Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa
File:                     36978efc-05ad-3800-8d99-f6cc4c31661f.roa (raw, json)
Hash identifier:          ZAWCzVVfBDRNgFWGG4ec5G6zI5UPHIzHTxf9C1293l4=
Subject key identifier:   EA:89:50:1E:AA:D9:6F:11:F0:64:46:0E:CE:16:67:77:93:58:2C:84
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584A9900C5996E028EE2C3297470
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     206051
IP address blocks:        161.195.137.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:c5:99:6e:02:8e:e2:c3:29:74:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=0eb8fe4b-500b-4277-802a-5acdf43209da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:68:3c:85:e4:84:57:46:fc:b7:75:39:a7:1f:
                    aa:24:1c:48:1c:b7:67:df:af:0e:c2:c0:96:4b:52:
                    4e:cf:de:0f:1b:69:9a:2f:fc:15:47:a1:e2:78:f9:
                    83:ac:e5:0e:0b:c0:73:e5:ad:45:92:2a:2b:aa:55:
                    80:a8:96:f3:fe:d6:51:b8:1c:33:f3:e7:85:43:c8:
                    d1:d0:f7:2d:2a:b7:95:49:23:85:2f:08:be:54:af:
                    3d:07:14:f2:02:fe:6f:7d:fe:7e:2a:4d:11:37:89:
                    57:f0:3d:d5:22:91:dd:71:90:da:7f:4a:75:a2:ae:
                    96:75:36:02:b5:b1:b0:41:7e:c4:a2:c8:4d:a6:04:
                    64:ef:58:ed:06:96:40:7a:5a:24:0c:29:ac:d5:30:
                    7d:18:dc:64:7c:e9:d0:80:79:31:38:9a:2a:70:58:
                    d3:95:7f:df:88:56:ca:a3:b3:98:0f:92:8a:cd:1a:
                    4b:5a:75:bd:26:dd:de:db:76:9d:ca:46:d1:a6:bc:
                    91:de:37:05:3d:70:df:46:76:5b:f6:b6:cb:8e:96:
                    be:ed:f4:31:51:a5:bc:56:0c:f0:8d:12:96:e5:2a:
                    1e:42:1b:12:ea:75:7b:1d:2f:db:e7:15:69:21:59:
                    20:b3:8d:42:c5:cc:7b:88:1e:47:aa:d5:45:25:4e:
                    66:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:89:50:1E:AA:D9:6F:11:F0:64:46:0E:CE:16:67:77:93:58:2C:84
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/36978efc-05ad-3800-8d99-f6cc4c31661f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.137.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:c9:8f:83:ac:0a:17:4f:d3:a4:dc:4d:f0:35:67:ae:ac:0b:
         6a:6d:bc:28:e1:c7:41:d2:cb:02:97:3b:c1:f4:e5:ca:cc:7c:
         fc:16:0c:95:b3:a3:7b:83:dc:34:aa:43:26:bc:84:26:01:59:
         80:4c:ea:6c:40:44:d5:56:7a:39:05:ac:ca:ae:a1:4d:43:28:
         bd:63:43:b8:0a:01:59:81:2a:c5:48:02:6c:6c:4f:38:30:29:
         31:67:4f:be:10:9f:44:ee:ec:19:84:02:9f:2b:89:02:8d:25:
         69:a6:69:71:39:7b:f1:a9:a8:bd:12:6d:e7:67:32:2b:59:ce:
         b3:41:92:73:b2:46:b9:cf:9d:44:e1:a0:02:cb:b3:3a:b5:ce:
         ca:6a:34:88:eb:68:fc:36:30:fc:d7:49:4c:75:dd:ed:19:86:
         2a:4a:24:dd:ea:c6:66:b5:14:6d:5c:a1:15:0f:b2:ea:d8:9e:
         cd:08:34:d0:fd:e0:f3:97:0d:cf:4e:7d:3e:30:c1:04:fd:02:
         3c:6d:9c:5d:41:f4:1f:f4:57:ff:6a:d9:a4:0d:2b:8b:ca:85:
         37:2b:ed:1c:28:69:20:af:6d:92:1a:57:97:61:f7:e2:e0:5a:
         f3:ba:67:89:2a:18:3c:84:01:9d:74:81:ed:0b:c3:c3:28:23:
         ab:33:72:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqZAMWZbgKO4sMpdHAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez
Mzg4MB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk
MGViOGZlNGItNTAwYi00Mjc3LTgwMmEtNWFjZGY0MzIwOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmmg8heSEV0b8t3U5px+qJBxIHLdn368OwsCW
S1JOz94PG2maL/wVR6HiePmDrOUOC8Bz5a1FkiorqlWAqJbz/tZRuBwz8+eFQ8jR
0PctKreVSSOFLwi+VK89BxTyAv5vff5+Kk0RN4lX8D3VIpHdcZDaf0p1oq6WdTYC
tbGwQX7EoshNpgRk71jtBpZAelokDCms1TB9GNxkfOnQgHkxOJoqcFjTlX/fiFbK
o7OYD5KKzRpLWnW9Jt3e23adykbRpryR3jcFPXDfRnZb9rbLjpa+7fQxUaW8Vgzw
jRKW5SoeQhsS6nV7HS/b5xVpIVkgs41Cxcx7iB5HqtVFJU5mkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOqJUB6q2W8R8GRGDs4WZ3eTWCyEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj
NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvMzY5NzhlZmMtMDVhZC0z
ODAwLThkOTktZjZjYzRjMzE2NjFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1
Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh
MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2
YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAocOJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEHJj4OsChdP06TcTfA1Z66sC2ptvCjhx0HSywKXO8H05crMfPwWDJWz
o3uD3DSqQya8hCYBWYBM6mxARNVWejkFrMquoU1DKL1jQ7gKAVmBKsVIAmxsTzgw
KTFnT74Qn0Tu7BmEAp8riQKNJWmmaXE5e/GpqL0SbednMitZzrNBknOyRrnPnUTh
oALLszq1zspqNIjraPw2MPzXSUx13e0ZhipKJN3qxma1FG1coRUPsurYns0INND9
4POXDc9OfT4wwQT9AjxtnF1B9B/0V/9q2aQNK4vKhTcr7RwoaSCvbZIaV5dh9+Lg
WvO6Z4kqGDyEAZ10ge0Lw8MoI6szcmc=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:17:00 2025 by rpki-client