Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa
File:                     1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa (raw, json)
Hash identifier:          9uyU71BT/Flc5cufvClKpSWsGz5+6bhrmBAovafYJdA=
Subject key identifier:   15:A6:6D:AA:5D:CC:97:0B:ED:29:D5:32:64:E3:D3:E7:75:A4:45:8B
Certificate issuer:       /CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
Certificate serial:       010D0C9F4328584A0C0564F788E9B734C90C1D80
Authority key identifier: F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        147.124.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:64:f7:88:e9:b7:34:c9:0c:1d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c6e86b52-dd36-46b7-afe5-266195bdcf1a
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=9532d5ce-e6fd-4020-93b9-8da02047ce6c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:c4:f8:92:a2:59:8e:42:27:38:34:06:44:4c:
                    f6:de:16:6b:64:30:f7:cb:7d:49:72:aa:1d:c3:8c:
                    ff:ab:d9:f7:32:8a:aa:ed:48:36:5c:2c:06:29:8d:
                    9c:39:67:09:fc:e2:53:59:77:4b:e7:12:d5:b8:de:
                    fb:e9:90:c5:17:20:fe:ca:56:84:1d:40:c4:01:0e:
                    9b:e7:19:b5:d7:fa:6c:dc:24:50:cf:1f:10:73:5d:
                    90:42:f7:39:04:9b:90:b0:2b:53:d4:9c:fe:1e:0d:
                    92:5f:1b:3c:ff:ac:5e:07:1d:34:d1:e4:61:e2:01:
                    08:f9:38:77:c4:37:58:7f:82:fb:23:9e:aa:a0:57:
                    22:85:93:30:ac:36:89:d0:5e:30:21:48:84:68:d7:
                    6b:da:d2:30:5b:a1:6d:d0:ce:ad:03:ea:a9:66:21:
                    87:98:33:36:f4:40:1c:47:fd:bc:01:a1:bb:83:a9:
                    f3:31:9f:c4:bf:ea:fa:9b:24:54:3a:9b:13:b9:64:
                    45:ef:57:dc:35:01:99:8d:5a:e8:8c:d1:0b:f0:84:
                    d9:a5:1e:33:af:af:d9:46:fe:ea:99:2d:59:1b:10:
                    53:d6:67:0a:d1:c3:db:1c:ba:5f:f0:09:00:eb:29:
                    e2:0d:dd:82:12:4d:b1:69:45:08:7a:65:40:ab:03:
                    4e:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:A6:6D:AA:5D:CC:97:0B:ED:29:D5:32:64:E3:D3:E7:75:A4:45:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/1d3bc39b-f1ab-31d8-a29b-578d7d8b95f3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a/c6e86b52-dd36-46b7-afe5-266195bdcf1a.crl

            X509v3 Authority Key Identifier:
                keyid:F6:49:17:0D:24:FB:CF:BC:02:F8:B9:17:FA:AA:FE:4D:CE:55:E4:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/c6e86b52-dd36-46b7-afe5-266195bdcf1a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.124.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b8:70:a1:6f:dd:4e:dd:20:55:06:cd:c0:f9:61:f9:97:eb:3b:
         4b:65:df:c9:52:0a:a9:5b:6b:ef:7c:e2:e4:73:66:d8:a2:11:
         ab:12:80:a6:b5:ce:a9:c3:e5:8d:18:61:21:07:98:62:82:fa:
         20:2c:8f:29:fa:df:47:2f:7f:d1:bc:78:27:0c:1e:1d:ec:ba:
         85:19:3a:75:3f:c9:3c:78:df:c5:ef:e6:65:3d:aa:f1:6d:74:
         d5:e2:c5:45:f3:ef:5c:a1:07:1d:5f:0e:eb:59:12:e4:28:6f:
         3a:0a:3b:df:4b:b4:9a:1b:8f:fd:64:ff:d8:75:47:fe:7c:1c:
         32:43:6a:ac:d8:31:18:82:1f:ca:14:fd:a2:07:c1:a0:5b:81:
         3b:8e:63:2b:de:2d:ca:18:0a:b5:56:58:e4:7c:f8:cd:c6:02:
         85:e2:86:f5:50:11:27:53:6c:54:37:d0:94:11:ed:90:52:3c:
         01:d4:af:64:26:5d:5b:e5:5a:40:9e:82:67:35:4f:aa:48:42:
         9c:90:a8:ce:e1:c1:89:21:c8:86:c5:3e:ea:e2:32:9f:56:35:
         b7:2e:ce:89:92:5d:1a:de:ca:ae:24:30:16:d4:18:45:56:ce:
         69:e7:2b:f6:8d:6e:60:3b:46:cb:dd:04:db:ce:56:4b:09:9f:
         7a:ec:1d:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWT3iOm3NMkMHYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzZlODZiNTItZGQzNi00NmI3LWFmZTUtMjY2MTk1YmRj
ZjFhMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
OTUzMmQ1Y2UtZTZmZC00MDIwLTkzYjktOGRhMDIwNDdjZTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkcT4kqJZjkInODQGREz23hZrZDD3y31Jcqod
w4z/q9n3Moqq7Ug2XCwGKY2cOWcJ/OJTWXdL5xLVuN776ZDFFyD+ylaEHUDEAQ6b
5xm11/ps3CRQzx8Qc12QQvc5BJuQsCtT1Jz+Hg2SXxs8/6xeBx000eRh4gEI+Th3
xDdYf4L7I56qoFcihZMwrDaJ0F4wIUiEaNdr2tIwW6Ft0M6tA+qpZiGHmDM29EAc
R/28AaG7g6nzMZ/Ev+r6myRUOpsTuWRF71fcNQGZjVrojNEL8ITZpR4zr6/ZRv7q
mS1ZGxBT1mcK0cPbHLpf8AkA6yniDd2CEk2xaUUIemVAqwNOawIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBWmbapdzJcL7SnVMmTj0+d1pEWLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4
NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYxOTViZGNmMWEvMWQzYmMzOWItZjFhYi0z
MWQ4LWEyOWItNTc4ZDdkOGI5NWYzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYzZlODZiNTItZGQzNi00NmI3LWFm
ZTUtMjY2MTk1YmRjZjFhL2M2ZTg2YjUyLWRkMzYtNDZiNy1hZmU1LTI2NjE5NWJk
Y2YxYS5jcmwwHwYDVR0jBBgwFoAU9kkXDST7z7wC+LkX+qr+Tc5V5NYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9jNmU4NmI1Mi1kZDM2LTQ2YjctYWZlNS0yNjYx
OTViZGNmMWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBk3zmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALhwoW/dTt0gVQbNwPlh+ZfrO0tl38lSCqlba+984uRzZtiiEasSgKa1
zqnD5Y0YYSEHmGKC+iAsjyn630cvf9G8eCcMHh3suoUZOnU/yTx438Xv5mU9qvFt
dNXixUXz71yhBx1fDutZEuQobzoKO99LtJobj/1k/9h1R/58HDJDaqzYMRiCH8oU
/aIHwaBbgTuOYyveLcoYCrVWWOR8+M3GAoXihvVQESdTbFQ30JQR7ZBSPAHUr2Qm
XVvlWkCegmc1T6pIQpyQqM7hwYkhyIbFPuriMp9WNbcuzomSXRreyq4kMBbUGEVW
zmnnK/aNbmA7RsvdBNvOVksJn3rsHa8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:56:02 2025 by rpki-client