Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d307ce3-ced7-39b9-952a-d5b0de753895.roa
File:                     8d307ce3-ced7-39b9-952a-d5b0de753895.roa (raw, json)
Hash identifier:          n1/dVTrg0BNpSImHPb98+ra/9L/CgqRRjpVKYALRSBc=
Subject key identifier:   64:4E:2C:DD:68:02:2B:CF:DF:53:ED:0E:D9:E4:12:E7:42:23:46:84
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858499829CB47ACE21DB2CC893600
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d307ce3-ced7-39b9-952a-d5b0de753895.roa
Signing time:             Mon 21 Apr 2025 01:00:47 +0000
ROA not before:           Mon 21 Apr 2025 01:00:47 +0000
ROA not after:            Sun 20 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.194.144.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:98:29:cb:47:ac:e2:1d:b2:cc:89:36:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 21 01:00:47 2025 GMT
            Not After : Jul 20 01:00:47 2025 GMT
        Subject: CN=87603115-cd12-4b00-8ebb-5dfeb82c83e6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c2:c9:52:a9:8e:16:e7:2c:69:91:fa:68:28:
                    11:ee:b6:dd:5c:f9:16:e1:68:ce:9d:df:cd:6c:bd:
                    9a:f1:bc:84:9c:b1:e0:d0:ca:d8:38:09:f9:de:29:
                    db:94:47:74:f9:60:0c:dd:6b:50:8d:a0:4c:0b:58:
                    2b:4b:8f:64:8a:d9:ed:0e:2f:01:ef:41:a7:c2:05:
                    e1:19:3e:a0:e6:17:f0:8b:d4:52:7f:4d:28:8c:57:
                    16:2d:9d:52:1e:55:82:54:91:c0:07:2c:38:29:88:
                    51:f6:e6:19:30:ea:de:3a:41:51:39:1d:57:d9:96:
                    e3:34:18:77:ac:e1:88:72:82:4a:0e:7a:76:2f:0d:
                    45:05:59:68:0d:ab:aa:36:0e:09:b6:e1:ff:e6:1f:
                    de:fa:19:20:04:3c:e4:05:6f:5c:e3:7f:7e:79:1c:
                    fc:e3:84:b3:45:18:b9:18:98:76:3d:6e:cd:9e:a5:
                    0d:b2:10:47:76:8b:54:f6:b3:71:a3:43:71:dc:5e:
                    e4:b5:4a:fb:7c:a7:1f:f3:53:81:bc:fd:82:ea:98:
                    e8:39:77:38:76:7a:50:c0:1b:ff:5c:e3:d7:e7:60:
                    c6:5e:50:01:1d:52:30:25:01:01:2c:af:cb:cf:4d:
                    a2:c4:a8:97:b3:d2:ec:d2:4f:e1:4b:1f:19:5f:16:
                    3d:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:4E:2C:DD:68:02:2B:CF:DF:53:ED:0E:D9:E4:12:E7:42:23:46:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/8d307ce3-ced7-39b9-952a-d5b0de753895.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.144.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c5:d9:58:31:55:34:72:e2:1c:f7:13:38:e8:cc:c2:21:09:50:
         2a:45:37:f0:30:bd:73:f4:9b:bb:f9:67:43:c6:d0:b1:97:08:
         39:d2:3c:ce:1c:16:69:44:24:d0:bc:84:16:f4:b0:f0:7e:83:
         31:e8:c1:0d:11:0d:1c:26:ee:46:79:66:58:9f:77:df:27:56:
         78:9c:b8:26:38:30:7c:e5:e1:69:24:b7:ec:fc:5b:19:7d:03:
         e1:84:64:d3:d3:2c:d0:33:73:76:28:d0:ec:93:9d:68:2c:cb:
         86:3b:9f:b9:7e:fb:c1:ec:7d:60:15:a2:02:18:c6:e9:2f:8b:
         b3:06:50:a7:27:d1:f7:ec:d2:85:56:44:45:e8:05:dd:c2:c2:
         d6:42:29:bc:b6:bf:16:6d:9b:6c:1a:ab:85:f5:a9:90:64:57:
         d8:71:db:db:65:c2:ef:34:a5:30:a2:16:53:89:d6:0c:5e:60:
         77:35:91:c9:65:b0:2c:a6:5a:21:38:d9:09:d3:90:4d:1d:f5:
         8f:02:21:75:f5:91:3f:67:28:8a:cb:a7:19:51:d4:aa:d5:94:
         e9:1a:b2:75:28:ad:5d:50:c7:8e:82:36:4f:5f:2b:99:05:14:
         41:74:48:00:0a:8b:1e:0e:16:d3:04:2e:03:75:be:6f:6c:96:
         fa:c4:e1:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmYKctHrOIdssyJNgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMTAxMDA0N1oXDTI1MDcyMDAxMDA0N1owLzEtMCsGA1UEAxMk
ODc2MDMxMTUtY2QxMi00YjAwLThlYmItNWRmZWI4MmM4M2U2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlcLJUqmOFucsaZH6aCgR7rbdXPkW4WjOnd/N
bL2a8byEnLHg0MrYOAn53inblEd0+WAM3WtQjaBMC1grS49kitntDi8B70GnwgXh
GT6g5hfwi9RSf00ojFcWLZ1SHlWCVJHAByw4KYhR9uYZMOreOkFROR1X2ZbjNBh3
rOGIcoJKDnp2Lw1FBVloDauqNg4JtuH/5h/e+hkgBDzkBW9c439+eRz844SzRRi5
GJh2PW7NnqUNshBHdotU9rNxo0Nx3F7ktUr7fKcf81OBvP2C6pjoOXc4dnpQwBv/
XOPX52DGXlABHVIwJQEBLK/Lz02ixKiXs9Ls0k/hSx8ZXxY9AQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGROLN1oAivP31PtDtnkEudCI0aEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvOGQzMDdjZTMtY2VkNy0z
OWI5LTk1MmEtZDViMGRlNzUzODk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMXZWDFVNHLiHPcTOOjMwiEJUCpFN/AwvXP0m7v5Z0PG0LGXCDnSPM4c
FmlEJNC8hBb0sPB+gzHowQ0RDRwm7kZ5Zlifd98nVnicuCY4MHzl4Wkkt+z8Wxl9
A+GEZNPTLNAzc3Yo0OyTnWgsy4Y7n7l++8HsfWAVogIYxukvi7MGUKcn0ffs0oVW
REXoBd3CwtZCKby2vxZtm2waq4X1qZBkV9hx29tlwu80pTCiFlOJ1gxeYHc1kcll
sCymWiE42QnTkE0d9Y8CIXX1kT9nKIrLpxlR1KrVlOkasnUorV1Qx46CNk9fK5kF
FEF0SAAKix4OFtMELgN1vm9slvrE4Uw=
-----END CERTIFICATE-----
Generated at Sun May 11 03:50:48 2025 by rpki-client