Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
File:                     7c536253-c814-35e2-bf82-bf97bfbe568b.roa (raw, json)
Hash identifier:          mknCD9RP2noFkG3HZ86Q7W0quFAlTnCnMRRweOqsGk4=
Subject key identifier:   2E:D7:78:E6:83:76:8B:62:47:3F:0F:73:AD:8A:0A:A5:58:82:20:0A
Certificate issuer:       /CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
Certificate serial:       010D0C9F4328584A3AC841FA967D9788EEBDB480
Authority key identifier: 46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa
Signing time:             Wed 18 Jun 2025 07:01:08 +0000
ROA not before:           Wed 18 Jun 2025 07:01:08 +0000
ROA not after:            Tue 16 Sep 2025 07:01:08 +0000
asID:                     9304
IP address blocks:        107.158.86.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:c8:41:fa:96:7d:97:88:ee:bd:b4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f8ef12e-8953-4380-b16d-28ba2aa15c17
        Validity
            Not Before: Jun 18 07:01:08 2025 GMT
            Not After : Sep 16 07:01:08 2025 GMT
        Subject: CN=5ed258f6-84ab-4b58-a2b0-acb4ae03da53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e1:f2:55:c9:6b:13:28:44:67:0e:66:83:95:
                    fb:7d:b8:8f:f6:1b:e3:ce:13:d6:9e:a9:38:a9:e5:
                    61:37:b5:3a:24:67:c5:11:d6:8b:69:ab:1f:3e:27:
                    1a:5d:bd:02:6c:0b:a3:ca:66:ca:b8:ca:b1:a5:0b:
                    36:ed:36:5d:5c:6f:c3:f5:d0:0c:8e:a0:bb:a6:9a:
                    a3:1c:61:66:71:f3:35:3a:55:69:ef:d1:6a:f0:73:
                    53:bf:12:19:c4:3e:1b:df:18:83:19:e8:2d:94:de:
                    f4:89:f7:e4:ed:94:3b:a0:60:ce:f2:89:56:04:96:
                    74:91:a2:8c:39:36:1d:d0:ea:a3:be:f0:ae:58:7e:
                    f0:dc:85:a6:33:34:78:4e:3b:43:1a:e9:f3:77:fa:
                    15:ae:21:41:a1:4e:b4:a2:ab:d4:22:41:b8:7f:7e:
                    3a:8b:35:f1:83:e8:0d:1a:0c:dd:99:99:33:e0:6f:
                    c3:90:69:06:93:92:fb:7e:cb:c4:c1:48:53:4c:86:
                    18:6d:9c:84:1a:4f:d2:70:f5:ea:16:67:87:b7:20:
                    be:bd:d6:7c:4c:53:2b:ba:60:86:08:01:ff:c8:b7:
                    22:93:c5:c2:df:0b:28:59:1d:19:7d:ca:b9:b9:b1:
                    3f:43:da:e9:f1:fc:6a:7e:52:92:6e:2f:a3:60:f8:
                    2e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:D7:78:E6:83:76:8B:62:47:3F:0F:73:AD:8A:0A:A5:58:82:20:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/7c536253-c814-35e2-bf82-bf97bfbe568b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17/3f8ef12e-8953-4380-b16d-28ba2aa15c17.crl

            X509v3 Authority Key Identifier:
                keyid:46:60:F1:FC:80:0B:12:46:E0:BA:E2:A2:D2:D6:AB:2E:D1:50:54:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3f8ef12e-8953-4380-b16d-28ba2aa15c17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.158.86.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:7b:c6:10:20:e3:f4:81:48:f7:f4:45:21:d7:df:73:eb:a5:
         80:51:c2:a7:64:da:04:0f:36:01:c0:9b:d4:49:22:60:3d:13:
         7a:ce:9b:78:b0:64:fb:e0:14:42:a4:8d:5c:5b:d4:bc:01:ca:
         a6:95:8c:73:d9:41:2f:af:58:90:4a:3e:71:c1:01:d2:30:ef:
         bb:a6:51:ad:c4:62:ea:ce:58:61:dc:6c:c4:ab:51:02:41:35:
         f9:dc:61:e7:5f:8f:cf:a2:68:9a:35:5a:cd:f3:47:bc:80:3d:
         3e:a4:36:17:df:e0:e8:a9:15:93:48:e3:d5:f1:e2:8c:73:e0:
         31:89:18:ef:20:12:e4:a4:be:dd:be:71:a3:40:e3:56:26:74:
         32:c3:a1:5a:82:c4:b1:de:36:d7:80:83:0d:c4:59:e3:ab:4e:
         41:82:29:62:6b:a6:64:c0:3c:87:a3:e7:67:6a:ce:f1:db:f8:
         5a:54:16:11:1d:ca:d8:64:af:4f:81:28:b1:57:c0:6b:0f:8e:
         e2:0d:38:53:de:2f:32:c1:dd:73:9b:d1:6d:1a:43:30:38:99:
         07:46:98:3a:01:2c:ec:26:53:6f:7f:08:ea:fb:ed:c3:38:d8:
         e7:7c:78:be:70:79:7b:cb:d8:87:93:2c:a8:43:fe:7a:f7:f5:
         5c:08:d3:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6yEH6ln2XiO69tIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y4ZWYxMmUtODk1My00MzgwLWIxNmQtMjhiYTJhYTE1
YzE3MB4XDTI1MDYxODA3MDEwOFoXDTI1MDkxNjA3MDEwOFowLzEtMCsGA1UEAxMk
NWVkMjU4ZjYtODRhYi00YjU4LWEyYjAtYWNiNGFlMDNkYTUzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAouHyVclrEyhEZw5mg5X7fbiP9hvjzhPWnqk4
qeVhN7U6JGfFEdaLaasfPicaXb0CbAujymbKuMqxpQs27TZdXG/D9dAMjqC7ppqj
HGFmcfM1OlVp79Fq8HNTvxIZxD4b3xiDGegtlN70iffk7ZQ7oGDO8olWBJZ0kaKM
OTYd0OqjvvCuWH7w3IWmMzR4TjtDGunzd/oVriFBoU60oqvUIkG4f346izXxg+gN
GgzdmZkz4G/DkGkGk5L7fsvEwUhTTIYYbZyEGk/ScPXqFmeHtyC+vdZ8TFMrumCG
CAH/yLcik8XC3wsoWR0Zfcq5ubE/Q9rp8fxqflKSbi+jYPguBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC7XeOaDdotiRz8Pc62KCqVYgiAKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhl
ZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJhMmFhMTVjMTcvN2M1MzYyNTMtYzgxNC0z
NWUyLWJmODItYmY5N2JmYmU1NjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2Y4ZWYxMmUtODk1My00MzgwLWIx
NmQtMjhiYTJhYTE1YzE3LzNmOGVmMTJlLTg5NTMtNDM4MC1iMTZkLTI4YmEyYWEx
NWMxNy5jcmwwHwYDVR0jBBgwFoAURmDx/IALEkbguuKi0tarLtFQVHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zZjhlZjEyZS04OTUzLTQzODAtYjE2ZC0yOGJh
MmFhMTVjMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAa55WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC97xhAg4/SBSPf0RSHX33PrpYBRwqdk2gQPNgHAm9RJImA9E3rOm3iw
ZPvgFEKkjVxb1LwByqaVjHPZQS+vWJBKPnHBAdIw77umUa3EYurOWGHcbMSrUQJB
NfncYedfj8+iaJo1Ws3zR7yAPT6kNhff4OipFZNI49Xx4oxz4DGJGO8gEuSkvt2+
caNA41YmdDLDoVqCxLHeNteAgw3EWeOrTkGCKWJrpmTAPIej52dqzvHb+FpUFhEd
ythkr0+BKLFXwGsPjuINOFPeLzLB3XOb0W0aQzA4mQdGmDoBLOwmU29/COr77cM4
2Od8eL5weXvL2IeTLKhD/nr39VwI0zE=
-----END CERTIFICATE-----
Generated at Tue Jul 1 01:00:47 2025 by rpki-client