Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/acdeb15e-e217-35cf-9cc3-b57acbbeab03.roa
File:                     acdeb15e-e217-35cf-9cc3-b57acbbeab03.roa (raw, json)
Hash identifier:          dRfiLFh9UqcBfR/L8BsdGUgtUHMrMEh2mttGW7xOBWo=
Subject key identifier:   D8:D4:F7:6B:F4:CB:9F:CF:B2:E6:EE:97:94:FB:A2:84:F1:87:A0:75
Certificate issuer:       /CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
Certificate serial:       010D0C9F43285849ED19B056F993C5CED2F1B580
Authority key identifier: 8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/acdeb15e-e217-35cf-9cc3-b57acbbeab03.roa
Signing time:             Wed 21 May 2025 11:12:10 +0000
ROA not before:           Wed 21 May 2025 11:12:10 +0000
ROA not after:            Tue 19 Aug 2025 11:12:10 +0000
asID:                     6363
IP address blocks:        134.141.116.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:19:b0:56:f9:93:c5:ce:d2:f1:b5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51d85ec2-b89d-4cae-b3fb-deb592511be0
        Validity
            Not Before: May 21 11:12:10 2025 GMT
            Not After : Aug 19 11:12:10 2025 GMT
        Subject: CN=f71fa5a4-a82f-4e89-9f97-4fd207cb7eed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:c9:46:fa:2b:b8:4e:cd:13:12:13:1b:e7:23:
                    e9:89:64:6a:15:1a:62:40:2b:e4:6e:f0:46:7b:8c:
                    6a:55:0a:56:dd:83:ae:d9:d2:f3:4f:46:1c:d2:ec:
                    e8:73:4a:69:57:28:0a:f6:3c:d7:73:26:eb:37:b7:
                    2d:64:44:d2:3d:95:af:40:12:3f:8f:d3:70:ad:94:
                    8c:7b:30:c2:eb:b6:aa:7a:df:60:eb:c3:f4:83:7f:
                    37:e6:84:dd:61:66:81:f8:b2:c3:6e:99:28:75:46:
                    27:72:d2:11:e7:6a:d3:06:db:8d:f3:43:d0:7d:36:
                    15:2f:1b:41:18:46:3e:de:b9:f7:15:48:1f:15:59:
                    b5:77:c0:c7:42:b2:fc:0a:78:f1:fe:95:eb:d3:9f:
                    cc:91:aa:fa:ce:6d:d3:2e:a0:41:29:0f:d4:e7:62:
                    09:00:5d:dd:5c:6a:85:64:88:15:2d:e7:ef:f6:09:
                    88:ae:af:08:88:22:8f:3e:3a:52:5c:94:b8:d3:61:
                    1e:01:48:99:f5:2b:be:bc:1b:bc:35:0b:4d:c5:67:
                    03:ef:a5:db:e5:6d:3b:d7:a7:cb:53:40:79:de:41:
                    04:9a:2f:16:64:4e:52:06:94:61:47:d7:d3:94:5a:
                    8c:37:c9:d4:3d:64:3a:27:69:e6:d2:8f:9d:11:a0:
                    36:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:D4:F7:6B:F4:CB:9F:CF:B2:E6:EE:97:94:FB:A2:84:F1:87:A0:75
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/acdeb15e-e217-35cf-9cc3-b57acbbeab03.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0/51d85ec2-b89d-4cae-b3fb-deb592511be0.crl

            X509v3 Authority Key Identifier:
                keyid:8A:1E:B7:50:C3:85:93:93:53:97:62:55:7C:92:19:6C:96:46:EE:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/51d85ec2-b89d-4cae-b3fb-deb592511be0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.141.116.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:b2:84:47:04:71:41:4a:3b:09:9c:24:7a:54:11:39:16:f1:
         78:93:e0:11:3d:8b:7b:64:01:0c:dd:a4:95:1f:5d:7e:14:d0:
         4f:d7:d6:2c:20:71:90:3b:56:42:8e:a7:a2:23:35:f2:91:70:
         30:a4:5d:e3:d8:d0:b1:2a:6c:dd:ae:fe:44:c6:48:50:6b:09:
         aa:8f:5c:c2:e4:a2:12:fa:c3:d7:84:6a:e7:4b:88:ca:ea:e0:
         6d:8c:d5:ea:8c:a4:2f:19:65:08:37:16:71:2c:0a:6a:ca:26:
         fc:a6:7e:92:97:64:5e:6a:fc:be:6b:a9:57:b1:c2:c1:12:ce:
         3c:66:2f:58:5b:65:3a:9c:32:53:43:87:af:75:9e:bd:8d:85:
         f8:52:df:26:9b:24:a3:b4:29:98:3b:61:27:2e:3a:66:19:2b:
         1e:99:16:bc:7c:8f:5e:21:86:1c:64:f6:fb:cf:4d:6a:23:98:
         7c:3b:aa:dd:3a:04:d2:62:15:83:7f:5c:04:2a:37:2e:8d:89:
         86:18:7c:ad:19:4e:34:1f:38:48:4c:02:e6:12:ed:ce:a1:d2:
         10:f8:7f:9a:54:ed:ca:bd:7e:04:7b:73:ef:e8:a4:de:8f:04:
         73:41:21:0c:e7:aa:e6:20:ac:db:8d:4f:98:cb:bf:d4:0a:c3:
         22:ce:37:ed
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntGbBW+ZPFztLxtYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTFkODVlYzItYjg5ZC00Y2FlLWIzZmItZGViNTkyNTEx
YmUwMB4XDTI1MDUyMTExMTIxMFoXDTI1MDgxOTExMTIxMFowLzEtMCsGA1UEAxMk
ZjcxZmE1YTQtYTgyZi00ZTg5LTlmOTctNGZkMjA3Y2I3ZWVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwclG+iu4Ts0TEhMb5yPpiWRqFRpiQCvkbvBG
e4xqVQpW3YOu2dLzT0Yc0uzoc0ppVygK9jzXcybrN7ctZETSPZWvQBI/j9NwrZSM
ezDC67aqet9g68P0g3835oTdYWaB+LLDbpkodUYnctIR52rTBtuN80PQfTYVLxtB
GEY+3rn3FUgfFVm1d8DHQrL8Cnjx/pXr05/Mkar6zm3TLqBBKQ/U52IJAF3dXGqF
ZIgVLefv9gmIrq8IiCKPPjpSXJS402EeAUiZ9Su+vBu8NQtNxWcD76Xb5W0716fL
U0B53kEEmi8WZE5SBpRhR9fTlFqMN8nUPWQ6J2nm0o+dEaA2UQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNjU92v0y5/Psubul5T7ooTxh6B1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4
NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1OTI1MTFiZTAvYWNkZWIxNWUtZTIxNy0z
NWNmLTljYzMtYjU3YWNiYmVhYjAzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNTFkODVlYzItYjg5ZC00Y2FlLWIz
ZmItZGViNTkyNTExYmUwLzUxZDg1ZWMyLWI4OWQtNGNhZS1iM2ZiLWRlYjU5MjUx
MWJlMC5jcmwwHwYDVR0jBBgwFoAUih63UMOFk5NTl2JVfJIZbJZG7iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy81MWQ4NWVjMi1iODlkLTRjYWUtYjNmYi1kZWI1
OTI1MTFiZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBho10MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADWyhEcEcUFKOwmcJHpUETkW8XiT4BE9i3tkAQzdpJUfXX4U0E/X1iwg
cZA7VkKOp6IjNfKRcDCkXePY0LEqbN2u/kTGSFBrCaqPXMLkohL6w9eEaudLiMrq
4G2M1eqMpC8ZZQg3FnEsCmrKJvymfpKXZF5q/L5rqVexwsESzjxmL1hbZTqcMlND
h691nr2NhfhS3yabJKO0KZg7YScuOmYZKx6ZFrx8j14hhhxk9vvPTWojmHw7qt06
BNJiFYN/XAQqNy6NiYYYfK0ZTjQfOEhMAuYS7c6h0hD4f5pU7cq9fgR7c+/opN6P
BHNBIQznquYgrNuNT5jLv9QKwyLON+0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:02:13 2025 by rpki-client