Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ad8f2580-4846-3e19-82fc-91faaefbed71.roa
File:                     ad8f2580-4846-3e19-82fc-91faaefbed71.roa (raw, json)
Hash identifier:          29ceVsWuM93HvXypEEkZKotruQsZdkDHG5lHrCgCtwQ=
Subject key identifier:   48:F0:6A:EA:5C:B1:93:CB:4D:D5:59:76:D2:9E:57:1C:8C:FC:8A:B0
Certificate issuer:       /CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
Certificate serial:       010D0C9F43285849D16501EC67937B87C55B0A00
Authority key identifier: AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ad8f2580-4846-3e19-82fc-91faaefbed71.roa
Signing time:             Sun 11 May 2025 13:01:01 +0000
ROA not before:           Sun 11 May 2025 13:01:01 +0000
ROA not after:            Sat 09 Aug 2025 13:01:01 +0000
asID:                     396998
IP address blocks:        136.175.223.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d1:65:01:ec:67:93:7b:87:c5:5b:0a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e96b24c4-b692-4b94-83f5-1da5490b8f3c
        Validity
            Not Before: May 11 13:01:01 2025 GMT
            Not After : Aug  9 13:01:01 2025 GMT
        Subject: CN=3586a4d4-bdaf-48c9-a5e3-260cfbf4a50d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:79:ee:49:66:5f:77:c0:c6:81:58:78:66:5e:
                    70:70:d6:ee:5d:94:28:9e:6f:77:02:c1:15:03:af:
                    eb:0d:4f:ae:38:25:27:c5:ac:2d:98:85:90:a3:06:
                    26:61:89:2e:3f:4a:90:60:5f:b0:6b:f2:e7:b4:85:
                    d1:1e:b5:44:bf:19:89:0e:0b:60:34:30:d8:58:81:
                    0d:dc:c6:28:ed:c2:0c:4b:b5:f9:00:54:be:a1:8a:
                    7a:7a:11:64:34:c2:1e:f3:bb:42:40:5e:c2:26:d6:
                    cf:08:df:f3:c4:87:78:6b:4b:9d:d4:b3:4c:24:d5:
                    b0:02:f1:01:58:47:be:20:2e:52:9f:cc:60:62:64:
                    60:f9:a4:6e:55:03:2a:36:c8:d6:42:da:47:44:0e:
                    b7:66:c8:35:6b:ee:ba:f9:c7:3e:35:88:28:e2:64:
                    9d:e2:8a:db:24:30:72:e6:3b:e2:b4:e9:6f:09:13:
                    74:47:a6:b6:1e:96:f7:ee:1e:00:20:ed:ee:32:60:
                    bb:b8:a4:03:c8:93:55:cf:a8:ae:99:81:10:a2:67:
                    10:93:ae:08:1e:04:be:d3:04:4c:1d:51:f4:36:3f:
                    1c:e6:d9:1c:bf:dc:69:73:ed:0a:6a:04:19:6b:0f:
                    6b:53:36:5e:fe:96:c8:5a:39:d2:cd:3c:40:b8:b0:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:F0:6A:EA:5C:B1:93:CB:4D:D5:59:76:D2:9E:57:1C:8C:FC:8A:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/ad8f2580-4846-3e19-82fc-91faaefbed71.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c/e96b24c4-b692-4b94-83f5-1da5490b8f3c.crl

            X509v3 Authority Key Identifier:
                keyid:AB:B6:E3:90:36:46:4B:D0:0B:9A:D5:22:5A:5E:A3:60:7C:9D:D5:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/e96b24c4-b692-4b94-83f5-1da5490b8f3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.175.223.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b0:20:c2:86:a7:6c:b7:55:ab:d2:82:ae:8a:e9:67:af:40:
         c3:3a:79:a4:fc:df:cd:a7:b8:42:f5:76:10:94:5b:51:51:21:
         80:20:14:96:f8:d4:f5:d2:7d:33:72:e9:4e:60:1f:6b:e3:08:
         88:7a:da:6a:ed:6c:d7:49:dc:f6:db:a3:de:07:11:f8:04:8b:
         e1:cc:e5:04:7f:de:f5:08:b0:93:85:c6:f5:86:d8:23:f7:8a:
         80:7b:39:94:e7:35:60:ab:ab:49:6c:3e:03:8f:cf:2b:c5:89:
         e6:0c:7d:c6:8a:f7:66:96:68:1e:b7:c1:f8:32:2e:6a:5d:bc:
         dc:b3:1b:78:b8:1f:fd:57:42:ba:bb:d5:fa:51:3b:bd:a8:3e:
         e9:7c:dc:23:77:de:52:39:e4:f5:d3:7a:42:56:ad:d8:f9:dc:
         8a:73:6f:d6:34:d2:bf:cc:9e:92:5f:40:62:3c:3c:0d:31:6f:
         78:90:99:e8:d4:ef:61:02:e3:e5:e7:ef:7a:cb:5f:3b:a3:b4:
         33:1c:9a:eb:15:2e:93:38:bd:c8:f5:46:37:5f:25:7b:96:20:
         9e:32:78:1c:fb:57:82:00:38:bb:46:7e:69:de:9a:36:e3:62:
         38:34:f9:db:d2:a5:78:f5:8d:0b:55:e2:d2:90:3e:e1:5e:d0:
         7c:9c:f3:33
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnRZQHsZ5N7h8VbCgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk2YjI0YzQtYjY5Mi00Yjk0LTgzZjUtMWRhNTQ5MGI4
ZjNjMB4XDTI1MDUxMTEzMDEwMVoXDTI1MDgwOTEzMDEwMVowLzEtMCsGA1UEAxMk
MzU4NmE0ZDQtYmRhZi00OGM5LWE1ZTMtMjYwY2ZiZjRhNTBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhHnuSWZfd8DGgVh4Zl5wcNbuXZQonm93AsEV
A6/rDU+uOCUnxawtmIWQowYmYYkuP0qQYF+wa/LntIXRHrVEvxmJDgtgNDDYWIEN
3MYo7cIMS7X5AFS+oYp6ehFkNMIe87tCQF7CJtbPCN/zxId4a0ud1LNMJNWwAvEB
WEe+IC5Sn8xgYmRg+aRuVQMqNsjWQtpHRA63Zsg1a+66+cc+NYgo4mSd4orbJDBy
5jvitOlvCRN0R6a2Hpb37h4AIO3uMmC7uKQDyJNVz6iumYEQomcQk64IHgS+0wRM
HVH0Nj8c5tkcv9xpc+0KagQZaw9rUzZe/pbIWjnSzTxAuLCKmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEjwaupcsZPLTdVZdtKeVxyM/IqwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZi
MjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1NDkwYjhmM2MvYWQ4ZjI1ODAtNDg0Ni0z
ZTE5LTgyZmMtOTFmYWFlZmJlZDcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZTk2YjI0YzQtYjY5Mi00Yjk0LTgz
ZjUtMWRhNTQ5MGI4ZjNjL2U5NmIyNGM0LWI2OTItNGI5NC04M2Y1LTFkYTU0OTBi
OGYzYy5jcmwwHwYDVR0jBBgwFoAUq7bjkDZGS9ALmtUiWl6jYHyd1XwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lOTZiMjRjNC1iNjkyLTRiOTQtODNmNS0xZGE1
NDkwYjhmM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiK/fMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGywIMKGp2y3VavSgq6K6WevQMM6eaT8382nuEL1dhCUW1FRIYAgFJb4
1PXSfTNy6U5gH2vjCIh62mrtbNdJ3Pbbo94HEfgEi+HM5QR/3vUIsJOFxvWG2CP3
ioB7OZTnNWCrq0lsPgOPzyvFieYMfcaK92aWaB63wfgyLmpdvNyzG3i4H/1XQrq7
1fpRO72oPul83CN33lI55PXTekJWrdj53Ipzb9Y00r/MnpJfQGI8PA0xb3iQmejU
72EC4+Xn73rLXzujtDMcmusVLpM4vcj1RjdfJXuWIJ4yeBz7V4IAOLtGfmnemjbj
Yjg0+dvSpXj1jQtV4tKQPuFe0Hyc8zM=
-----END CERTIFICATE-----
Generated at Sun Jun 15 18:04:36 2025 by rpki-client