Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
File:                     d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa (raw, json)
Hash identifier:          6zeBTkJWCd1E2ZUzjPkWhi/vt55LyV1gxHNEebcymNU=
Subject key identifier:   A0:1B:FA:3C:55:C7:E4:EB:73:4B:D7:01:25:A2:A1:4A:4B:01:02:BC
Certificate issuer:       /CN=6526224a-84e8-40af-a273-87e57f2e0cc0
Certificate serial:       010D0C9F43285849D9C4F34C486EF19F1E9EDE80
Authority key identifier: 65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa
Signing time:             Wed 14 May 2025 13:01:03 +0000
ROA not before:           Wed 14 May 2025 13:01:03 +0000
ROA not after:            Tue 12 Aug 2025 13:01:03 +0000
asID:                     8075
IP address blocks:        144.203.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d9:c4:f3:4c:48:6e:f1:9f:1e:9e:de:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6526224a-84e8-40af-a273-87e57f2e0cc0
        Validity
            Not Before: May 14 13:01:03 2025 GMT
            Not After : Aug 12 13:01:03 2025 GMT
        Subject: CN=b73bde5f-781e-47de-b470-6b384c413bd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:18:09:92:dd:28:d3:10:15:f0:0f:09:40:3f:
                    ed:21:15:0c:b2:c8:29:91:16:96:04:bf:be:bb:15:
                    49:4c:1a:2d:fe:a9:35:d3:43:01:25:3a:41:ea:ee:
                    18:eb:5a:6e:bb:55:71:c2:f5:f7:6f:cf:fb:75:16:
                    8e:2a:10:2b:f0:e2:75:bd:36:97:b2:e3:2b:47:d9:
                    e6:aa:e4:64:c6:48:4f:6b:8c:05:08:20:8f:07:60:
                    db:d9:8a:2e:2c:f7:f9:b6:04:8c:38:67:bc:bd:c8:
                    ad:86:28:80:77:a2:e4:e2:c4:31:0b:bf:21:56:db:
                    bf:2b:8f:9d:2b:54:60:01:54:68:39:58:3f:e7:07:
                    25:d8:e1:b0:ae:49:50:d5:27:20:e2:93:a8:e2:4e:
                    4a:f8:30:ab:b1:ae:6f:e6:58:e9:ac:55:84:51:5e:
                    55:4d:80:b5:85:11:d2:e1:42:41:ea:8d:6d:dd:0c:
                    e9:79:b4:3b:0c:2e:03:7b:2e:42:66:ca:e9:ff:8c:
                    09:77:d7:71:aa:a1:d2:b3:11:a7:ff:6d:16:35:95:
                    25:72:83:80:c5:77:2f:53:61:65:55:2c:3c:2c:72:
                    93:8d:f4:6a:41:da:04:bf:f8:2c:39:3c:c5:88:e3:
                    f0:74:77:a2:ac:89:c3:25:63:dd:df:d4:52:3d:03:
                    c7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:1B:FA:3C:55:C7:E4:EB:73:4B:D7:01:25:A2:A1:4A:4B:01:02:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/d0d04f5b-3727-3483-9bd2-8a6b7fbb4d05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0/6526224a-84e8-40af-a273-87e57f2e0cc0.crl

            X509v3 Authority Key Identifier:
                keyid:65:F7:77:32:1F:14:BA:E9:4C:CE:0E:16:74:46:4E:A4:2E:6A:2E:68

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/6526224a-84e8-40af-a273-87e57f2e0cc0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.203.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3c:45:1e:20:68:c9:2c:aa:c9:7b:43:ef:5a:f9:2c:35:e6:d7:
         6f:0e:d9:ac:88:7f:a9:93:fb:08:64:7e:56:23:19:4f:a8:0d:
         8f:d4:a1:ef:0a:5c:bc:d7:af:83:09:f1:62:8c:b1:08:10:75:
         ca:91:cf:e9:85:f7:86:32:a8:6b:a6:52:75:11:73:e7:ed:4b:
         74:6c:10:3b:8b:f1:ee:dc:75:86:90:a5:2e:da:54:e1:1e:88:
         53:fd:c8:17:c6:b4:b2:f3:08:7a:fd:26:ba:6e:0a:2d:0d:ed:
         83:f3:be:2c:a2:03:84:ed:09:28:6d:8c:29:dc:95:eb:4a:59:
         1d:51:18:f7:46:d6:a9:fe:a9:97:a8:96:2d:58:1c:52:89:65:
         0f:0a:c2:fa:3f:a6:a7:44:b9:6f:d8:c2:2d:68:60:d5:d1:d0:
         c3:35:bf:89:95:18:44:7a:2b:8c:49:27:99:7e:ae:ea:f3:75:
         67:4e:0d:70:7f:3b:2f:6b:5e:31:22:71:36:d8:83:0a:5b:32:
         02:e9:26:08:1a:95:cb:e5:3e:0a:02:56:e1:0a:15:33:49:09:
         23:75:e1:aa:6c:9b:a9:f4:83:ba:49:d7:85:2c:2d:2f:af:2c:
         44:f5:01:de:fc:1e:5e:a2:6e:95:93:5c:a2:f4:51:be:bc:d8:
         98:3f:f4:35
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnZxPNMSG7xnx6e3oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjUyNjIyNGEtODRlOC00MGFmLWEyNzMtODdlNTdmMmUw
Y2MwMB4XDTI1MDUxNDEzMDEwM1oXDTI1MDgxMjEzMDEwM1owLzEtMCsGA1UEAxMk
YjczYmRlNWYtNzgxZS00N2RlLWI0NzAtNmIzODRjNDEzYmQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhgJkt0o0xAV8A8JQD/tIRUMssgpkRaWBL++
uxVJTBot/qk100MBJTpB6u4Y61puu1VxwvX3b8/7dRaOKhAr8OJ1vTaXsuMrR9nm
quRkxkhPa4wFCCCPB2Db2YouLPf5tgSMOGe8vcithiiAd6Lk4sQxC78hVtu/K4+d
K1RgAVRoOVg/5wcl2OGwrklQ1Scg4pOo4k5K+DCrsa5v5ljprFWEUV5VTYC1hRHS
4UJB6o1t3QzpebQ7DC4Dey5CZsrp/4wJd9dxqqHSsxGn/20WNZUlcoOAxXcvU2Fl
VSw8LHKTjfRqQdoEv/gsOTzFiOPwdHeirInDJWPd39RSPQPHtQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKAb+jxVx+Trc0vXASWioUpLAQK8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC82NTI2
MjI0YS04NGU4LTQwYWYtYTI3My04N2U1N2YyZTBjYzAvZDBkMDRmNWItMzcyNy0z
NDgzLTliZDItOGE2YjdmYmI0ZDA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNjUyNjIyNGEtODRlOC00MGFmLWEy
NzMtODdlNTdmMmUwY2MwLzY1MjYyMjRhLTg0ZTgtNDBhZi1hMjczLTg3ZTU3ZjJl
MGNjMC5jcmwwHwYDVR0jBBgwFoAUZfd3Mh8UuulMzg4WdEZOpC5qLmgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC82NTI2MjI0YS04NGU4LTQwYWYtYTI3My04N2U1
N2YyZTBjYzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkMuYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADxFHiBoySyqyXtD71r5LDXm128O2ayIf6mT+whkflYjGU+oDY/Uoe8K
XLzXr4MJ8WKMsQgQdcqRz+mF94YyqGumUnURc+ftS3RsEDuL8e7cdYaQpS7aVOEe
iFP9yBfGtLLzCHr9JrpuCi0N7YPzviyiA4TtCShtjCncletKWR1RGPdG1qn+qZeo
li1YHFKJZQ8Kwvo/pqdEuW/Ywi1oYNXR0MM1v4mVGER6K4xJJ5l+rurzdWdODXB/
Oy9rXjEicTbYgwpbMgLpJggalcvlPgoCVuEKFTNJCSN14apsm6n0g7pJ14UsLS+v
LET1Ad78Hl6ibpWTXKL0Ub682Jg/9DU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:35:26 2025 by rpki-client