Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa
File:                     9d64b08e-529d-3b8c-982d-346d2925ddc4.roa (raw, json)
Hash identifier:          /M+oU+njd2U2cA+OkZklvpXttZT90TsLWuouCHzM1e8=
Subject key identifier:   76:E8:E9:45:85:F3:7D:76:21:3E:AB:C4:B6:69:4C:5E:95:CD:B2:41
Certificate issuer:       /CN=081e7856-3e33-4747-82fb-8ae7578b05dc
Certificate serial:       010D0C9F43285849EBEA5723283252DE2203D300
Authority key identifier: 65:A1:AF:3B:E7:0D:2E:B6:D0:73:97:4B:CE:74:3B:D4:89:19:74:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa
Signing time:             Wed 21 May 2025 01:00:49 +0000
ROA not before:           Wed 21 May 2025 01:00:49 +0000
ROA not after:            Tue 19 Aug 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        165.239.176.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:eb:ea:57:23:28:32:52:de:22:03:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=081e7856-3e33-4747-82fb-8ae7578b05dc
        Validity
            Not Before: May 21 01:00:49 2025 GMT
            Not After : Aug 19 01:00:49 2025 GMT
        Subject: CN=9fc12f0c-ea14-4a78-b8a0-2df5117a4928
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:4e:01:32:b6:fa:04:11:a8:e3:5f:0d:90:
                    ec:80:07:fd:a0:a7:4f:63:dc:a5:7a:50:c1:aa:9a:
                    61:13:2b:a9:27:90:b5:10:31:ae:b7:54:15:14:20:
                    a6:f4:8c:b1:e1:d1:b7:92:c8:0b:d4:5d:8c:be:be:
                    d1:3e:90:2a:7c:4d:6d:7c:d8:a2:71:dc:42:ca:37:
                    37:19:7b:a9:fb:de:22:af:b5:de:5f:47:44:60:31:
                    37:3b:e2:ac:93:55:d2:32:ec:ed:8d:68:36:54:66:
                    a9:fb:da:34:02:57:97:ff:4a:2c:90:95:dc:d8:96:
                    4b:e8:a3:41:cc:d1:c9:aa:ae:f5:e5:46:7b:cf:fc:
                    f1:ad:4a:51:d1:95:df:a6:f3:b7:48:de:dd:0c:50:
                    88:72:c5:ff:39:ac:4c:7b:0d:c7:d8:bb:a4:c2:8c:
                    04:46:0c:03:db:18:db:2d:53:ff:9a:08:cb:0c:60:
                    e0:8c:22:29:c2:5f:b0:54:d7:49:eb:15:3a:5a:32:
                    b2:09:4c:25:d2:20:40:2f:42:31:2e:30:c5:7c:c2:
                    32:d8:de:1a:8d:fd:a2:cb:ff:11:2a:b9:18:4e:72:
                    8e:f8:a9:3b:f8:a8:b2:f0:91:cd:3e:bb:4f:03:99:
                    b5:ee:b5:e9:75:04:ee:93:e2:63:ea:da:9a:f1:07:
                    e5:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:E8:E9:45:85:F3:7D:76:21:3E:AB:C4:B6:69:4C:5E:95:CD:B2:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/9d64b08e-529d-3b8c-982d-346d2925ddc4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc/081e7856-3e33-4747-82fb-8ae7578b05dc.crl

            X509v3 Authority Key Identifier:
                keyid:65:A1:AF:3B:E7:0D:2E:B6:D0:73:97:4B:CE:74:3B:D4:89:19:74:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/081e7856-3e33-4747-82fb-8ae7578b05dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.239.176.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:e9:b2:0a:a0:d4:7c:89:5d:86:1a:66:64:fd:17:46:fd:fa:
         be:21:e2:3c:bd:e0:6a:4c:9d:a0:fd:6b:c2:95:f9:2d:88:ff:
         f8:e0:74:6e:fa:70:1c:f5:6e:e1:10:1f:c4:27:90:7b:e6:81:
         36:ff:14:cb:3d:5f:91:2d:21:01:2a:8e:61:94:b5:3d:bd:c8:
         80:13:02:dc:62:ca:a5:07:bb:90:96:2a:ae:e4:73:8a:05:5b:
         38:27:eb:9a:57:82:48:48:dd:c7:70:ac:c5:44:fd:50:17:8c:
         38:fc:52:f2:5b:9e:b8:04:a7:a9:88:18:4f:6c:3f:8e:a9:f1:
         61:50:5c:63:8d:21:42:32:dc:70:51:18:d4:1a:bf:e7:eb:72:
         3c:ba:f2:f6:4b:84:c8:a1:4f:f8:aa:dc:28:cc:66:17:f5:ee:
         f4:4a:a0:09:59:19:48:ec:6b:63:6f:e1:d1:64:19:cd:45:49:
         d1:fd:11:e0:62:ca:36:f7:58:0b:83:38:90:ea:97:33:d4:6b:
         39:36:51:9d:46:a4:51:6f:4b:95:48:a2:11:39:28:10:87:c7:
         12:62:64:b0:f9:d4:f1:16:e2:0e:4f:75:ec:86:e7:ff:b3:6c:
         6e:f8:56:ad:25:15:3d:35:23:01:37:45:2e:cc:00:af:6e:e7:
         49:e7:f1:f4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnr6lcjKDJS3iID0wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDgxZTc4NTYtM2UzMy00NzQ3LTgyZmItOGFlNzU3OGIw
NWRjMB4XDTI1MDUyMTAxMDA0OVoXDTI1MDgxOTAxMDA0OVowLzEtMCsGA1UEAxMk
OWZjMTJmMGMtZWExNC00YTc4LWI4YTAtMmRmNTExN2E0OTI4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwnJOATK2+gQRqONfDZDsgAf9oKdPY9ylelDB
qpphEyupJ5C1EDGut1QVFCCm9Iyx4dG3ksgL1F2Mvr7RPpAqfE1tfNiicdxCyjc3
GXup+94ir7XeX0dEYDE3O+Ksk1XSMuztjWg2VGap+9o0AleX/0oskJXc2JZL6KNB
zNHJqq715UZ7z/zxrUpR0ZXfpvO3SN7dDFCIcsX/OaxMew3H2LukwowERgwD2xjb
LVP/mgjLDGDgjCIpwl+wVNdJ6xU6WjKyCUwl0iBAL0IxLjDFfMIy2N4ajf2iy/8R
KrkYTnKO+Kk7+Kiy8JHNPrtPA5m17rXpdQTuk+Jj6tqa8Qfl7wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHbo6UWF8312IT6rxLZpTF6VzbJBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wODFl
Nzg1Ni0zZTMzLTQ3NDctODJmYi04YWU3NTc4YjA1ZGMvOWQ2NGIwOGUtNTI5ZC0z
YjhjLTk4MmQtMzQ2ZDI5MjVkZGM0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDgxZTc4NTYtM2UzMy00NzQ3LTgy
ZmItOGFlNzU3OGIwNWRjLzA4MWU3ODU2LTNlMzMtNDc0Ny04MmZiLThhZTc1Nzhi
MDVkYy5jcmwwHwYDVR0jBBgwFoAUZaGvO+cNLrbQc5dLznQ71IkZdCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wODFlNzg1Ni0zZTMzLTQ3NDctODJmYi04YWU3
NTc4YjA1ZGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQApe+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABzpsgqg1HyJXYYaZmT9F0b9+r4h4jy94GpMnaD9a8KV+S2I//jgdG76
cBz1buEQH8QnkHvmgTb/FMs9X5EtIQEqjmGUtT29yIATAtxiyqUHu5CWKq7kc4oF
Wzgn65pXgkhI3cdwrMVE/VAXjDj8UvJbnrgEp6mIGE9sP46p8WFQXGONIUIy3HBR
GNQav+frcjy68vZLhMihT/iq3CjMZhf17vRKoAlZGUjsa2Nv4dFkGc1FSdH9EeBi
yjb3WAuDOJDqlzPUazk2UZ1GpFFvS5VIohE5KBCHxxJiZLD51PEW4g5PdeyG5/+z
bG74Vq0lFT01IwE3RS7MAK9u50nn8fQ=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:09:45 2025 by rpki-client