Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
File:                     b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa (raw, json)
Hash identifier:          2qvV0TDUFxP8WTtL3GrWKw46Tn0BTkVfiV6uJ/3SIH4=
Subject key identifier:   50:51:5C:FF:FE:E2:D2:1F:2E:2E:3A:C6:F3:8B:7D:BA:C7:7E:7C:ED
Certificate issuer:       /CN=61939bbc-e50f-4ced-8482-e7c4008e3583
Certificate serial:       010D0C9F4328584A4F05CD1ED98A88BB93BF95C0
Authority key identifier: 3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     397453
IP address blocks:        45.138.164.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:cd:1e:d9:8a:88:bb:93:bf:95:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61939bbc-e50f-4ced-8482-e7c4008e3583
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=02932dbb-7a48-418c-9f88-8cb930d982c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a2:fd:fe:7f:20:d3:8a:82:ac:03:16:d0:46:
                    c6:8b:cd:8c:0f:55:d0:2f:c3:40:11:2a:09:9a:29:
                    7b:18:55:73:ac:c4:7b:d6:1b:66:ce:e3:37:31:9a:
                    b2:26:9d:16:74:d1:b4:01:95:00:42:f7:3b:43:26:
                    a8:3a:2d:59:39:cc:0d:d5:c5:e5:02:56:3d:04:67:
                    9b:43:0a:2f:98:be:ed:df:ce:ba:97:84:7b:1b:d6:
                    c0:0d:69:65:d4:a8:6b:6e:8e:cb:66:e7:87:b8:08:
                    2e:2e:13:0e:af:ea:36:7c:83:02:73:42:44:e7:29:
                    80:63:74:f8:d5:8d:53:cf:0d:d6:a3:31:58:62:8d:
                    f3:71:eb:98:c8:39:f4:32:73:1e:dd:54:9f:fe:63:
                    37:df:57:9e:e9:41:e1:17:1a:b3:ad:06:c8:a3:7b:
                    c7:7c:82:ae:92:9b:9e:a0:c2:9c:50:13:11:ed:04:
                    31:4b:d2:c4:ae:dc:a2:e4:fe:d6:94:59:bf:57:66:
                    97:c0:bf:4e:58:62:47:cf:10:9b:26:71:0e:9f:48:
                    f1:03:df:cd:e7:09:fe:5d:10:b4:f6:4e:74:fd:dd:
                    39:6b:4f:43:f2:71:01:6f:2a:25:74:ee:0f:3b:44:
                    dc:08:84:30:cf:e6:6a:35:15:72:a8:e3:b6:a1:fa:
                    1a:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:51:5C:FF:FE:E2:D2:1F:2E:2E:3A:C6:F3:8B:7D:BA:C7:7E:7C:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/b6d7cd18-984c-3f83-987a-1b5fea3f909c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583/61939bbc-e50f-4ced-8482-e7c4008e3583.crl

            X509v3 Authority Key Identifier:
                keyid:3F:8D:F8:51:B6:E3:53:FA:6A:C1:CF:4A:DD:0E:91:CE:C3:DE:49:16

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/61939bbc-e50f-4ced-8482-e7c4008e3583.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.138.164.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:20:82:9a:fd:f5:12:23:45:78:bc:eb:05:78:19:6d:41:af:
         0b:ad:38:9e:05:d6:3a:59:a9:5c:ba:54:05:79:63:eb:56:13:
         4b:e7:73:8b:ba:ec:4d:f4:5c:ec:ca:51:ff:d8:0a:bb:d6:67:
         0e:64:ee:65:b1:1a:33:01:19:a4:27:c7:5b:51:f2:73:6e:b5:
         ae:a2:d2:ef:f2:a0:d5:af:1c:49:dd:aa:21:a6:fd:89:41:32:
         4d:30:6c:34:71:a4:65:ac:33:9b:a7:db:a0:ce:80:9e:f9:ac:
         0a:ed:5d:93:fe:4c:fe:53:f8:9c:6c:d2:57:33:09:7d:34:21:
         36:8d:b7:61:ef:3a:4d:6d:ce:7f:5a:e6:ec:10:ca:07:f3:44:
         0f:ea:82:d8:99:5b:fa:ea:3f:c0:af:f3:58:fc:65:e9:3c:22:
         c0:1d:4c:c6:44:5e:64:87:c0:75:a5:25:99:26:29:cb:1d:ab:
         72:04:d2:26:fb:6e:af:1a:46:70:44:4e:ee:26:e0:58:d0:ed:
         0d:b4:0d:3c:8a:51:24:7f:fb:32:5a:bf:81:f0:b8:25:df:ce:
         0f:28:33:22:f9:bb:dc:78:8d:19:b0:cb:60:10:7b:a7:23:f7:
         29:72:c8:52:62:da:6c:f3:29:10:73:f6:cd:7c:80:d4:8b:2c:
         0c:43:e9:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc0e2YqIu5O/lcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE5MzliYmMtZTUwZi00Y2VkLTg0ODItZTdjNDAwOGUz
NTgzMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
MDI5MzJkYmItN2E0OC00MThjLTlmODgtOGNiOTMwZDk4MmMxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6L9/n8g04qCrAMW0EbGi82MD1XQL8NAESoJ
mil7GFVzrMR71htmzuM3MZqyJp0WdNG0AZUAQvc7QyaoOi1ZOcwN1cXlAlY9BGeb
QwovmL7t3866l4R7G9bADWll1Khrbo7LZueHuAguLhMOr+o2fIMCc0JE5ymAY3T4
1Y1Tzw3WozFYYo3zceuYyDn0MnMe3VSf/mM331ee6UHhFxqzrQbIo3vHfIKukpue
oMKcUBMR7QQxS9LErtyi5P7WlFm/V2aXwL9OWGJHzxCbJnEOn0jxA9/N5wn+XRC0
9k50/d05a09D8nEBbyoldO4PO0TcCIQwz+ZqNRVyqOO2ofoarQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFBRXP/+4tIfLi46xvOLfbrHfnztMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS82MTkz
OWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0MDA4ZTM1ODMvYjZkN2NkMTgtOTg0Yy0z
ZjgzLTk4N2EtMWI1ZmVhM2Y5MDljLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvNjE5MzliYmMtZTUwZi00Y2VkLTg0
ODItZTdjNDAwOGUzNTgzLzYxOTM5YmJjLWU1MGYtNGNlZC04NDgyLWU3YzQwMDhl
MzU4My5jcmwwHwYDVR0jBBgwFoAUP434UbbjU/pqwc9K3Q6RzsPeSRYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS82MTkzOWJiYy1lNTBmLTRjZWQtODQ4Mi1lN2M0
MDA4ZTM1ODMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCLYqkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHUggpr99RIjRXi86wV4GW1BrwutOJ4F1jpZqVy6VAV5Y+tWE0vnc4u6
7E30XOzKUf/YCrvWZw5k7mWxGjMBGaQnx1tR8nNuta6i0u/yoNWvHEndqiGm/YlB
Mk0wbDRxpGWsM5un26DOgJ75rArtXZP+TP5T+Jxs0lczCX00ITaNt2HvOk1tzn9a
5uwQygfzRA/qgtiZW/rqP8Cv81j8Zek8IsAdTMZEXmSHwHWlJZkmKcsdq3IE0ib7
bq8aRnBETu4m4FjQ7Q20DTyKUSR/+zJav4HwuCXfzg8oMyL5u9x4jRmwy2AQe6cj
9ylyyFJi2mzzKRBz9s18gNSLLAxD6Xs=
-----END CERTIFICATE-----
Generated at Tue Jul 1 05:13:02 2025 by rpki-client