Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
File:                     086c1071-1294-3436-beef-cfe7cef951e5.roa (raw, json)
Hash identifier:          rc6nPmqCa+Kf/Y6KiP5YCRcmTlfinjWCsNKd65y1TGo=
Subject key identifier:   37:01:9D:47:FF:5C:FE:BA:F0:E0:FD:A2:4B:59:FC:B5:CB:37:80:82
Certificate issuer:       /CN=d45613e1-c70f-4ce1-996e-e01d89469087
Certificate serial:       010D0C9F4328584A480AE49C625326597D05C400
Authority key identifier: 34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     136796
IP address blocks:        141.140.3.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e4:9c:62:53:26:59:7d:05:c4:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d45613e1-c70f-4ce1-996e-e01d89469087
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=18553d52-b5ad-49a0-9827-daf65e968abf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:60:1c:3a:4b:e9:03:4e:73:f0:a4:21:0a:
                    18:a3:33:b4:98:17:5a:e2:87:40:e1:c9:01:fc:8c:
                    4c:38:13:c2:54:a9:de:24:7d:48:a6:fb:a1:63:15:
                    83:f5:2a:70:3c:4f:15:f0:5f:d3:06:2b:ce:ce:45:
                    3f:16:0f:b3:54:10:3c:5b:a9:54:e3:56:25:75:ca:
                    d3:d6:41:88:6f:b1:ac:5a:0e:dc:bb:89:10:84:bf:
                    95:d6:b5:d3:29:05:ee:29:9d:eb:9d:50:f4:b8:ca:
                    62:bd:24:d7:ed:a1:57:f3:df:4f:40:ef:b6:a9:8c:
                    fd:6c:96:f2:b0:90:67:b1:02:ff:4b:1c:cc:a5:31:
                    d7:c7:55:47:ce:9b:92:e5:75:04:7e:00:13:02:ab:
                    9a:75:d9:7b:02:ef:7f:71:d9:5b:eb:e0:4e:2d:ea:
                    0a:55:1d:7c:47:4e:48:fa:9b:91:a3:d0:58:bf:fc:
                    ea:f8:03:80:75:6c:e3:04:78:31:43:0a:6b:cb:6a:
                    79:b9:40:5e:61:f8:d6:ac:2f:78:8b:d2:87:be:1c:
                    5c:cf:8b:82:b2:8a:6f:ac:c4:54:db:11:46:af:43:
                    35:b0:52:ae:6a:4b:49:f9:78:b7:54:60:4b:69:87:
                    5e:fc:e3:87:f3:be:c0:c9:5d:cb:72:7b:58:cc:cf:
                    ce:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:01:9D:47:FF:5C:FE:BA:F0:E0:FD:A2:4B:59:FC:B5:CB:37:80:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/086c1071-1294-3436-beef-cfe7cef951e5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087/d45613e1-c70f-4ce1-996e-e01d89469087.crl

            X509v3 Authority Key Identifier:
                keyid:34:11:E1:2A:8A:E9:1F:1E:95:8C:83:80:FC:89:10:FE:BF:E6:B9:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d45613e1-c70f-4ce1-996e-e01d89469087.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.140.3.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:4a:d9:6b:23:f5:d2:a0:89:35:66:c8:e3:9d:8e:31:3c:
         22:0d:c3:82:3d:a1:db:00:4a:2c:d4:b7:22:68:8b:e0:25:8f:
         ea:0c:6b:7c:57:12:87:2c:29:27:f2:a4:7f:ff:0c:d8:c2:e6:
         0b:0c:ee:33:8e:5e:28:a0:b8:11:7e:16:db:06:26:11:ec:66:
         19:8c:3f:6b:15:0c:be:e5:b7:03:6a:06:5a:18:a2:4d:c4:b0:
         e0:19:39:22:b2:00:29:65:33:f8:66:57:68:7d:a8:5b:46:68:
         46:8b:1f:e8:48:b4:d7:d9:8c:38:16:2c:b2:6d:a2:15:a5:5e:
         d4:67:05:8d:dd:1e:32:7c:ac:8e:11:2a:14:cb:7b:88:b1:f0:
         32:62:65:04:7e:e2:e4:43:a3:bb:18:a5:76:ab:15:02:13:06:
         06:e0:1f:76:f9:4a:ba:4f:47:56:d7:4e:19:d9:44:3a:e7:f5:
         03:0a:91:53:d2:44:e2:77:c4:4d:d3:44:18:fc:33:69:40:03:
         da:35:98:a2:d3:ec:1c:0d:76:93:56:b0:12:e3:48:e2:27:6c:
         68:cd:29:a9:9c:e8:91:9a:fb:5e:9d:fc:fc:e8:f8:5b:b1:3f:
         25:45:23:19:f0:1d:bd:0e:18:e0:22:01:b4:83:5d:ff:45:66:
         d4:fd:72:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuScYlMmWX0FxAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQ1NjEzZTEtYzcwZi00Y2UxLTk5NmUtZTAxZDg5NDY5
MDg3MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MTg1NTNkNTItYjVhZC00OWEwLTk4MjctZGFmNjVlOTY4YWJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmBNgHDpL6QNOc/CkIQoYozO0mBda4odA4ckB
/IxMOBPCVKneJH1IpvuhYxWD9SpwPE8V8F/TBivOzkU/Fg+zVBA8W6lU41YldcrT
1kGIb7GsWg7cu4kQhL+V1rXTKQXuKZ3rnVD0uMpivSTX7aFX899PQO+2qYz9bJby
sJBnsQL/SxzMpTHXx1VHzpuS5XUEfgATAquaddl7Au9/cdlb6+BOLeoKVR18R05I
+puRo9BYv/zq+AOAdWzjBHgxQwpry2p5uUBeYfjWrC94i9KHvhxcz4uCsopvrMRU
2xFGr0M1sFKuaktJ+Xi3VGBLaYde/OOH877AyV3LcntYzM/OywIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDcBnUf/XP668OD9oktZ/LXLN4CCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2
MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFkODk0NjkwODcvMDg2YzEwNzEtMTI5NC0z
NDM2LWJlZWYtY2ZlN2NlZjk1MWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDQ1NjEzZTEtYzcwZi00Y2UxLTk5
NmUtZTAxZDg5NDY5MDg3L2Q0NTYxM2UxLWM3MGYtNGNlMS05OTZlLWUwMWQ4OTQ2
OTA4Ny5jcmwwHwYDVR0jBBgwFoAUNBHhKorpHx6VjIOA/IkQ/r/mucMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNDU2MTNlMS1jNzBmLTRjZTEtOTk2ZS1lMDFk
ODk0NjkwODcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjYwDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALSZStlrI/XSoIk1ZsjjnY4xPCINw4I9odsASizUtyJoi+Alj+oMa3xX
EocsKSfypH//DNjC5gsM7jOOXiiguBF+FtsGJhHsZhmMP2sVDL7ltwNqBloYok3E
sOAZOSKyACllM/hmV2h9qFtGaEaLH+hItNfZjDgWLLJtohWlXtRnBY3dHjJ8rI4R
KhTLe4ix8DJiZQR+4uRDo7sYpXarFQITBgbgH3b5SrpPR1bXThnZRDrn9QMKkVPS
ROJ3xE3TRBj8M2lAA9o1mKLT7BwNdpNWsBLjSOInbGjNKamc6JGa+16d/Pzo+Fux
PyVFIxnwHb0OGOAiAbSDXf9FZtT9cmk=
-----END CERTIFICATE-----
Generated at Sun Jun 29 17:45:53 2025 by rpki-client