Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/db086793-22f1-3526-a7c8-33d5d5f6ce9d.roa
File:                     db086793-22f1-3526-a7c8-33d5d5f6ce9d.roa (raw, json)
Hash identifier:          iluMQf6/2zc9hZ005GsMBFdW7Jjn2oqx87dZ/AyX9GQ=
Subject key identifier:   4B:63:E1:E3:62:11:25:9C:CD:7A:A9:0F:21:B5:62:AC:D2:16:7E:64
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584A411062DC68B1602217F447C0
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/db086793-22f1-3526-a7c8-33d5d5f6ce9d.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     174
IP address blocks:        216.177.132.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:62:dc:68:b1:60:22:17:f4:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=5e4762cb-42b6-4480-b7fb-2093b21dab5a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:1d:66:1b:17:9d:a4:1c:19:b6:be:5c:24:e1:
                    50:77:93:9c:d6:50:a6:21:3a:66:af:c0:e9:2c:28:
                    1e:5e:8b:ca:5a:45:ef:7d:b6:6e:66:82:b2:c0:08:
                    df:dd:ea:e2:d3:49:0a:c0:85:c9:8b:ad:b0:30:6d:
                    ad:56:0f:52:12:17:8c:4d:2c:6e:d3:e4:40:e6:9a:
                    08:e3:a8:61:0e:22:de:95:53:78:96:9f:09:71:ef:
                    e4:66:3b:5c:5d:c0:73:3d:d1:d2:6a:8d:bc:61:da:
                    82:80:6e:a7:9f:55:18:e9:41:dd:41:c9:52:79:e8:
                    8e:7c:d0:7e:54:fc:dd:c8:ab:dd:9c:e9:45:de:ff:
                    f0:e0:7c:1b:c0:c3:da:61:0d:34:94:5e:f0:48:52:
                    90:17:d2:06:81:01:47:13:7d:56:30:b0:ad:cc:42:
                    74:88:10:b3:20:62:18:24:1b:78:8e:38:83:6d:01:
                    b4:dc:cc:02:74:05:7b:44:20:be:77:a7:9d:4a:de:
                    0f:77:e9:96:23:03:a6:e4:6c:9d:f9:a6:19:a6:db:
                    2c:12:1a:4f:eb:b6:fb:07:8e:16:f1:03:a0:71:36:
                    87:63:4d:45:2d:0e:06:b7:e5:c2:54:90:0e:3d:ba:
                    81:33:f2:f1:7f:4e:01:45:df:5a:d0:c0:cb:6c:ef:
                    08:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:63:E1:E3:62:11:25:9C:CD:7A:A9:0F:21:B5:62:AC:D2:16:7E:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/db086793-22f1-3526-a7c8-33d5d5f6ce9d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.177.132.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:5d:a8:5a:9e:c0:b5:c9:30:5b:b3:2a:80:ea:41:6d:17:39:
         06:e4:e3:d5:2d:47:bf:29:e6:d6:2f:f1:e5:a1:6c:3b:99:53:
         cc:67:4d:3e:91:23:0e:93:9c:67:71:e0:2e:e1:05:53:a4:59:
         b1:da:53:5c:b9:fb:c2:a7:41:cb:b2:62:e4:47:bb:8c:8b:74:
         fb:cc:c0:44:c9:f5:e1:25:fd:02:af:df:5f:56:af:3a:c2:36:
         a1:70:7d:ad:74:bf:27:5f:4e:9b:0e:e2:a3:d0:fa:33:07:ce:
         6c:48:4d:9a:b3:95:41:e4:9f:38:b5:cc:45:3d:f4:63:9c:4c:
         41:c3:2f:df:25:99:6c:66:71:c3:70:a4:11:f1:e1:52:20:de:
         17:96:65:44:37:0e:10:5e:26:bd:86:c9:06:32:5d:a0:e4:a8:
         8a:89:e0:99:7e:58:9d:41:4a:41:c8:68:07:ee:b7:d0:c3:4a:
         5c:53:94:73:c4:df:c2:bd:ee:70:04:36:e2:04:f2:f4:b4:95:
         0c:ce:3f:19:f5:7f:0e:0d:1a:1c:eb:49:30:a4:1f:bb:46:cf:
         2d:9f:49:3c:da:f9:ae:77:ed:38:c4:7e:6f:dc:a4:b2:0d:71:
         55:5f:57:5f:b5:b0:f8:78:19:0d:ad:da:a5:f1:69:c6:f2:ee:
         6f:34:9a:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEGLcaLFgIhf0R8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NWU0NzYyY2ItNDJiNi00NDgwLWI3ZmItMjA5M2IyMWRhYjVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7h1mGxedpBwZtr5cJOFQd5Oc1lCmITpmr8Dp
LCgeXovKWkXvfbZuZoKywAjf3eri00kKwIXJi62wMG2tVg9SEheMTSxu0+RA5poI
46hhDiLelVN4lp8Jce/kZjtcXcBzPdHSao28YdqCgG6nn1UY6UHdQclSeeiOfNB+
VPzdyKvdnOlF3v/w4HwbwMPaYQ00lF7wSFKQF9IGgQFHE31WMLCtzEJ0iBCzIGIY
JBt4jjiDbQG03MwCdAV7RCC+d6edSt4Pd+mWIwOm5Gyd+aYZptssEhpP67b7B44W
8QOgcTaHY01FLQ4Gt+XCVJAOPbqBM/Lxf04BRd9a0MDLbO8I4QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEtj4eNiESWczXqpDyG1YqzSFn5kMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvZGIwODY3OTMtMjJmMS0z
NTI2LWE3YzgtMzNkNWQ1ZjZjZTlkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2LGEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADJdqFqewLXJMFuzKoDqQW0XOQbk49UtR78p5tYv8eWhbDuZU8xnTT6R
Iw6TnGdx4C7hBVOkWbHaU1y5+8KnQcuyYuRHu4yLdPvMwETJ9eEl/QKv319WrzrC
NqFwfa10vydfTpsO4qPQ+jMHzmxITZqzlUHknzi1zEU99GOcTEHDL98lmWxmccNw
pBHx4VIg3heWZUQ3DhBeJr2GyQYyXaDkqIqJ4Jl+WJ1BSkHIaAfut9DDSlxTlHPE
38K97nAENuIE8vS0lQzOPxn1fw4NGhzrSTCkH7tGzy2fSTza+a537TjEfm/cpLIN
cVVfV1+1sPh4GQ2t2qXxacby7m80mq8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 17:24:01 2025 by rpki-client