Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa
File:                     6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa (raw, json)
Hash identifier:          BKCTHgFCjcNqVagQbQjgu8baiY/sDqsOlWbHsDA+EjY=
Subject key identifier:   C5:CE:B1:7D:74:8F:45:12:DA:5F:96:A2:12:6A:38:6A:78:88:5A:17
Certificate issuer:       /CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
Certificate serial:       010D0C9F4328584A41104E365F25CE633DF1784C
Authority key identifier: 1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     21743
IP address blocks:        45.42.141.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:4e:36:5f:25:ce:63:3d:f1:78:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f63fbc75-bfbc-423c-991c-efb130c5d3df
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=9e9747a9-e9c6-443c-827d-2a6018a08424
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:1a:20:1e:dc:a2:e8:51:2a:a1:09:db:de:
                    15:25:6b:56:9c:9e:e9:0d:fe:f7:2c:54:eb:f9:41:
                    e9:a9:00:94:b9:e1:c3:7b:cc:4e:b0:c3:d1:96:eb:
                    7a:47:8d:b6:27:0a:6b:21:6a:2f:1a:c2:28:8e:6d:
                    92:eb:99:4f:c1:26:1a:82:bd:3f:3a:f7:94:c5:05:
                    f1:64:77:ee:2f:fc:f4:77:f2:d2:46:2c:dc:81:d1:
                    f0:44:89:b2:2d:41:07:70:01:dc:c3:bf:5b:ee:8d:
                    7b:0f:6d:f1:9b:4d:96:04:5f:12:32:2d:2c:de:e9:
                    c5:8e:01:ab:7e:a8:f6:30:d4:af:45:ed:f3:8d:fc:
                    7b:f0:2e:ab:db:22:d1:fb:b9:03:af:d3:b8:ed:22:
                    4b:a8:64:48:35:11:f1:4d:27:ce:d6:6b:34:a3:6c:
                    03:ff:7a:30:18:c7:26:99:0e:9c:28:64:51:a8:5d:
                    15:22:41:81:4a:35:b8:33:82:52:52:bd:e7:28:c4:
                    7a:c1:f5:2e:bd:c6:33:c3:f0:84:47:a8:fc:81:5d:
                    5d:9e:7e:33:ec:d4:1f:78:da:d2:ef:07:29:af:6f:
                    5d:33:6a:33:87:b6:66:97:33:e1:54:58:55:82:40:
                    32:bb:2a:b8:4a:66:7b:0f:f1:86:6c:ec:c3:b6:62:
                    ff:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:CE:B1:7D:74:8F:45:12:DA:5F:96:A2:12:6A:38:6A:78:88:5A:17
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/6b8136d9-d359-31ae-8dfb-e8f07fa48d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df/f63fbc75-bfbc-423c-991c-efb130c5d3df.crl

            X509v3 Authority Key Identifier:
                keyid:1F:4C:69:19:83:A6:D9:1D:AC:2D:4D:3E:DA:BD:DC:E3:4C:E9:8C:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/f63fbc75-bfbc-423c-991c-efb130c5d3df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.42.141.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3f:e5:16:82:14:b5:b9:f1:e2:bd:e1:c2:50:17:f3:a4:fd:65:
         1b:c7:41:e0:59:88:5e:9b:61:ce:b1:a6:df:b4:52:3c:e9:94:
         db:b6:3c:17:62:c3:3e:c3:cc:7e:97:ed:1b:ec:57:8f:8a:97:
         40:08:6b:86:84:76:30:8f:1a:45:70:e8:be:91:8a:0a:36:c2:
         6c:5f:08:21:64:70:93:90:a8:9e:d3:d9:1b:ce:dc:ed:2c:15:
         fc:9c:a0:35:20:9f:f2:f1:c8:00:54:ab:2f:58:51:91:17:67:
         bf:a2:e8:e6:6c:fc:fe:df:34:52:91:05:47:d7:57:09:36:96:
         55:35:3f:d1:3d:7f:5a:37:51:f0:5f:96:c3:0a:87:d4:e3:0c:
         79:4e:6f:64:27:b1:da:c6:e2:21:ad:9f:f7:ea:e9:05:35:14:
         06:dc:b1:fe:65:2d:03:2b:1a:0a:32:7c:86:f2:c2:02:ba:f2:
         bc:54:b3:15:c6:f2:8e:65:42:d7:4b:76:f0:58:b1:03:75:5c:
         ff:81:0c:08:cc:b9:5e:10:3e:63:36:ff:4d:e1:8e:38:46:8d:
         5b:aa:32:f9:20:dd:d7:0f:00:ff:b9:74:db:f6:1d:dd:69:46:
         7d:83:05:9b:30:e4:4f:58:b9:66:30:32:6f:6e:d2:e7:01:6c:
         77:fb:11:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEE42XyXOYz3xeEwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYzZmJjNzUtYmZiYy00MjNjLTk5MWMtZWZiMTMwYzVk
M2RmMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
OWU5NzQ3YTktZTljNi00NDNjLTgyN2QtMmE2MDE4YTA4NDI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvzsaIB7couhRKqEJ294VJWtWnJ7pDf73LFTr
+UHpqQCUueHDe8xOsMPRlut6R422JwprIWovGsIojm2S65lPwSYagr0/OveUxQXx
ZHfuL/z0d/LSRizcgdHwRImyLUEHcAHcw79b7o17D23xm02WBF8SMi0s3unFjgGr
fqj2MNSvRe3zjfx78C6r2yLR+7kDr9O47SJLqGRINRHxTSfO1ms0o2wD/3owGMcm
mQ6cKGRRqF0VIkGBSjW4M4JSUr3nKMR6wfUuvcYzw/CER6j8gV1dnn4z7NQfeNrS
7wcpr29dM2ozh7ZmlzPhVFhVgkAyuyq4SmZ7D/GGbOzDtmL/OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMXOsX10j0US2l+WohJqOGp4iFoXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNm
YmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIxMzBjNWQzZGYvNmI4MTM2ZDktZDM1OS0z
MWFlLThkZmItZThmMDdmYTQ4ZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZjYzZmJjNzUtYmZiYy00MjNjLTk5
MWMtZWZiMTMwYzVkM2RmL2Y2M2ZiYzc1LWJmYmMtNDIzYy05OTFjLWVmYjEzMGM1
ZDNkZi5jcmwwHwYDVR0jBBgwFoAUH0xpGYOm2R2sLU0+2r3c40zpjDIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9mNjNmYmM3NS1iZmJjLTQyM2MtOTkxYy1lZmIx
MzBjNWQzZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALSqNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD/lFoIUtbnx4r3hwlAX86T9ZRvHQeBZiF6bYc6xpt+0UjzplNu2PBdi
wz7DzH6X7RvsV4+Kl0AIa4aEdjCPGkVw6L6Rigo2wmxfCCFkcJOQqJ7T2RvO3O0s
FfycoDUgn/LxyABUqy9YUZEXZ7+i6OZs/P7fNFKRBUfXVwk2llU1P9E9f1o3UfBf
lsMKh9TjDHlOb2QnsdrG4iGtn/fq6QU1FAbcsf5lLQMrGgoyfIbywgK68rxUsxXG
8o5lQtdLdvBYsQN1XP+BDAjMuV4QPmM2/03hjjhGjVuqMvkg3dcPAP+5dNv2Hd1p
Rn2DBZsw5E9YuWYwMm9u0ucBbHf7EUc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:33:18 2025 by rpki-client