Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
File:                     a684e03c-762f-380d-9364-a51ce895efa3.roa (raw, json)
Hash identifier:          nLlxAPlRopFyeUASYbEHuBWcIfGMtQWtMN1yw6xvpXg=
Subject key identifier:   00:75:29:E9:BC:AD:D6:CE:E0:4B:E0:A7:88:0E:DA:FB:16:7C:0C:5E
Certificate issuer:       /CN=7a0faf4a-643d-4023-8090-81f838253675
Certificate serial:       010D0C9F43285849B414952A1AE547D1001F6260
Authority key identifier: EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa
Signing time:             Thu 01 May 2025 01:00:46 +0000
ROA not before:           Thu 01 May 2025 01:00:46 +0000
ROA not after:            Wed 30 Jul 2025 01:00:46 +0000
asID:                     26214
IP address blocks:        148.59.116.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b4:14:95:2a:1a:e5:47:d1:00:1f:62:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a0faf4a-643d-4023-8090-81f838253675
        Validity
            Not Before: May  1 01:00:46 2025 GMT
            Not After : Jul 30 01:00:46 2025 GMT
        Subject: CN=c887b583-b0dd-4457-ac93-2d83be5325df
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:7e:f7:c6:8a:ee:0d:7e:16:c6:fe:1e:0b:b5:
                    16:5a:0c:63:a5:39:fe:1c:b0:6a:4f:26:3e:fc:cf:
                    31:92:29:12:2b:b0:37:82:d3:40:87:ed:ee:54:2f:
                    89:ea:2b:b3:59:67:02:76:66:7c:2e:84:8d:70:4a:
                    34:f7:92:85:4f:5d:48:d8:e0:3b:21:fb:ed:e7:a6:
                    a6:74:5c:f8:d3:87:0a:27:45:0b:9b:70:be:e3:7c:
                    23:26:3a:50:a9:b3:71:2a:59:9f:12:5e:15:62:57:
                    28:75:ba:f9:13:e5:7f:92:1c:b9:21:9d:f9:05:a0:
                    2d:8e:c6:44:b5:44:89:b2:cb:c0:06:39:08:7a:14:
                    29:9c:1d:52:ec:66:44:e2:4b:0b:64:0d:f7:48:68:
                    de:83:ed:2d:c3:af:b6:f8:10:29:fd:7e:9e:a1:de:
                    6e:f9:56:93:4f:7c:82:b0:f9:74:ce:3b:bd:a7:05:
                    23:b9:f2:e1:05:eb:99:84:99:03:b3:37:54:f7:9d:
                    13:9e:82:e7:7c:6b:13:48:0b:ce:c7:14:aa:29:87:
                    c1:a0:fd:b0:e2:12:07:94:eb:4d:06:82:c5:1d:74:
                    0a:01:51:79:cc:4c:1e:54:d3:02:9a:d1:ca:4c:8e:
                    8b:2f:0e:30:4d:de:9d:0b:00:1b:0a:85:1a:13:a3:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:75:29:E9:BC:AD:D6:CE:E0:4B:E0:A7:88:0E:DA:FB:16:7C:0C:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/a684e03c-762f-380d-9364-a51ce895efa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675/7a0faf4a-643d-4023-8090-81f838253675.crl

            X509v3 Authority Key Identifier:
                keyid:EF:C8:A4:48:B5:9E:36:86:28:E9:62:B0:0B:D6:1C:92:8F:24:44:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/7a0faf4a-643d-4023-8090-81f838253675.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.59.116.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:91:a5:ef:5c:16:10:16:08:b3:07:7b:45:0a:9c:30:2f:9c:
         70:77:e5:33:25:d3:e6:7c:c4:74:37:da:d6:cf:f5:ac:23:84:
         eb:89:bd:eb:3a:8d:17:6b:12:00:4f:92:31:0c:50:8f:b7:79:
         09:39:b8:f1:b8:d5:e7:5a:f0:f4:52:66:9e:36:42:ad:e3:ed:
         9d:9a:91:48:55:bc:6a:c1:a5:d2:6b:7c:67:e0:1f:e4:37:19:
         97:21:ef:2e:71:0c:be:c4:81:be:87:00:ec:a6:dc:c1:6d:b4:
         53:82:a2:73:b5:95:99:40:8e:db:99:c7:8d:8e:88:2d:ac:87:
         84:7c:8d:ea:47:99:41:32:96:b2:57:12:d2:dd:c6:b8:ca:cf:
         cb:59:d2:97:20:71:52:b3:c0:91:19:4a:ba:f5:0a:9c:55:1c:
         90:67:43:02:f3:02:fc:19:59:df:6b:6d:36:c8:e0:5c:80:38:
         4f:48:91:35:6e:bb:63:67:f9:e2:d5:95:9d:76:1a:81:0d:31:
         9d:66:15:8d:b9:26:6f:17:ff:cb:29:5e:c3:59:3d:12:7b:1e:
         24:41:68:38:e2:8f:61:20:ff:06:83:68:a1:b5:03:32:65:74:
         bc:54:ef:fa:09:89:54:d1:07:3a:a0:c9:f8:10:92:ef:d1:06:
         2a:14:ad:46
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm0FJUqGuVH0QAfYmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EwZmFmNGEtNjQzZC00MDIzLTgwOTAtODFmODM4MjUz
Njc1MB4XDTI1MDUwMTAxMDA0NloXDTI1MDczMDAxMDA0NlowLzEtMCsGA1UEAxMk
Yzg4N2I1ODMtYjBkZC00NDU3LWFjOTMtMmQ4M2JlNTMyNWRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2H73xoruDX4Wxv4eC7UWWgxjpTn+HLBqTyY+
/M8xkikSK7A3gtNAh+3uVC+J6iuzWWcCdmZ8LoSNcEo095KFT11I2OA7Ifvt56am
dFz404cKJ0ULm3C+43wjJjpQqbNxKlmfEl4VYlcodbr5E+V/khy5IZ35BaAtjsZE
tUSJssvABjkIehQpnB1S7GZE4ksLZA33SGjeg+0tw6+2+BAp/X6eod5u+VaTT3yC
sPl0zju9pwUjufLhBeuZhJkDszdU950TnoLnfGsTSAvOxxSqKYfBoP2w4hIHlOtN
BoLFHXQKAVF5zEweVNMCmtHKTI6LLw4wTd6dCwAbCoUaE6PByQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAB1Kem8rdbO4Evgp4gO2vsWfAxeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS83YTBm
YWY0YS02NDNkLTQwMjMtODA5MC04MWY4MzgyNTM2NzUvYTY4NGUwM2MtNzYyZi0z
ODBkLTkzNjQtYTUxY2U4OTVlZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvN2EwZmFmNGEtNjQzZC00MDIzLTgw
OTAtODFmODM4MjUzNjc1LzdhMGZhZjRhLTY0M2QtNDAyMy04MDkwLTgxZjgzODI1
MzY3NS5jcmwwHwYDVR0jBBgwFoAU78ikSLWeNoYo6WKwC9Ycko8kRBIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS83YTBmYWY0YS02NDNkLTQwMjMtODA5MC04MWY4
MzgyNTM2NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAlDt0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2Rpe9cFhAWCLMHe0UKnDAvnHB35TMl0+Z8xHQ32tbP9awjhOuJves6
jRdrEgBPkjEMUI+3eQk5uPG41eda8PRSZp42Qq3j7Z2akUhVvGrBpdJrfGfgH+Q3
GZch7y5xDL7Egb6HAOym3MFttFOConO1lZlAjtuZx42OiC2sh4R8jepHmUEylrJX
EtLdxrjKz8tZ0pcgcVKzwJEZSrr1CpxVHJBnQwLzAvwZWd9rbTbI4FyAOE9IkTVu
u2Nn+eLVlZ12GoENMZ1mFY25Jm8X/8spXsNZPRJ7HiRBaDjij2Eg/waDaKG1AzJl
dLxU7/oJiVTRBzqgyfgQku/RBioUrUY=
-----END CERTIFICATE-----
Generated at Tue May 13 06:53:40 2025 by rpki-client