Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/1d0571b5-2a32-3920-8460-770e00cd2c17.roa
File:                     1d0571b5-2a32-3920-8460-770e00cd2c17.roa (raw, json)
Hash identifier:          RaTfuhJKlEGvApCIDxhGBuOLdubRmx7YMokbOOHq2R8=
Subject key identifier:   3A:99:33:38:B5:0C:E9:6B:7A:37:D3:B8:C6:03:11:EA:29:5D:77:F3
Certificate issuer:       /CN=fff22b91-ff6b-40b0-b626-033566818ca6
Certificate serial:       010D0C9F4328584A1B6007D139E1D2A2B58C5F80
Authority key identifier: B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/1d0571b5-2a32-3920-8460-770e00cd2c17.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     19905
IP address blocks:        135.84.152.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:07:d1:39:e1:d2:a2:b5:8c:5f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fff22b91-ff6b-40b0-b626-033566818ca6
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=31a91cf1-716f-480b-ba93-00eef126394f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:00:52:30:d2:e7:9e:3c:be:d8:0f:32:15:d2:
                    b7:6e:e9:38:23:84:4e:bc:1a:be:0f:86:b1:4f:bd:
                    cc:63:1f:33:8a:ac:2d:07:2a:6b:28:20:d8:ef:93:
                    49:24:ac:9b:07:89:d9:5e:11:48:c6:cb:c8:d6:ee:
                    05:f4:90:e9:00:ac:8f:0c:80:ba:b3:ad:ea:9a:8b:
                    8a:b9:ae:eb:14:03:d6:2f:0e:a3:f8:42:43:98:80:
                    9e:6c:0b:bc:19:de:ea:e9:3d:00:9c:1e:ca:8c:b7:
                    b4:fd:5b:58:94:3a:a4:e2:4a:18:6a:56:61:2c:6f:
                    9d:b7:09:43:05:9b:1e:c6:79:05:99:8f:1c:1d:76:
                    63:58:27:0d:70:f4:9d:7f:0b:df:96:63:db:e0:ab:
                    61:55:1b:3b:6e:2d:e6:78:21:ef:4c:02:c5:b3:51:
                    bc:59:11:8a:31:30:b8:e1:b9:2f:1e:a8:0d:c2:10:
                    03:3f:d5:23:dc:dc:64:2c:19:ed:66:94:90:23:7b:
                    c8:0c:64:6e:d0:02:4f:91:64:c3:2c:31:3b:e9:88:
                    61:2d:9a:10:e1:d8:3b:87:4a:3a:68:f8:bc:8e:5a:
                    10:e2:b8:48:73:76:35:4c:9e:ce:67:d4:ab:15:cb:
                    ee:16:07:b9:0a:72:fe:40:be:f0:64:e3:46:c8:2f:
                    50:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:99:33:38:B5:0C:E9:6B:7A:37:D3:B8:C6:03:11:EA:29:5D:77:F3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/1d0571b5-2a32-3920-8460-770e00cd2c17.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6/fff22b91-ff6b-40b0-b626-033566818ca6.crl

            X509v3 Authority Key Identifier:
                keyid:B3:6C:20:77:15:8F:D8:5A:0F:F2:17:8A:0B:43:91:2D:2E:12:A7:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/fff22b91-ff6b-40b0-b626-033566818ca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.84.152.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         59:72:4c:12:06:47:ac:41:ce:ed:9f:93:2a:07:66:1c:90:2c:
         28:6d:64:e0:4f:17:b9:0d:9d:80:bf:e8:44:9d:a7:c6:18:3a:
         5d:d0:df:c8:59:83:b7:39:93:8f:47:4f:5c:37:1b:ef:ae:2e:
         dc:aa:06:b8:a7:f6:16:37:4f:4e:88:ef:49:02:e5:b0:34:65:
         f5:ea:70:ce:b9:ff:f2:46:8d:39:89:0c:a9:97:86:ff:3b:79:
         3e:c8:41:85:72:f0:2a:f0:20:28:02:e9:4b:af:ce:d1:fd:4a:
         6e:1b:a1:76:46:dd:f3:c4:6d:af:ac:17:12:a7:18:b0:4b:89:
         ff:8d:a4:35:84:b7:39:d0:6d:4a:2b:31:32:e0:ed:02:0b:f1:
         95:9a:91:ce:07:c9:32:42:cd:a1:48:ce:cb:9d:67:19:8f:58:
         99:45:c3:fd:5f:6d:32:e0:36:db:2d:c1:83:4b:c2:d2:61:68:
         3e:84:a3:6c:9c:e2:ad:d8:5b:8a:f2:30:45:9c:dc:92:1e:7d:
         b5:b0:06:d5:22:53:da:b0:d6:ae:6a:23:5a:4b:46:bf:81:71:
         fe:a3:13:77:43:61:16:56:c9:66:f6:01:52:ff:e4:25:d6:2c:
         a2:57:06:35:9e:34:b2:05:bb:29:4f:2a:0d:d7:51:66:78:3a:
         7b:88:ea:ab
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYAfROeHSorWMX4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmZmMjJiOTEtZmY2Yi00MGIwLWI2MjYtMDMzNTY2ODE4
Y2E2MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
MzFhOTFjZjEtNzE2Zi00ODBiLWJhOTMtMDBlZWYxMjYzOTRmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjABSMNLnnjy+2A8yFdK3buk4I4ROvBq+D4ax
T73MYx8ziqwtByprKCDY75NJJKybB4nZXhFIxsvI1u4F9JDpAKyPDIC6s63qmouK
ua7rFAPWLw6j+EJDmICebAu8Gd7q6T0AnB7KjLe0/VtYlDqk4koYalZhLG+dtwlD
BZsexnkFmY8cHXZjWCcNcPSdfwvflmPb4KthVRs7bi3meCHvTALFs1G8WRGKMTC4
4bkvHqgNwhADP9Uj3NxkLBntZpSQI3vIDGRu0AJPkWTDLDE76YhhLZoQ4dg7h0o6
aPi8jloQ4rhIc3Y1TJ7OZ9SrFcvuFge5CnL+QL7wZONGyC9QEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDqZMzi1DOlrejfTuMYDEeopXXfzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYy
MmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1NjY4MThjYTYvMWQwNTcxYjUtMmEzMi0z
OTIwLTg0NjAtNzcwZTAwY2QyYzE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZmZmMjJiOTEtZmY2Yi00MGIwLWI2
MjYtMDMzNTY2ODE4Y2E2L2ZmZjIyYjkxLWZmNmItNDBiMC1iNjI2LTAzMzU2Njgx
OGNhNi5jcmwwHwYDVR0jBBgwFoAUs2wgdxWP2FoP8heKC0ORLS4Spx8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mZmYyMmI5MS1mZjZiLTQwYjAtYjYyNi0wMzM1
NjY4MThjYTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDh1SYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFlyTBIGR6xBzu2fkyoHZhyQLChtZOBPF7kNnYC/6ESdp8YYOl3Q38hZ
g7c5k49HT1w3G++uLtyqBrin9hY3T06I70kC5bA0ZfXqcM65//JGjTmJDKmXhv87
eT7IQYVy8CrwICgC6UuvztH9Sm4boXZG3fPEba+sFxKnGLBLif+NpDWEtznQbUor
MTLg7QIL8ZWakc4HyTJCzaFIzsudZxmPWJlFw/1fbTLgNtstwYNLwtJhaD6Eo2yc
4q3YW4ryMEWc3JIefbWwBtUiU9qw1q5qI1pLRr+Bcf6jE3dDYRZWyWb2AVL/5CXW
LKJXBjWeNLIFuylPKg3XUWZ4OnuI6qs=
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:52:43 2025 by rpki-client