Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
File:                     f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa (raw, json)
Hash identifier:          Af/VBH5UdfhIov97i7ymBKRxbun7fbjSg/YjCwCWe+w=
Subject key identifier:   52:BC:08:24:40:3E:40:E9:3B:A4:78:0E:45:A8:17:BD:BF:FA:33:E2
Certificate issuer:       /CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
Certificate serial:       010D0C9F43285849F17FB5A325DA5311881BF100
Authority key identifier: 34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     399871
IP address blocks:        45.45.184.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b5:a3:25:da:53:11:88:1b:f1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b05e76f8-7e37-4663-ae5f-9f03054cfe92
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=a9e0e24d-daa2-4e88-a9b5-23e38e6c793e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:98:6c:c8:04:25:74:d1:39:b1:35:76:31:2d:
                    fc:fb:1a:7d:5d:0d:42:95:a2:5d:6c:24:b2:fe:29:
                    45:84:2f:66:75:62:53:e6:ca:d7:f9:6f:f6:3a:08:
                    c9:87:e3:b7:40:33:2d:19:52:a7:2a:40:17:e3:17:
                    64:0f:a2:6b:5f:39:c2:8f:b8:d5:bd:23:cb:ea:35:
                    4f:6c:bf:61:45:42:7e:70:74:f0:f9:e7:c6:ef:58:
                    d9:fb:b4:be:7b:e2:93:5b:22:8d:b5:d3:dd:1f:9c:
                    d8:a5:96:e1:14:bb:f1:fb:e8:d4:44:77:2d:e7:d0:
                    0d:7d:dc:18:ed:13:cb:df:98:96:bd:88:0c:31:d4:
                    e0:b7:eb:7a:b3:47:5e:bb:c5:38:26:09:cc:36:75:
                    a3:f9:ee:e0:96:3c:2e:b8:f4:d3:a4:f0:d3:ac:35:
                    1a:fa:c4:80:57:10:02:06:83:d2:b9:31:3f:26:92:
                    ac:3c:3d:37:85:be:8c:cc:8e:4d:ae:34:30:6a:c2:
                    21:65:d5:b3:9e:1f:8f:3d:c7:48:4a:0e:98:0a:81:
                    9d:74:7c:e9:c4:96:cf:b3:67:15:19:24:b8:40:fa:
                    db:55:d5:59:e8:58:49:6b:59:ec:71:5c:59:99:da:
                    b6:10:03:0d:8d:39:aa:1e:a1:b8:72:5d:b6:3d:53:
                    c5:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:08:24:40:3E:40:E9:3B:A4:78:0E:45:A8:17:BD:BF:FA:33:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/f9288161-5a04-3eb2-a7d4-9fdb78c58d1c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92/b05e76f8-7e37-4663-ae5f-9f03054cfe92.crl

            X509v3 Authority Key Identifier:
                keyid:34:D0:72:D6:CB:A5:9B:93:4E:96:2F:C0:50:7B:B3:F7:4A:A2:02:5D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b05e76f8-7e37-4663-ae5f-9f03054cfe92.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.45.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:f7:fa:1b:ff:af:1f:2f:8e:d7:43:6a:ce:db:50:c2:81:a6:
         fe:c1:a0:fc:ea:e5:0b:91:15:cf:7a:7a:81:58:40:9f:b2:08:
         4d:54:2e:5d:89:ad:99:e0:cd:c7:d4:80:88:bb:21:bb:e8:26:
         cc:d9:90:c5:4c:c3:6f:ce:0a:e6:c3:22:a8:bf:fb:99:ff:ab:
         92:c0:ea:bb:90:8e:f3:62:e9:2f:25:dd:a8:35:fe:b0:cb:85:
         0c:fd:f1:f1:5d:98:d8:10:1f:15:35:96:fb:55:78:1f:0f:d2:
         c0:13:2d:ea:98:8c:f3:cd:4a:de:a1:e9:3b:12:2d:7e:7a:86:
         7d:71:8d:96:8b:51:11:5b:66:69:8b:3f:1d:9d:08:82:13:1e:
         75:1c:95:96:57:7a:76:d5:b8:bd:a4:3f:38:2b:44:2b:56:e5:
         91:2d:6c:19:65:02:ec:37:3c:4c:b8:66:b7:c0:82:9e:86:64:
         3c:32:3f:c1:8a:06:04:3b:fe:78:3e:99:ea:b9:cc:05:a8:6d:
         2f:20:72:80:68:30:51:7e:86:6b:b0:74:e7:0c:82:3a:8f:39:
         5c:43:8d:0e:11:29:4d:44:0b:44:7a:f4:27:13:24:aa:c7:ba:
         92:0d:5a:a4:36:cf:6c:f0:ab:f9:54:ee:7b:a6:cd:76:ed:cc:
         52:06:86:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7WjJdpTEYgb8QAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjA1ZTc2ZjgtN2UzNy00NjYzLWFlNWYtOWYwMzA1NGNm
ZTkyMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YTllMGUyNGQtZGFhMi00ZTg4LWE5YjUtMjNlMzhlNmM3OTNlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7JhsyAQldNE5sTV2MS38+xp9XQ1ClaJdbCSy
/ilFhC9mdWJT5srX+W/2OgjJh+O3QDMtGVKnKkAX4xdkD6JrXznCj7jVvSPL6jVP
bL9hRUJ+cHTw+efG71jZ+7S+e+KTWyKNtdPdH5zYpZbhFLvx++jURHct59ANfdwY
7RPL35iWvYgMMdTgt+t6s0deu8U4JgnMNnWj+e7gljwuuPTTpPDTrDUa+sSAVxAC
BoPSuTE/JpKsPD03hb6MzI5NrjQwasIhZdWznh+PPcdISg6YCoGddHzpxJbPs2cV
GSS4QPrbVdVZ6FhJa1nscVxZmdq2EAMNjTmqHqG4cl22PVPFqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFK8CCRAPkDpO6R4DkWoF72/+jPiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDVl
NzZmOC03ZTM3LTQ2NjMtYWU1Zi05ZjAzMDU0Y2ZlOTIvZjkyODgxNjEtNWEwNC0z
ZWIyLWE3ZDQtOWZkYjc4YzU4ZDFjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjA1ZTc2ZjgtN2UzNy00NjYzLWFl
NWYtOWYwMzA1NGNmZTkyL2IwNWU3NmY4LTdlMzctNDY2My1hZTVmLTlmMDMwNTRj
ZmU5Mi5jcmwwHwYDVR0jBBgwFoAUNNBy1sulm5NOli/AUHuz90qiAl0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iMDVlNzZmOC03ZTM3LTQ2NjMtYWU1Zi05ZjAz
MDU0Y2ZlOTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLS24MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABz3+hv/rx8vjtdDas7bUMKBpv7BoPzq5QuRFc96eoFYQJ+yCE1ULl2J
rZngzcfUgIi7IbvoJszZkMVMw2/OCubDIqi/+5n/q5LA6ruQjvNi6S8l3ag1/rDL
hQz98fFdmNgQHxU1lvtVeB8P0sATLeqYjPPNSt6h6TsSLX56hn1xjZaLURFbZmmL
Px2dCIITHnUclZZXenbVuL2kPzgrRCtW5ZEtbBllAuw3PEy4ZrfAgp6GZDwyP8GK
BgQ7/ng+meq5zAWobS8gcoBoMFF+hmuwdOcMgjqPOVxDjQ4RKU1EC0R69CcTJKrH
upINWqQ2z2zwq/lU7numzXbtzFIGhrg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:09:42 2025 by rpki-client