Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/61f6db00-8a0a-3f1b-b482-2637a39c934a.roa
File:                     61f6db00-8a0a-3f1b-b482-2637a39c934a.roa (raw, json)
Hash identifier:          hUe3j2qP56CvT8x6w4t7JcTFDEjltMiZXgrw21nuYOI=
Subject key identifier:   35:F1:70:6C:FC:87:A3:B4:5B:AA:55:03:47:B6:93:3B:29:B7:18:A7
Certificate issuer:       /CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
Certificate serial:       010D0C9F43285849DF5A64FD5CF4A5FAE7EE2400
Authority key identifier: 67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/61f6db00-8a0a-3f1b-b482-2637a39c934a.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     36445
IP address blocks:        94.140.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:64:fd:5c:f4:a5:fa:e7:ee:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6eb3f683-5247-4c55-a10b-2184f26c4f84
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=13e3a88b-3263-47d9-9578-04db81d38e2e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e0:8f:43:7f:f7:36:fc:b8:10:b0:a6:68:6a:
                    db:0a:ec:e0:bf:d7:0d:ef:a2:dd:26:9f:ef:d1:b6:
                    2c:7c:d9:50:cd:21:f5:ee:51:ce:4b:48:50:90:66:
                    c5:e7:02:80:c1:d1:76:fb:86:20:1a:72:b2:be:77:
                    ba:b7:09:41:03:02:4d:0b:b4:13:36:db:58:23:1b:
                    ee:db:3a:27:56:73:e8:16:96:1c:22:fc:f7:bc:d3:
                    e7:96:c8:ff:e1:98:c7:33:0c:21:cd:6b:04:83:94:
                    4b:5f:fc:e7:5d:9d:c0:17:64:50:4f:a7:19:4e:b3:
                    76:cd:9f:d3:b4:5a:24:29:ec:98:76:de:ef:71:2d:
                    bf:ad:0a:08:7e:a8:d2:e1:41:a0:be:e0:62:62:92:
                    63:42:de:8c:f7:4a:6f:5f:1e:b4:3a:d4:e8:75:1d:
                    3e:98:b3:7c:6a:1a:35:84:90:f6:08:7e:ca:42:38:
                    e9:16:a8:28:40:6d:49:5b:0b:6e:bc:a6:ef:76:41:
                    ee:20:f8:78:89:58:fe:d5:d0:bc:67:23:ce:9e:76:
                    8e:64:d5:ab:77:34:f5:e8:de:ed:79:e1:ce:82:e3:
                    d9:03:5f:38:73:dd:a4:2c:ac:38:2e:0c:36:7a:4e:
                    7c:84:dc:33:0e:6f:cf:c4:10:c6:a8:4b:58:b4:4c:
                    06:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F1:70:6C:FC:87:A3:B4:5B:AA:55:03:47:B6:93:3B:29:B7:18:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/61f6db00-8a0a-3f1b-b482-2637a39c934a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84/6eb3f683-5247-4c55-a10b-2184f26c4f84.crl

            X509v3 Authority Key Identifier:
                keyid:67:73:D9:FB:48:23:BB:2A:CE:EF:C6:41:5B:9D:04:68:29:68:AB:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6eb3f683-5247-4c55-a10b-2184f26c4f84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  94.140.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:f2:b7:52:c0:d9:7c:34:e5:a1:5f:d7:c3:d9:7f:ef:11:1f:
         7e:06:a7:a8:a9:4b:a7:47:eb:e1:31:1a:53:ce:09:94:f9:6d:
         81:b5:b5:0d:84:1f:ac:a6:30:ff:0f:60:ee:88:c1:f6:6d:d3:
         bc:5e:19:74:27:4b:24:fc:c3:0e:6a:dc:ac:44:80:63:9e:5c:
         84:b4:0e:5e:f6:e6:4e:08:27:21:c0:d6:52:14:05:e9:86:51:
         7b:76:df:28:e3:22:ed:40:25:ed:f7:3f:cf:78:39:57:b5:70:
         0d:f0:d0:94:dd:06:55:97:cf:59:cf:62:2e:5b:12:6b:7f:0d:
         d8:c8:20:46:98:2d:49:29:78:98:0e:b7:3a:7d:ed:de:1e:6d:
         47:86:64:6d:b3:96:90:fe:96:4f:e3:8f:0f:91:21:bf:8d:9f:
         fd:2a:de:39:9c:99:2d:e4:f9:6d:96:e4:e9:7e:88:22:c4:ef:
         85:99:4e:59:89:d8:1b:06:c2:9a:29:fa:77:03:fc:95:cf:77:
         a6:2d:1c:88:13:83:0e:67:00:45:a0:24:b0:49:96:56:49:a7:
         f2:a5:a2:d5:75:df:b0:66:03:57:9b:af:49:c9:97:e2:38:72:
         40:76:91:ab:76:e1:67:9f:e3:38:c4:5e:b3:a0:e5:25:8e:5b:
         57:a8:56:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnfWmT9XPSl+ufuJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmViM2Y2ODMtNTI0Ny00YzU1LWExMGItMjE4NGYyNmM0
Zjg0MB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
MTNlM2E4OGItMzI2My00N2Q5LTk1NzgtMDRkYjgxZDM4ZTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouCPQ3/3Nvy4ELCmaGrbCuzgv9cN76LdJp/v
0bYsfNlQzSH17lHOS0hQkGbF5wKAwdF2+4YgGnKyvne6twlBAwJNC7QTNttYIxvu
2zonVnPoFpYcIvz3vNPnlsj/4ZjHMwwhzWsEg5RLX/znXZ3AF2RQT6cZTrN2zZ/T
tFokKeyYdt7vcS2/rQoIfqjS4UGgvuBiYpJjQt6M90pvXx60OtTodR0+mLN8aho1
hJD2CH7KQjjpFqgoQG1JWwtuvKbvdkHuIPh4iVj+1dC8ZyPOnnaOZNWrdzT16N7t
eeHOguPZA184c92kLKw4Lgw2ek58hNwzDm/PxBDGqEtYtEwGMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXxcGz8h6O0W6pVA0e2kzsptxinMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIz
ZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0ZjI2YzRmODQvNjFmNmRiMDAtOGEwYS0z
ZjFiLWI0ODItMjYzN2EzOWM5MzRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmViM2Y2ODMtNTI0Ny00YzU1LWEx
MGItMjE4NGYyNmM0Zjg0LzZlYjNmNjgzLTUyNDctNGM1NS1hMTBiLTIxODRmMjZj
NGY4NC5jcmwwHwYDVR0jBBgwFoAUZ3PZ+0gjuyrO78ZBW50EaCloq28wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZWIzZjY4My01MjQ3LTRjNTUtYTEwYi0yMTg0
ZjI2YzRmODQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBXowCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACzyt1LA2Xw05aFf18PZf+8RH34Gp6ipS6dH6+ExGlPOCZT5bYG1tQ2E
H6ymMP8PYO6IwfZt07xeGXQnSyT8ww5q3KxEgGOeXIS0Dl725k4IJyHA1lIUBemG
UXt23yjjIu1AJe33P894OVe1cA3w0JTdBlWXz1nPYi5bEmt/DdjIIEaYLUkpeJgO
tzp97d4ebUeGZG2zlpD+lk/jjw+RIb+Nn/0q3jmcmS3k+W2W5Ol+iCLE74WZTlmJ
2BsGwpop+ncD/JXPd6YtHIgTgw5nAEWgJLBJllZJp/KlotV137BmA1ebr0nJl+I4
ckB2kat24Wef4zjEXrOg5SWOW1eoVvc=
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:31:44 2025 by rpki-client