Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa
File:                     57c1f272-d40d-3157-8493-4276aeec2785.roa (raw, json)
Hash identifier:          leiMNmRn7yI8LizTCT7apwqjnDrfq6CuyUT9k2jVsbo=
Subject key identifier:   0C:2B:3E:2A:49:90:68:BD:2D:0F:8D:30:4E:BB:26:C0:63:6D:8A:B8
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F4328584AF0F1423326795AAD2CF1AA00
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa
Signing time:             Fri 22 Aug 2025 13:00:41 +0000
ROA not before:           Fri 22 Aug 2025 13:00:41 +0000
ROA not after:            Thu 20 Nov 2025 14:00:41 +0000
asID:                     20454
IP address blocks:        131.153.237.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:f0:f1:42:33:26:79:5a:ad:2c:f1:aa:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: Aug 22 13:00:41 2025 GMT
            Not After : Nov 20 14:00:41 2025 GMT
        Subject: CN=85f54b43-cea1-4f2e-b741-99b6c1d281d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f3:34:be:cf:0d:81:3e:4c:79:e3:0c:17:ae:
                    9f:5e:ce:cd:fe:14:76:f3:71:6d:41:de:1b:fa:7f:
                    09:6c:90:a9:e8:9f:e5:91:1b:6c:69:f6:31:9b:8d:
                    8e:10:58:3e:f3:0e:2a:68:7f:06:38:0c:c1:23:3a:
                    34:7e:d4:86:65:40:03:dc:48:8e:6b:25:89:c4:10:
                    27:53:ce:60:4f:59:1a:6e:29:5a:66:23:04:8e:1e:
                    5c:41:0e:74:6d:27:e7:bd:77:d4:7a:29:d2:c7:9a:
                    23:fc:b1:97:3f:d8:d8:49:f0:12:05:4c:9e:9b:8f:
                    01:ba:87:71:a0:f5:8a:f8:5e:5f:c6:6d:76:b1:ae:
                    cd:44:88:cb:07:a5:4b:aa:ba:50:1c:e3:7f:6d:62:
                    8d:f8:55:2b:d6:f7:ab:65:89:b7:35:14:9e:5d:83:
                    de:63:e5:c6:4b:dc:7e:c6:ca:b4:3a:aa:07:2c:45:
                    7c:87:e3:71:43:c8:5a:c8:65:fe:4b:ee:8b:89:7f:
                    bc:37:f4:72:72:0c:15:28:b8:72:d2:b2:ad:66:30:
                    de:79:24:92:74:de:a6:5e:67:87:ac:41:44:0d:3e:
                    6c:19:9b:ee:8b:e7:16:3e:56:f1:78:97:0b:07:06:
                    af:d2:64:4c:3e:0f:da:0f:ec:9e:6f:9e:a2:94:a1:
                    77:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:2B:3E:2A:49:90:68:BD:2D:0F:8D:30:4E:BB:26:C0:63:6D:8A:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/57c1f272-d40d-3157-8493-4276aeec2785.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.237.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:4a:f3:e0:62:d7:f2:ec:5b:d2:97:35:0f:f7:cf:9b:a0:7f:
         8c:33:db:66:8d:07:9b:54:82:20:ed:59:38:d7:b1:d7:4e:c8:
         51:a0:4f:a4:a8:8e:02:67:29:60:c6:39:64:24:07:4d:4b:27:
         c4:d4:00:ff:34:56:2d:e1:40:26:08:6a:fd:fe:b0:0a:84:50:
         64:d6:83:7b:ab:16:5a:4d:5c:f2:6e:3f:e7:6f:98:c2:fc:52:
         2c:d9:9b:2e:d9:c9:c9:00:24:9d:42:29:b7:19:a5:b0:13:fc:
         af:c4:59:32:5e:59:74:86:01:1c:33:c1:39:39:75:b7:51:77:
         5b:86:b8:02:52:df:ad:19:12:1b:3d:5c:14:e4:8c:2d:f0:ff:
         aa:7a:d8:50:70:a0:6d:8a:c1:68:ac:b3:0f:1c:0a:f7:e1:bf:
         01:71:42:7d:aa:93:73:4d:a7:1d:fe:86:ae:b5:27:26:07:21:
         d0:3e:98:e6:a4:bf:b5:05:31:c4:b7:7e:c4:41:b4:1c:e5:33:
         20:e4:8c:83:76:41:b2:f2:ed:68:eb:77:49:e3:48:8c:19:1d:
         61:f5:3f:bd:1c:70:8b:17:72:4f:34:bd:b3:3e:91:17:0a:63:
         e3:55:d3:02:4d:d0:f8:6e:ae:0f:09:4a:11:b8:65:9e:03:c7:
         e0:78:76:8a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErw8UIzJnlarSzxqgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDgyMjEzMDA0MVoXDTI1MTEyMDE0MDA0MVowLzEtMCsGA1UEAxMk
ODVmNTRiNDMtY2VhMS00ZjJlLWI3NDEtOTliNmMxZDI4MWQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzPM0vs8NgT5MeeMMF66fXs7N/hR283FtQd4b
+n8JbJCp6J/lkRtsafYxm42OEFg+8w4qaH8GOAzBIzo0ftSGZUAD3EiOayWJxBAn
U85gT1kabilaZiMEjh5cQQ50bSfnvXfUeinSx5oj/LGXP9jYSfASBUyem48Buodx
oPWK+F5fxm12sa7NRIjLB6VLqrpQHON/bWKN+FUr1verZYm3NRSeXYPeY+XGS9x+
xsq0OqoHLEV8h+NxQ8hayGX+S+6LiX+8N/RycgwVKLhy0rKtZjDeeSSSdN6mXmeH
rEFEDT5sGZvui+cWPlbxeJcLBwav0mRMPg/aD+yeb56ilKF3aQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwrPipJkGi9LQ+NME67JsBjbYq4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvNTdjMWYyNzItZDQwZC0z
MTU3LTg0OTMtNDI3NmFlZWMyNzg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5ntMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlK8+Bi1/LsW9KXNQ/3z5ugf4wz22aNB5tUgiDtWTjXsddOyFGgT6So
jgJnKWDGOWQkB01LJ8TUAP80Vi3hQCYIav3+sAqEUGTWg3urFlpNXPJuP+dvmML8
UizZmy7ZyckAJJ1CKbcZpbAT/K/EWTJeWXSGARwzwTk5dbdRd1uGuAJS360ZEhs9
XBTkjC3w/6p62FBwoG2KwWissw8cCvfhvwFxQn2qk3NNpx3+hq61JyYHIdA+mOak
v7UFMcS3fsRBtBzlMyDkjIN2QbLy7Wjrd0njSIwZHWH1P70ccIsXck80vbM+kRcK
Y+NV0wJN0Phurg8JShG4ZZ4Dx+B4doo=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:59:37 2025 by rpki-client