Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa
File:                     ef439424-fb59-394d-acb6-f9d205d96ace.roa (raw, json)
Hash identifier:          uXtqGXjGTjnjB0x6yQuOcmZoZso5Zx4G7DaRkZ6kwV8=
Subject key identifier:   50:96:62:46:99:A9:1C:FF:6F:25:D1:98:C9:71:E1:E7:1B:9D:74:42
Certificate issuer:       /CN=a44b8d6b-c6d4-47cc-9966-777065609e90
Certificate serial:       010D0C9F4328584A268AB39DBEBCD3F37A4A5780
Authority key identifier: 01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa
Signing time:             Wed 11 Jun 2025 01:00:50 +0000
ROA not before:           Wed 11 Jun 2025 01:00:50 +0000
ROA not after:            Tue 09 Sep 2025 01:00:50 +0000
asID:                     23154
IP address blocks:        143.116.189.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:26:8a:b3:9d:be:bc:d3:f3:7a:4a:57:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a44b8d6b-c6d4-47cc-9966-777065609e90
        Validity
            Not Before: Jun 11 01:00:50 2025 GMT
            Not After : Sep  9 01:00:50 2025 GMT
        Subject: CN=186e8745-3e5e-4031-b46c-889e4efa396a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:87:a6:f8:4b:d3:8b:be:e9:e7:b3:32:91:7e:
                    d9:29:c1:a8:53:b7:bb:43:7d:38:bc:a4:38:5e:c7:
                    e9:34:6b:30:8a:eb:3f:55:51:07:3d:bb:43:a5:d8:
                    f3:dd:05:f3:d3:ed:3f:a2:7c:f0:d3:4d:1b:54:ee:
                    10:48:25:fe:40:31:92:48:1b:ef:e5:04:09:35:cb:
                    ac:25:a3:3f:53:dc:c0:f9:82:25:56:03:90:d5:50:
                    50:8e:31:90:39:5a:52:d1:f1:a3:df:bb:93:a1:bc:
                    a7:ba:9f:15:6b:41:e5:15:78:9a:33:6d:aa:de:7a:
                    ef:86:58:8c:45:d6:8b:91:85:11:82:77:0c:e2:ab:
                    0d:62:20:f8:0e:8f:5b:38:43:ea:54:e9:38:ce:0a:
                    86:52:2a:92:f5:7a:d5:8f:2d:01:a0:aa:40:98:5f:
                    26:29:c0:26:89:68:9a:25:36:27:73:66:7a:a1:8e:
                    a3:ad:df:00:6b:10:8b:ab:ce:f7:23:cd:3d:b6:00:
                    1c:5b:c6:60:b2:11:4f:0e:3e:98:0a:1a:d5:08:3e:
                    de:ba:fd:85:26:bc:5a:fa:62:99:56:47:42:92:43:
                    1a:e7:08:61:d0:ef:ca:26:d5:61:ef:e3:25:15:8b:
                    1c:20:03:5c:c1:12:e2:12:bc:16:5a:51:5b:3a:85:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:96:62:46:99:A9:1C:FF:6F:25:D1:98:C9:71:E1:E7:1B:9D:74:42
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/ef439424-fb59-394d-acb6-f9d205d96ace.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90/a44b8d6b-c6d4-47cc-9966-777065609e90.crl

            X509v3 Authority Key Identifier:
                keyid:01:BB:33:10:CF:C8:6E:91:BD:27:98:5F:F6:2F:D3:7E:C9:CB:76:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/a44b8d6b-c6d4-47cc-9966-777065609e90.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.116.189.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:5f:c3:a8:22:e3:5d:ec:8c:ad:97:cd:4f:d6:62:e5:06:13:
         bb:4c:f1:bf:87:c8:25:20:f3:4d:6c:13:32:22:7b:89:8d:67:
         97:2b:df:05:0d:9b:34:1a:3d:f6:16:c8:c6:08:f6:99:63:cb:
         9a:2a:8f:e5:41:7a:36:34:df:9d:b9:67:cf:a3:7a:81:95:15:
         86:d9:f5:00:cf:c1:a2:b8:e5:3c:61:a9:2a:1c:3e:55:05:17:
         05:e2:0d:e9:9e:99:92:a5:19:e4:47:e7:c0:03:1e:8e:b5:e8:
         a0:e6:16:6c:11:17:4d:a0:c8:62:2b:d2:3d:18:7d:ae:c6:13:
         83:a6:85:32:25:5f:64:ab:83:c3:61:82:09:5a:8c:86:df:87:
         62:df:f8:ec:ae:dd:b1:6f:50:d6:bf:67:de:ef:66:50:66:46:
         ac:ca:02:11:d7:cd:08:92:17:4f:92:57:d5:dd:39:06:ca:98:
         1e:7b:a5:03:45:30:b9:74:96:ce:50:82:2a:69:00:42:55:44:
         ef:4f:3e:e8:52:20:05:33:c9:19:25:31:ec:65:a0:ef:79:8b:
         05:e6:05:3d:5c:a9:7b:38:87:5d:20:31:5f:0d:de:77:7d:6c:
         4d:61:62:cc:1c:aa:2a:ed:d1:6f:1c:50:51:1f:f9:c0:35:5e:
         fc:d2:89:04
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEomirOdvrzT83pKV4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTQ0YjhkNmItYzZkNC00N2NjLTk5NjYtNzc3MDY1NjA5
ZTkwMB4XDTI1MDYxMTAxMDA1MFoXDTI1MDkwOTAxMDA1MFowLzEtMCsGA1UEAxMk
MTg2ZTg3NDUtM2U1ZS00MDMxLWI0NmMtODg5ZTRlZmEzOTZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjoem+EvTi77p57MykX7ZKcGoU7e7Q304vKQ4
XsfpNGswius/VVEHPbtDpdjz3QXz0+0/onzw000bVO4QSCX+QDGSSBvv5QQJNcus
JaM/U9zA+YIlVgOQ1VBQjjGQOVpS0fGj37uTobynup8Va0HlFXiaM22q3nrvhliM
RdaLkYURgncM4qsNYiD4Do9bOEPqVOk4zgqGUiqS9XrVjy0BoKpAmF8mKcAmiWia
JTYnc2Z6oY6jrd8AaxCLq873I809tgAcW8ZgshFPDj6YChrVCD7euv2FJrxa+mKZ
VkdCkkMa5whh0O/KJtVh7+MlFYscIANcwRLiErwWWlFbOoWMjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCWYkaZqRz/byXRmMlx4ecbnXRCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRi
OGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03NzcwNjU2MDllOTAvZWY0Mzk0MjQtZmI1OS0z
OTRkLWFjYjYtZjlkMjA1ZDk2YWNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYTQ0YjhkNmItYzZkNC00N2NjLTk5
NjYtNzc3MDY1NjA5ZTkwL2E0NGI4ZDZiLWM2ZDQtNDdjYy05OTY2LTc3NzA2NTYw
OWU5MC5jcmwwHwYDVR0jBBgwFoAUAbszEM/IbpG9J5hf9i/TfsnLdsAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9hNDRiOGQ2Yi1jNmQ0LTQ3Y2MtOTk2Ni03Nzcw
NjU2MDllOTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAj3S9MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACJfw6gi413sjK2XzU/WYuUGE7tM8b+HyCUg801sEzIie4mNZ5cr3wUN
mzQaPfYWyMYI9pljy5oqj+VBejY03525Z8+jeoGVFYbZ9QDPwaK45TxhqSocPlUF
FwXiDememZKlGeRH58ADHo616KDmFmwRF02gyGIr0j0Yfa7GE4OmhTIlX2Srg8Nh
gglajIbfh2Lf+Oyu3bFvUNa/Z97vZlBmRqzKAhHXzQiSF0+SV9XdOQbKmB57pQNF
MLl0ls5QgippAEJVRO9PPuhSIAUzyRklMexloO95iwXmBT1cqXs4h10gMV8N3nd9
bE1hYswcqirt0W8cUFEf+cA1XvzSiQQ=
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:58:01 2025 by rpki-client