Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa
File:                     39ed7cc9-4ed7-3545-811d-3501676e3047.roa (raw, json)
Hash identifier:          XDviqf6t3m+bGhwD0Sjl3vQEvA9JyModxwd/zRnGmMo=
Subject key identifier:   D9:9B:28:F8:02:2C:70:1D:BB:1A:A9:4C:34:59:D6:EA:55:36:69:EA
Certificate issuer:       /CN=15106386-88d8-4103-adeb-a6e7c684ed09
Certificate serial:       010D0C9F4328584A1465516E415C7A04D35E8E80
Authority key identifier: 97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     395917
IP address blocks:        207.174.22.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:51:6e:41:5c:7a:04:d3:5e:8e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15106386-88d8-4103-adeb-a6e7c684ed09
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=51b5aa23-cf13-453b-a45d-d30f16b74cc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:4f:a9:bd:d6:b3:e5:02:f4:74:b1:4b:8e:0a:
                    d0:1f:5e:c0:6f:27:2f:dd:ae:65:13:95:5a:87:7e:
                    9b:98:75:8e:f5:af:d6:6e:d3:e3:ed:89:3e:c8:24:
                    e5:8e:6f:e8:b8:fb:5b:11:db:02:b7:4b:55:c6:0e:
                    9c:98:a8:49:1a:0a:42:8b:64:3c:42:ad:39:7a:23:
                    0e:e2:78:a7:97:ef:62:ec:5a:9e:03:7c:02:7e:e4:
                    71:7a:66:92:5b:7a:76:20:18:f5:6f:ff:ae:e6:49:
                    69:2b:9b:71:b5:a7:fa:6e:55:8f:55:01:1a:13:c6:
                    83:70:05:1a:f3:f3:75:6c:ba:eb:90:1e:f9:12:bb:
                    b8:ca:d6:5c:b1:7a:fc:15:c3:31:15:54:1c:02:31:
                    88:91:ed:df:44:b4:62:e9:4c:bf:da:ae:7f:15:1e:
                    3a:86:d3:de:73:76:ee:a0:21:bc:cc:f1:be:f7:f7:
                    38:4a:e0:61:86:5a:84:9c:ba:f3:9e:60:f9:d7:8f:
                    67:4c:fe:13:6b:15:91:aa:1f:ea:23:5d:18:24:28:
                    2f:76:99:2e:14:82:47:d6:7b:e6:3a:8c:95:a8:18:
                    45:2e:ae:46:8b:0d:d2:7e:b7:c0:3d:c0:ff:f3:94:
                    4f:42:ba:da:7b:32:27:9f:3d:f9:91:8e:c5:50:18:
                    4e:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:9B:28:F8:02:2C:70:1D:BB:1A:A9:4C:34:59:D6:EA:55:36:69:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/39ed7cc9-4ed7-3545-811d-3501676e3047.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09/15106386-88d8-4103-adeb-a6e7c684ed09.crl

            X509v3 Authority Key Identifier:
                keyid:97:96:AD:FA:13:B8:49:E5:BB:CE:A4:C0:40:17:DC:3E:AD:D2:A3:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/15106386-88d8-4103-adeb-a6e7c684ed09.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.174.22.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:a6:7a:b5:b9:06:de:40:e9:51:34:4a:15:2b:20:35:a1:bf:
         6b:24:0c:c8:3f:e0:b1:5e:01:60:f4:4b:52:e3:63:2b:3f:c2:
         5f:8a:d6:0a:d4:ff:67:86:e8:0b:09:1a:09:91:0d:f5:53:42:
         82:c0:04:00:18:da:f9:95:38:3b:5b:a4:1f:d8:9c:5a:4a:91:
         e6:89:9a:9e:b1:10:7d:2d:32:30:2c:58:ee:56:3f:ee:8d:08:
         c9:c7:06:51:60:e3:21:ef:6a:78:81:d2:b9:d5:0f:23:bc:f8:
         60:c4:84:8b:6e:42:a1:da:2f:e6:e2:2f:70:3c:3b:18:d0:ca:
         9f:b8:c6:f1:3f:88:e5:95:84:5b:ff:f5:e8:62:51:23:9d:1f:
         65:48:c0:98:8d:c1:e4:da:71:1e:ca:e8:b3:7a:0b:5a:06:1b:
         3f:73:85:b9:e4:c6:c4:d1:60:d2:d8:dd:09:2a:f1:7a:a3:e0:
         ab:86:91:76:6b:e3:be:bc:f0:4a:6d:ac:28:66:17:97:51:84:
         e7:46:7c:43:26:8e:57:f6:84:20:ca:6e:24:6b:4d:13:87:c8:
         56:15:e4:c2:32:59:dd:b3:e5:65:a4:91:8f:3d:9e:c2:36:e0:
         55:2a:fe:5b:3c:19:6b:47:42:fb:53:61:b1:0d:6c:cb:b5:d5:
         11:06:85:21
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZVFuQVx6BNNejoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTUxMDYzODYtODhkOC00MTAzLWFkZWItYTZlN2M2ODRl
ZDA5MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
NTFiNWFhMjMtY2YxMy00NTNiLWE0NWQtZDMwZjE2Yjc0Y2M0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjk+pvdaz5QL0dLFLjgrQH17Abycv3a5lE5Va
h36bmHWO9a/WbtPj7Yk+yCTljm/ouPtbEdsCt0tVxg6cmKhJGgpCi2Q8Qq05eiMO
4ninl+9i7FqeA3wCfuRxemaSW3p2IBj1b/+u5klpK5txtaf6blWPVQEaE8aDcAUa
8/N1bLrrkB75Eru4ytZcsXr8FcMxFVQcAjGIke3fRLRi6Uy/2q5/FR46htPec3bu
oCG8zPG+9/c4SuBhhlqEnLrznmD5149nTP4TaxWRqh/qI10YJCgvdpkuFIJH1nvm
OoyVqBhFLq5Giw3SfrfAPcD/85RPQrraezInnz35kY7FUBhOBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNmbKPgCLHAduxqpTDRZ1upVNmnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xNTEw
NjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3YzY4NGVkMDkvMzllZDdjYzktNGVkNy0z
NTQ1LTgxMWQtMzUwMTY3NmUzMDQ3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTUxMDYzODYtODhkOC00MTAzLWFk
ZWItYTZlN2M2ODRlZDA5LzE1MTA2Mzg2LTg4ZDgtNDEwMy1hZGViLWE2ZTdjNjg0
ZWQwOS5jcmwwHwYDVR0jBBgwFoAUl5at+hO4SeW7zqTAQBfcPq3SoxowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xNTEwNjM4Ni04OGQ4LTQxMDMtYWRlYi1hNmU3
YzY4NGVkMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz64WMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEWmerW5Bt5A6VE0ShUrIDWhv2skDMg/4LFeAWD0S1LjYys/wl+K1grU
/2eG6AsJGgmRDfVTQoLABAAY2vmVODtbpB/YnFpKkeaJmp6xEH0tMjAsWO5WP+6N
CMnHBlFg4yHvaniB0rnVDyO8+GDEhItuQqHaL+biL3A8OxjQyp+4xvE/iOWVhFv/
9ehiUSOdH2VIwJiNweTacR7K6LN6C1oGGz9zhbnkxsTRYNLY3Qkq8Xqj4KuGkXZr
47688EptrChmF5dRhOdGfEMmjlf2hCDKbiRrTROHyFYV5MIyWd2z5WWkkY89nsI2
4FUq/ls8GWtHQvtTYbENbMu11REGhSE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:40:04 2025 by rpki-client