Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa
File:                     ccdde809-50c4-33e9-a009-60f26d2db07f.roa (raw, json)
Hash identifier:          h57YjY5XCPrhTZgtUOdEN2WjrVZR/04ipRALlYPWXdQ=
Subject key identifier:   F3:19:7A:B7:47:21:D1:A5:E5:17:30:BA:A4:AD:EC:BE:A8:8F:9D:5D
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F4328584A46ECCC34E46AF5376897B600
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa
Signing time:             Sun 22 Jun 2025 15:24:28 +0000
ROA not before:           Sun 22 Jun 2025 15:24:28 +0000
ROA not after:            Sat 20 Sep 2025 15:24:28 +0000
asID:                     812
IP address blocks:        159.18.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:46:ec:cc:34:e4:6a:f5:37:68:97:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Jun 22 15:24:28 2025 GMT
            Not After : Sep 20 15:24:28 2025 GMT
        Subject: CN=f29f0b44-2ad1-48a9-9ffc-b53ed2f9db7c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:7e:3c:ff:61:c4:03:5f:25:e3:9c:69:4e:7d:
                    b8:2d:4f:9b:24:46:82:86:aa:ba:61:35:3a:55:44:
                    4b:85:e5:76:7a:03:40:de:78:4d:77:dc:78:62:88:
                    72:cd:85:95:3e:d9:18:db:26:3d:31:2e:ac:57:81:
                    85:9c:25:00:48:04:63:bc:84:fe:46:f6:a7:50:1d:
                    19:f9:ba:26:37:a4:d3:b6:28:5c:71:33:ce:40:04:
                    f4:de:f4:8c:27:2b:85:cd:aa:7c:98:19:fa:f8:e5:
                    ad:31:24:82:38:b6:18:af:5a:77:87:bd:1e:69:1c:
                    51:09:a2:da:25:45:6d:72:81:51:ae:87:f5:4d:a8:
                    32:67:11:d3:f5:ee:b5:e4:ff:76:0d:de:6a:4b:76:
                    9c:12:be:e4:a6:b4:fb:9a:59:dd:da:e2:50:60:50:
                    7d:a8:68:c7:c1:6e:aa:bd:3e:14:f4:1a:d6:7d:30:
                    b5:f6:82:52:d4:a6:79:13:4c:67:d8:ca:58:c8:16:
                    b4:ce:e1:9f:64:9c:4d:b2:c1:04:c5:ef:25:01:04:
                    cd:12:22:11:56:40:6a:c7:d9:31:1c:ce:b3:cd:8b:
                    30:bb:93:c6:47:4c:8d:85:fe:c7:6b:ad:9d:32:5c:
                    48:60:1f:93:64:10:fc:47:f7:15:96:77:9e:fa:73:
                    5e:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:19:7A:B7:47:21:D1:A5:E5:17:30:BA:A4:AD:EC:BE:A8:8F:9D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/ccdde809-50c4-33e9-a009-60f26d2db07f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.18.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:04:ba:6a:48:81:a7:9d:77:bb:15:28:73:bf:00:8e:0a:1a:
         d0:48:a3:f8:95:7b:e7:ab:ca:12:1a:a8:f5:c9:22:fd:08:c1:
         77:3b:f6:dd:7f:4e:d3:38:41:91:72:e1:36:cb:81:ec:43:a0:
         83:04:d6:aa:d1:19:7a:2c:24:bd:bb:29:57:a9:eb:12:e0:46:
         89:55:cc:85:bd:b5:85:a0:06:71:4d:c6:68:34:d4:b9:92:85:
         ae:71:b4:67:35:83:d2:e5:c1:69:ee:70:1f:59:24:37:97:5b:
         e1:23:d0:fb:08:6a:4d:a9:6a:bc:d3:85:54:6d:c2:d3:38:7e:
         ad:87:25:dd:04:e3:f4:70:85:32:76:ac:8f:83:97:14:a8:19:
         47:ee:9b:31:06:38:52:ae:98:1e:9a:37:55:90:96:54:eb:aa:
         b3:c9:6b:21:e2:62:b4:86:5e:bc:d1:6f:b8:d9:c7:bb:d1:70:
         13:2c:37:6e:69:75:ee:90:bd:d1:0b:df:45:52:a1:39:7f:21:
         63:3f:aa:02:33:50:db:0d:52:ac:05:69:c2:3f:49:3d:4b:95:
         48:a9:f5:c0:27:ca:ec:8f:fb:e9:06:b0:47:75:ff:36:c5:04:
         88:ac:a1:97:5a:af:ed:41:31:8a:a5:c8:2c:15:24:30:38:03:
         07:15:03:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpG7Mw05Gr1N2iXtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDYyMjE1MjQyOFoXDTI1MDkyMDE1MjQyOFowLzEtMCsGA1UEAxMk
ZjI5ZjBiNDQtMmFkMS00OGE5LTlmZmMtYjUzZWQyZjlkYjdjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApH48/2HEA18l45xpTn24LU+bJEaChqq6YTU6
VURLheV2egNA3nhNd9x4YohyzYWVPtkY2yY9MS6sV4GFnCUASARjvIT+RvanUB0Z
+bomN6TTtihccTPOQAT03vSMJyuFzap8mBn6+OWtMSSCOLYYr1p3h70eaRxRCaLa
JUVtcoFRrof1TagyZxHT9e615P92Dd5qS3acEr7kprT7mlnd2uJQYFB9qGjHwW6q
vT4U9BrWfTC19oJS1KZ5E0xn2MpYyBa0zuGfZJxNssEExe8lAQTNEiIRVkBqx9kx
HM6zzYswu5PGR0yNhf7Ha62dMlxIYB+TZBD8R/cVlnee+nNecQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPMZerdHIdGl5RcwuqSt7L6oj51dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvY2NkZGU4MDktNTBjNC0z
M2U5LWEwMDktNjBmMjZkMmRiMDdmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAnxJFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYEumpIgaedd7sVKHO/AI4KGtBIo/iVe+eryhIaqPXJIv0IwXc79t1/
TtM4QZFy4TbLgexDoIME1qrRGXosJL27KVep6xLgRolVzIW9tYWgBnFNxmg01LmS
ha5xtGc1g9LlwWnucB9ZJDeXW+Ej0PsIak2parzThVRtwtM4fq2HJd0E4/RwhTJ2
rI+DlxSoGUfumzEGOFKumB6aN1WQllTrqrPJayHiYrSGXrzRb7jZx7vRcBMsN25p
de6QvdEL30VSoTl/IWM/qgIzUNsNUqwFacI/ST1LlUip9cAnyuyP++kGsEd1/zbF
BIisoZdar+1BMYqlyCwVJDA4AwcVA4g=
-----END CERTIFICATE-----
Generated at Sun Jun 29 05:44:01 2025 by rpki-client