Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/781f5758-85ff-3023-8e02-a59870facf84.roa
File:                     781f5758-85ff-3023-8e02-a59870facf84.roa (raw, json)
Hash identifier:          pbLKX947d9EI6P+SfvfY3KfDCGNF6gDsJF+myJMQlwI=
Subject key identifier:   05:55:1E:68:EA:05:6E:54:18:13:32:C0:F3:C7:F4:C1:E9:0A:9C:99
Certificate issuer:       /CN=f37ae11d-629c-4443-bc37-2c3eebd09453
Certificate serial:       010D0C9F43285849F9DFD548F858711F3DA7C080
Authority key identifier: 57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/781f5758-85ff-3023-8e02-a59870facf84.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     394708
IP address blocks:        209.143.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d5:48:f8:58:71:1f:3d:a7:c0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f37ae11d-629c-4443-bc37-2c3eebd09453
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=882e5c74-38b5-4ec0-bab6-822ca8c318da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:88:c6:ed:b2:99:6a:72:fa:b0:79:b2:d3:e8:
                    0a:f8:48:01:cd:10:80:e6:92:76:fe:da:39:83:4e:
                    36:d4:67:7d:b6:39:a5:23:93:45:02:ec:fa:f1:eb:
                    f3:91:82:3e:47:ca:f0:1a:a2:d3:5d:7a:01:ea:d3:
                    bc:65:88:4d:9e:38:95:9d:1d:0b:6a:b8:74:d4:90:
                    1f:34:01:f7:fc:43:f9:94:0a:39:1d:f4:50:ff:b4:
                    d2:84:ff:2c:f4:67:c0:58:fc:13:d6:59:dd:de:af:
                    4e:d3:c1:22:fa:a1:f9:4d:46:ad:15:ff:d2:e8:b6:
                    53:d0:13:c2:17:42:12:78:67:8d:cb:2a:56:68:3e:
                    f8:ac:c4:e8:61:16:0c:32:11:57:75:8e:9b:d2:c0:
                    19:c5:74:9b:88:79:fc:a4:89:ca:8e:cb:e7:1b:3f:
                    5b:7f:6c:d0:f6:fc:ef:3e:cc:d0:9a:6d:21:a8:90:
                    85:f1:1d:dc:22:dc:ca:89:19:29:18:8a:78:aa:ec:
                    d7:e0:a5:4a:aa:70:13:23:db:8a:f9:55:82:39:65:
                    ba:e8:f9:16:ea:78:5f:22:21:2d:5c:4f:1c:4b:e2:
                    fe:a9:bc:73:50:12:9d:42:3b:12:86:ab:08:0b:a4:
                    b4:75:a8:35:4c:c3:c7:92:65:b3:46:2a:d7:08:ad:
                    aa:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:55:1E:68:EA:05:6E:54:18:13:32:C0:F3:C7:F4:C1:E9:0A:9C:99
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/781f5758-85ff-3023-8e02-a59870facf84.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453/f37ae11d-629c-4443-bc37-2c3eebd09453.crl

            X509v3 Authority Key Identifier:
                keyid:57:3A:F3:61:F9:E5:C1:3B:27:E6:21:36:E2:F7:1D:A5:6A:DA:B8:E4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f37ae11d-629c-4443-bc37-2c3eebd09453.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.143.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:7c:37:b6:cc:14:29:86:57:b9:9e:da:ae:56:63:51:d7:1a:
         e6:c0:65:93:33:1d:51:a5:17:93:9f:c6:a6:7d:f3:1f:14:6c:
         9b:bc:1c:31:b8:81:b5:3b:a5:68:30:33:f7:6a:05:0f:82:a1:
         b8:aa:97:2b:58:bf:4b:13:78:ff:7b:ab:4b:15:e5:c5:54:2b:
         18:14:93:92:6b:1b:96:71:87:f3:75:12:c7:af:90:62:5d:b0:
         3a:51:ca:29:40:09:23:5e:5a:7f:aa:fa:b0:03:d2:14:b6:23:
         09:36:6e:5e:b2:40:e7:2b:05:48:bf:5d:d8:31:ce:b5:f8:f3:
         28:80:2d:7d:db:46:7d:6f:d0:c4:ce:c3:b0:bc:6b:ed:f4:33:
         ae:39:40:ab:40:dc:2c:ce:aa:df:da:e1:d4:de:92:87:85:89:
         95:f6:75:0b:8b:a8:fb:02:bc:61:b5:7f:94:6a:c3:b3:18:9a:
         f5:8c:78:e2:a9:2a:b8:21:6a:02:95:a2:0d:8e:ab:9f:69:b4:
         8a:11:e2:b3:6c:5a:e7:b6:14:92:64:ca:ed:ba:11:9e:da:32:
         f1:87:77:02:f0:cb:91:ff:ef:ce:29:99:a9:72:16:fb:77:93:
         13:b8:d4:12:d7:e5:16:06:a5:d1:b0:cc:9f:da:47:79:13:da:
         1b:db:15:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539VI+FhxHz2nwIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjM3YWUxMWQtNjI5Yy00NDQzLWJjMzctMmMzZWViZDA5
NDUzMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
ODgyZTVjNzQtMzhiNS00ZWMwLWJhYjYtODIyY2E4YzMxOGRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIjG7bKZanL6sHmy0+gK+EgBzRCA5pJ2/to5
g0421Gd9tjmlI5NFAuz68evzkYI+R8rwGqLTXXoB6tO8ZYhNnjiVnR0Larh01JAf
NAH3/EP5lAo5HfRQ/7TShP8s9GfAWPwT1lnd3q9O08Ei+qH5TUatFf/S6LZT0BPC
F0ISeGeNyypWaD74rMToYRYMMhFXdY6b0sAZxXSbiHn8pInKjsvnGz9bf2zQ9vzv
PszQmm0hqJCF8R3cItzKiRkpGIp4quzX4KVKqnATI9uK+VWCOWW66PkW6nhfIiEt
XE8cS+L+qbxzUBKdQjsShqsIC6S0dag1TMPHkmWzRirXCK2qOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAVVHmjqBW5UGBMywPPH9MHpCpyZMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mMzdh
ZTExZC02MjljLTQ0NDMtYmMzNy0yYzNlZWJkMDk0NTMvNzgxZjU3NTgtODVmZi0z
MDIzLThlMDItYTU5ODcwZmFjZjg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjM3YWUxMWQtNjI5Yy00NDQzLWJj
MzctMmMzZWViZDA5NDUzL2YzN2FlMTFkLTYyOWMtNDQ0My1iYzM3LTJjM2VlYmQw
OTQ1My5jcmwwHwYDVR0jBBgwFoAUVzrzYfnlwTsn5iE24vcdpWrauOQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mMzdhZTExZC02MjljLTQ0NDMtYmMzNy0yYzNl
ZWJkMDk0NTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0Y8LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADR8N7bMFCmGV7me2q5WY1HXGubAZZMzHVGlF5OfxqZ98x8UbJu8HDG4
gbU7pWgwM/dqBQ+CobiqlytYv0sTeP97q0sV5cVUKxgUk5JrG5Zxh/N1EsevkGJd
sDpRyilACSNeWn+q+rAD0hS2Iwk2bl6yQOcrBUi/XdgxzrX48yiALX3bRn1v0MTO
w7C8a+30M645QKtA3CzOqt/a4dTekoeFiZX2dQuLqPsCvGG1f5Rqw7MYmvWMeOKp
KrghagKVog2Oq59ptIoR4rNsWue2FJJkyu26EZ7aMvGHdwLwy5H/784pmalyFvt3
kxO41BLX5RYGpdGwzJ/aR3kT2hvbFfg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:12:56 2025 by rpki-client