Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
File:                     fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa (raw, json)
Hash identifier:          XXFkg5U6JRZJDyawPHW3G4mirh8kNhsItQan2ZbHfhg=
Subject key identifier:   67:7D:5E:8D:2A:FE:86:8F:C2:E9:51:29:72:B4:F9:42:8A:3B:6E:15
Certificate issuer:       /CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
Certificate serial:       010D0C9F4328584A6DBB458D6078C64535AB5900
Authority key identifier: 0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        149.48.128.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:45:8d:60:78:c6:45:35:ab:59:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=79b1fe7a-eca9-422f-9043-5a93ca5145c8
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=d98fdb3a-e064-405c-a90c-fd9c478c9011
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:d3:9b:2b:42:87:58:e2:d4:16:81:82:85:70:
                    f8:dc:63:6f:a8:a9:3d:1d:ad:df:f3:6b:9f:61:0d:
                    e5:37:c8:b4:54:59:b7:ef:54:cd:05:cd:83:bf:de:
                    64:30:66:ba:f5:6c:7a:bc:16:40:29:9c:ec:17:73:
                    e1:77:86:f7:e4:10:b8:3f:fa:87:cb:dd:af:12:d5:
                    7b:fa:20:f3:a8:0d:70:48:b4:5b:8f:fb:e8:bf:e2:
                    39:44:88:47:12:4d:63:80:96:de:18:cd:ca:21:65:
                    1e:18:4e:05:5b:49:47:f3:d7:62:e9:03:bb:a8:55:
                    25:bb:09:4f:25:f1:fa:6a:05:97:06:7e:7e:c6:c6:
                    07:7c:57:a3:c9:8a:9f:9e:de:e5:f2:2c:30:91:37:
                    37:92:df:46:e1:03:77:07:df:29:fe:e4:41:0b:46:
                    9a:19:41:98:18:3f:a2:3e:bc:28:5a:4c:ad:c2:62:
                    7f:ce:c7:f7:00:87:79:48:ae:22:6e:2d:55:a1:53:
                    87:46:46:bd:2f:62:15:fd:12:06:a0:37:78:79:83:
                    f2:a3:aa:23:52:1a:50:fe:72:de:31:b6:33:3f:e0:
                    6c:3e:5e:08:70:a1:55:25:c7:00:ee:fc:4e:ee:c2:
                    d3:f5:65:6b:7b:27:43:26:82:f3:7e:2a:bf:d4:f7:
                    cc:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:7D:5E:8D:2A:FE:86:8F:C2:E9:51:29:72:B4:F9:42:8A:3B:6E:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/fb0a3356-03fd-361d-a7c8-8772eaf1d30f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8/79b1fe7a-eca9-422f-9043-5a93ca5145c8.crl

            X509v3 Authority Key Identifier:
                keyid:0C:61:A1:93:6A:44:3C:E2:11:31:FA:40:42:68:F7:A6:E7:34:84:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/79b1fe7a-eca9-422f-9043-5a93ca5145c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.48.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:02:03:1e:f9:46:13:fc:22:f6:5b:29:5d:cc:d3:7e:86:6d:
         fe:9f:d0:eb:86:a0:d6:37:0a:b4:86:78:8b:af:1e:f2:d5:76:
         1d:e6:5b:16:d1:7a:ad:f6:a4:8d:a1:8f:b4:0b:c0:18:44:1e:
         5f:a2:e6:41:d3:49:ea:82:84:be:6b:e6:81:7e:31:a5:8e:67:
         56:d6:e7:b7:6b:cc:49:72:ed:44:ac:b8:99:b3:85:91:eb:33:
         c1:7d:52:ae:f3:0f:dc:38:7a:20:30:f6:9a:b6:9c:bf:06:6b:
         8e:46:4a:61:ec:41:81:04:04:72:19:2e:e1:1f:e7:55:99:95:
         ab:18:8b:bb:3c:3c:f3:4d:2b:ce:57:0a:6c:db:5d:43:a4:d8:
         83:33:c4:67:ce:a8:fc:a6:84:ab:37:d7:5a:d8:d7:ee:fd:0d:
         f2:d7:d1:25:91:ea:01:b3:d8:8a:05:c0:6d:1a:7d:5d:c3:1a:
         29:cf:81:94:0c:27:80:28:25:98:23:ac:a5:a1:2c:ce:2c:5d:
         7f:3d:12:a1:61:bc:28:99:92:9c:8c:06:42:de:c9:e8:c0:24:
         94:40:ab:23:fe:95:fa:46:dd:9b:13:c9:ae:14:58:c5:a6:40:
         fe:67:26:18:42:eb:fc:a6:ea:e9:8f:9f:4b:51:f4:bd:07:e8:
         d8:f4:f4:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0WNYHjGRTWrWQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzliMWZlN2EtZWNhOS00MjJmLTkwNDMtNWE5M2NhNTE0
NWM4MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
ZDk4ZmRiM2EtZTA2NC00MDVjLWE5MGMtZmQ5YzQ3OGM5MDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsNObK0KHWOLUFoGChXD43GNvqKk9Ha3f82uf
YQ3lN8i0VFm371TNBc2Dv95kMGa69Wx6vBZAKZzsF3Phd4b35BC4P/qHy92vEtV7
+iDzqA1wSLRbj/vov+I5RIhHEk1jgJbeGM3KIWUeGE4FW0lH89di6QO7qFUluwlP
JfH6agWXBn5+xsYHfFejyYqfnt7l8iwwkTc3kt9G4QN3B98p/uRBC0aaGUGYGD+i
PrwoWkytwmJ/zsf3AId5SK4ibi1VoVOHRka9L2IV/RIGoDd4eYPyo6ojUhpQ/nLe
MbYzP+BsPl4IcKFVJccA7vxO7sLT9WVreydDJoLzfiq/1PfMjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGd9Xo0q/oaPwulRKXK0+UKKO24VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi83OWIx
ZmU3YS1lY2E5LTQyMmYtOTA0My01YTkzY2E1MTQ1YzgvZmIwYTMzNTYtMDNmZC0z
NjFkLWE3YzgtODc3MmVhZjFkMzBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNzliMWZlN2EtZWNhOS00MjJmLTkw
NDMtNWE5M2NhNTE0NWM4Lzc5YjFmZTdhLWVjYTktNDIyZi05MDQzLTVhOTNjYTUx
NDVjOC5jcmwwHwYDVR0jBBgwFoAUDGGhk2pEPOIRMfpAQmj3puc0hBQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi83OWIxZmU3YS1lY2E5LTQyMmYtOTA0My01YTkz
Y2E1MTQ1YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDlTCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH0CAx75RhP8IvZbKV3M036Gbf6f0OuGoNY3CrSGeIuvHvLVdh3mWxbR
eq32pI2hj7QLwBhEHl+i5kHTSeqChL5r5oF+MaWOZ1bW57drzEly7USsuJmzhZHr
M8F9Uq7zD9w4eiAw9pq2nL8Ga45GSmHsQYEEBHIZLuEf51WZlasYi7s8PPNNK85X
CmzbXUOk2IMzxGfOqPymhKs311rY1+79DfLX0SWR6gGz2IoFwG0afV3DGinPgZQM
J4AoJZgjrKWhLM4sXX89EqFhvCiZkpyMBkLeyejAJJRAqyP+lfpG3ZsTya4UWMWm
QP5nJhhC6/ym6umPn0tR9L0H6Nj09Fs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:23:33 2025 by rpki-client