Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
File:                     35a3d056-2c42-3007-9cfa-92e09d07c46e.roa (raw, json)
Hash identifier:          lnmUz27ZwtkwdbbIsP63Cnj+a8/voWgIyAsHs/63HAE=
Subject key identifier:   C4:EC:F3:90:55:8D:EC:A7:A7:E3:A8:CC:45:2A:A6:A5:C6:8D:9A:89
Certificate issuer:       /CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
Certificate serial:       010D0C9F4328584AA42B78732A6BBC6B8625DFC0
Authority key identifier: 43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        136.184.230.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:78:73:2a:6b:bc:6b:86:25:df:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=337035f0-d5d1-45d0-b647-7a23f9e3d54c
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=eadfcfba-f761-4f3b-a6f0-7b8faa5954de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:13:8a:16:d6:c1:48:99:5c:d6:1b:d4:cc:ea:
                    f8:db:e0:3c:2c:ec:81:e3:87:c1:ac:00:a3:fb:c3:
                    d8:20:e5:3d:a2:47:0c:05:ef:5d:de:6f:55:34:f2:
                    d6:a9:b4:9f:18:86:d1:52:bb:2a:ef:8d:29:39:59:
                    45:59:53:3b:de:cb:a6:8d:17:d1:6d:24:f2:bb:fb:
                    6c:9d:53:24:de:ad:0f:72:db:46:a4:23:30:2b:79:
                    89:ce:3b:70:cf:a1:01:aa:00:e6:c9:43:bb:8a:93:
                    16:ea:df:fa:b2:85:69:6b:76:d1:86:e3:60:4f:a4:
                    17:d6:b9:d8:3d:70:68:13:bf:76:c0:76:75:aa:f7:
                    68:88:b0:5f:6f:34:63:af:06:14:28:ba:87:5b:8f:
                    19:3c:cf:cd:d8:60:50:ba:15:6e:04:12:0d:23:5b:
                    d7:9c:11:06:e9:08:47:c8:43:e2:53:a6:39:9e:31:
                    3a:5f:15:d4:e2:59:01:4a:32:68:6d:f2:ec:54:c7:
                    f4:76:f7:c7:00:18:2a:63:69:48:68:4d:de:7f:d4:
                    b7:70:36:a6:2b:25:2b:b9:b6:c6:e8:f7:fd:8b:fc:
                    e6:7a:2b:3d:93:5b:d2:14:81:fc:84:e2:8a:e4:3f:
                    52:e0:01:17:7e:80:14:22:84:6c:41:6f:7b:cd:4f:
                    ac:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:EC:F3:90:55:8D:EC:A7:A7:E3:A8:CC:45:2A:A6:A5:C6:8D:9A:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/35a3d056-2c42-3007-9cfa-92e09d07c46e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c/337035f0-d5d1-45d0-b647-7a23f9e3d54c.crl

            X509v3 Authority Key Identifier:
                keyid:43:1B:4B:E9:91:86:92:60:A1:C0:72:24:C4:97:03:BF:E8:4A:31:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/337035f0-d5d1-45d0-b647-7a23f9e3d54c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.184.230.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:53:d0:34:3d:35:92:7f:4e:85:39:ad:e9:26:56:23:16:6e:
         21:f9:bc:6a:59:05:d8:9b:22:53:8f:f4:8a:47:e6:80:69:8f:
         0d:d9:b6:51:f9:db:32:16:3b:b8:2e:4e:8e:c9:b2:14:7d:bc:
         18:ad:13:2d:04:45:3f:f6:99:13:a0:ef:45:6c:f1:a6:92:7c:
         65:40:da:51:64:ca:16:e0:80:89:b3:68:93:c1:dd:89:5d:a5:
         77:60:4c:b6:f2:d0:bb:e3:25:19:85:ec:03:82:1b:3e:d2:a7:
         bc:1c:d7:87:b0:90:d6:5b:b4:62:d0:f9:69:e7:ca:d5:28:36:
         33:ef:f0:14:ac:b7:72:b0:cd:26:ea:e9:48:2f:a4:b8:c6:30:
         f7:ad:1b:e0:1a:2b:02:88:86:84:7d:2c:9a:22:a9:40:e4:22:
         18:f7:b6:bb:fd:65:f1:91:23:2e:30:89:a7:7b:82:a5:5d:e7:
         8e:12:08:e3:59:ca:ad:d9:bb:08:f3:b9:af:09:96:05:4f:43:
         0a:10:c5:5d:c4:3d:c9:35:82:9c:bf:57:a9:96:92:27:39:de:
         ec:f0:d8:66:8e:bc:3f:83:97:09:20:38:88:aa:67:64:bb:f9:
         74:16:1f:99:ee:85:43:9d:3a:4b:e0:9c:21:94:35:96:54:51:
         04:0a:31:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3hzKmu8a4Yl38AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzM3MDM1ZjAtZDVkMS00NWQwLWI2NDctN2EyM2Y5ZTNk
NTRjMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZWFkZmNmYmEtZjc2MS00ZjNiLWE2ZjAtN2I4ZmFhNTk1NGRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhOKFtbBSJlc1hvUzOr42+A8LOyB44fBrACj
+8PYIOU9okcMBe9d3m9VNPLWqbSfGIbRUrsq740pOVlFWVM73sumjRfRbSTyu/ts
nVMk3q0PcttGpCMwK3mJzjtwz6EBqgDmyUO7ipMW6t/6soVpa3bRhuNgT6QX1rnY
PXBoE792wHZ1qvdoiLBfbzRjrwYUKLqHW48ZPM/N2GBQuhVuBBINI1vXnBEG6QhH
yEPiU6Y5njE6XxXU4lkBSjJobfLsVMf0dvfHABgqY2lIaE3ef9S3cDamKyUrubbG
6Pf9i/zmeis9k1vSFIH8hOKK5D9S4AEXfoAUIoRsQW97zU+sRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMTs85BVjeynp+OozEUqpqXGjZqJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcw
MzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIzZjllM2Q1NGMvMzVhM2QwNTYtMmM0Mi0z
MDA3LTljZmEtOTJlMDlkMDdjNDZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzM3MDM1ZjAtZDVkMS00NWQwLWI2
NDctN2EyM2Y5ZTNkNTRjLzMzNzAzNWYwLWQ1ZDEtNDVkMC1iNjQ3LTdhMjNmOWUz
ZDU0Yy5jcmwwHwYDVR0jBBgwFoAUQxtL6ZGGkmChwHIkxJcDv+hKMW8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zMzcwMzVmMC1kNWQxLTQ1ZDAtYjY0Ny03YTIz
ZjllM2Q1NGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiLjmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBT0DQ9NZJ/ToU5rekmViMWbiH5vGpZBdibIlOP9IpH5oBpjw3ZtlH5
2zIWO7guTo7JshR9vBitEy0ERT/2mROg70Vs8aaSfGVA2lFkyhbggImzaJPB3Yld
pXdgTLby0LvjJRmF7AOCGz7Sp7wc14ewkNZbtGLQ+WnnytUoNjPv8BSst3KwzSbq
6UgvpLjGMPetG+AaKwKIhoR9LJoiqUDkIhj3trv9ZfGRIy4wiad7gqVd544SCONZ
yq3Zuwjzua8JlgVPQwoQxV3EPck1gpy/V6mWkic53uzw2GaOvD+DlwkgOIiqZ2S7
+XQWH5nuhUOdOkvgnCGUNZZUUQQKMTs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:06:29 2025 by rpki-client