Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/b7fa75ee-13f5-39c3-83f0-1713329dd695.roa
File:                     b7fa75ee-13f5-39c3-83f0-1713329dd695.roa (raw, json)
Hash identifier:          OV/0pRcmih1V9d4wPC8N0HlID3LjVswUGMrf7sGSGNo=
Subject key identifier:   03:3A:86:14:C3:96:56:5D:C9:3D:18:3A:32:96:A1:F4:74:AE:86:24
Certificate issuer:       /CN=910396e7-2d32-4040-a73d-ad686b8445b3
Certificate serial:       010D0C9F4328584A2C2018873EF25D95A52CAB00
Authority key identifier: 4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/b7fa75ee-13f5-39c3-83f0-1713329dd695.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     174
IP address blocks:        110.172.149.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:18:87:3e:f2:5d:95:a5:2c:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=910396e7-2d32-4040-a73d-ad686b8445b3
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=e1d05c0f-ac5d-49df-a2df-1c3fa07218a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:97:a6:ed:da:5a:e8:1c:9e:4d:ae:e4:17:8c:
                    eb:9b:b1:fb:ae:ef:62:e3:a1:2e:54:65:be:67:b9:
                    d1:ff:41:33:31:0c:0e:7f:5d:7e:f1:24:f6:1d:b7:
                    64:94:23:88:a2:d2:9d:18:f0:03:ed:67:84:84:7a:
                    81:8f:e5:30:11:f8:ec:4f:93:a9:e9:17:cf:78:ed:
                    0e:07:ad:e8:d8:7e:1d:9c:80:bd:b4:3c:58:88:a4:
                    d9:30:71:ee:16:1a:9b:81:87:50:08:e9:a5:04:ee:
                    53:07:be:96:ba:a5:aa:9f:bc:3f:c0:18:6f:d0:77:
                    1d:b2:87:c2:e5:62:55:8a:1a:1d:c6:90:f0:c4:c8:
                    ae:fa:24:81:cf:27:7b:d6:97:88:54:38:32:0c:51:
                    b1:4f:c8:bc:31:ba:c6:57:58:94:2a:df:59:ac:9d:
                    b2:d2:54:34:c6:94:82:6a:05:22:00:52:7a:d6:2e:
                    41:5d:4f:ec:bf:74:f9:c7:65:e3:8d:3d:ee:38:cf:
                    40:46:1d:16:ad:08:9a:d9:fd:fc:94:01:99:49:fe:
                    82:87:b3:fa:a0:5b:ab:4e:4e:e7:89:6b:1b:10:c4:
                    8d:5b:ed:31:aa:39:46:df:e5:23:d0:d7:12:53:96:
                    70:18:bc:c4:c9:49:44:94:49:50:38:2c:d9:c4:e0:
                    00:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:3A:86:14:C3:96:56:5D:C9:3D:18:3A:32:96:A1:F4:74:AE:86:24
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/b7fa75ee-13f5-39c3-83f0-1713329dd695.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3/910396e7-2d32-4040-a73d-ad686b8445b3.crl

            X509v3 Authority Key Identifier:
                keyid:4B:45:16:53:A2:29:87:95:52:DD:ED:B6:AF:5D:CF:0A:21:84:CD:3A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/910396e7-2d32-4040-a73d-ad686b8445b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.172.149.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9f:06:01:ab:1d:6c:f4:eb:67:37:dc:b5:78:4c:bb:bb:22:42:
         c4:53:b3:d4:84:e2:ed:38:fb:e3:e7:f0:e5:33:3c:9c:29:aa:
         3e:c1:1d:18:63:88:31:0f:92:21:b6:4a:d1:e7:17:e8:84:db:
         33:5a:28:cc:67:5f:d8:c7:e7:06:3c:3b:d2:0c:ab:96:1f:2b:
         43:73:c7:6c:ab:32:55:32:c3:36:7a:14:e7:11:52:eb:13:45:
         bc:e3:da:e3:bd:c5:ea:aa:0d:31:50:8a:80:76:49:5e:12:7e:
         4a:ea:f9:e6:7c:ef:f7:de:93:c8:bf:28:b8:55:18:1b:2f:ff:
         4c:0c:51:ff:9d:66:aa:93:04:30:97:d1:61:70:28:07:c0:8d:
         85:eb:69:8a:08:8a:94:00:65:f7:25:8a:e2:d0:7b:f4:62:ec:
         e6:c2:d3:e3:7f:8f:f8:32:ac:40:7e:68:6a:5d:5a:e1:5d:bb:
         ed:d0:9b:02:eb:97:5d:c3:f5:38:12:96:40:bb:5e:25:e3:f1:
         2b:87:c3:27:b9:ee:f6:00:9d:8a:f6:81:ce:06:5e:fa:ff:8f:
         e9:f6:d2:7f:5e:20:1b:bf:08:5d:c2:90:41:a1:58:57:c0:9b:
         44:a8:29:67:5d:3e:39:6f:8a:31:1b:52:96:a8:a3:50:91:27:
         a1:c3:c5:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBiHPvJdlaUsqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEwMzk2ZTctMmQzMi00MDQwLWE3M2QtYWQ2ODZiODQ0
NWIzMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
ZTFkMDVjMGYtYWM1ZC00OWRmLWEyZGYtMWMzZmEwNzIxOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5em7dpa6ByeTa7kF4zrm7H7ru9i46EuVGW+
Z7nR/0EzMQwOf11+8ST2HbdklCOIotKdGPAD7WeEhHqBj+UwEfjsT5Op6RfPeO0O
B63o2H4dnIC9tDxYiKTZMHHuFhqbgYdQCOmlBO5TB76WuqWqn7w/wBhv0HcdsofC
5WJVihodxpDwxMiu+iSBzyd71peIVDgyDFGxT8i8MbrGV1iUKt9ZrJ2y0lQ0xpSC
agUiAFJ61i5BXU/sv3T5x2XjjT3uOM9ARh0WrQia2f38lAGZSf6Ch7P6oFurTk7n
iWsbEMSNW+0xqjlG3+Uj0NcSU5ZwGLzEyUlElElQOCzZxOAAjwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAM6hhTDllZdyT0YOjKWofR0roYkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MTAz
OTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4NmI4NDQ1YjMvYjdmYTc1ZWUtMTNmNS0z
OWMzLTgzZjAtMTcxMzMyOWRkNjk1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTEwMzk2ZTctMmQzMi00MDQwLWE3
M2QtYWQ2ODZiODQ0NWIzLzkxMDM5NmU3LTJkMzItNDA0MC1hNzNkLWFkNjg2Yjg0
NDViMy5jcmwwHwYDVR0jBBgwFoAUS0UWU6Iph5VS3e22r13PCiGEzTowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MTAzOTZlNy0yZDMyLTQwNDAtYTczZC1hZDY4
NmI4NDQ1YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbqyVMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ8GAasdbPTrZzfctXhMu7siQsRTs9SE4u04++Pn8OUzPJwpqj7BHRhj
iDEPkiG2StHnF+iE2zNaKMxnX9jH5wY8O9IMq5YfK0Nzx2yrMlUywzZ6FOcRUusT
Rbzj2uO9xeqqDTFQioB2SV4Sfkrq+eZ87/fek8i/KLhVGBsv/0wMUf+dZqqTBDCX
0WFwKAfAjYXraYoIipQAZfcliuLQe/Ri7ObC0+N/j/gyrEB+aGpdWuFdu+3QmwLr
l13D9TgSlkC7XiXj8SuHwye57vYAnYr2gc4GXvr/j+n20n9eIBu/CF3CkEGhWFfA
m0SoKWddPjlvijEbUpaoo1CRJ6HDxeo=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:51:50 2025 by rpki-client