Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa
File:                     76ce8894-53e6-350e-a448-69df79752269.roa (raw, json)
Hash identifier:          Q7X5uqU200XiDnQw4MfjYKDE/KlEsWkLr/xNtS3lkdo=
Subject key identifier:   C8:D7:8A:A4:92:A7:BE:24:08:85:CE:87:4D:14:6F:09:E3:90:A1:D0
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB38F84427DAFEF1B8C00
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     400198
IP address blocks:        216.130.64.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b3:8f:84:42:7d:af:ef:1b:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=970422d6-fb67-4bd6-a345-3c20e7d2d3d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fd:9e:06:a0:24:e0:b8:b1:8b:76:cb:25:65:
                    d0:cb:c4:c6:32:3e:b8:f3:47:9a:ed:e8:86:ba:82:
                    fd:47:df:55:af:92:86:2a:56:7e:9f:6f:54:60:c5:
                    ef:36:11:a3:4e:97:3f:f6:7f:35:74:97:88:89:0f:
                    e7:07:9d:7a:66:d3:62:3c:cb:2c:39:1d:a2:1e:b0:
                    20:09:9e:95:23:2e:86:fb:cf:7b:41:ac:15:af:98:
                    93:7c:ba:37:14:70:72:b4:0e:13:82:fa:34:84:4b:
                    58:4d:4c:f8:c7:39:f5:99:01:ed:be:11:5b:0e:39:
                    f7:a3:a0:88:ba:c2:45:4f:1a:14:2a:fc:a2:5d:7f:
                    ee:2e:e2:f1:d3:b0:36:9b:3d:91:d0:eb:31:59:40:
                    86:12:2f:b7:e8:50:c3:c5:62:5b:8b:b7:63:db:d7:
                    ab:42:19:c3:17:af:95:d9:d9:95:74:a8:23:a0:4c:
                    fd:7a:d9:a3:4f:92:8d:33:c3:69:a1:1d:c5:91:92:
                    7f:20:fb:b1:58:09:22:a3:84:cd:5b:42:cb:b9:e1:
                    2f:39:f3:05:01:0c:33:13:4e:c4:2f:c6:72:c7:71:
                    db:d3:6f:63:26:6f:03:2b:9e:2d:d0:ec:f2:af:28:
                    82:20:03:b4:e3:a9:84:de:85:04:84:22:7f:3d:a9:
                    e2:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D7:8A:A4:92:A7:BE:24:08:85:CE:87:4D:14:6F:09:E3:90:A1:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/76ce8894-53e6-350e-a448-69df79752269.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.130.64.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7a:b6:db:81:6c:a7:3d:7f:4f:a5:57:60:5e:64:44:c5:23:c1:
         2a:1a:e2:84:55:ce:76:20:61:66:81:10:21:d0:42:83:03:42:
         cc:50:a1:dd:a2:66:41:45:6a:cd:3d:1a:dd:4e:93:8f:e8:f1:
         c6:e7:e6:87:92:08:d5:9d:fb:1c:13:18:a0:ce:1c:f3:19:16:
         3c:d9:0a:ba:7f:29:f4:86:94:71:1f:de:8b:ca:bf:29:27:23:
         ff:e1:d5:57:d7:2b:59:0c:e9:2d:56:2e:d2:0d:32:09:5b:df:
         e5:9d:25:95:56:5c:c4:a7:b9:b0:ae:34:80:3b:1c:53:16:82:
         67:68:eb:85:3a:6a:ab:cd:05:f7:bf:5c:8c:bd:8e:35:7a:26:
         fd:53:dc:92:29:b1:ed:85:42:6b:2a:91:47:a7:14:43:9b:53:
         28:14:1d:89:cf:5e:17:d8:f0:a1:2a:20:a2:2b:47:55:5b:16:
         f2:9f:b5:c3:bb:ef:4f:9c:d2:a5:e0:70:49:a6:f1:d2:56:32:
         e0:87:cd:d0:b6:a6:12:27:30:cb:0f:6a:bf:92:09:b1:c3:da:
         c1:c8:2f:a1:eb:18:de:4f:78:b8:72:61:02:8e:93:1f:7d:85:
         0a:19:b8:77:25:3a:f7:04:12:bb:2b:8d:9a:73:05:c4:10:20:
         bc:b4:07:0d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rOPhEJ9r+8bjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
OTcwNDIyZDYtZmI2Ny00YmQ2LWEzNDUtM2MyMGU3ZDJkM2Q5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnP2eBqAk4Lixi3bLJWXQy8TGMj6480ea7eiG
uoL9R99Vr5KGKlZ+n29UYMXvNhGjTpc/9n81dJeIiQ/nB516ZtNiPMssOR2iHrAg
CZ6VIy6G+897QawVr5iTfLo3FHBytA4Tgvo0hEtYTUz4xzn1mQHtvhFbDjn3o6CI
usJFTxoUKvyiXX/uLuLx07A2mz2R0OsxWUCGEi+36FDDxWJbi7dj29erQhnDF6+V
2dmVdKgjoEz9etmjT5KNM8NpoR3FkZJ/IPuxWAkio4TNW0LLueEvOfMFAQwzE07E
L8Zyx3Hb029jJm8DK54t0OzyryiCIAO046mE3oUEhCJ/PaniNQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMjXiqSSp74kCIXOh00UbwnjkKHQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNzZjZTg4OTQtNTNlNi0z
NTBlLWE0NDgtNjlkZjc5NzUyMjY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2IJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHq224Fspz1/T6VXYF5kRMUjwSoa4oRVznYgYWaBECHQQoMDQsxQod2i
ZkFFas09Gt1Ok4/o8cbn5oeSCNWd+xwTGKDOHPMZFjzZCrp/KfSGlHEf3ovKvykn
I//h1VfXK1kM6S1WLtINMglb3+WdJZVWXMSnubCuNIA7HFMWgmdo64U6aqvNBfe/
XIy9jjV6Jv1T3JIpse2FQmsqkUenFEObUygUHYnPXhfY8KEqIKIrR1VbFvKftcO7
70+c0qXgcEmm8dJWMuCHzdC2phInMMsPar+SCbHD2sHIL6HrGN5PeLhyYQKOkx99
hQoZuHclOvcEErsrjZpzBcQQILy0Bw0=
-----END CERTIFICATE-----
Generated at Thu Jul 3 01:07:56 2025 by rpki-client