Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa
File:                     023707c3-191f-30ab-b34a-0b178c22c264.roa (raw, json)
Hash identifier:          DuBwD5SdpX+HXNRUkYaGgdDg7Uns9c69K5gyEnKLodI=
Subject key identifier:   C7:4B:B4:83:54:7A:B4:9A:D8:75:02:98:B4:FE:96:B3:60:63:4B:F7
Certificate issuer:       /CN=927d18e8-718f-412b-a0b2-a97decff6f3f
Certificate serial:       010D0C9F4328584A549B1CB67F5772CCD86ADA80
Authority key identifier: 65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     212384
IP address blocks:        139.177.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1c:b6:7f:57:72:cc:d8:6a:da:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=927d18e8-718f-412b-a0b2-a97decff6f3f
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=d9434b0c-d93c-400e-9c21-be9cae52633f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:32:ac:3a:05:cb:11:c6:e4:7c:e1:92:e5:
                    bd:c1:ba:52:62:1f:b9:6c:70:9b:89:e1:ab:79:80:
                    5c:41:b7:82:25:cd:cd:0b:18:0c:58:a4:22:76:a6:
                    da:68:f3:39:7a:f0:52:ad:dc:d4:c3:41:f2:4b:5b:
                    26:04:34:4a:34:41:73:92:a0:21:dd:aa:59:ee:ca:
                    23:37:91:99:7f:62:5e:14:74:a6:0c:b7:57:61:c5:
                    49:58:16:26:87:d6:73:08:e4:12:31:ed:5f:94:be:
                    67:e4:2b:01:3c:23:87:63:29:85:e9:39:10:28:3f:
                    7a:24:9e:b2:ba:06:5e:1b:e0:eb:2a:28:5a:16:35:
                    e2:7d:ae:5b:c4:91:12:ea:28:8a:14:39:e1:1d:0f:
                    10:33:db:ff:d3:bc:a5:19:2e:2c:a5:11:af:27:67:
                    8b:af:31:17:22:71:6b:71:b5:2b:a2:27:b4:5e:d7:
                    95:13:9e:df:77:5e:7e:37:c7:17:56:2e:d7:8a:4e:
                    df:13:95:cf:90:88:9a:f8:f7:af:30:4b:b3:b0:8c:
                    ad:9c:67:25:0b:c6:11:06:a6:ad:60:80:8f:b8:e7:
                    68:f1:3a:6b:fb:a0:f7:75:10:65:9e:cc:b4:9d:49:
                    f3:8e:08:f2:e4:d5:dc:76:c8:08:ec:9c:4f:99:66:
                    18:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:4B:B4:83:54:7A:B4:9A:D8:75:02:98:B4:FE:96:B3:60:63:4B:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/023707c3-191f-30ab-b34a-0b178c22c264.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f/927d18e8-718f-412b-a0b2-a97decff6f3f.crl

            X509v3 Authority Key Identifier:
                keyid:65:DD:C3:69:D5:D8:1B:0F:95:D5:AB:AD:7B:F5:30:38:B1:C0:60:04

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/927d18e8-718f-412b-a0b2-a97decff6f3f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.177.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:e3:85:f7:2b:d1:86:66:8d:0f:c7:a5:65:57:4d:8c:d0:75:
         fa:aa:08:e0:ba:45:63:22:06:c3:03:44:95:53:b6:f2:3a:d9:
         74:09:51:59:2c:78:c8:65:0d:e9:03:64:67:37:25:1a:62:e0:
         35:2f:a1:6c:58:c2:f5:c9:ac:65:ac:1d:aa:30:8e:d2:8f:a4:
         d0:32:80:02:71:ee:5d:3f:21:f4:f2:9c:77:9c:13:ad:0e:61:
         27:8f:0a:fb:30:4e:74:c6:fe:cf:33:27:dc:f8:2a:5f:ba:1d:
         fa:41:bf:6a:55:d1:87:c2:79:28:df:21:50:96:39:fa:22:5a:
         74:a1:d5:3c:cb:b0:5d:7f:7d:8a:05:45:d2:56:be:c9:15:52:
         81:8f:ce:a5:f0:64:fe:9d:15:08:4a:c7:da:7b:36:02:2f:78:
         09:75:51:6c:fc:50:e9:2e:3e:a9:16:50:4a:d4:b8:c3:eb:b0:
         ef:21:f1:ae:44:e6:ea:ad:0a:b2:94:3a:fd:45:bd:ea:51:06:
         ab:9e:9b:4f:99:fb:34:8f:f1:01:97:87:65:43:bc:7c:73:08:
         b0:19:a6:47:a9:f6:19:5c:3c:18:19:33:29:2b:63:87:64:84:
         7f:73:bf:21:8d:9b:2a:a8:3d:19:07:a2:8f:87:c0:1e:0c:dc:
         c5:c0:95:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmxy2f1dyzNhq2oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTI3ZDE4ZTgtNzE4Zi00MTJiLWEwYjItYTk3ZGVjZmY2
ZjNmMB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
ZDk0MzRiMGMtZDkzYy00MDBlLTljMjEtYmU5Y2FlNTI2MzNmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknMyrDoFyxHG5HzhkuW9wbpSYh+5bHCbieGr
eYBcQbeCJc3NCxgMWKQidqbaaPM5evBSrdzUw0HyS1smBDRKNEFzkqAh3apZ7soj
N5GZf2JeFHSmDLdXYcVJWBYmh9ZzCOQSMe1flL5n5CsBPCOHYymF6TkQKD96JJ6y
ugZeG+DrKihaFjXifa5bxJES6iiKFDnhHQ8QM9v/07ylGS4spRGvJ2eLrzEXInFr
cbUroie0XteVE57fd15+N8cXVi7Xik7fE5XPkIia+PevMEuzsIytnGclC8YRBqat
YICPuOdo8Tpr+6D3dRBlnsy0nUnzjgjy5NXcdsgI7JxPmWYYVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMdLtINUerSa2HUCmLT+lrNgY0v3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Mjdk
MThlOC03MThmLTQxMmItYTBiMi1hOTdkZWNmZjZmM2YvMDIzNzA3YzMtMTkxZi0z
MGFiLWIzNGEtMGIxNzhjMjJjMjY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOTI3ZDE4ZTgtNzE4Zi00MTJiLWEw
YjItYTk3ZGVjZmY2ZjNmLzkyN2QxOGU4LTcxOGYtNDEyYi1hMGIyLWE5N2RlY2Zm
NmYzZi5jcmwwHwYDVR0jBBgwFoAUZd3DadXYGw+V1aute/UwOLHAYAQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85MjdkMThlOC03MThmLTQxMmItYTBiMi1hOTdk
ZWNmZjZmM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAi7GaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAHjhfcr0YZmjQ/HpWVXTYzQdfqqCOC6RWMiBsMDRJVTtvI62XQJUVks
eMhlDekDZGc3JRpi4DUvoWxYwvXJrGWsHaowjtKPpNAygAJx7l0/IfTynHecE60O
YSePCvswTnTG/s8zJ9z4Kl+6HfpBv2pV0YfCeSjfIVCWOfoiWnSh1TzLsF1/fYoF
RdJWvskVUoGPzqXwZP6dFQhKx9p7NgIveAl1UWz8UOkuPqkWUErUuMPrsO8h8a5E
5uqtCrKUOv1FvepRBquem0+Z+zSP8QGXh2VDvHxzCLAZpkep9hlcPBgZMykrY4dk
hH9zvyGNmyqoPRkHoo+HwB4M3MXAlUg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:03:49 2025 by rpki-client