Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/05e5a919-56a7-39a8-b526-e78bd1e25bba.roa
File:                     05e5a919-56a7-39a8-b526-e78bd1e25bba.roa (raw, json)
Hash identifier:          CHEP4zIFQhUsuQaeqi+pF3JQmb+vbyrX1r7yVJ7+f1Q=
Subject key identifier:   FC:65:7D:2A:62:6C:B0:B2:69:43:E4:E2:19:76:CB:35:45:C4:DD:DE
Certificate issuer:       /CN=a32c2393-27b5-4456-8f30-13915a38d80a
Certificate serial:       010D0C9F4328584996C485AB98548C62B00C6500
Authority key identifier: 04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/05e5a919-56a7-39a8-b526-e78bd1e25bba.roa
Signing time:             Sun 20 Apr 2025 13:01:01 +0000
ROA not before:           Sun 20 Apr 2025 13:01:01 +0000
ROA not after:            Sat 19 Jul 2025 13:01:01 +0000
asID:                     14114
IP address blocks:        157.133.152.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:96:c4:85:ab:98:54:8c:62:b0:0c:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a32c2393-27b5-4456-8f30-13915a38d80a
        Validity
            Not Before: Apr 20 13:01:01 2025 GMT
            Not After : Jul 19 13:01:01 2025 GMT
        Subject: CN=e48c6ddf-e5fc-4b36-bc96-1a7de792cc09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:61:b5:6d:f0:80:83:26:95:3d:b2:9f:3d:03:
                    bb:22:e8:55:05:08:8c:f0:d7:c7:7d:15:97:7c:7e:
                    c6:94:a8:87:ab:1f:f2:d4:91:9e:53:47:de:44:b7:
                    4f:17:b1:4e:74:c5:46:f2:43:fd:c1:16:74:5f:61:
                    56:ad:f2:62:5b:24:f1:d0:9a:7b:db:b0:65:4b:d3:
                    5c:2d:1b:08:1a:0d:68:72:08:8d:da:21:97:a3:19:
                    93:ad:65:0e:bf:9d:08:94:10:17:23:77:99:b5:7b:
                    96:5b:8b:3d:4b:c8:54:5b:9b:a4:8c:fe:85:66:66:
                    52:81:de:dc:19:fa:70:17:98:b7:83:19:ac:9f:7f:
                    20:2e:be:7a:86:65:10:a3:9b:99:c5:c1:bd:76:39:
                    b8:97:a8:5f:73:a0:4e:d9:0e:1b:ee:2b:ad:48:a3:
                    4a:14:05:71:17:77:6a:b9:f4:3f:ed:52:87:ca:c5:
                    eb:a1:80:24:52:31:5f:6b:9f:9f:d3:85:2d:50:20:
                    ec:e9:55:84:a9:8c:27:4c:79:d9:fd:57:5c:b8:fa:
                    e7:2b:38:95:e4:78:ee:d6:2f:ed:43:58:9b:c4:07:
                    3a:89:c1:d3:61:60:a3:55:aa:55:4e:78:84:65:ce:
                    27:f3:61:74:2c:2c:10:da:a7:f8:51:0c:21:f5:5f:
                    ea:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:65:7D:2A:62:6C:B0:B2:69:43:E4:E2:19:76:CB:35:45:C4:DD:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/05e5a919-56a7-39a8-b526-e78bd1e25bba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a/a32c2393-27b5-4456-8f30-13915a38d80a.crl

            X509v3 Authority Key Identifier:
                keyid:04:30:A5:0B:C6:80:6F:C7:8C:C2:DC:63:7A:85:B6:BE:D4:94:FB:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a32c2393-27b5-4456-8f30-13915a38d80a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.133.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         40:c7:d0:a7:bf:36:95:2d:b6:a5:32:34:af:3e:f2:08:d5:38:
         f4:c7:0b:47:5e:48:62:3e:6e:86:e5:f9:90:0d:6c:27:0e:16:
         94:d8:f7:a2:a6:45:ae:c4:93:4d:22:cd:4b:ee:1e:46:7a:f3:
         3c:bf:d1:51:10:a8:a2:6f:16:76:ee:1c:36:5f:f2:06:2a:38:
         1f:8e:f3:60:d3:8f:4e:d6:80:64:e2:6a:0e:dd:a4:ba:0d:4e:
         47:fb:f0:2a:a0:7b:50:cf:14:06:ca:d5:92:ee:c6:60:9f:94:
         cc:2d:3d:fe:f6:38:61:81:1f:33:0c:d3:dc:d9:62:c6:e5:86:
         54:54:5f:5a:47:7e:0e:c4:f4:cc:90:c4:29:0e:d0:ad:dd:e3:
         5c:68:1c:f4:9a:e1:fb:21:90:97:b5:c2:b4:0c:5b:0e:cb:3a:
         82:ef:3c:b4:67:1f:89:60:26:1a:06:a0:7e:6c:9a:c1:82:d0:
         d8:66:3d:e9:ab:50:f4:55:a4:db:b8:0a:00:71:72:2d:0b:a3:
         3c:76:5e:ad:a3:55:6f:33:3a:94:05:09:f4:7a:e2:7a:e5:6b:
         87:ce:0f:71:54:aa:7d:b4:4d:00:75:38:09:92:c2:8f:cd:7e:
         cd:27:33:39:cc:60:d9:f8:71:ea:b1:ae:27:fa:3b:0c:ee:04:
         0b:5e:b3:2b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmWxIWrmFSMYrAMZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTMyYzIzOTMtMjdiNS00NDU2LThmMzAtMTM5MTVhMzhk
ODBhMB4XDTI1MDQyMDEzMDEwMVoXDTI1MDcxOTEzMDEwMVowLzEtMCsGA1UEAxMk
ZTQ4YzZkZGYtZTVmYy00YjM2LWJjOTYtMWE3ZGU3OTJjYzA5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn2G1bfCAgyaVPbKfPQO7IuhVBQiM8NfHfRWX
fH7GlKiHqx/y1JGeU0feRLdPF7FOdMVG8kP9wRZ0X2FWrfJiWyTx0Jp727BlS9Nc
LRsIGg1ocgiN2iGXoxmTrWUOv50IlBAXI3eZtXuWW4s9S8hUW5ukjP6FZmZSgd7c
GfpwF5i3gxmsn38gLr56hmUQo5uZxcG9djm4l6hfc6BO2Q4b7iutSKNKFAVxF3dq
ufQ/7VKHysXroYAkUjFfa5+f04UtUCDs6VWEqYwnTHnZ/VdcuPrnKziV5Hju1i/t
Q1ibxAc6icHTYWCjVapVTniEZc4n82F0LCwQ2qf4UQwh9V/qgQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPxlfSpibLCyaUPk4hl2yzVFxN3eMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJj
MjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkxNWEzOGQ4MGEvMDVlNWE5MTktNTZhNy0z
OWE4LWI1MjYtZTc4YmQxZTI1YmJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTMyYzIzOTMtMjdiNS00NDU2LThm
MzAtMTM5MTVhMzhkODBhL2EzMmMyMzkzLTI3YjUtNDQ1Ni04ZjMwLTEzOTE1YTM4
ZDgwYS5jcmwwHwYDVR0jBBgwFoAUBDClC8aAb8eMwtxjeoW2vtSU+4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hMzJjMjM5My0yN2I1LTQ0NTYtOGYzMC0xMzkx
NWEzOGQ4MGEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDnYWYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEDH0Ke/NpUttqUyNK8+8gjVOPTHC0deSGI+bobl+ZANbCcOFpTY96Km
Ra7Ek00izUvuHkZ68zy/0VEQqKJvFnbuHDZf8gYqOB+O82DTj07WgGTiag7dpLoN
Tkf78Cqge1DPFAbK1ZLuxmCflMwtPf72OGGBHzMM09zZYsblhlRUX1pHfg7E9MyQ
xCkO0K3d41xoHPSa4fshkJe1wrQMWw7LOoLvPLRnH4lgJhoGoH5smsGC0NhmPemr
UPRVpNu4CgBxci0Lozx2Xq2jVW8zOpQFCfR64nrla4fOD3FUqn20TQB1OAmSwo/N
fs0nMznMYNn4ceqxrif6OwzuBAtesys=
-----END CERTIFICATE-----
Generated at Sun Jun 15 14:07:31 2025 by rpki-client