Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa
File:                     44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa (raw, json)
Hash identifier:          mY5yMRJRgoKgNbxkrEOIP0Et7BLUQOFIrKyWRP1DkPM=
Subject key identifier:   08:30:74:32:B7:92:B8:6D:0E:FD:30:55:9F:85:71:72:33:CB:5F:83
Certificate issuer:       /CN=3976c091-1138-4917-9649-5575618ab7ea
Certificate serial:       010D0C9F4328584A03A557EA6965903CE0D8A500
Authority key identifier: 4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7029
IP address blocks:        134.202.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:57:ea:69:65:90:3c:e0:d8:a5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3976c091-1138-4917-9649-5575618ab7ea
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=91065671-764d-4d1b-bd47-c1dc3726ed23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:e2:5e:ab:1c:40:64:84:b0:41:a1:bf:7c:2b:
                    93:4b:eb:17:a2:73:1d:be:21:cb:7c:f9:31:07:ef:
                    0d:10:58:18:b9:d2:3c:2d:50:15:3a:f9:b0:60:70:
                    35:3c:fc:1c:c8:ce:f0:19:f5:3f:e8:c9:57:27:e7:
                    0d:b8:f4:07:ef:97:04:b3:10:4c:94:99:c2:8d:67:
                    92:bf:ad:4f:bd:45:71:78:85:81:f6:b8:f4:ef:21:
                    6e:f3:bb:8c:b7:00:0e:ac:18:0d:70:89:0a:ac:a6:
                    fa:3f:cc:a7:ce:b7:d5:3b:f5:fe:19:2a:ce:7c:b7:
                    8b:cf:f5:49:be:87:71:db:c8:8f:9f:78:65:9c:45:
                    8b:f1:2b:ac:8c:72:02:5f:84:2a:6a:fe:5c:de:38:
                    48:a3:65:69:ef:f9:ea:a9:58:89:10:fe:97:41:37:
                    70:71:0c:9a:17:c1:81:60:9f:1d:c3:a7:da:1b:1a:
                    08:67:2d:0f:df:24:e5:e4:34:8a:c2:71:27:1d:3d:
                    b3:11:51:de:30:5f:54:5d:1f:0c:48:8a:35:17:1c:
                    7b:bf:9d:39:d0:6f:bb:a4:a2:0d:f4:4e:bd:1e:c2:
                    36:4d:34:df:ae:45:64:0c:92:96:2e:0b:41:6d:55:
                    6c:d7:fb:df:b3:e7:d3:ae:d2:b1:ee:81:34:99:12:
                    c7:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:30:74:32:B7:92:B8:6D:0E:FD:30:55:9F:85:71:72:33:CB:5F:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/44a30d3e-49f4-3d2b-af64-4bfc06765ce8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea/3976c091-1138-4917-9649-5575618ab7ea.crl

            X509v3 Authority Key Identifier:
                keyid:4E:56:B7:A5:EF:1D:B0:A7:15:3E:54:2E:B2:17:1C:E0:13:86:F2:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3976c091-1138-4917-9649-5575618ab7ea.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.202.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:f7:38:28:21:1e:f2:ef:63:6c:19:53:ba:6e:f5:44:cb:16:
         31:ef:e6:7c:df:10:37:79:f2:89:24:5a:86:34:0d:b2:7e:1a:
         e3:e8:3f:c4:a5:c2:fa:85:f8:51:4c:16:34:ce:71:89:b1:4c:
         b2:98:97:05:8d:e3:29:82:96:82:63:88:4b:80:ee:b8:b2:28:
         10:03:2e:25:3a:ab:4a:30:87:4d:95:cf:ff:25:37:0a:fe:18:
         49:72:84:23:92:ed:4a:62:cb:35:bb:5b:90:2c:08:0e:54:f0:
         bb:0b:9e:1b:eb:19:92:ec:3a:13:e3:ed:8d:f0:f8:20:47:4c:
         f0:1e:c3:30:58:1c:4a:59:69:e1:18:f0:e9:cf:bd:42:fc:55:
         3b:96:d5:2e:d5:d4:a5:4b:76:c5:a0:1d:9f:13:29:3e:4b:ff:
         8a:56:6f:53:75:f6:e9:2f:fd:1d:38:1d:c7:13:e5:7b:43:58:
         e8:8e:6f:ed:88:b1:45:fa:8a:78:11:56:1b:f0:73:82:ae:8f:
         52:a0:a1:03:e1:48:7d:4a:9e:44:ae:64:22:36:88:9c:ca:76:
         80:19:e6:c7:8e:be:7d:65:f3:ca:a6:2d:e8:c6:ac:61:da:07:
         79:16:b7:b0:75:50:0d:84:60:23:06:98:3d:7a:60:cf:c8:14:
         11:b6:76:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVfqaWWQPODYpQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzk3NmMwOTEtMTEzOC00OTE3LTk2NDktNTU3NTYxOGFi
N2VhMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
OTEwNjU2NzEtNzY0ZC00ZDFiLWJkNDctYzFkYzM3MjZlZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3OJeqxxAZISwQaG/fCuTS+sXonMdviHLfPkx
B+8NEFgYudI8LVAVOvmwYHA1PPwcyM7wGfU/6MlXJ+cNuPQH75cEsxBMlJnCjWeS
v61PvUVxeIWB9rj07yFu87uMtwAOrBgNcIkKrKb6P8ynzrfVO/X+GSrOfLeLz/VJ
vodx28iPn3hlnEWL8SusjHICX4Qqav5c3jhIo2Vp7/nqqViJEP6XQTdwcQyaF8GB
YJ8dw6faGxoIZy0P3yTl5DSKwnEnHT2zEVHeMF9UXR8MSIo1Fxx7v5050G+7pKIN
9E69HsI2TTTfrkVkDJKWLgtBbVVs1/vfs+fTrtKx7oE0mRLHYQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAgwdDK3krhtDv0wVZ+FcXIzy1+DMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2
YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1NjE4YWI3ZWEvNDRhMzBkM2UtNDlmNC0z
ZDJiLWFmNjQtNGJmYzA2NzY1Y2U4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMzk3NmMwOTEtMTEzOC00OTE3LTk2
NDktNTU3NTYxOGFiN2VhLzM5NzZjMDkxLTExMzgtNDkxNy05NjQ5LTU1NzU2MThh
YjdlYS5jcmwwHwYDVR0jBBgwFoAUTla3pe8dsKcVPlQushcc4BOG8oEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zOTc2YzA5MS0xMTM4LTQ5MTctOTY0OS01NTc1
NjE4YWI3ZWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDhsogMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACb3OCghHvLvY2wZU7pu9UTLFjHv5nzfEDd58okkWoY0DbJ+GuPoP8Sl
wvqF+FFMFjTOcYmxTLKYlwWN4ymCloJjiEuA7riyKBADLiU6q0owh02Vz/8lNwr+
GElyhCOS7UpiyzW7W5AsCA5U8LsLnhvrGZLsOhPj7Y3w+CBHTPAewzBYHEpZaeEY
8OnPvUL8VTuW1S7V1KVLdsWgHZ8TKT5L/4pWb1N19ukv/R04HccT5XtDWOiOb+2I
sUX6ingRVhvwc4Kuj1KgoQPhSH1KnkSuZCI2iJzKdoAZ5seOvn1l88qmLejGrGHa
B3kWt7B1UA2EYCMGmD16YM/IFBG2dvo=
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:09:17 2025 by rpki-client