Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
File:                     8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa (raw, json)
Hash identifier:          l5JdYBg+t99czQMctdvwvdp+hIe4Wjwcr7sFVzG42GA=
Subject key identifier:   F1:F5:48:4D:05:7A:BD:6C:41:2A:44:A2:B2:ED:B1:04:17:30:21:D3
Certificate issuer:       /CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
Certificate serial:       010D0C9F4328584A4F05C8CAD05B31D89050F680
Authority key identifier: C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        167.234.36.0/24 maxlen: 24
                          203.2.198.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:c8:ca:d0:5b:31:d8:90:50:f6:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9bd201b-ca94-46d6-909a-8b5b404b5361
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=95d235d6-66be-432d-8959-5d492ad94c51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:15:21:9f:5d:23:8f:d9:78:8d:ea:55:4f:
                    e5:06:6f:1d:6c:c0:88:3a:42:6d:f0:11:b4:bf:d3:
                    46:30:88:97:e7:d9:29:bc:7e:7a:46:8e:50:e0:53:
                    6e:39:ca:9e:f1:2d:d2:49:c0:d0:a3:36:0c:97:0b:
                    53:aa:2d:77:7b:1a:93:2c:cd:bd:d5:38:41:80:57:
                    28:14:ca:26:db:90:82:60:cc:6f:1c:4f:fa:8f:20:
                    fc:3f:ac:30:8b:e0:62:fe:99:7a:c4:fd:36:9f:2b:
                    6f:6c:7c:cd:53:d1:48:2a:fa:7f:59:73:d3:0c:99:
                    e1:da:18:6a:79:16:19:c4:7a:79:eb:8c:e5:88:aa:
                    2f:d6:e2:da:f5:6c:3b:56:0d:13:b0:fe:03:8d:66:
                    a5:0a:ca:22:6f:76:c9:b6:32:48:75:40:a1:4d:97:
                    b7:c3:d5:5d:53:eb:dd:da:1a:70:fd:4d:3b:da:7c:
                    52:ef:b8:70:8f:05:3e:47:08:73:72:f2:c5:b4:14:
                    12:5c:ec:f8:ed:71:3f:81:b7:fc:88:bd:51:73:50:
                    b4:e5:ac:24:4c:68:84:09:b2:58:b8:9d:2a:b4:40:
                    71:43:c2:a0:4f:e7:58:3e:cf:bf:b1:16:58:6f:ea:
                    55:0e:bb:70:20:96:a9:b4:a9:8a:03:ed:15:6b:0f:
                    7e:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:F5:48:4D:05:7A:BD:6C:41:2A:44:A2:B2:ED:B1:04:17:30:21:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/8e59df19-4b17-39e9-a2fd-5ff836dcaefa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361/c9bd201b-ca94-46d6-909a-8b5b404b5361.crl

            X509v3 Authority Key Identifier:
                keyid:C1:37:E1:2C:4B:93:7F:A6:0B:9F:11:5A:AF:E9:9D:62:F4:85:22:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c9bd201b-ca94-46d6-909a-8b5b404b5361.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.234.36.0/24
                  203.2.198.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:4b:68:cd:aa:2d:f1:e6:d7:09:16:81:f5:3f:73:da:93:31:
         93:4e:a1:15:5b:aa:9e:7b:19:a9:0f:90:71:c7:cd:2f:ac:b5:
         fa:a1:b3:80:8e:72:f9:0e:d4:49:ae:52:11:a1:fb:a0:3c:8c:
         e4:37:3b:fe:aa:00:48:43:cb:75:d1:ef:9c:b0:50:e0:27:f3:
         de:ff:04:94:37:4b:e1:34:ec:50:ea:cc:15:b9:a9:3e:56:8e:
         13:a1:83:4a:b8:d4:96:34:cd:86:6a:f2:b1:f3:4f:b5:16:d8:
         56:77:a2:b7:9d:8f:8a:e3:96:9f:52:a6:c2:5d:ed:39:10:0d:
         66:02:37:9e:9b:8c:ef:b0:f2:55:95:c9:c1:14:1c:1e:96:93:
         f2:3c:25:67:1a:1c:c5:8a:f7:05:60:17:79:0d:99:05:87:96:
         09:8e:40:53:1f:8c:ed:4e:c1:81:ab:2d:12:ff:49:c9:94:72:
         18:2e:11:06:49:24:61:92:bc:16:77:fd:ca:42:1f:71:f9:3d:
         f0:d6:29:c9:5a:29:c1:5e:ea:86:56:49:0b:70:23:a1:00:fe:
         aa:14:14:90:31:b3:c7:c6:3b:ba:e5:8e:ad:73:f7:90:31:0d:
         d3:8a:97:0b:d0:c8:64:12:87:e2:08:24:a6:bf:e3:22:ee:7a:
         5c:89:1a:c0
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpPBcjK0Fsx2JBQ9oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzliZDIwMWItY2E5NC00NmQ2LTkwOWEtOGI1YjQwNGI1
MzYxMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
OTVkMjM1ZDYtNjZiZS00MzJkLTg5NTktNWQ0OTJhZDk0YzUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkHkVIZ9dI4/ZeI3qVU/lBm8dbMCIOkJt8BG0
v9NGMIiX59kpvH56Ro5Q4FNuOcqe8S3SScDQozYMlwtTqi13exqTLM291ThBgFco
FMom25CCYMxvHE/6jyD8P6wwi+Bi/pl6xP02nytvbHzNU9FIKvp/WXPTDJnh2hhq
eRYZxHp564zliKov1uLa9Ww7Vg0TsP4DjWalCsoib3bJtjJIdUChTZe3w9VdU+vd
2hpw/U072nxS77hwjwU+RwhzcvLFtBQSXOz47XE/gbf8iL1Rc1C05awkTGiECbJY
uJ0qtEBxQ8KgT+dYPs+/sRZYb+pVDrtwIJaptKmKA+0Vaw9+DQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPH1SE0Fer1sQSpEorLtsQQXMCHTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jOWJk
MjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjViNDA0YjUzNjEvOGU1OWRmMTktNGIxNy0z
OWU5LWEyZmQtNWZmODM2ZGNhZWZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzliZDIwMWItY2E5NC00NmQ2LTkw
OWEtOGI1YjQwNGI1MzYxL2M5YmQyMDFiLWNhOTQtNDZkNi05MDlhLThiNWI0MDRi
NTM2MS5jcmwwHwYDVR0jBBgwFoAUwTfhLEuTf6YLnxFar+mdYvSFIgMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jOWJkMjAxYi1jYTk0LTQ2ZDYtOTA5YS04YjVi
NDA0YjUzNjEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAp+okAwQA
ywLGMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAEdLaM2qLfHm1wkWgfU/c9qTMZNOoRVbqp57GakPkHHHzS+s
tfqhs4COcvkO1EmuUhGh+6A8jOQ3O/6qAEhDy3XR75ywUOAn897/BJQ3S+E07FDq
zBW5qT5WjhOhg0q41JY0zYZq8rHzT7UW2FZ3oredj4rjlp9SpsJd7TkQDWYCN56b
jO+w8lWVycEUHB6Wk/I8JWcaHMWK9wVgF3kNmQWHlgmOQFMfjO1OwYGrLRL/ScmU
chguEQZJJGGSvBZ3/cpCH3H5PfDWKclaKcFe6oZWSQtwI6EA/qoUFJAxs8fGO7rl
jq1z95AxDdOKlwvQyGQSh+IIJKa/4yLuelyJGsA=
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:32:40 2025 by rpki-client