Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
File:                     38e8dd53-d61a-3a02-9e01-0813ec535a48.roa (raw, json)
Hash identifier:          U0yUqEt/OQlkxLBQg3/RAsEjaXZY46Ipik09MyeRFY0=
Subject key identifier:   31:D5:B6:D3:5C:53:C2:79:D5:CF:5B:0F:87:64:7A:48:60:7A:13:65
Certificate issuer:       /CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
Certificate serial:       010D0C9F4328584A3B7AF4CD93A37E853A15EDB8
Authority key identifier: 03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     6145
IP address blocks:        172.110.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7a:f4:cd:93:a3:7e:85:3a:15:ed:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6206bd0-e97f-4bc4-9e06-e1bb9b383624
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=c4abfac5-ac72-4fc1-a7ad-7dd74f2cb376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:b3:13:1d:ba:2c:08:9e:7f:a4:4c:2f:fb:c5:
                    0c:ca:7d:61:a9:b4:c0:ca:c7:31:13:f1:de:3f:86:
                    76:6f:6e:e7:7f:95:2e:c6:a6:41:4e:ce:34:be:d9:
                    49:b4:15:b0:fa:e0:62:8e:c0:2c:e7:3a:4d:f1:3c:
                    d7:3c:38:6f:4a:12:d7:d6:76:90:ad:22:d9:f3:b3:
                    f7:39:02:28:55:a9:8e:25:ad:db:c2:aa:4b:d1:2d:
                    72:a0:76:67:18:7e:4e:76:69:7e:ad:16:60:49:f5:
                    d4:22:6a:7f:d5:7d:9a:44:ba:1b:78:7c:dc:57:e1:
                    49:0a:61:c7:f8:9b:77:30:6b:47:58:bd:ab:5e:0b:
                    97:fe:24:e8:ea:27:8a:8e:f9:c5:c3:7d:a1:4b:78:
                    c8:c9:84:12:20:fd:3d:37:02:49:ca:6e:66:d3:ab:
                    b6:95:d3:97:ec:6e:ce:5f:de:98:56:6d:91:f2:68:
                    b0:d4:37:b8:f9:88:e6:7f:a4:a6:8c:ed:93:79:61:
                    1a:9e:33:86:1d:a1:f1:52:96:1e:c5:ea:b9:30:fd:
                    f6:c6:b5:47:48:46:42:27:a1:20:e8:c8:6e:24:c1:
                    ee:5b:9a:c2:57:d4:1f:93:bc:36:c1:b8:57:e8:d8:
                    01:0b:2d:e4:d8:df:fb:eb:60:24:92:0d:e9:07:a6:
                    51:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:D5:B6:D3:5C:53:C2:79:D5:CF:5B:0F:87:64:7A:48:60:7A:13:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/38e8dd53-d61a-3a02-9e01-0813ec535a48.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.crl

            X509v3 Authority Key Identifier:
                keyid:03:14:81:13:BC:3C:4E:71:F2:9D:DD:63:06:82:F4:78:1F:61:EF:9B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6206bd0-e97f-4bc4-9e06-e1bb9b383624.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.110.143.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4b:0c:9b:1d:5b:1b:8d:59:8e:cb:c8:3b:2f:6c:4c:da:37:d9:
         9b:43:f1:28:24:2e:b8:a3:e2:64:fe:ac:c3:00:93:f4:6b:20:
         2a:e2:58:bc:1d:b4:73:05:db:93:e1:52:aa:7c:7c:6d:94:a1:
         d6:ab:90:d8:38:df:dc:80:6f:64:1e:38:b9:b2:c5:cc:89:4c:
         c1:ae:a0:e1:16:19:0d:61:64:50:bb:2f:42:c2:ba:81:c9:51:
         18:6a:58:89:5b:6d:9d:05:ce:69:9b:fd:c6:9f:d6:8c:ca:40:
         cf:fb:91:f9:c2:38:d7:de:ac:b9:45:bc:0b:af:09:36:65:7a:
         ff:e5:05:84:1d:dd:ac:82:e4:43:11:41:65:42:91:d7:60:bc:
         5b:c1:7c:57:cd:66:c8:4b:8f:7f:10:85:da:52:55:cc:a1:24:
         f3:95:02:fe:2a:e9:7b:b2:04:f7:a1:ed:df:5e:90:37:60:c9:
         0f:9a:20:d0:33:75:22:a3:ab:0f:37:49:c5:e8:62:f5:f7:ba:
         7d:bf:8e:df:1e:48:45:01:a4:91:d4:2a:50:95:64:8c:7c:48:
         21:33:fb:90:05:3b:49:5d:19:6a:9e:cb:1c:cc:e9:2b:42:10:
         b3:8d:47:6f:d1:2b:cb:81:94:ca:f0:d1:30:98:40:e7:06:d8:
         45:c4:a2:05
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7evTNk6N+hToV7bgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTYyMDZiZDAtZTk3Zi00YmM0LTllMDYtZTFiYjliMzgz
NjI0MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
YzRhYmZhYzUtYWM3Mi00ZmMxLWE3YWQtN2RkNzRmMmNiMzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0rMTHbosCJ5/pEwv+8UMyn1hqbTAyscxE/He
P4Z2b27nf5UuxqZBTs40vtlJtBWw+uBijsAs5zpN8TzXPDhvShLX1naQrSLZ87P3
OQIoVamOJa3bwqpL0S1yoHZnGH5Odml+rRZgSfXUImp/1X2aRLobeHzcV+FJCmHH
+Jt3MGtHWL2rXguX/iTo6ieKjvnFw32hS3jIyYQSIP09NwJJym5m06u2ldOX7G7O
X96YVm2R8miw1De4+Yjmf6SmjO2TeWEanjOGHaHxUpYexeq5MP32xrVHSEZCJ6Eg
6MhuJMHuW5rCV9Qfk7w2wbhX6NgBCy3k2N/762Akkg3pB6ZRjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDHVttNcU8J51c9bD4dkekhgehNlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIw
NmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJiOWIzODM2MjQvMzhlOGRkNTMtZDYxYS0z
YTAyLTllMDEtMDgxM2VjNTM1YTQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTYyMDZiZDAtZTk3Zi00YmM0LTll
MDYtZTFiYjliMzgzNjI0L2E2MjA2YmQwLWU5N2YtNGJjNC05ZTA2LWUxYmI5YjM4
MzYyNC5jcmwwHwYDVR0jBBgwFoAUAxSBE7w8TnHynd1jBoL0eB9h75swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNjIwNmJkMC1lOTdmLTRiYzQtOWUwNi1lMWJi
OWIzODM2MjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArG6PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEsMmx1bG41ZjsvIOy9sTNo32ZtD8SgkLrij4mT+rMMAk/RrICriWLwd
tHMF25PhUqp8fG2UodarkNg439yAb2QeOLmyxcyJTMGuoOEWGQ1hZFC7L0LCuoHJ
URhqWIlbbZ0Fzmmb/caf1ozKQM/7kfnCONferLlFvAuvCTZlev/lBYQd3ayC5EMR
QWVCkddgvFvBfFfNZshLj38QhdpSVcyhJPOVAv4q6XuyBPeh7d9ekDdgyQ+aINAz
dSKjqw83ScXoYvX3un2/jt8eSEUBpJHUKlCVZIx8SCEz+5AFO0ldGWqeyxzM6StC
ELONR2/RK8uBlMrw0TCYQOcG2EXEogU=
-----END CERTIFICATE-----
Generated at Sun Jun 29 13:05:45 2025 by rpki-client