Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/9a585eac-18ed-3b01-8a0a-18af038bedd7.roa
File:                     9a585eac-18ed-3b01-8a0a-18af038bedd7.roa (raw, json)
Hash identifier:          BeSUK/c1LH57oJE+RzZ7ODKcBxbUrCuFQPwZFlqvJ0g=
Subject key identifier:   09:1C:52:8D:C9:17:1B:04:56:89:92:8F:FC:C9:47:BC:EE:3B:33:AD
Certificate issuer:       /CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
Certificate serial:       010D0C9F43285849C0A4EDC9D69D56EFCD29DA80
Authority key identifier: 36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/9a585eac-18ed-3b01-8a0a-18af038bedd7.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     16519
IP address blocks:        140.226.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:ed:c9:d6:9d:56:ef:cd:29:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=4efbcf9d-1309-4ec6-9502-0585ea145c48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:2b:34:f0:bf:83:40:bd:57:1f:d8:2f:e9:6c:
                    db:92:78:5f:4d:94:40:75:5a:2d:73:5b:4c:c4:e9:
                    60:7d:d6:eb:db:90:6d:44:81:73:0d:35:27:56:5c:
                    21:b9:78:c0:f4:d9:b5:8a:4a:48:57:19:1a:38:3c:
                    2c:35:f6:10:a6:a2:5e:ab:ca:bb:9d:8c:2b:35:ae:
                    a0:2d:3c:fa:44:d3:57:60:a7:9e:33:e4:96:6d:d0:
                    05:63:ce:05:0b:71:84:14:fe:95:bd:01:9d:9e:58:
                    07:75:35:36:dc:66:04:02:86:73:c0:b1:cf:56:aa:
                    37:22:4a:b4:62:26:93:c7:16:f4:64:cf:62:e2:6d:
                    05:ea:7a:12:dc:30:7b:05:b0:b9:57:fb:62:03:69:
                    cc:56:17:1e:3d:be:44:fe:ee:20:eb:62:4b:3c:67:
                    32:53:1f:99:26:49:fa:11:e7:53:01:ae:8c:25:b4:
                    6d:7b:c5:2e:7d:6c:28:f0:1e:62:b9:69:8c:8d:b7:
                    c9:76:fd:63:9f:21:af:44:4e:c1:95:36:0c:a0:2a:
                    1b:97:ce:96:1e:73:1e:98:6e:e5:9d:a9:f6:3d:28:
                    df:8b:8a:3d:e3:65:a8:67:5b:43:50:cc:23:e8:2f:
                    cd:cc:7c:2f:56:ec:9a:15:47:82:8a:84:fc:9b:11:
                    67:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:1C:52:8D:C9:17:1B:04:56:89:92:8F:FC:C9:47:BC:EE:3B:33:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/9a585eac-18ed-3b01-8a0a-18af038bedd7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.crl

            X509v3 Authority Key Identifier:
                keyid:36:E1:48:13:85:9B:AE:52:6C:C1:04:B2:93:68:46:CC:61:5C:11:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/15efc2b9-a5a1-4c5c-a04c-dd1c9bed52e6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.226.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:c9:f1:1b:29:fe:14:ff:f5:d3:4a:7a:c8:d4:f3:4c:56:7c:
         50:4f:41:00:da:35:bb:1d:8b:e2:02:00:ee:28:c6:01:53:59:
         4a:da:11:b0:bd:a4:38:2d:09:7d:36:16:fa:5f:e3:b4:56:7d:
         62:ae:bb:47:d7:4b:93:f9:7e:4c:be:d6:34:a3:e0:3d:ee:ab:
         f3:25:c7:82:e3:c7:3d:d6:44:ed:89:ba:92:5d:ba:fa:75:dc:
         e4:8d:21:18:2c:ae:d5:71:a8:42:f3:4f:32:fe:ef:2b:79:ed:
         0d:1d:cb:bb:5b:59:1d:d1:74:5c:36:54:f9:9c:d7:bd:9a:82:
         84:c9:18:cb:2c:7a:e5:e3:46:86:f9:07:24:36:e6:0d:fb:ec:
         ff:be:17:1c:ec:2b:44:4a:e3:e4:32:e2:1d:00:7d:f1:85:a0:
         ee:ca:ee:d8:31:6f:8d:b7:14:7c:15:76:cd:c0:84:f9:ec:19:
         c5:41:b7:6e:ad:94:b3:e5:5e:76:f5:95:34:95:c3:b6:af:7d:
         25:e4:78:b3:bc:b8:74:96:6b:b9:8b:7c:2f:0b:e5:0a:6c:2e:
         f5:b7:7d:eb:cb:3a:9f:e8:aa:71:1a:79:16:99:31:31:2a:48:
         f5:68:d0:c9:cd:15:90:7e:c0:52:2a:ac:0c:57:7c:1b:12:a9:
         db:82:7f:19
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEnApO3J1p1W780p2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTVlZmMyYjktYTVhMS00YzVjLWEwNGMtZGQxYzliZWQ1
MmU2MB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
NGVmYmNmOWQtMTMwOS00ZWM2LTk1MDItMDU4NWVhMTQ1YzQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Cs08L+DQL1XH9gv6WzbknhfTZRAdVotc1tM
xOlgfdbr25BtRIFzDTUnVlwhuXjA9Nm1ikpIVxkaODwsNfYQpqJeq8q7nYwrNa6g
LTz6RNNXYKeeM+SWbdAFY84FC3GEFP6VvQGdnlgHdTU23GYEAoZzwLHPVqo3Ikq0
YiaTxxb0ZM9i4m0F6noS3DB7BbC5V/tiA2nMVhcePb5E/u4g62JLPGcyUx+ZJkn6
EedTAa6MJbRte8UufWwo8B5iuWmMjbfJdv1jnyGvRE7BlTYMoCobl86WHnMemG7l
nan2PSjfi4o942WoZ1tDUMwj6C/NzHwvVuyaFUeCioT8mxFnBwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFAkcUo3JFxsEVomSj/zJR7zuOzOtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xNWVm
YzJiOS1hNWExLTRjNWMtYTA0Yy1kZDFjOWJlZDUyZTYvOWE1ODVlYWMtMThlZC0z
YjAxLThhMGEtMThhZjAzOGJlZGQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTVlZmMyYjktYTVhMS00YzVjLWEw
NGMtZGQxYzliZWQ1MmU2LzE1ZWZjMmI5LWE1YTEtNGM1Yy1hMDRjLWRkMWM5YmVk
NTJlNi5jcmwwHwYDVR0jBBgwFoAUNuFIE4WbrlJswQSyk2hGzGFcEdEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xNWVmYzJiOS1hNWExLTRjNWMtYTA0Yy1kZDFj
OWJlZDUyZTYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjOIwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAJsnxGyn+FP/100p6yNTzTFZ8UE9BANo1ux2L4gIA7ijGAVNZStoRsL2k
OC0JfTYW+l/jtFZ9Yq67R9dLk/l+TL7WNKPgPe6r8yXHguPHPdZE7Ym6kl26+nXc
5I0hGCyu1XGoQvNPMv7vK3ntDR3Lu1tZHdF0XDZU+ZzXvZqChMkYyyx65eNGhvkH
JDbmDfvs/74XHOwrRErj5DLiHQB98YWg7sru2DFvjbcUfBV2zcCE+ewZxUG3bq2U
s+VedvWVNJXDtq99JeR4s7y4dJZruYt8LwvlCmwu9bd968s6n+iqcRp5FpkxMSpI
9WjQyc0VkH7AUiqsDFd8GxKp24J/GQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:49:53 2025 by rpki-client