Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/766b78b6-857d-36e2-bf72-f1bf6ef50bf8.roa
File:                     766b78b6-857d-36e2-bf72-f1bf6ef50bf8.roa (raw, json)
Hash identifier:          hNG9RoRz8qRTJC3JxwfdCy9GXdDzCKV1nbZwPXYMi1Q=
Subject key identifier:   36:E6:B8:DF:21:06:AA:B8:2B:89:F7:FF:E5:6B:FC:E4:A4:93:6B:46
Certificate issuer:       /CN=984181fc-af40-43f8-a4ce-77cad82506f9
Certificate serial:       010D0C9F432858498CFF241A852166A89A6E7640
Authority key identifier: 0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/766b78b6-857d-36e2-bf72-f1bf6ef50bf8.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     10753
IP address blocks:        136.0.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:24:1a:85:21:66:a8:9a:6e:76:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984181fc-af40-43f8-a4ce-77cad82506f9
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=d192afea-33c1-4a34-81dc-ef4a46092305
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:ad:32:ae:fb:17:07:22:48:6d:2f:e9:f2:b5:
                    bf:43:ca:49:9d:d3:5a:7b:6b:3f:ed:3b:d6:b7:aa:
                    1a:ff:4b:c6:d6:54:1c:84:f2:6c:6d:00:9d:72:b7:
                    1e:3c:01:1c:61:c6:a6:a2:c4:d1:37:9f:95:bd:84:
                    2b:90:89:ba:7f:0f:aa:13:f4:57:fc:2c:5a:92:3f:
                    d8:2c:25:de:0d:7b:e2:c6:5a:6f:95:d2:5a:f0:5b:
                    ed:20:42:03:e0:ca:d4:e8:9b:93:76:ed:2c:a2:a1:
                    af:0b:60:53:d8:bb:53:71:fc:50:24:d2:43:05:f6:
                    5d:f6:cf:d5:f0:63:f5:fc:7b:9a:3a:6a:30:50:a1:
                    d3:de:f8:f1:d8:ed:2c:94:59:57:a1:6a:09:18:1f:
                    9f:4d:64:12:99:99:b1:a0:d4:c3:eb:35:e6:2d:73:
                    d4:26:46:6a:18:d5:4e:1a:ef:6c:2f:2c:2f:4e:13:
                    54:32:f8:aa:9d:33:2b:53:6c:41:7d:2c:da:fe:ad:
                    c4:d9:56:e4:52:ee:c9:6a:3e:00:46:1a:7a:56:13:
                    a8:a5:eb:7a:b1:84:21:ab:46:c0:6c:f7:76:84:5f:
                    e2:7a:9f:83:96:43:5c:f9:e0:1c:2d:52:5f:bd:50:
                    c3:30:fe:2f:78:b6:4c:01:ab:98:ae:95:08:b2:fd:
                    b1:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:E6:B8:DF:21:06:AA:B8:2B:89:F7:FF:E5:6B:FC:E4:A4:93:6B:46
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/766b78b6-857d-36e2-bf72-f1bf6ef50bf8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9/984181fc-af40-43f8-a4ce-77cad82506f9.crl

            X509v3 Authority Key Identifier:
                keyid:0E:1D:41:59:5A:B7:79:53:C6:E6:EC:3C:78:60:55:E5:50:04:0C:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/984181fc-af40-43f8-a4ce-77cad82506f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.0.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         47:da:b3:33:b5:a0:f3:04:1f:04:bf:fb:b6:f7:da:f0:77:d6:
         5d:be:5f:94:bd:be:01:f2:4a:31:7e:b1:9d:b5:42:ae:78:73:
         8e:53:af:d7:72:99:d5:51:c1:7f:9d:59:fa:54:f4:de:ff:64:
         08:3a:2d:0d:59:4c:0d:f0:f8:ac:14:e9:7e:2f:b1:7d:33:91:
         ae:0b:80:61:ea:b7:c3:8f:68:e7:f1:4e:4d:68:62:7e:e0:27:
         be:d4:4e:31:cf:e8:91:27:b3:a3:89:e7:d1:0b:29:db:cb:5f:
         8a:5b:4e:b5:69:85:fc:13:32:36:42:8b:2b:30:73:e3:9f:ef:
         f1:bc:fc:96:b9:ea:0a:90:a2:7c:6c:4f:af:47:2e:98:cb:cd:
         9a:e9:bf:85:18:fb:9c:aa:0e:4a:30:4f:f0:65:a9:86:c1:e5:
         cd:e7:11:2f:39:35:dd:ae:eb:05:dd:2b:dd:51:f8:46:2d:f7:
         e9:4d:b1:8c:c5:a9:a6:3a:3a:ff:57:69:92:08:36:bc:6f:9d:
         c7:f8:a5:33:4f:96:4b:f9:3e:8f:cb:2c:90:64:b9:4b:cc:89:
         df:37:92:72:b2:49:8f:eb:65:39:54:5d:a0:b9:27:44:7c:23:
         27:e1:de:bc:60:5b:23:9c:f2:b2:aa:c0:d4:9a:2b:dd:9b:37:
         0d:72:61:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/yQahSFmqJpudkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTg0MTgxZmMtYWY0MC00M2Y4LWE0Y2UtNzdjYWQ4MjUw
NmY5MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
ZDE5MmFmZWEtMzNjMS00YTM0LTgxZGMtZWY0YTQ2MDkyMzA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi60yrvsXByJIbS/p8rW/Q8pJndNae2s/7TvW
t6oa/0vG1lQchPJsbQCdcrcePAEcYcamosTRN5+VvYQrkIm6fw+qE/RX/Cxakj/Y
LCXeDXvixlpvldJa8FvtIEID4MrU6JuTdu0soqGvC2BT2LtTcfxQJNJDBfZd9s/V
8GP1/HuaOmowUKHT3vjx2O0slFlXoWoJGB+fTWQSmZmxoNTD6zXmLXPUJkZqGNVO
Gu9sLywvThNUMviqnTMrU2xBfSza/q3E2VbkUu7Jaj4ARhp6VhOopet6sYQhq0bA
bPd2hF/iep+DlkNc+eAcLVJfvVDDMP4veLZMAauYrpUIsv2xZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbmuN8hBqq4K4n3/+Vr/OSkk2tGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85ODQx
ODFmYy1hZjQwLTQzZjgtYTRjZS03N2NhZDgyNTA2ZjkvNzY2Yjc4YjYtODU3ZC0z
NmUyLWJmNzItZjFiZjZlZjUwYmY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTg0MTgxZmMtYWY0MC00M2Y4LWE0
Y2UtNzdjYWQ4MjUwNmY5Lzk4NDE4MWZjLWFmNDAtNDNmOC1hNGNlLTc3Y2FkODI1
MDZmOS5jcmwwHwYDVR0jBBgwFoAUDh1BWVq3eVPG5uw8eGBV5VAEDIEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85ODQxODFmYy1hZjQwLTQzZjgtYTRjZS03N2Nh
ZDgyNTA2ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiABzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEfaszO1oPMEHwS/+7b32vB31l2+X5S9vgHySjF+sZ21Qq54c45Tr9dy
mdVRwX+dWfpU9N7/ZAg6LQ1ZTA3w+KwU6X4vsX0zka4LgGHqt8OPaOfxTk1oYn7g
J77UTjHP6JEns6OJ59ELKdvLX4pbTrVphfwTMjZCiyswc+Of7/G8/Ja56gqQonxs
T69HLpjLzZrpv4UY+5yqDkowT/BlqYbB5c3nES85Nd2u6wXdK91R+EYt9+lNsYzF
qaY6Ov9XaZIINrxvncf4pTNPlkv5Po/LLJBkuUvMid83knKySY/rZTlUXaC5J0R8
Iyfh3rxgWyOc8rKqwNSaK92bNw1yYds=
-----END CERTIFICATE-----
Generated at Sat Apr 26 23:53:38 2025 by rpki-client