Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa
File:                     a98512e7-344c-36be-b82d-198e7f9783ca.roa (raw, json)
Hash identifier:          Y+HklUmKEnB9Adi+ezGbiwGirGLs/zpmKX1WV8ZNh8c=
Subject key identifier:   B5:41:A5:9A:89:E4:92:8F:A8:82:69:1C:29:DD:C9:97:23:94:83:72
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F43285849E7BA73D62172F0051965860C
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     14593
IP address blocks:        135.129.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:73:d6:21:72:f0:05:19:65:86:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=473cab31-dfb9-4b9e-98f4-8439b40b2ba3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:22:70:28:3c:9f:54:58:b9:f6:2f:c3:aa:31:
                    b5:36:31:f5:38:d3:50:37:5f:c3:5d:97:62:e7:61:
                    1d:b0:7b:df:71:9b:23:22:4c:21:93:b1:b9:ae:8e:
                    c2:2e:80:c3:80:ab:b8:c1:c2:16:e5:4f:dc:68:ea:
                    a3:e7:7b:80:47:6d:5c:d3:ae:bc:66:1a:38:27:ed:
                    f6:f0:2a:c8:24:67:d1:e3:ee:11:92:f3:8d:c5:8c:
                    ec:eb:a7:6e:d0:15:6c:85:82:17:78:88:ef:26:12:
                    3e:e3:c1:a8:6b:21:8f:b1:b5:d3:88:ac:4f:03:d1:
                    10:7b:8e:d4:23:96:13:bc:69:00:ac:f0:4f:af:4f:
                    82:a7:1f:fb:ee:be:db:30:37:e0:8c:40:dc:21:82:
                    f1:99:b5:0d:bb:6b:2f:1a:ab:dd:cc:72:1f:9b:50:
                    35:45:cb:08:c3:80:56:68:00:05:67:06:ab:6d:80:
                    cf:00:45:1a:3d:b5:69:db:42:1f:46:23:ba:cc:8c:
                    74:19:7d:24:e4:de:92:8f:b7:fb:a5:dc:f9:46:70:
                    f9:ac:dc:1e:de:a0:60:36:dd:df:c7:9b:f1:90:f1:
                    ed:93:29:39:28:cc:5d:f0:3d:85:20:25:6e:24:ad:
                    cf:52:5d:ce:bb:6d:57:5b:61:07:48:9d:d3:48:cb:
                    2f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:41:A5:9A:89:E4:92:8F:A8:82:69:1C:29:DD:C9:97:23:94:83:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/a98512e7-344c-36be-b82d-198e7f9783ca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:db:3e:c4:d4:c7:25:a5:44:b1:34:eb:6d:9c:bc:d3:8a:6d:
         e0:13:77:28:0e:65:25:b3:c4:a2:82:23:aa:29:3b:c6:79:4b:
         22:31:fe:2d:17:e7:01:4c:b9:80:91:5e:11:5f:05:1a:16:f1:
         5f:a1:0b:3f:1e:56:a6:de:5d:72:27:45:32:92:c0:89:a6:2a:
         69:ea:9e:8b:fd:ce:1d:de:cd:0e:f3:0a:94:55:65:31:9f:44:
         ec:2e:a7:a1:21:98:41:85:94:fb:14:d6:be:4b:e9:c1:e9:b4:
         64:79:1b:c1:7b:3d:cd:e9:7b:ca:46:f5:e1:6f:e1:ff:bf:00:
         ab:e0:bf:1e:a8:e4:56:52:1b:46:e5:29:79:f2:0e:9f:11:11:
         54:b9:c3:28:75:dc:4c:13:1e:17:63:26:62:c1:8a:b4:ac:55:
         8b:6f:59:ec:5c:14:47:84:9d:df:8a:ad:fb:5a:6b:76:14:34:
         cb:de:ff:0c:00:ad:a2:c1:38:71:6f:1c:b9:8e:14:18:0b:9c:
         80:7c:e7:86:16:bb:ad:ff:0f:b5:7b:18:d2:51:0b:fd:98:a1:
         a4:56:5f:2f:a7:c9:27:99:01:c7:44:7b:d8:5b:85:be:56:4f:
         36:7b:48:e0:77:73:8e:88:61:a0:a3:14:ef:56:91:0a:41:13:
         5d:37:f3:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnunPWIXLwBRllhgwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
NDczY2FiMzEtZGZiOS00YjllLTk4ZjQtODQzOWI0MGIyYmEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0SJwKDyfVFi59i/DqjG1NjH1ONNQN1/DXZdi
52EdsHvfcZsjIkwhk7G5ro7CLoDDgKu4wcIW5U/caOqj53uAR21c0668Zho4J+32
8CrIJGfR4+4RkvONxYzs66du0BVshYIXeIjvJhI+48GoayGPsbXTiKxPA9EQe47U
I5YTvGkArPBPr0+Cpx/77r7bMDfgjEDcIYLxmbUNu2svGqvdzHIfm1A1RcsIw4BW
aAAFZwarbYDPAEUaPbVp20IfRiO6zIx0GX0k5N6Sj7f7pdz5RnD5rNwe3qBgNt3f
x5vxkPHtkyk5KMxd8D2FICVuJK3PUl3Ou21XW2EHSJ3TSMsv9QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLVBpZqJ5JKPqIJpHCndyZcjlINyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYTk4NTEyZTctMzQ0Yy0z
NmJlLWI4MmQtMTk4ZTdmOTc4M2NhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGh4EAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHfbPsTUxyWlRLE0622cvNOKbeATdygOZSWzxKKCI6opO8Z5SyIx/i0X
5wFMuYCRXhFfBRoW8V+hCz8eVqbeXXInRTKSwImmKmnqnov9zh3ezQ7zCpRVZTGf
ROwup6EhmEGFlPsU1r5L6cHptGR5G8F7Pc3pe8pG9eFv4f+/AKvgvx6o5FZSG0bl
KXnyDp8REVS5wyh13EwTHhdjJmLBirSsVYtvWexcFEeEnd+Krftaa3YUNMve/wwA
raLBOHFvHLmOFBgLnIB854YWu63/D7V7GNJRC/2YoaRWXy+nySeZAcdEe9hbhb5W
TzZ7SOB3c46IYaCjFO9WkQpBE1038+0=
-----END CERTIFICATE-----
Generated at Wed Jul 2 05:25:37 2025 by rpki-client