Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7741b511-3b99-36bb-8d3d-e53bace28e91.roa
File:                     7741b511-3b99-36bb-8d3d-e53bace28e91.roa (raw, json)
Hash identifier:          5CPl/qPFnih5Wnbjg/O2CSomwiiT9FdnLN9JQBIqJA4=
Subject key identifier:   B2:E4:65:5C:EE:10:18:80:51:7E:F2:B5:1D:8B:4C:04:8F:0C:35:A4
Certificate issuer:       /CN=004321a8-393d-4f7f-add9-dddc07a1320d
Certificate serial:       010D0C9F4328584A29074E11FFF12E440B48F300
Authority key identifier: FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7741b511-3b99-36bb-8d3d-e53bace28e91.roa
Signing time:             Wed 11 Jun 2025 02:47:51 +0000
ROA not before:           Wed 11 Jun 2025 02:47:51 +0000
ROA not after:            Tue 09 Sep 2025 02:47:51 +0000
asID:                     399970
IP address blocks:        149.112.152.0/24 maxlen: 24
                          149.112.153.0/24 maxlen: 24
                          149.112.154.0/24 maxlen: 24
                          149.112.155.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:29:07:4e:11:ff:f1:2e:44:0b:48:f3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=004321a8-393d-4f7f-add9-dddc07a1320d
        Validity
            Not Before: Jun 11 02:47:51 2025 GMT
            Not After : Sep  9 02:47:51 2025 GMT
        Subject: CN=2a7762e0-9c45-41e0-a183-0081a317250e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:39:bc:8a:32:af:5a:f7:ec:18:54:4c:40:e5:
                    c6:59:1a:f0:50:be:71:94:d2:25:2a:af:55:3b:66:
                    56:35:ec:5f:58:f2:1f:86:19:bc:3b:a9:4b:15:40:
                    83:49:5b:60:d3:8f:8d:6e:67:98:13:5c:1d:94:51:
                    37:94:f4:e0:c3:79:03:37:92:69:50:3c:22:0e:b3:
                    d3:eb:64:62:bc:03:f7:a6:8d:34:61:2a:82:4f:1d:
                    1e:68:17:19:29:78:df:d6:5a:7e:f3:24:2e:d8:41:
                    ca:3e:aa:5e:f8:a9:0c:3f:ca:f1:a9:a8:e2:06:0f:
                    92:8b:64:5c:51:07:ac:a8:56:03:f4:34:ce:1b:a4:
                    37:0b:aa:70:9a:d5:2e:65:d9:06:a6:49:11:29:78:
                    46:34:cd:e2:f9:64:b9:cf:ef:19:bf:ac:19:4c:59:
                    a0:18:91:20:8e:5f:24:67:04:b9:16:fa:b5:90:13:
                    c4:23:9f:d5:5d:b6:69:f6:fa:9b:8a:13:95:05:e5:
                    78:80:e7:b1:b8:6f:5c:5b:1a:ce:3c:5e:d7:58:a1:
                    a9:3b:9d:54:5c:ba:68:92:3e:a4:58:82:88:71:81:
                    37:14:d4:3c:be:d8:15:bf:63:5b:2a:23:db:18:3a:
                    de:a2:14:7d:5a:d6:65:ea:11:7a:3a:bf:de:40:54:
                    2d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:E4:65:5C:EE:10:18:80:51:7E:F2:B5:1D:8B:4C:04:8F:0C:35:A4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/7741b511-3b99-36bb-8d3d-e53bace28e91.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d/004321a8-393d-4f7f-add9-dddc07a1320d.crl

            X509v3 Authority Key Identifier:
                keyid:FE:D8:E1:5B:23:CE:B0:9B:2E:84:87:9B:FF:67:16:5D:DA:D5:FD:F5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/004321a8-393d-4f7f-add9-dddc07a1320d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.152.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c1:42:c5:47:02:03:c6:cb:bd:ec:2a:61:8e:5e:26:b0:a4:
         b2:38:66:36:75:1b:ff:b5:04:6c:00:90:a2:fd:1a:14:94:08:
         b9:0d:19:eb:85:fa:6b:8f:79:ef:d4:b4:9e:90:a1:b9:a9:bb:
         18:b9:62:d9:22:01:59:d0:83:b3:7e:24:1b:32:a4:33:a0:f1:
         cf:0e:12:d1:b7:e7:da:72:86:19:66:bc:84:fe:55:0e:0e:b1:
         49:02:c8:99:de:e8:e7:ce:cd:bb:98:f8:a7:f4:4f:e7:52:19:
         35:54:ec:7a:62:ac:0a:df:1d:e2:7e:f4:15:6c:33:4a:16:dd:
         49:b1:97:09:84:d6:d7:a1:1b:b7:0e:25:c7:f8:00:bf:64:f0:
         74:a6:ca:cf:b1:2d:5f:fb:74:a0:31:da:75:b3:0d:4e:7a:dd:
         aa:4e:22:df:fe:ea:3f:34:b9:95:c4:62:6a:ff:e4:3c:29:34:
         7b:d2:59:b8:1e:d1:1f:b5:89:2c:ad:83:14:eb:77:1f:48:cc:
         49:c3:0b:33:38:7b:9e:0d:90:60:03:33:e1:98:64:b9:10:b4:
         55:d6:58:f1:cc:74:07:a6:f6:ac:c5:8c:de:34:5f:24:b7:ab:
         da:03:b3:dd:af:78:09:59:ee:7b:17:cc:e2:6f:8a:0d:e5:8f:
         0c:c6:b3:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEopB04R//EuRAtI8wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA0MzIxYTgtMzkzZC00ZjdmLWFkZDktZGRkYzA3YTEz
MjBkMB4XDTI1MDYxMTAyNDc1MVoXDTI1MDkwOTAyNDc1MVowLzEtMCsGA1UEAxMk
MmE3NzYyZTAtOWM0NS00MWUwLWExODMtMDA4MWEzMTcyNTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3jm8ijKvWvfsGFRMQOXGWRrwUL5xlNIlKq9V
O2ZWNexfWPIfhhm8O6lLFUCDSVtg04+NbmeYE1wdlFE3lPTgw3kDN5JpUDwiDrPT
62RivAP3po00YSqCTx0eaBcZKXjf1lp+8yQu2EHKPqpe+KkMP8rxqajiBg+Si2Rc
UQesqFYD9DTOG6Q3C6pwmtUuZdkGpkkRKXhGNM3i+WS5z+8Zv6wZTFmgGJEgjl8k
ZwS5Fvq1kBPEI5/VXbZp9vqbihOVBeV4gOexuG9cWxrOPF7XWKGpO51UXLpokj6k
WIKIcYE3FNQ8vtgVv2NbKiPbGDreohR9WtZl6hF6Or/eQFQtPwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLLkZVzuEBiAUX7ytR2LTASPDDWkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQz
MjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRjMDdhMTMyMGQvNzc0MWI1MTEtM2I5OS0z
NmJiLThkM2QtZTUzYmFjZTI4ZTkxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMDA0MzIxYTgtMzkzZC00ZjdmLWFk
ZDktZGRkYzA3YTEzMjBkLzAwNDMyMWE4LTM5M2QtNGY3Zi1hZGQ5LWRkZGMwN2Ex
MzIwZC5jcmwwHwYDVR0jBBgwFoAU/tjhWyPOsJsuhIeb/2cWXdrV/fUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8wMDQzMjFhOC0zOTNkLTRmN2YtYWRkOS1kZGRj
MDdhMTMyMGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQClXCYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXBQsVHAgPGy73sKmGOXiawpLI4ZjZ1G/+1BGwAkKL9GhSUCLkNGeuF
+muPee/UtJ6Qobmpuxi5YtkiAVnQg7N+JBsypDOg8c8OEtG359pyhhlmvIT+VQ4O
sUkCyJne6OfOzbuY+Kf0T+dSGTVU7HpirArfHeJ+9BVsM0oW3UmxlwmE1tehG7cO
Jcf4AL9k8HSmys+xLV/7dKAx2nWzDU563apOIt/+6j80uZXEYmr/5DwpNHvSWbge
0R+1iSytgxTrdx9IzEnDCzM4e54NkGADM+GYZLkQtFXWWPHMdAem9qzFjN40XyS3
q9oDs92veAlZ7nsXzOJvig3ljwzGs8Y=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:18:06 2025 by rpki-client