Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3d9445b-5aa1-3677-ae22-c2954830ffe9.roa
File:                     b3d9445b-5aa1-3677-ae22-c2954830ffe9.roa (raw, json)
Hash identifier:          z6xqHZXuozG86FbC1shOIU4E9blrL1Q0iyGBFNwR6xI=
Subject key identifier:   51:09:89:50:22:F4:B4:9E:2F:CC:31:D2:50:A1:9F:D1:A2:0C:F1:E3
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F43285849BF3F943870A50BB6FB6B6D00
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3d9445b-5aa1-3677-ae22-c2954830ffe9.roa
Signing time:             Mon 05 May 2025 01:00:49 +0000
ROA not before:           Mon 05 May 2025 01:00:49 +0000
ROA not after:            Sun 03 Aug 2025 01:00:49 +0000
asID:                     33363
IP address blocks:        107.147.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 10 May 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bf:3f:94:38:70:a5:0b:b6:fb:6b:6d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: May  5 01:00:49 2025 GMT
            Not After : Aug  3 01:00:49 2025 GMT
        Subject: CN=37a82654-d402-4983-88f2-32942e56f2eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:25:cb:67:e8:77:33:86:d8:c4:9b:43:f8:b0:
                    c2:33:f7:e0:bc:80:d6:16:93:fc:3e:cc:ae:28:24:
                    2f:e5:d8:3a:62:04:08:97:31:0b:4f:b3:1b:27:a1:
                    ac:75:4d:fa:97:32:f6:2b:eb:37:a2:20:4c:88:de:
                    fe:16:49:47:1b:1a:0f:df:98:68:fb:ea:d2:be:5e:
                    92:88:2a:24:10:57:a4:11:e8:26:da:8a:30:2d:ae:
                    25:9f:39:ee:cb:48:82:d4:dd:20:57:0e:67:ac:3b:
                    be:8b:97:21:1d:48:3f:d3:9b:aa:fc:fd:94:4b:9f:
                    9c:5f:81:f0:71:4e:29:df:b0:38:fb:a9:c8:fe:43:
                    df:1c:8a:a9:7f:7a:0c:a1:dc:23:f6:1f:59:b8:dd:
                    ac:d7:2b:57:a8:1e:48:cb:a5:b7:78:fc:dd:ea:61:
                    06:2a:ad:be:96:50:39:8b:98:46:ce:07:5c:7f:bb:
                    fe:b7:36:fe:42:be:6a:87:87:70:00:b2:75:71:e4:
                    8d:1c:8c:cc:ed:3f:f9:e8:9c:41:00:b9:fc:a0:f6:
                    66:a6:ce:e1:69:bd:42:94:84:2b:67:71:43:a4:f1:
                    34:ed:db:58:62:51:ff:24:50:fe:07:f0:59:b8:a9:
                    24:9a:15:df:3c:d4:0e:b0:72:cc:86:1f:d7:2c:31:
                    4f:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:09:89:50:22:F4:B4:9E:2F:CC:31:D2:50:A1:9F:D1:A2:0C:F1:E3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/b3d9445b-5aa1-3677-ae22-c2954830ffe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.147.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:52:3a:46:fd:5b:88:11:93:9c:b7:69:77:83:3d:58:5c:f0:
         44:f7:59:09:f2:66:08:af:5b:b3:24:dc:24:b9:65:3a:45:f1:
         5f:63:39:a0:36:9a:5a:66:0f:20:ee:fb:5a:d1:15:4b:91:eb:
         99:94:e5:8d:6b:87:b8:d7:45:09:df:99:c4:04:41:b1:50:85:
         fa:6b:af:f6:fa:bc:c8:42:47:68:a9:0b:0b:4b:58:8c:d0:56:
         d5:06:16:45:39:50:d3:95:24:b7:90:2c:95:cb:ac:64:31:1f:
         77:75:8d:ff:c9:70:67:7e:8a:60:6d:98:aa:7b:9f:73:4a:e1:
         33:80:11:12:ab:dd:76:54:9a:7d:cc:17:ba:79:7e:b1:bb:27:
         3c:b2:20:94:8d:61:f8:72:ab:83:15:12:bc:61:a1:c7:d3:ee:
         5a:fe:20:f4:3a:fc:c2:51:ea:f7:98:7c:73:2b:8a:45:88:38:
         ac:23:e4:e9:54:35:50:db:c0:50:c8:e5:0f:22:35:43:a5:24:
         6c:f5:56:5a:c0:d3:3b:bd:95:91:2c:0d:63:47:c0:71:95:f1:
         20:8b:4e:74:76:cd:cf:29:25:7b:3b:e2:d2:17:23:1a:86:c3:
         48:ca:0b:cb:a2:ff:36:58:3b:9f:a7:ff:2c:0e:96:3b:89:08:
         10:71:99:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm/P5Q4cKULtvtrbQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDUwNTAxMDA0OVoXDTI1MDgwMzAxMDA0OVowLzEtMCsGA1UEAxMk
MzdhODI2NTQtZDQwMi00OTgzLTg4ZjItMzI5NDJlNTZmMmViMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCXLZ+h3M4bYxJtD+LDCM/fgvIDWFpP8Psyu
KCQv5dg6YgQIlzELT7MbJ6GsdU36lzL2K+s3oiBMiN7+FklHGxoP35ho++rSvl6S
iCokEFekEegm2oowLa4lnznuy0iC1N0gVw5nrDu+i5chHUg/05uq/P2US5+cX4Hw
cU4p37A4+6nI/kPfHIqpf3oModwj9h9ZuN2s1ytXqB5Iy6W3ePzd6mEGKq2+llA5
i5hGzgdcf7v+tzb+Qr5qh4dwALJ1ceSNHIzM7T/56JxBALn8oPZmps7hab1ClIQr
Z3FDpPE07dtYYlH/JFD+B/BZuKkkmhXfPNQOsHLMhh/XLDFPCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFEJiVAi9LSeL8wx0lChn9GiDPHjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvYjNkOTQ0NWItNWFhMS0z
Njc3LWFlMjItYzI5NTQ4MzBmZmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGa5OAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlSOkb9W4gRk5y3aXeDPVhc8ET3WQnyZgivW7Mk3CS5ZTpF8V9jOaA2
mlpmDyDu+1rRFUuR65mU5Y1rh7jXRQnfmcQEQbFQhfprr/b6vMhCR2ipCwtLWIzQ
VtUGFkU5UNOVJLeQLJXLrGQxH3d1jf/JcGd+imBtmKp7n3NK4TOAERKr3XZUmn3M
F7p5frG7JzyyIJSNYfhyq4MVErxhocfT7lr+IPQ6/MJR6veYfHMrikWIOKwj5OlU
NVDbwFDI5Q8iNUOlJGz1VlrA0zu9lZEsDWNHwHGV8SCLTnR2zc8pJXs74tIXIxqG
w0jKC8ui/zZYO5+n/ywOljuJCBBxmak=
-----END CERTIFICATE-----
Generated at Thu May 8 03:11:46 2025 by rpki-client