
         68:f4:b1:1b:e9:61:66:9e:81:9d:fe:e2:81:cb:cb:b4:c8:e3:
         05:e5:0c:55:7a:aa:f9:10:96:64:d2:60:84:6f:91:9f:7f:fa:
         9a:aa:d6:cf:85:cc:e0:35:86:8a:3a:ec:d7:e6:6f:70:c6:2a:
         0f:26:d0:3e:d4:67:a4:a1:be:10:9f:d8:48:32:de:91:b1:f6:
         2e:c0:29:35:6f:46:0a:23:57:f5:a3:07:47:85:b2:42:37:91:
         89:b0:cc:3d:ba:3a:69:4a:d1:ca:36:cb:dd:b4:c4:2d:a9:50:
         45:49:a6:18:74:eb:81:b7:29:27:4c:cb:e2:91:7d:d0:6d:49:
         f1:dd:bc:d4:60:95:7a:74:c8:d4:ce:dd:41:ee:90:ce:73:57:
         ba:24:53:87:c0:16:e4:aa:75:42:5f:31:f5:83:e1:4f:b4:4d:
         bf:e5:99:44:6c:58:75:c1:90:01:7c:81:b0:10:22:32:c3:aa:
         47:5c:62:bb
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnCCq5jJG9ITYlLVoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDUwNjAxMDA0N1oXDTI1MDgwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MjhiOGFlYmMtMWY4Zi00ZWJkLWFhODUtZGVhNjNmMTRiYzZlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiy7bC3+lGm2iD3fAzXx2pFs+vQbtKE3LwVl
jHbAonbCPskDA3V17z6L2dsMp+Q116dyuej08o5xv0nVE0sv0e9HYToWRZi1M1FW
kvbDuazR0aD9C6xylyPtLdAkgrjK0YwC+kVrXNET3GT4wYLjn4UdcunsCz/yE7cd
O5BdcshCzF8UmOqhCC3Ia/pvjnZ1yR3b3AnZjz3wvv/r1gGbhVgORn32zHPvRsr+
ma3peoPCmeXtjU9FK+8ACyYLcaa0bIJ9o41rn9YP0/csAr9ZH+k6Wa3NvWtN6Ny+
sNI1tDOCiWwtEVYGJsxh4iBASs+W4Tb30r6gMMQF3/qd4UgycQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLPtdw9J0hzowxhR5EoTGdCw/boOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvOTBmZDdmM2EtYjAwMS0z
NWIwLWFiYjEtZDRiMmZhYTA0NGY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCn2/wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHx834AWu7Yw1a2TO6Zqn15B0pq2bgVCAA9ihZ0Q1B9f9HfD+psJcOnz
9wD20EobwZNOsfpkOLuE0j8z42PuOU6T1PpCGnP+6Wj0sRvpYWaegZ3+4oHLy7TI
4wXlDFV6qvkQlmTSYIRvkZ9/+pqq1s+FzOA1hoo67Nfmb3DGKg8m0D7UZ6ShvhCf
2Egy3pGx9i7AKTVvRgojV/WjB0eFskI3kYmwzD26OmlK0co2y920xC2pUEVJphh0
64G3KSdMy+KRfdBtSfHdvNRglXp0yNTO3UHukM5zV7okU4fAFuSqdUJfMfWD4U+0
Tb/lmURsWHXBkAF8gbAQIjLDqkdcYrs=
-----END CERTIFICATE-----
Generated at Sat May 10 01:32:41 2025 by rpki-client