Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa
File:                     709de0d8-1ed7-3d28-98d3-257120b25a4d.roa (raw, json)
Hash identifier:          ph2ulRDbiB/t6uxj0eItCEc4EFJG60og6eSgoRwOjig=
Subject key identifier:   3B:A6:21:9A:56:2E:27:6E:EA:01:BA:AA:78:D3:CD:2B:CD:3D:49:43
Certificate issuer:       /CN=3837995b-cc80-4e23-af07-cd422d0d37a9
Certificate serial:       010D0C9F43285849DEE2E7B04B25AFFE3F7F4E00
Authority key identifier: 4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa
Signing time:             Fri 16 May 2025 09:00:28 +0000
ROA not before:           Fri 16 May 2025 09:00:28 +0000
ROA not after:            Thu 14 Aug 2025 09:00:28 +0000
asID:                     14114
IP address blocks:        169.145.140.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:de:e2:e7:b0:4b:25:af:fe:3f:7f:4e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3837995b-cc80-4e23-af07-cd422d0d37a9
        Validity
            Not Before: May 16 09:00:28 2025 GMT
            Not After : Aug 14 09:00:28 2025 GMT
        Subject: CN=dbcedac5-74f2-4257-ba1f-568d63141257
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:c9:20:fa:4c:32:af:4b:9e:6d:1e:c4:4e:b1:
                    5c:63:f2:a8:27:00:98:31:e1:1c:1e:fa:6d:51:e5:
                    a0:5a:63:32:16:3b:85:d1:21:b1:d8:29:4d:50:2d:
                    20:79:17:56:52:73:59:7c:c8:6d:9a:6f:a7:b4:c8:
                    45:95:60:2b:f7:53:6d:af:e0:df:f4:d7:ae:5c:d6:
                    0a:5d:5a:83:b1:75:b9:06:81:59:f9:09:3b:2a:c3:
                    7c:18:87:8f:8c:f0:f8:a0:ba:4e:b1:89:1e:bd:54:
                    5a:47:8d:f9:8a:f7:33:57:a7:ad:2a:5b:fd:a2:15:
                    eb:57:1b:dd:61:df:af:e1:d8:aa:8d:3a:1a:e5:68:
                    75:0b:6a:89:c1:f9:12:8e:3e:dd:c6:a9:69:7f:8f:
                    27:73:af:7c:b1:fa:50:a9:cc:c7:b0:4d:66:19:a3:
                    da:5f:e6:8e:72:ac:a6:d8:83:8a:81:cf:3e:3f:6c:
                    08:4e:67:c3:5e:ea:c7:69:ca:03:d6:14:0f:1a:c0:
                    7d:2f:e7:2f:20:30:fa:8f:be:4e:1e:e0:ee:52:6e:
                    03:55:03:de:c5:a5:5c:d2:d6:1f:e1:78:e8:04:1d:
                    27:13:8b:ed:d6:a4:c2:ee:57:99:d0:16:27:4f:74:
                    09:ab:f1:b6:4a:4e:a4:b0:cf:26:63:85:81:f3:e8:
                    6f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A6:21:9A:56:2E:27:6E:EA:01:BA:AA:78:D3:CD:2B:CD:3D:49:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/709de0d8-1ed7-3d28-98d3-257120b25a4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9/3837995b-cc80-4e23-af07-cd422d0d37a9.crl

            X509v3 Authority Key Identifier:
                keyid:4D:A5:E7:CB:C7:6E:F7:8E:46:12:40:BB:A0:1C:44:D8:FE:40:67:40

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3837995b-cc80-4e23-af07-cd422d0d37a9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  169.145.140.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         38:7c:fa:75:da:4f:0d:b6:d1:8e:69:1a:d0:7e:df:32:cb:42:
         1d:0b:b4:43:52:a7:9d:07:91:01:1b:bd:7d:9d:1f:af:7a:c8:
         d6:3c:3f:ea:cb:92:4b:eb:5e:0c:bf:24:89:ee:1a:5f:47:3d:
         3d:71:4b:93:bc:c7:a8:fc:d3:2a:f6:88:84:d2:63:dd:15:27:
         0f:ec:3c:62:f1:6a:b6:ca:5a:8c:61:8b:ec:86:15:bd:a3:93:
         d9:6e:45:4a:54:28:63:cc:3e:ca:fa:5c:0c:f7:96:70:c5:ac:
         4b:02:3e:16:65:8e:ae:c7:e3:cf:17:cf:3a:1c:4a:28:a3:00:
         77:92:a0:f6:a2:44:5c:30:7b:ca:fe:4f:4a:9a:31:cf:05:73:
         2d:3e:6a:c2:b5:15:29:e9:0a:cb:24:98:cc:1e:19:59:a2:ed:
         32:11:f2:72:a9:90:bd:10:f1:ee:5c:75:6e:ef:1e:86:ab:a3:
         eb:b9:ca:30:a9:73:52:bc:2d:19:73:2d:6f:a9:a5:7f:51:8d:
         11:14:ce:43:dc:07:b7:20:b2:10:5a:1f:1a:43:d3:e5:f6:c8:
         46:f4:67:db:27:d6:9e:ed:f3:e9:c5:62:b3:da:93:2b:91:6f:
         b0:d4:1b:6d:e0:8e:1f:0a:01:63:69:6f:eb:c4:88:e1:aa:10:
         05:60:17:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEne4uewSyWv/j9/TgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzgzNzk5NWItY2M4MC00ZTIzLWFmMDctY2Q0MjJkMGQz
N2E5MB4XDTI1MDUxNjA5MDAyOFoXDTI1MDgxNDA5MDAyOFowLzEtMCsGA1UEAxMk
ZGJjZWRhYzUtNzRmMi00MjU3LWJhMWYtNTY4ZDYzMTQxMjU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoskg+kwyr0uebR7ETrFcY/KoJwCYMeEcHvpt
UeWgWmMyFjuF0SGx2ClNUC0geRdWUnNZfMhtmm+ntMhFlWAr91Ntr+Df9NeuXNYK
XVqDsXW5BoFZ+Qk7KsN8GIePjPD4oLpOsYkevVRaR435ivczV6etKlv9ohXrVxvd
Yd+v4diqjToa5Wh1C2qJwfkSjj7dxqlpf48nc698sfpQqczHsE1mGaPaX+aOcqym
2IOKgc8+P2wITmfDXurHacoD1hQPGsB9L+cvIDD6j75OHuDuUm4DVQPexaVc0tYf
4XjoBB0nE4vt1qTC7leZ0BYnT3QJq/G2Sk6ksM8mY4WB8+hvOwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDumIZpWLidu6gG6qnjTzSvNPUlDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3
OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQyMmQwZDM3YTkvNzA5ZGUwZDgtMWVkNy0z
ZDI4LTk4ZDMtMjU3MTIwYjI1YTRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMzgzNzk5NWItY2M4MC00ZTIzLWFm
MDctY2Q0MjJkMGQzN2E5LzM4Mzc5OTViLWNjODAtNGUyMy1hZjA3LWNkNDIyZDBk
MzdhOS5jcmwwHwYDVR0jBBgwFoAUTaXny8du945GEkC7oBxE2P5AZ0AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zODM3OTk1Yi1jYzgwLTRlMjMtYWYwNy1jZDQy
MmQwZDM3YTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBqZGMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADh8+nXaTw220Y5pGtB+3zLLQh0LtENSp50HkQEbvX2dH696yNY8P+rL
kkvrXgy/JInuGl9HPT1xS5O8x6j80yr2iITSY90VJw/sPGLxarbKWoxhi+yGFb2j
k9luRUpUKGPMPsr6XAz3lnDFrEsCPhZljq7H488XzzocSiijAHeSoPaiRFwwe8r+
T0qaMc8Fcy0+asK1FSnpCsskmMweGVmi7TIR8nKpkL0Q8e5cdW7vHoaro+u5yjCp
c1K8LRlzLW+ppX9RjREUzkPcB7cgshBaHxpD0+X2yEb0Z9sn1p7t8+nFYrPakyuR
b7DUG23gjh8KAWNpb+vEiOGqEAVgF9U=
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:25:53 2025 by rpki-client