Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa
File:                     379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa (raw, json)
Hash identifier:          rGM/oiqibKFY7dxStWcggrSQ4sdohcA+GKhSUgOFvl4=
Subject key identifier:   14:DA:2C:21:F8:63:AA:F8:1A:87:95:6B:AF:82:7D:34:DB:BE:F6:76
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499AF47B2A486821329A1E2A60
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa
Signing time:             Tue 22 Apr 2025 01:00:47 +0000
ROA not before:           Tue 22 Apr 2025 01:00:47 +0000
ROA not after:            Mon 21 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        75.154.240.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 14 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:9a:f4:7b:2a:48:68:21:32:9a:1e:2a:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 22 01:00:47 2025 GMT
            Not After : Jul 21 01:00:47 2025 GMT
        Subject: CN=5e97e869-085f-4a01-b2a2-347447e7548c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:77:63:21:69:87:a4:12:b9:cd:8a:e5:78:0a:
                    f5:48:e9:1b:73:74:b9:2c:23:2e:d6:ed:fb:bb:47:
                    80:62:cd:a3:30:ee:03:cc:9d:24:50:66:5c:5d:0d:
                    0e:52:e4:bf:a3:56:07:ec:9f:59:04:a0:bb:11:19:
                    2c:87:56:8e:2c:62:6a:2b:32:99:4e:88:12:a7:ee:
                    d4:d9:f0:a7:b8:f6:1b:23:ee:84:63:31:01:3c:30:
                    21:d4:ec:56:12:41:84:f8:dc:8b:82:c9:66:6a:9a:
                    30:3c:da:b1:f6:f3:7a:23:68:ca:ac:9d:05:36:da:
                    b0:a6:e4:fe:44:bb:6e:3f:48:f3:6e:62:5d:51:9a:
                    0d:da:1d:d8:73:c5:2f:73:87:f9:06:54:fa:66:d5:
                    8f:ea:f9:4f:f8:35:89:23:6e:1b:03:a4:fa:40:9b:
                    0d:eb:a7:33:bd:db:27:85:a6:69:a0:92:b3:5f:53:
                    1a:8b:84:16:1c:9c:a6:c8:be:c5:13:e6:bd:37:43:
                    3a:db:2c:2e:a6:cf:ca:ea:3c:67:ba:cd:8e:a2:79:
                    10:50:bf:81:fb:6a:d6:b3:d1:0f:fb:19:76:29:77:
                    ee:a3:e5:2d:37:aa:4e:70:39:ec:08:c7:39:41:7d:
                    a2:aa:51:d6:e5:dc:ae:f0:14:25:57:67:42:68:89:
                    d0:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DA:2C:21:F8:63:AA:F8:1A:87:95:6B:AF:82:7D:34:DB:BE:F6:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/379f40ff-ae27-3318-b062-1fbbd09fdf4d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  75.154.240.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:fb:dc:99:5b:19:ab:9b:03:65:13:54:3a:f1:f8:be:8f:da:
         37:d7:fb:ef:98:2f:5d:44:76:32:6a:67:b4:3c:26:1a:d7:79:
         dd:68:a0:da:9b:39:73:3e:8d:16:56:a8:31:5b:fb:c5:00:5a:
         c4:06:54:27:12:ed:72:6e:7d:ff:82:6d:e1:23:fa:6b:59:1f:
         31:7a:1a:b5:c7:da:e0:4c:7c:80:cc:cf:a0:7f:59:88:ba:b6:
         69:53:44:fd:91:80:23:b9:52:fe:cc:90:ac:cf:03:e5:ba:cf:
         98:d5:a5:ee:81:12:ee:f8:e8:57:96:c9:3e:93:ea:38:15:71:
         0c:ae:78:81:f2:32:1a:d4:36:e0:6f:db:7a:dc:ef:f2:2c:a0:
         98:da:bd:6c:50:1f:b9:55:54:e2:17:f2:43:cf:61:3c:29:87:
         c4:02:66:63:4f:c2:3b:06:8b:93:e6:98:03:c3:53:32:85:d2:
         02:e5:f1:bd:03:08:ff:e5:f7:b2:a6:83:6c:2a:7e:34:65:82:
         18:7d:19:3d:bf:b1:92:e9:a9:2c:fc:90:75:92:9b:c6:51:46:
         ec:27:2d:9d:36:7b:00:f6:9b:e2:b6:67:a6:f2:70:80:2d:08:
         58:dd:3b:06:96:00:c0:6b:d1:08:a9:a3:1e:d3:43:2f:01:2a:
         14:11:9e:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEma9HsqSGghMpoeKmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMjAxMDA0N1oXDTI1MDcyMTAxMDA0N1owLzEtMCsGA1UEAxMk
NWU5N2U4NjktMDg1Zi00YTAxLWIyYTItMzQ3NDQ3ZTc1NDhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhndjIWmHpBK5zYrleAr1SOkbc3S5LCMu1u37
u0eAYs2jMO4DzJ0kUGZcXQ0OUuS/o1YH7J9ZBKC7ERksh1aOLGJqKzKZTogSp+7U
2fCnuPYbI+6EYzEBPDAh1OxWEkGE+NyLgslmapowPNqx9vN6I2jKrJ0FNtqwpuT+
RLtuP0jzbmJdUZoN2h3Yc8Uvc4f5BlT6ZtWP6vlP+DWJI24bA6T6QJsN66czvdsn
haZpoJKzX1Mai4QWHJymyL7FE+a9N0M62ywups/K6jxnus2OonkQUL+B+2rWs9EP
+xl2KXfuo+UtN6pOcDnsCMc5QX2iqlHW5dyu8BQlV2dCaInQ2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBTaLCH4Y6r4GoeVa6+CfTTbvvZ2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvMzc5ZjQwZmYtYWUyNy0z
MzE4LWIwNjItMWZiYmQwOWZkZjRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQES5rwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADX73JlbGaubA2UTVDrx+L6P2jfX+++YL11EdjJqZ7Q8JhrXed1ooNqb
OXM+jRZWqDFb+8UAWsQGVCcS7XJuff+CbeEj+mtZHzF6GrXH2uBMfIDMz6B/WYi6
tmlTRP2RgCO5Uv7MkKzPA+W6z5jVpe6BEu746FeWyT6T6jgVcQyueIHyMhrUNuBv
23rc7/IsoJjavWxQH7lVVOIX8kPPYTwph8QCZmNPwjsGi5PmmAPDUzKF0gLl8b0D
CP/l97Kmg2wqfjRlghh9GT2/sZLpqSz8kHWSm8ZRRuwnLZ02ewD2m+K2Z6bycIAt
CFjdOwaWAMBr0Qipox7TQy8BKhQRnhA=
-----END CERTIFICATE-----
Generated at Sun May 11 21:51:28 2025 by rpki-client