Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/cb35843a-2aab-37b4-a4af-25606d430136.roa
File:                     cb35843a-2aab-37b4-a4af-25606d430136.roa (raw, json)
Hash identifier:          hxwTjpogBiww9NA+XaH96i0bjEnQVCck7q7Rl0Cz7Ck=
Subject key identifier:   B9:E6:5E:2A:EC:CD:26:62:3D:61:64:21:CF:28:14:BC:2E:93:E9:12
Certificate issuer:       /CN=e04d8190-ec33-4551-9197-d06746d399d0
Certificate serial:       010D0C9F4328584AA590F5505241D44CB7320500
Authority key identifier: 02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/cb35843a-2aab-37b4-a4af-25606d430136.roa
Signing time:             Sat 26 Jul 2025 13:01:04 +0000
ROA not before:           Sat 26 Jul 2025 13:01:04 +0000
ROA not after:            Fri 24 Oct 2025 13:01:04 +0000
asID:                     36352
IP address blocks:        107.178.140.0/24 maxlen: 24
                          107.178.141.0/24 maxlen: 24
                          107.178.142.0/24 maxlen: 24
                          107.178.143.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a5:90:f5:50:52:41:d4:4c:b7:32:05:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e04d8190-ec33-4551-9197-d06746d399d0
        Validity
            Not Before: Jul 26 13:01:04 2025 GMT
            Not After : Oct 24 13:01:04 2025 GMT
        Subject: CN=ae5b9c05-4c69-47ff-ab81-9783fd46a470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ca:b2:f1:fc:00:ff:cd:3f:18:b8:3e:24:bf:
                    c7:7d:8f:07:c9:ba:da:e2:04:6f:be:f1:fa:66:5e:
                    b9:9b:2f:76:69:27:bc:da:76:07:8a:d9:b5:cc:41:
                    7e:8c:56:53:66:60:5c:7d:32:37:e2:bd:54:f3:04:
                    45:81:4b:01:63:a0:0c:f7:02:b6:ca:1b:46:4d:58:
                    63:ce:0d:72:de:e9:a4:c6:d6:ef:a6:d4:c7:0f:82:
                    9c:33:e4:c1:0e:b3:3c:e1:5c:0d:25:9b:c5:7b:9d:
                    55:ac:9d:df:b9:91:9a:66:a6:b1:f8:94:10:99:45:
                    e7:9a:9c:96:cc:3c:50:9e:8c:7f:a2:9f:5a:bd:6e:
                    7c:d7:db:17:8e:36:97:44:c5:8c:0e:f6:21:fc:2a:
                    f9:98:cc:d7:f0:06:bc:55:24:a5:7b:cb:e6:70:88:
                    f2:3c:43:ee:4e:d1:2b:09:f2:09:c3:fe:27:f8:22:
                    f8:12:79:3f:21:a4:34:15:8a:94:fb:21:f6:da:35:
                    f5:bf:48:6c:42:94:de:66:cf:6e:5d:ab:f7:9c:d0:
                    fb:47:02:57:33:55:8f:c8:7c:13:f9:cb:e7:52:8d:
                    7f:ec:09:b9:d5:d4:f7:fc:6a:c5:63:70:62:d5:2b:
                    29:e3:7e:ae:c8:c6:dd:ba:bc:55:f2:a6:4c:33:91:
                    c8:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:E6:5E:2A:EC:CD:26:62:3D:61:64:21:CF:28:14:BC:2E:93:E9:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/cb35843a-2aab-37b4-a4af-25606d430136.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0/e04d8190-ec33-4551-9197-d06746d399d0.crl

            X509v3 Authority Key Identifier:
                keyid:02:A8:AE:0E:2B:11:C9:18:8B:5F:88:83:6B:6B:1C:83:08:3B:78:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e04d8190-ec33-4551-9197-d06746d399d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.178.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         be:d3:cb:5f:35:48:2e:e7:92:e7:03:ff:98:5a:f0:0b:99:d3:
         8e:e6:ce:83:b0:87:c0:36:3b:67:eb:02:33:f9:46:16:9a:e4:
         13:39:70:86:c0:21:8e:4e:83:90:10:b5:18:68:17:31:ac:2c:
         5d:01:64:ef:08:19:97:cc:49:64:3c:c8:6a:89:f5:1c:95:60:
         e6:2c:80:66:c1:ce:2b:15:11:7a:9d:cc:8a:80:c5:f6:77:1c:
         65:75:90:c3:66:e7:3c:38:5f:4b:74:6e:fa:0f:70:a4:90:fe:
         59:79:c9:25:29:20:af:77:55:c5:82:a4:fb:92:7e:42:1f:cd:
         df:dc:55:50:ff:0c:d4:e3:b7:6d:d1:a0:f6:54:80:df:56:bc:
         ba:39:05:b6:ff:ad:81:76:b7:40:09:9b:f6:ad:9a:15:71:14:
         53:39:56:64:12:f5:4b:a9:d8:df:93:3f:3f:8b:e2:8f:24:bf:
         14:66:e6:bf:2b:38:2f:17:3e:7c:7f:72:b9:31:c8:fa:3e:e9:
         00:e9:86:a3:a5:b8:f4:b6:d1:ca:dd:34:74:0a:4b:29:cf:5c:
         7e:b5:6d:a7:96:cc:cb:ba:19:ed:9d:43:57:4a:62:f9:bd:24:
         3f:fd:2f:90:32:7f:aa:74:b9:65:61:92:21:d9:5c:9b:b7:9f:
         13:51:19:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqlkPVQUkHUTLcyBQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTA0ZDgxOTAtZWMzMy00NTUxLTkxOTctZDA2NzQ2ZDM5
OWQwMB4XDTI1MDcyNjEzMDEwNFoXDTI1MTAyNDEzMDEwNFowLzEtMCsGA1UEAxMk
YWU1YjljMDUtNGM2OS00N2ZmLWFiODEtOTc4M2ZkNDZhNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr8qy8fwA/80/GLg+JL/HfY8Hybra4gRvvvH6
Zl65my92aSe82nYHitm1zEF+jFZTZmBcfTI34r1U8wRFgUsBY6AM9wK2yhtGTVhj
zg1y3umkxtbvptTHD4KcM+TBDrM84VwNJZvFe51VrJ3fuZGaZqax+JQQmUXnmpyW
zDxQnox/op9avW5819sXjjaXRMWMDvYh/Cr5mMzX8Aa8VSSle8vmcIjyPEPuTtEr
CfIJw/4n+CL4Enk/IaQ0FYqU+yH22jX1v0hsQpTeZs9uXav3nND7RwJXM1WPyHwT
+cvnUo1/7Am51dT3/GrFY3Bi1Ssp436uyMbdurxV8qZMM5HIKQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLnmXirszSZiPWFkIc8oFLwuk+kSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRk
ODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3NDZkMzk5ZDAvY2IzNTg0M2EtMmFhYi0z
N2I0LWE0YWYtMjU2MDZkNDMwMTM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTA0ZDgxOTAtZWMzMy00NTUxLTkx
OTctZDA2NzQ2ZDM5OWQwL2UwNGQ4MTkwLWVjMzMtNDU1MS05MTk3LWQwNjc0NmQz
OTlkMC5jcmwwHwYDVR0jBBgwFoAUAqiuDisRyRiLX4iDa2scgwg7eOYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lMDRkODE5MC1lYzMzLTQ1NTEtOTE5Ny1kMDY3
NDZkMzk5ZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCa7KMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL7Ty181SC7nkucD/5ha8AuZ047mzoOwh8A2O2frAjP5Rhaa5BM5cIbA
IY5Og5AQtRhoFzGsLF0BZO8IGZfMSWQ8yGqJ9RyVYOYsgGbBzisVEXqdzIqAxfZ3
HGV1kMNm5zw4X0t0bvoPcKSQ/ll5ySUpIK93VcWCpPuSfkIfzd/cVVD/DNTjt23R
oPZUgN9WvLo5Bbb/rYF2t0AJm/atmhVxFFM5VmQS9Uup2N+TPz+L4o8kvxRm5r8r
OC8XPnx/crkxyPo+6QDphqOluPS20crdNHQKSynPXH61baeWzMu6Ge2dQ1dKYvm9
JD/9L5Ayf6p0uWVhkiHZXJu3nxNRGdw=
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:38:25 2025 by rpki-client