Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
File:                     44f4f3da-18f8-3804-9775-d4656e898e07.roa (raw, json)
Hash identifier:          JVxbpgt4wgcHh0slT4vl9wSVgOQcHyqQTbgGrQrtsGI=
Subject key identifier:   57:EC:7A:AD:89:F3:E3:DC:D6:A4:19:DB:89:45:F6:BF:05:A3:07:2D
Certificate issuer:       /CN=3efd7529-38b1-472c-9d5b-d87382d088a0
Certificate serial:       010D0C9F4328584A2ABAE2F6A910724A994DAC80
Authority key identifier: 5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     394285
IP address blocks:        174.137.104.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e2:f6:a9:10:72:4a:99:4d:ac:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3efd7529-38b1-472c-9d5b-d87382d088a0
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=472601ef-6abe-4be2-b80f-2edb54e1c0d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:72:f6:d9:7d:0a:c8:38:86:72:47:6c:e4:b5:
                    cf:a5:44:4c:0a:31:12:6b:d9:b9:14:04:f4:dc:ea:
                    69:81:08:58:b9:e8:c1:e6:51:07:1b:14:8c:3e:e2:
                    d4:00:33:0c:df:95:4a:a6:a4:a2:a7:7f:e8:7f:66:
                    38:d9:0d:d0:2d:0d:ce:b0:47:9d:eb:89:2b:0a:05:
                    f7:ed:0f:85:45:0e:fe:ad:f5:8b:73:aa:48:1a:ed:
                    d1:53:cf:ec:81:f1:92:04:93:ce:e1:65:4e:22:7d:
                    e9:08:17:b6:16:bf:be:16:ec:e8:34:61:09:47:72:
                    7f:7e:8c:7b:64:af:c0:6d:9c:aa:32:d2:67:53:b5:
                    76:20:9e:b8:38:33:42:b6:89:20:ac:7f:e5:05:e2:
                    3f:8b:54:f7:31:31:64:de:3c:3d:6a:a7:a3:82:54:
                    b0:40:47:5e:8b:2b:fe:78:98:50:e9:22:10:56:63:
                    ab:4b:99:3d:cf:74:ff:09:f2:2c:21:58:62:d6:94:
                    84:3d:8c:dc:57:64:26:89:e1:d4:89:ff:2c:94:91:
                    75:52:13:2c:c4:ba:d0:27:8d:0f:a9:a8:dd:47:e9:
                    83:3e:7c:53:20:b0:1e:03:95:36:be:2c:bf:53:cc:
                    ea:d0:04:88:54:8a:5f:4b:e2:40:e8:90:11:c5:1e:
                    0e:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:EC:7A:AD:89:F3:E3:DC:D6:A4:19:DB:89:45:F6:BF:05:A3:07:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/44f4f3da-18f8-3804-9775-d4656e898e07.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0/3efd7529-38b1-472c-9d5b-d87382d088a0.crl

            X509v3 Authority Key Identifier:
                keyid:5B:83:22:72:94:88:A9:78:59:9B:3A:DB:DD:E0:48:29:87:6A:94:07

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/3efd7529-38b1-472c-9d5b-d87382d088a0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.137.104.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f0:70:53:78:9d:43:d6:7a:e4:08:0f:92:14:1c:43:1a:98:
         fe:d3:6e:62:9a:d4:bd:58:3a:97:a5:08:06:dd:4f:b2:62:b7:
         3b:f9:6c:71:8e:7d:07:b6:83:e1:2c:65:33:a9:3a:0c:db:c7:
         ad:01:3d:59:b0:40:b9:71:cb:38:83:32:0a:44:8e:2c:44:eb:
         dd:c5:f9:3d:21:14:5b:17:59:5a:50:59:3d:62:73:6d:48:6e:
         9b:3e:bc:d6:d4:f2:38:3c:2d:22:41:23:3f:99:7b:62:1e:b7:
         14:44:36:a9:a5:3b:62:0f:73:a9:49:c8:7a:bc:02:99:9e:e8:
         01:b8:9a:8d:af:a4:d6:3e:33:6f:d5:c7:42:81:92:79:4f:58:
         5b:e8:21:6c:08:55:de:d6:fc:2d:69:4b:26:e5:d6:d8:24:bb:
         d9:a7:cc:ab:33:ef:aa:5b:93:f3:bc:13:d3:27:4f:60:6f:66:
         5c:a8:a1:73:fd:53:98:87:db:a4:e4:0d:50:b8:99:28:93:d8:
         d5:bf:67:69:d2:2b:c6:8f:da:a2:0e:cb:c0:1a:02:76:7c:06:
         30:f4:5f:63:df:cb:b3:35:e4:90:fa:00:94:05:a0:5e:3c:3d:
         1e:81:34:a8:6a:de:72:82:b1:cd:65:7d:41:80:d4:40:c4:20:
         e5:30:e5:bf
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuL2qRBySplNrIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2VmZDc1MjktMzhiMS00NzJjLTlkNWItZDg3MzgyZDA4
OGEwMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
NDcyNjAxZWYtNmFiZS00YmUyLWI4MGYtMmVkYjU0ZTFjMGQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAynL22X0KyDiGckds5LXPpURMCjESa9m5FAT0
3OppgQhYuejB5lEHGxSMPuLUADMM35VKpqSip3/of2Y42Q3QLQ3OsEed64krCgX3
7Q+FRQ7+rfWLc6pIGu3RU8/sgfGSBJPO4WVOIn3pCBe2Fr++FuzoNGEJR3J/fox7
ZK/AbZyqMtJnU7V2IJ64ODNCtokgrH/lBeI/i1T3MTFk3jw9aqejglSwQEdeiyv+
eJhQ6SIQVmOrS5k9z3T/CfIsIVhi1pSEPYzcV2QmieHUif8slJF1UhMsxLrQJ40P
qajdR+mDPnxTILAeA5U2viy/U8zq0ASIVIpfS+JA6JARxR4OgwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFfseq2J8+Pc1qQZ24lF9r8FowctMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZk
NzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODczODJkMDg4YTAvNDRmNGYzZGEtMThmOC0z
ODA0LTk3NzUtZDQ2NTZlODk4ZTA3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvM2VmZDc1MjktMzhiMS00NzJjLTlk
NWItZDg3MzgyZDA4OGEwLzNlZmQ3NTI5LTM4YjEtNDcyYy05ZDViLWQ4NzM4MmQw
ODhhMC5jcmwwHwYDVR0jBBgwFoAUW4MicpSIqXhZmzrb3eBIKYdqlAcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8zZWZkNzUyOS0zOGIxLTQ3MmMtOWQ1Yi1kODcz
ODJkMDg4YTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroloMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF7wcFN4nUPWeuQID5IUHEMamP7TbmKa1L1YOpelCAbdT7Jitzv5bHGO
fQe2g+EsZTOpOgzbx60BPVmwQLlxyziDMgpEjixE693F+T0hFFsXWVpQWT1ic21I
bps+vNbU8jg8LSJBIz+Ze2IetxRENqmlO2IPc6lJyHq8Apme6AG4mo2vpNY+M2/V
x0KBknlPWFvoIWwIVd7W/C1pSybl1tgku9mnzKsz76pbk/O8E9MnT2BvZlyooXP9
U5iH26TkDVC4mSiT2NW/Z2nSK8aP2qIOy8AaAnZ8BjD0X2Pfy7M15JD6AJQFoF48
PR6BNKhq3nKCsc1lfUGA1EDEIOUw5b8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:24:26 2025 by rpki-client