Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa
File:                     17be945b-e292-3a74-bba1-c34b82ed01e4.roa (raw, json)
Hash identifier:          yyyPm8u6Q0BFKmNWLw7xkT3I9TDjSZ2U+uFq5L+oglY=
Subject key identifier:   2C:1B:60:65:82:39:2B:DA:70:C8:2C:50:C2:7B:64:19:37:5B:CB:A8
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F4328584996C4B41075133A5E1E954720
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     6939
IP address blocks:        136.0.37.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:b4:10:75:13:3a:5e:1e:95:47:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=6a5b8db6-57a5-4ef8-a559-f79aa1ca4077
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:62:29:cc:e8:77:ba:a7:63:44:07:ad:f9:ec:
                    f9:76:0c:f6:26:35:72:ce:02:28:29:85:17:b5:60:
                    66:76:63:96:87:ef:fd:e4:2a:ab:13:7f:de:7c:d9:
                    89:9e:5b:67:db:e1:a0:9b:a6:33:94:98:4b:81:81:
                    cc:ee:3d:fb:86:e8:18:d5:77:82:da:cd:bc:df:2c:
                    4f:df:9b:86:78:da:48:4a:9f:be:e1:9f:8d:f8:f1:
                    07:a9:d7:b6:d3:76:8f:1a:d8:36:eb:b0:e8:37:5d:
                    74:ea:82:dd:7d:a5:f8:13:3a:f2:c1:e5:0f:eb:db:
                    65:83:6a:0d:3f:b1:e2:ca:02:66:cb:49:34:dd:fb:
                    10:33:c0:ba:2d:b9:76:f9:3e:d0:2f:88:4a:27:15:
                    f4:d8:f3:2e:e4:b3:fe:d4:2d:4f:5d:f1:95:81:20:
                    99:1a:46:0b:3e:66:42:72:20:c4:d2:cd:57:b2:f9:
                    53:c2:2a:5b:fd:0e:bb:ce:a1:b7:18:21:83:0e:3c:
                    be:27:17:6e:b7:6e:44:95:30:d0:e7:d1:ac:d1:96:
                    88:f6:df:1c:4f:6f:fe:36:7d:6d:b4:58:df:76:24:
                    72:d1:f4:c2:e6:2d:ed:68:87:b9:33:6a:d1:fa:57:
                    b0:36:46:92:e4:37:fb:f4:3b:f2:b9:73:7f:8e:46:
                    d1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:1B:60:65:82:39:2B:DA:70:C8:2C:50:C2:7B:64:19:37:5B:CB:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/17be945b-e292-3a74-bba1-c34b82ed01e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.37.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:e8:4a:7c:f4:03:08:c9:51:4a:b4:2a:40:6a:f7:2d:f0:fa:
         0f:02:7d:b6:19:22:0a:67:fa:76:1c:c8:ab:e1:d9:f2:e0:c0:
         46:36:ce:eb:e3:dd:b2:a7:97:47:7d:ba:7d:53:dd:32:4c:92:
         7b:01:35:46:7c:e3:d1:33:80:de:18:09:6b:cc:5a:e9:6e:98:
         06:34:24:f4:c6:36:b2:17:77:ac:03:e8:9d:ff:32:71:6d:f7:
         15:f5:6d:22:e8:a2:f5:8d:7f:cb:e3:6e:c3:6b:3c:18:9d:30:
         19:6e:ff:53:89:13:92:44:64:41:97:5a:dd:2a:a0:41:ce:40:
         e4:bf:8b:6a:46:17:d8:bb:ba:a3:79:ac:c0:f4:81:b8:83:0f:
         f0:ea:97:39:d3:91:e3:8e:ae:42:ac:f0:a3:0e:5f:ed:b5:34:
         21:f6:08:f8:12:93:19:a9:8a:18:ad:76:36:51:51:b7:42:bc:
         7b:bd:14:1d:33:32:a2:8e:fd:a3:e2:58:b2:6b:c3:b2:e7:0b:
         8b:79:d4:18:87:c8:a5:94:2e:cf:79:56:7f:2d:50:49:2a:1a:
         6a:8b:a8:7b:b1:51:51:81:ea:bc:83:5a:5f:ac:fc:28:1b:19:
         39:a7:d5:12:36:ab:0f:27:a2:ec:07:ef:15:6c:09:d1:cb:e3:
         4f:ee:4d:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxLQQdRM6Xh6VRyAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
NmE1YjhkYjYtNTdhNS00ZWY4LWE1NTktZjc5YWExY2E0MDc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArWIpzOh3uqdjRAet+ez5dgz2JjVyzgIoKYUX
tWBmdmOWh+/95CqrE3/efNmJnltn2+Ggm6YzlJhLgYHM7j37hugY1XeC2s283yxP
35uGeNpISp++4Z+N+PEHqde203aPGtg267DoN1106oLdfaX4EzryweUP69tlg2oN
P7HiygJmy0k03fsQM8C6Lbl2+T7QL4hKJxX02PMu5LP+1C1PXfGVgSCZGkYLPmZC
ciDE0s1XsvlTwipb/Q67zqG3GCGDDjy+Jxdut25ElTDQ59Gs0ZaI9t8cT2/+Nn1t
tFjfdiRy0fTC5i3taIe5M2rR+lewNkaS5Df79DvyuXN/jkbRxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCwbYGWCOSvacMgsUMJ7ZBk3W8uoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvMTdiZTk0NWItZTI5Mi0z
YTc0LWJiYTEtYzM0YjgyZWQwMWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiAAlMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKPoSnz0AwjJUUq0KkBq9y3w+g8CfbYZIgpn+nYcyKvh2fLgwEY2zuvj
3bKnl0d9un1T3TJMknsBNUZ849EzgN4YCWvMWulumAY0JPTGNrIXd6wD6J3/MnFt
9xX1bSLoovWNf8vjbsNrPBidMBlu/1OJE5JEZEGXWt0qoEHOQOS/i2pGF9i7uqN5
rMD0gbiDD/DqlznTkeOOrkKs8KMOX+21NCH2CPgSkxmpihitdjZRUbdCvHu9FB0z
MqKO/aPiWLJrw7LnC4t51BiHyKWULs95Vn8tUEkqGmqLqHuxUVGB6ryDWl+s/Cgb
GTmn1RI2qw8nouwH7xVsCdHL40/uTfg=
-----END CERTIFICATE-----
Generated at Sun Apr 27 01:02:58 2025 by rpki-client