Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/3c4782c4-8ca3-3092-abb0-ebe4c3a2448b.roa
File:                     3c4782c4-8ca3-3092-abb0-ebe4c3a2448b.roa (raw, json)
Hash identifier:          jvU/h31SFAjjU8X5NPqzzO22OEVbQhfpzl7AxMKHaNc=
Subject key identifier:   B2:A9:5D:47:4C:51:B7:FC:BC:14:58:06:59:6D:5D:61:1F:F8:80:98
Certificate issuer:       /CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
Certificate serial:       010D0C9F4328584A18E08F30556D30609812F380
Authority key identifier: 2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/3c4782c4-8ca3-3092-abb0-ebe4c3a2448b.roa
Signing time:             Fri 06 Jun 2025 03:32:37 +0000
ROA not before:           Fri 06 Jun 2025 03:32:37 +0000
ROA not after:            Thu 04 Sep 2025 03:32:37 +0000
asID:                     3688
IP address blocks:        74.117.136.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:e0:8f:30:55:6d:30:60:98:12:f3:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd
        Validity
            Not Before: Jun  6 03:32:37 2025 GMT
            Not After : Sep  4 03:32:37 2025 GMT
        Subject: CN=cb4d62bd-7a65-4169-abb4-6ba7ec06a1c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:40:38:c3:7f:a2:3f:7f:62:75:20:af:bf:24:
                    de:3d:4d:01:7c:ce:8f:e6:c0:0c:c5:69:47:02:6c:
                    a0:66:40:98:68:93:dc:08:ba:2a:ea:30:21:a7:63:
                    0d:54:76:8e:5a:3d:07:ae:cd:e4:58:b3:ab:a9:38:
                    88:46:f4:1b:58:62:61:b1:24:4d:54:a1:c8:22:5b:
                    10:c2:6e:fa:6b:09:36:73:2c:e9:57:cc:72:a4:17:
                    f3:8a:1f:49:e6:e5:ef:d6:41:fc:3c:30:11:35:57:
                    3b:b6:14:85:7f:58:08:b1:fe:51:cb:72:e6:c0:35:
                    d6:26:d3:08:3a:bc:32:d0:dd:be:84:56:58:f4:be:
                    17:e9:4a:3d:77:9c:c5:91:ba:c8:fd:04:d2:b9:16:
                    99:4d:e0:84:0c:d4:8e:d2:65:53:27:a4:ff:8d:03:
                    32:89:83:2d:c3:6f:4d:de:e2:89:83:b5:5e:4e:d2:
                    33:6e:03:65:b2:dd:85:97:bb:ce:df:a5:f5:5f:62:
                    76:04:0b:bc:8d:6e:63:1d:d9:c5:c8:eb:98:11:9b:
                    92:8a:f6:72:1f:2d:a8:fa:fd:81:3e:60:95:08:a6:
                    bb:b2:7a:a8:e5:ab:1d:9a:c6:ef:0e:6a:90:cd:a4:
                    94:e7:6f:3c:7e:10:22:ee:fe:5e:f2:94:c5:6d:cc:
                    31:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A9:5D:47:4C:51:B7:FC:BC:14:58:06:59:6D:5D:61:1F:F8:80:98
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/3c4782c4-8ca3-3092-abb0-ebe4c3a2448b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.crl

            X509v3 Authority Key Identifier:
                keyid:2D:2F:8B:20:43:CA:0F:03:65:13:72:30:29:D2:27:D7:3E:E9:77:E1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/abdeda65-c4c3-4ec4-b8d4-c34cf5d015dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  74.117.136.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:a2:b1:38:63:53:78:30:06:7d:8a:b9:0e:82:15:43:cb:26:
         f4:fc:5c:c0:24:2f:9a:7d:07:9b:a9:e4:40:17:bb:59:ec:5d:
         0a:2e:a5:2c:b2:6d:00:f6:74:88:1a:64:2e:d8:88:42:1e:1c:
         fe:ab:c0:31:ec:a3:bd:da:14:34:dd:04:82:e0:41:50:cc:02:
         1b:e6:13:41:fb:4d:66:b9:9c:38:5e:8e:94:20:21:51:49:43:
         67:d1:a1:68:85:da:06:1c:cc:0c:24:19:af:3b:43:ff:83:e6:
         99:93:db:13:ca:f7:22:51:bc:6a:98:2f:3a:48:7b:17:1a:36:
         48:d9:0f:28:ad:a4:5e:6f:ab:43:af:74:5a:60:4c:bc:3d:c4:
         49:0f:d1:84:a2:ea:61:09:c9:49:3d:eb:f1:62:c3:ae:f4:3c:
         a2:21:62:4a:78:d6:fa:8b:03:b8:6d:0d:53:e8:14:9e:55:78:
         36:f2:da:7f:5d:51:4b:48:a0:1b:91:3d:dd:14:89:92:b7:b7:
         1e:45:3f:cb:2b:f0:6a:91:6f:49:6a:93:6b:65:4b:b6:77:7a:
         5f:eb:f1:3f:3f:56:95:43:3f:37:fe:28:de:82:6c:7c:99:10:
         b7:e1:54:5f:4c:94:f3:3f:fc:cf:df:ea:37:0b:75:3e:5c:8e:
         b5:fd:5e:92
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoY4I8wVW0wYJgS84AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJkZWRhNjUtYzRjMy00ZWM0LWI4ZDQtYzM0Y2Y1ZDAx
NWRkMB4XDTI1MDYwNjAzMzIzN1oXDTI1MDkwNDAzMzIzN1owLzEtMCsGA1UEAxMk
Y2I0ZDYyYmQtN2E2NS00MTY5LWFiYjQtNmJhN2VjMDZhMWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg0A4w3+iP39idSCvvyTePU0BfM6P5sAMxWlH
AmygZkCYaJPcCLoq6jAhp2MNVHaOWj0Hrs3kWLOrqTiIRvQbWGJhsSRNVKHIIlsQ
wm76awk2cyzpV8xypBfzih9J5uXv1kH8PDARNVc7thSFf1gIsf5Ry3LmwDXWJtMI
Orwy0N2+hFZY9L4X6Uo9d5zFkbrI/QTSuRaZTeCEDNSO0mVTJ6T/jQMyiYMtw29N
3uKJg7VeTtIzbgNlst2Fl7vO36X1X2J2BAu8jW5jHdnFyOuYEZuSivZyHy2o+v2B
PmCVCKa7snqo5asdmsbvDmqQzaSU5288fhAi7v5e8pTFbcwxxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLKpXUdMUbf8vBRYBlltXWEf+ICYMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9hYmRl
ZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRjZjVkMDE1ZGQvM2M0NzgyYzQtOGNhMy0z
MDkyLWFiYjAtZWJlNGMzYTI0NDhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvYWJkZWRhNjUtYzRjMy00ZWM0LWI4
ZDQtYzM0Y2Y1ZDAxNWRkL2FiZGVkYTY1LWM0YzMtNGVjNC1iOGQ0LWMzNGNmNWQw
MTVkZC5jcmwwHwYDVR0jBBgwFoAULS+LIEPKDwNlE3IwKdIn1z7pd+EwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9hYmRlZGE2NS1jNGMzLTRlYzQtYjhkNC1jMzRj
ZjVkMDE1ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSnWIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHuisThjU3gwBn2KuQ6CFUPLJvT8XMAkL5p9B5up5EAXu1nsXQoupSyy
bQD2dIgaZC7YiEIeHP6rwDHso73aFDTdBILgQVDMAhvmE0H7TWa5nDhejpQgIVFJ
Q2fRoWiF2gYczAwkGa87Q/+D5pmT2xPK9yJRvGqYLzpIexcaNkjZDyitpF5vq0Ov
dFpgTLw9xEkP0YSi6mEJyUk96/Fiw670PKIhYkp41vqLA7htDVPoFJ5VeDby2n9d
UUtIoBuRPd0UiZK3tx5FP8sr8GqRb0lqk2tlS7Z3el/r8T8/VpVDPzf+KN6CbHyZ
ELfhVF9MlPM//M/f6jcLdT5cjrX9XpI=
-----END CERTIFICATE-----
Generated at Thu Jul 3 22:54:09 2025 by rpki-client