Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
File:                     6826ee1c-7572-3f64-be24-9736bb879937.roa (raw, json)
Hash identifier:          4NiE2sytB+XyY0fDWKLTS8p3OmZh5upUxpm0ureUOos=
Subject key identifier:   E6:0B:9E:0F:5E:34:69:53:80:EC:27:51:50:21:26:8C:5C:DE:C9:D0
Certificate issuer:       /CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
Certificate serial:       010D0C9F4328584A4C3B0556183ECD807F142E00
Authority key identifier: B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     33442
IP address blocks:        149.23.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:05:56:18:3e:cd:80:7f:14:2e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=db4d75ea-96e7-4c66-a4af-45b48eef2e06
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=766b881f-06be-4fad-b65b-15a79cf7170c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:cc:44:1c:b5:eb:8f:6c:5a:52:01:79:16:90:
                    89:39:41:c3:0d:50:4e:cf:09:59:78:25:f8:c2:b1:
                    5a:39:8c:70:4f:9e:7a:b6:57:6c:6d:b1:be:fc:07:
                    c5:2f:86:63:51:31:18:f1:c4:39:73:25:ac:37:2b:
                    c5:71:a6:18:84:b0:26:e4:e5:02:45:73:16:13:ae:
                    cc:63:af:eb:e3:3f:0c:0a:d4:0e:bb:d1:2c:59:aa:
                    8b:79:d7:f5:2a:8f:10:b8:0c:28:d7:23:69:12:ab:
                    9b:be:10:6c:14:7a:d2:a9:16:85:56:27:be:d2:90:
                    92:da:a4:eb:2b:91:07:bb:14:62:8d:f2:66:58:67:
                    dc:63:f9:40:9c:c9:ad:31:5b:e2:a7:eb:aa:fc:26:
                    45:2b:59:3f:07:2b:77:6a:58:3c:f4:67:45:99:f6:
                    c0:01:0a:85:5e:02:d2:4b:62:e6:91:67:7b:ed:63:
                    20:18:0a:09:fd:9d:fd:af:43:c8:12:32:94:17:69:
                    80:4f:25:53:6d:5f:9a:3f:87:f8:3d:76:1b:42:e3:
                    90:52:b4:23:b0:99:00:e5:0d:78:97:45:21:e9:fb:
                    14:4f:9a:dd:3c:21:73:61:a0:41:06:12:6a:94:85:
                    7c:c5:8f:a7:5a:cd:00:34:22:07:67:18:4b:29:24:
                    8b:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:0B:9E:0F:5E:34:69:53:80:EC:27:51:50:21:26:8C:5C:DE:C9:D0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/6826ee1c-7572-3f64-be24-9736bb879937.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06/db4d75ea-96e7-4c66-a4af-45b48eef2e06.crl

            X509v3 Authority Key Identifier:
                keyid:B4:A8:3C:51:8D:BA:4A:4A:95:D9:7D:B9:E5:74:A9:66:50:58:F7:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/db4d75ea-96e7-4c66-a4af-45b48eef2e06.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.23.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:1e:9d:d5:33:79:c0:83:0c:b7:31:a8:47:83:75:64:fb:14:
         cf:38:c6:76:ba:a3:26:b9:36:ba:71:f3:81:46:b1:2c:6d:fb:
         58:fa:4b:e8:d8:e8:91:fe:d6:aa:86:83:67:27:4b:79:ee:af:
         eb:23:09:0d:d9:c8:15:6d:e2:26:7d:bf:75:73:43:3b:fd:b2:
         89:f6:59:8d:6f:13:da:f0:6d:81:fc:dd:e9:e2:75:23:42:17:
         6a:fa:04:1d:7b:ea:f7:c1:2a:28:ff:80:f0:18:04:af:a4:ce:
         2d:8b:f4:48:f4:59:91:24:f4:c3:85:1f:bd:76:29:c3:8e:3d:
         c0:84:22:0f:7e:ab:6d:fb:b0:a4:2e:bc:81:de:8d:1a:05:61:
         1d:07:a6:b4:81:68:4c:ed:7b:fc:c2:b9:4e:03:4c:02:2e:68:
         70:93:54:ab:46:73:c4:16:43:b3:b1:ac:a8:dc:9a:93:a5:d8:
         73:95:ba:f4:c4:cb:67:e6:f9:62:e4:b3:00:35:d0:44:95:eb:
         a1:04:a3:5f:ee:08:c3:fc:4c:51:f8:f6:80:e5:d0:cd:f0:6c:
         f6:67:e6:ae:9d:ba:fa:1b:03:51:e6:42:75:29:66:22:3a:e8:
         90:92:1b:78:e8:92:81:45:b2:f0:cd:ed:38:c6:e6:97:eb:5f:
         fb:c5:02:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOwVWGD7NgH8ULgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGI0ZDc1ZWEtOTZlNy00YzY2LWE0YWYtNDViNDhlZWYy
ZTA2MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
NzY2Yjg4MWYtMDZiZS00ZmFkLWI2NWItMTVhNzljZjcxNzBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3sxEHLXrj2xaUgF5FpCJOUHDDVBOzwlZeCX4
wrFaOYxwT556tldsbbG+/AfFL4ZjUTEY8cQ5cyWsNyvFcaYYhLAm5OUCRXMWE67M
Y6/r4z8MCtQOu9EsWaqLedf1Ko8QuAwo1yNpEqubvhBsFHrSqRaFVie+0pCS2qTr
K5EHuxRijfJmWGfcY/lAnMmtMVvip+uq/CZFK1k/Byt3alg89GdFmfbAAQqFXgLS
S2LmkWd77WMgGAoJ/Z39r0PIEjKUF2mATyVTbV+aP4f4PXYbQuOQUrQjsJkA5Q14
l0Uh6fsUT5rdPCFzYaBBBhJqlIV8xY+nWs0ANCIHZxhLKSSLvQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOYLng9eNGlTgOwnUVAhJoxc3snQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRk
NzVlYS05NmU3LTRjNjYtYTRhZi00NWI0OGVlZjJlMDYvNjgyNmVlMWMtNzU3Mi0z
ZjY0LWJlMjQtOTczNmJiODc5OTM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZGI0ZDc1ZWEtOTZlNy00YzY2LWE0
YWYtNDViNDhlZWYyZTA2L2RiNGQ3NWVhLTk2ZTctNGM2Ni1hNGFmLTQ1YjQ4ZWVm
MmUwNi5jcmwwHwYDVR0jBBgwFoAUtKg8UY26SkqV2X255XSpZlBY9yswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kYjRkNzVlYS05NmU3LTRjNjYtYTRhZi00NWI0
OGVlZjJlMDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlRcJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHcendUzecCDDLcxqEeDdWT7FM84xna6oya5Nrpx84FGsSxt+1j6S+jY
6JH+1qqGg2cnS3nur+sjCQ3ZyBVt4iZ9v3VzQzv9son2WY1vE9rwbYH83enidSNC
F2r6BB176vfBKij/gPAYBK+kzi2L9Ej0WZEk9MOFH712KcOOPcCEIg9+q237sKQu
vIHejRoFYR0HprSBaEzte/zCuU4DTAIuaHCTVKtGc8QWQ7OxrKjcmpOl2HOVuvTE
y2fm+WLkswA10ESV66EEo1/uCMP8TFH49oDl0M3wbPZn5q6duvobA1HmQnUpZiI6
6JCSG3jokoFFsvDN7TjG5pfrX/vFAkI=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:34:41 2025 by rpki-client