Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa
File:                     36e09f69-776d-39f7-a19d-ae914f03ad45.roa (raw, json)
Hash identifier:          ImGODT1cFSdCXw2hI14yXYaZDuu+3UibY5fjzPt9EB0=
Subject key identifier:   48:9E:FD:61:12:B4:C3:B3:12:C3:89:B8:0C:C8:11:AE:C9:12:5F:13
Certificate issuer:       /CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
Certificate serial:       010D0C9F4328584A411063E8BF90D77BA9E9B2C0
Authority key identifier: 8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     40124
IP address blocks:        130.51.94.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:63:e8:bf:90:d7:7b:a9:e9:b2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1d8c9167-e816-4834-8fcc-f8b0f93fe6a0
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=4b8270b9-8829-4ebf-ab1c-e23de528c92e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d5:cb:3d:84:5a:2a:67:5d:f8:dd:ec:15:ad:
                    96:9b:bf:7f:1d:7a:97:13:86:0e:25:f0:ba:11:fa:
                    49:42:ae:48:5b:73:fe:a5:40:df:01:38:94:b4:fa:
                    43:f1:86:39:d4:07:36:07:89:70:89:b9:bc:53:38:
                    c6:ab:6c:34:82:4a:15:8f:4b:3b:a2:ac:50:cf:ef:
                    0d:62:d4:63:e6:fa:09:65:90:b6:0c:aa:80:21:59:
                    7a:1e:e1:1c:a8:35:b6:22:47:e5:99:40:bd:1e:af:
                    6a:82:8d:e7:a3:5b:5e:56:08:ed:a7:8f:27:07:09:
                    cc:25:37:65:6a:f9:4a:e6:0f:ec:52:b5:fe:d3:01:
                    38:45:ec:df:a4:d9:dc:3b:0f:f8:db:29:e8:00:af:
                    cd:12:a0:b4:64:19:49:aa:86:23:c1:bb:80:19:2b:
                    6a:99:ae:8a:d5:a6:96:f6:61:f2:e4:f3:0f:24:a6:
                    9a:83:86:d9:72:a8:18:6d:62:56:89:9f:91:0a:d0:
                    ab:4d:4f:66:2e:23:b6:b4:5d:8b:1e:c0:09:0a:67:
                    29:a8:71:58:f2:d2:2f:6b:9e:19:46:2e:a4:cd:b4:
                    23:0c:4e:5e:f9:08:aa:5d:8d:d7:2e:a5:c3:9d:35:
                    7e:39:02:6c:70:84:2e:bd:d0:02:00:22:8e:98:73:
                    d7:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:9E:FD:61:12:B4:C3:B3:12:C3:89:B8:0C:C8:11:AE:C9:12:5F:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/36e09f69-776d-39f7-a19d-ae914f03ad45.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:66:59:66:BE:40:91:02:45:F8:94:B2:C8:4B:D3:E1:91:C7:0C:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1d8c9167-e816-4834-8fcc-f8b0f93fe6a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.51.94.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:91:00:fa:6d:f9:22:da:d9:a5:31:f2:ff:37:cd:b1:96:06:
         a5:b8:9a:55:b2:ad:c4:c2:4b:ac:0c:26:6e:a9:b7:83:d4:e5:
         10:0d:21:68:c8:53:52:0f:2f:de:2d:7e:9f:00:fe:e1:21:5a:
         56:05:20:aa:b3:78:0c:25:87:77:9f:fd:b4:16:f1:4e:a7:9e:
         13:4b:fe:33:4d:fc:ee:b5:e9:ef:3b:40:8b:df:81:e4:32:e5:
         23:2d:1f:67:d9:7a:eb:16:ff:ac:5d:e5:fd:cc:c9:d9:b3:e7:
         fd:3d:bf:b3:d4:1d:7d:f1:df:60:22:15:ea:50:34:e0:2f:f3:
         c3:bf:13:a7:3d:ce:86:96:23:0c:1f:ba:b7:01:0b:c8:a9:2e:
         7a:5b:8a:bb:da:37:40:1f:1d:f1:1b:f7:83:b8:ae:d1:f9:10:
         82:29:70:d4:8c:1e:bf:bc:3f:ce:58:a3:e7:90:28:2b:ae:2d:
         65:a8:0b:f1:12:5f:e3:5a:8b:5b:f5:d6:6b:cb:e2:19:e3:0f:
         c5:d3:58:db:6b:84:76:de:bc:b5:77:c5:d5:0c:1c:8b:4b:51:
         49:4c:fa:8c:73:87:04:3b:38:45:5c:8b:15:9c:34:08:71:8b:
         4f:91:eb:2f:3d:46:f5:19:74:3a:2e:d3:17:b8:59:ed:8f:eb:
         f8:20:28:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEGPov5DXe6npssAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWQ4YzkxNjctZTgxNi00ODM0LThmY2MtZjhiMGY5M2Zl
NmEwMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NGI4MjcwYjktODgyOS00ZWJmLWFiMWMtZTIzZGU1MjhjOTJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuNXLPYRaKmdd+N3sFa2Wm79/HXqXE4YOJfC6
EfpJQq5IW3P+pUDfATiUtPpD8YY51Ac2B4lwibm8UzjGq2w0gkoVj0s7oqxQz+8N
YtRj5voJZZC2DKqAIVl6HuEcqDW2IkflmUC9Hq9qgo3no1teVgjtp48nBwnMJTdl
avlK5g/sUrX+0wE4RezfpNncOw/42ynoAK/NEqC0ZBlJqoYjwbuAGStqma6K1aaW
9mHy5PMPJKaag4bZcqgYbWJWiZ+RCtCrTU9mLiO2tF2LHsAJCmcpqHFY8tIva54Z
Ri6kzbQjDE5e+QiqXY3XLqXDnTV+OQJscIQuvdACACKOmHPXkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEie/WEStMOzEsOJuAzIEa7JEl8TMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xZDhj
OTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIwZjkzZmU2YTAvMzZlMDlmNjktNzc2ZC0z
OWY3LWExOWQtYWU5MTRmMDNhZDQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMWQ4YzkxNjctZTgxNi00ODM0LThm
Y2MtZjhiMGY5M2ZlNmEwLzFkOGM5MTY3LWU4MTYtNDgzNC04ZmNjLWY4YjBmOTNm
ZTZhMC5jcmwwHwYDVR0jBBgwFoAUimZZZr5AkQJF+JSyyEvT4ZHHDMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xZDhjOTE2Ny1lODE2LTQ4MzQtOGZjYy1mOGIw
ZjkzZmU2YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgjNeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACGRAPpt+SLa2aUx8v83zbGWBqW4mlWyrcTCS6wMJm6pt4PU5RANIWjI
U1IPL94tfp8A/uEhWlYFIKqzeAwlh3ef/bQW8U6nnhNL/jNN/O616e87QIvfgeQy
5SMtH2fZeusW/6xd5f3Mydmz5/09v7PUHX3x32AiFepQNOAv88O/E6c9zoaWIwwf
urcBC8ipLnpbirvaN0AfHfEb94O4rtH5EIIpcNSMHr+8P85Yo+eQKCuuLWWoC/ES
X+Nai1v11mvL4hnjD8XTWNtrhHbevLV3xdUMHItLUUlM+oxzhwQ7OEVcixWcNAhx
i0+R6y89RvUZdDou0xe4We2P6/ggKGY=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:13:06 2025 by rpki-client