Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/854345f4-6cbe-3d82-97c6-3bf99cbccb20.roa
File:                     854345f4-6cbe-3d82-97c6-3bf99cbccb20.roa (raw, json)
Hash identifier:          ITZri3hGTNO6w1EdYke8Y9dXo8VvuC9Sr5HpN8wMrh0=
Subject key identifier:   01:C7:66:69:DD:2A:B0:07:69:7F:D1:3E:BE:8D:9A:FD:E5:DA:16:13
Certificate issuer:       /CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
Certificate serial:       010D0C9F4328584A48843B1BE8362F674EA55580
Authority key identifier: 7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/854345f4-6cbe-3d82-97c6-3bf99cbccb20.roa
Signing time:             Mon 23 Jun 2025 05:05:24 +0000
ROA not before:           Mon 23 Jun 2025 05:05:24 +0000
ROA not after:            Sun 21 Sep 2025 05:05:24 +0000
asID:                     11808
IP address blocks:        129.101.71.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:84:3b:1b:e8:36:2f:67:4e:a5:55:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5f1a24bc-718c-4500-ad0b-a29f8b85d774
        Validity
            Not Before: Jun 23 05:05:24 2025 GMT
            Not After : Sep 21 05:05:24 2025 GMT
        Subject: CN=6c7daf9f-74b8-4e39-974a-b98e0e2a58e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:31:f5:5e:47:7c:8d:9e:88:7e:bd:1c:72:8f:
                    8d:c5:9c:0d:10:7b:3c:44:88:60:7b:f1:3b:dd:57:
                    a6:38:87:ff:e2:db:da:7a:61:ef:1c:df:12:c1:58:
                    a5:ba:5f:9d:3c:a6:6e:21:e1:3f:be:18:a7:2f:b5:
                    13:08:cf:4b:de:d8:40:be:9c:2f:fb:58:bc:72:4a:
                    ee:14:52:bb:6e:d9:ad:66:ea:3d:af:a4:be:30:a9:
                    d9:dd:1c:0b:af:39:94:bc:3c:c1:4a:80:58:5f:c5:
                    af:99:e6:45:54:da:69:f2:c0:8f:cd:dd:85:f8:d4:
                    db:75:b7:8b:fe:32:0e:5d:de:c1:08:77:83:f2:d4:
                    3a:b3:f2:00:1b:05:35:f5:6a:50:64:11:d4:e9:d1:
                    7c:23:22:ca:ab:27:82:0a:6b:c1:f0:87:a8:d0:dc:
                    5b:38:ce:76:c3:cc:6a:d0:a2:fc:61:d8:8c:94:3a:
                    df:39:75:cf:58:e1:21:af:a6:34:8d:1a:fa:9c:d6:
                    9a:f9:cf:ca:8e:d3:f6:8e:64:49:8b:46:6c:5d:ef:
                    46:6e:68:55:3a:0c:5d:7a:13:f7:d5:fe:3f:f9:37:
                    c2:de:8c:d7:f0:96:86:84:c9:cc:67:55:28:83:f2:
                    85:aa:46:f7:0f:19:77:35:bf:eb:e5:b0:18:96:b8:
                    b6:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:C7:66:69:DD:2A:B0:07:69:7F:D1:3E:BE:8D:9A:FD:E5:DA:16:13
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/854345f4-6cbe-3d82-97c6-3bf99cbccb20.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774/5f1a24bc-718c-4500-ad0b-a29f8b85d774.crl

            X509v3 Authority Key Identifier:
                keyid:7B:B1:48:2E:6D:78:D7:CB:6A:51:DC:75:C7:EE:CF:C3:29:3A:B3:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/5f1a24bc-718c-4500-ad0b-a29f8b85d774.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  129.101.71.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         55:e8:33:e6:55:29:11:30:98:c0:e0:ae:0d:8f:2d:d1:04:6e:
         3e:24:1c:ac:cb:90:01:b6:df:e1:7e:9d:06:df:48:b0:c7:85:
         21:a7:14:40:e8:93:49:b4:fd:af:36:ca:79:e7:33:fc:9a:02:
         27:14:d0:ac:97:87:84:7f:cf:17:fd:b6:ef:22:e1:96:39:2b:
         fa:a6:23:86:ad:47:de:27:71:85:f0:9d:8d:08:e5:73:3a:f2:
         66:9e:15:dc:b5:59:25:cd:50:e4:3d:87:24:e5:9b:ef:8d:22:
         7f:8a:4b:7b:87:b5:f4:be:4d:97:05:fe:04:e7:64:e8:9b:db:
         53:5a:83:4b:a3:4c:5a:84:a5:ca:80:b1:eb:0b:83:c7:de:94:
         1d:28:7a:67:09:97:a1:55:f4:e9:f8:fb:c0:7f:ca:7b:ef:28:
         18:ee:a8:b8:2c:fe:f4:ae:36:1d:c4:41:46:5f:ae:21:2a:e2:
         1f:da:da:ca:4a:22:7d:f1:6d:ae:52:31:bd:bc:a1:cc:b9:01:
         30:3f:15:ea:ca:82:7e:48:8d:91:bc:50:7e:aa:ed:aa:d6:d0:
         3d:e9:18:04:a9:07:13:53:91:64:a1:bf:64:25:ae:a3:02:77:
         6a:de:17:4d:d0:e6:23:9a:58:cb:0a:25:ec:f6:7d:b7:b1:04:
         a0:5a:dd:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpIhDsb6DYvZ06lVYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWYxYTI0YmMtNzE4Yy00NTAwLWFkMGItYTI5ZjhiODVk
Nzc0MB4XDTI1MDYyMzA1MDUyNFoXDTI1MDkyMTA1MDUyNFowLzEtMCsGA1UEAxMk
NmM3ZGFmOWYtNzRiOC00ZTM5LTk3NGEtYjk4ZTBlMmE1OGU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8DH1Xkd8jZ6Ifr0cco+NxZwNEHs8RIhge/E7
3VemOIf/4tvaemHvHN8SwVilul+dPKZuIeE/vhinL7UTCM9L3thAvpwv+1i8ckru
FFK7btmtZuo9r6S+MKnZ3RwLrzmUvDzBSoBYX8WvmeZFVNpp8sCPzd2F+NTbdbeL
/jIOXd7BCHeD8tQ6s/IAGwU19WpQZBHU6dF8IyLKqyeCCmvB8Ieo0NxbOM52w8xq
0KL8YdiMlDrfOXXPWOEhr6Y0jRr6nNaa+c/KjtP2jmRJi0ZsXe9GbmhVOgxdehP3
1f4/+TfC3ozX8JaGhMnMZ1Uog/KFqkb3Dxl3Nb/r5bAYlri24QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAHHZmndKrAHaX/RPr6Nmv3l2hYTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFh
MjRiYy03MThjLTQ1MDAtYWQwYi1hMjlmOGI4NWQ3NzQvODU0MzQ1ZjQtNmNiZS0z
ZDgyLTk3YzYtM2JmOTljYmNjYjIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvNWYxYTI0YmMtNzE4Yy00NTAwLWFk
MGItYTI5ZjhiODVkNzc0LzVmMWEyNGJjLTcxOGMtNDUwMC1hZDBiLWEyOWY4Yjg1
ZDc3NC5jcmwwHwYDVR0jBBgwFoAUe7FILm1418tqUdx1x+7Pwyk6s74wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy81ZjFhMjRiYy03MThjLTQ1MDAtYWQwYi1hMjlm
OGI4NWQ3NzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgWVHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFXoM+ZVKREwmMDgrg2PLdEEbj4kHKzLkAG23+F+nQbfSLDHhSGnFEDo
k0m0/a82ynnnM/yaAicU0KyXh4R/zxf9tu8i4ZY5K/qmI4atR94ncYXwnY0I5XM6
8maeFdy1WSXNUOQ9hyTlm++NIn+KS3uHtfS+TZcF/gTnZOib21Nag0ujTFqEpcqA
sesLg8felB0oemcJl6FV9On4+8B/ynvvKBjuqLgs/vSuNh3EQUZfriEq4h/a2spK
In3xba5SMb28ocy5ATA/FerKgn5IjZG8UH6q7arW0D3pGASpBxNTkWShv2QlrqMC
d2reF03Q5iOaWMsKJez2fbexBKBa3UA=
-----END CERTIFICATE-----
Generated at Fri Jul 4 13:36:45 2025 by rpki-client