Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
File:                     a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa (raw, json)
Hash identifier:          cUlFYJH54YEwWGqCMfPXdsHDHfXxAoi8974mGWWZ0Hs=
Subject key identifier:   BC:A5:76:0D:28:61:5E:2C:92:BB:9A:09:38:12:D3:D2:CA:AE:9C:11
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F43285849A1EF73596E10DACF57939A80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa
Signing time:             Thu 24 Apr 2025 13:01:00 +0000
ROA not before:           Thu 24 Apr 2025 13:01:00 +0000
ROA not after:            Wed 23 Jul 2025 13:01:00 +0000
asID:                     212609
IP address blocks:        64.40.148.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 12 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a1:ef:73:59:6e:10:da:cf:57:93:9a:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Apr 24 13:01:00 2025 GMT
            Not After : Jul 23 13:01:00 2025 GMT
        Subject: CN=26843b16-bf5b-4b5d-8327-2b19292cb149
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:31:8c:6b:ae:37:b9:88:9a:3c:9b:f3:e8:bc:
                    84:b6:36:04:ed:30:4e:44:55:58:6d:2a:d3:16:c0:
                    12:fe:50:f7:5b:8b:5d:18:15:ff:8a:b4:e3:38:87:
                    ad:63:3c:5d:84:aa:3c:d4:1c:d7:9c:35:d8:fb:89:
                    36:12:ce:bf:09:52:4b:91:5c:92:e2:f9:72:da:c6:
                    2c:da:b5:3f:40:86:7a:6b:e7:ac:7e:95:27:f1:02:
                    11:7c:56:e3:33:66:8d:13:3f:91:31:da:ce:97:88:
                    ec:11:f3:d0:44:72:04:d2:bb:64:dc:14:bb:2e:17:
                    50:4c:a5:e0:5f:4f:28:87:45:1c:94:99:0a:10:2f:
                    4d:35:83:fd:f7:17:39:16:16:d5:5a:8e:02:9a:01:
                    a8:b0:82:bd:fd:ea:d7:5f:30:a8:65:8e:cd:e6:fa:
                    30:29:cd:c8:ba:2a:c6:d6:26:6e:63:f9:a2:43:5a:
                    29:a2:51:71:a0:55:d7:8c:4d:75:a3:f9:09:33:b5:
                    b8:3f:31:32:a3:12:09:18:8a:4d:69:91:8c:cb:73:
                    ec:f8:9d:95:f2:e5:e9:2d:51:d1:2e:99:70:50:44:
                    96:e8:fa:93:a8:32:3a:4e:45:02:89:b4:98:11:af:
                    27:af:5d:c4:0d:a4:a7:95:00:2c:ac:59:f4:a5:bd:
                    f6:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:76:0D:28:61:5E:2C:92:BB:9A:09:38:12:D3:D2:CA:AE:9C:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/a83d374a-146f-3bfd-a41f-4431a15e8ccb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.40.148.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:a7:ee:ad:07:c5:58:9a:f7:e9:4d:11:cf:1f:af:5e:79:39:
         ad:6f:6f:6a:d5:86:d7:fc:23:10:4f:b2:9f:d6:4b:2b:ee:0c:
         80:39:37:5d:ae:aa:52:d1:a2:e7:e6:d3:7b:0d:9b:10:ae:9d:
         1b:e1:6a:e0:98:47:3e:43:92:79:b2:d7:da:b8:df:60:66:87:
         e8:b0:0c:5e:57:94:a3:a6:2c:0d:ff:7a:e7:2c:84:12:50:d1:
         b8:3d:9c:a6:03:cd:41:e7:12:7e:bc:90:20:3e:f1:a5:26:a4:
         04:e0:fc:7e:86:ec:c6:66:f9:cf:e3:7e:bc:eb:3f:f0:7c:39:
         94:b1:6d:07:b7:7a:4d:da:d3:db:bb:89:3c:85:56:30:63:39:
         d3:64:8e:58:07:b7:ca:33:aa:f9:49:51:82:df:6a:e5:d8:56:
         92:e9:9e:72:52:4e:d9:25:17:c9:47:17:0a:73:11:02:6c:7d:
         23:a8:53:16:9e:e2:3b:6f:6a:0b:53:0d:a7:4e:ed:e3:2f:42:
         a4:ed:87:51:23:3b:e8:e2:09:e5:a5:df:47:d8:76:8d:ca:85:
         e6:02:b4:99:07:0e:dd:dd:55:8f:1b:3a:f5:7c:09:70:82:de:
         8c:59:46:40:cd:7a:8d:c0:68:e2:58:5c:12:54:8d:8e:b2:8b:
         ad:57:5a:00
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmh73NZbhDaz1eTmoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDQyNDEzMDEwMFoXDTI1MDcyMzEzMDEwMFowLzEtMCsGA1UEAxMk
MjY4NDNiMTYtYmY1Yi00YjVkLTgzMjctMmIxOTI5MmNiMTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhjGMa643uYiaPJvz6LyEtjYE7TBORFVYbSrT
FsAS/lD3W4tdGBX/irTjOIetYzxdhKo81BzXnDXY+4k2Es6/CVJLkVyS4vly2sYs
2rU/QIZ6a+esfpUn8QIRfFbjM2aNEz+RMdrOl4jsEfPQRHIE0rtk3BS7LhdQTKXg
X08oh0UclJkKEC9NNYP99xc5FhbVWo4CmgGosIK9/erXXzCoZY7N5vowKc3IuirG
1iZuY/miQ1opolFxoFXXjE11o/kJM7W4PzEyoxIJGIpNaZGMy3Ps+J2V8uXpLVHR
LplwUESW6PqTqDI6TkUCibSYEa8nr13EDaSnlQAsrFn0pb32ywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLyldg0oYV4skruaCTgS09LKrpwRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvYTgzZDM3NGEtMTQ2Zi0z
YmZkLWE0MWYtNDQzMWExNWU4Y2NiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQCiUMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABqn7q0HxVia9+lNEc8fr155Oa1vb2rVhtf8IxBPsp/WSyvuDIA5N12u
qlLRoufm03sNmxCunRvhauCYRz5Dknmy19q432Bmh+iwDF5XlKOmLA3/eucshBJQ
0bg9nKYDzUHnEn68kCA+8aUmpATg/H6G7MZm+c/jfrzrP/B8OZSxbQe3ek3a09u7
iTyFVjBjOdNkjlgHt8ozqvlJUYLfauXYVpLpnnJSTtklF8lHFwpzEQJsfSOoUxae
4jtvagtTDadO7eMvQqTth1EjO+jiCeWl30fYdo3KheYCtJkHDt3dVY8bOvV8CXCC
3oxZRkDNeo3AaOJYXBJUjY6yi61XWgA=
-----END CERTIFICATE-----
Generated at Fri May 9 18:22:00 2025 by rpki-client