Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa
File:                     f4d7f13b-71e5-36f9-8515-997655669633.roa (raw, json)
Hash identifier:          mVvVDMPWQ0Liz4EjVSLtWsrsIwpNVoatTN3Zp571jA4=
Subject key identifier:   64:8B:9C:C6:8C:38:23:FE:74:A0:2E:F1:82:04:DB:21:9A:2D:EA:12
Certificate issuer:       /CN=b60fd368-cb50-418b-8840-57c8491066b3
Certificate serial:       010D0C9F43285849EEB501D3F90656B03273E020
Authority key identifier: 8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa
Signing time:             Thu 22 May 2025 01:00:51 +0000
ROA not before:           Thu 22 May 2025 01:00:51 +0000
ROA not after:            Wed 20 Aug 2025 01:00:51 +0000
asID:                     398754
IP address blocks:        152.36.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ee:b5:01:d3:f9:06:56:b0:32:73:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b60fd368-cb50-418b-8840-57c8491066b3
        Validity
            Not Before: May 22 01:00:51 2025 GMT
            Not After : Aug 20 01:00:51 2025 GMT
        Subject: CN=d3db28de-1532-4c90-becf-f360aa64e8d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ac:f0:ed:17:c0:e8:1b:70:0c:20:66:b1:c5:
                    bd:6f:c9:2c:ab:ae:34:08:28:8e:3b:ae:f1:d2:b5:
                    cd:93:e2:74:d1:38:08:cd:8c:c1:32:9f:ef:b7:4e:
                    31:d5:12:ce:ff:d6:05:ff:50:d6:78:3c:80:80:70:
                    2b:5f:02:94:a4:90:ae:d8:34:4f:47:11:ab:c0:01:
                    8b:f5:0a:e3:e1:4f:9d:15:0a:2f:74:86:5a:b5:59:
                    6f:7e:39:98:8d:b2:b7:fc:49:c1:dd:d1:76:1b:fb:
                    c0:11:8f:60:fb:ce:f3:95:1b:4a:f9:eb:0e:0c:c1:
                    d3:1c:9d:35:3d:d7:39:e4:1e:8b:6e:f9:a1:27:74:
                    55:40:f3:ae:0a:3f:50:e9:fa:c6:fc:a0:26:67:7b:
                    ab:9e:25:19:ce:38:cf:bf:48:e5:bd:70:bb:de:81:
                    93:ec:b1:09:cf:ff:8e:c2:6b:34:b4:9e:f4:24:e5:
                    2b:40:55:29:e2:da:86:74:49:5d:53:db:d2:42:7f:
                    6e:42:ff:9b:67:a8:f2:55:be:a5:94:ee:c3:b7:c9:
                    33:68:79:e2:36:0f:ae:ed:57:df:15:35:29:79:bf:
                    42:c3:02:28:69:d6:3c:87:d6:01:eb:e8:81:14:df:
                    c5:51:22:41:e8:54:f3:4f:58:22:ad:7a:8e:c2:3a:
                    d0:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:8B:9C:C6:8C:38:23:FE:74:A0:2E:F1:82:04:DB:21:9A:2D:EA:12
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/f4d7f13b-71e5-36f9-8515-997655669633.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3/b60fd368-cb50-418b-8840-57c8491066b3.crl

            X509v3 Authority Key Identifier:
                keyid:8E:1C:4F:B6:E2:B8:B8:5D:C8:2D:ED:E4:80:47:C3:86:1B:5C:9D:8A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/b60fd368-cb50-418b-8840-57c8491066b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.36.128.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4a:e6:24:90:f3:53:ec:54:6a:5b:28:6f:f1:ac:2d:a5:b6:5f:
         20:37:2c:0c:03:52:c7:d7:db:ce:4b:d6:99:6d:81:c9:02:3e:
         b5:c4:82:f7:ee:ef:99:85:69:78:d0:f6:72:02:c5:7a:7d:0b:
         8f:2f:21:45:63:a3:6d:0b:cc:22:7f:0d:f6:fa:13:39:0f:57:
         30:88:b7:ff:f0:c3:f1:8a:3e:58:e8:0e:bc:82:62:45:ae:c2:
         9f:9f:87:a8:f0:85:af:cf:1c:a5:46:4c:ee:20:a8:f7:b7:61:
         7a:22:31:c4:36:d8:04:e3:03:f2:67:e6:4e:e9:a0:56:1b:83:
         c6:a9:9b:04:d2:53:6e:21:45:ad:47:f1:50:fc:31:e4:02:d3:
         45:47:61:b1:50:f7:1b:bb:ac:b8:08:c2:b9:7a:e4:e6:5d:fe:
         3a:2b:37:c2:0f:ee:d3:04:d7:8e:61:d9:6e:f1:e3:1b:d1:73:
         74:41:7b:d1:01:54:af:b8:fc:91:26:94:f4:f3:4a:95:f4:19:
         5a:1d:8b:37:2e:5b:d4:10:2d:c1:76:a2:2d:7b:1e:ac:1a:74:
         2b:78:a9:13:45:b1:48:da:2c:ba:8a:40:66:4f:c8:c9:69:10:
         d4:c4:8d:06:0e:32:30:72:8f:4d:f6:61:66:24:ed:6a:d6:cc:
         f1:0a:fc:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnutQHT+QZWsDJz4CAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjYwZmQzNjgtY2I1MC00MThiLTg4NDAtNTdjODQ5MTA2
NmIzMB4XDTI1MDUyMjAxMDA1MVoXDTI1MDgyMDAxMDA1MVowLzEtMCsGA1UEAxMk
ZDNkYjI4ZGUtMTUzMi00YzkwLWJlY2YtZjM2MGFhNjRlOGQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmqzw7RfA6BtwDCBmscW9b8ksq640CCiOO67x
0rXNk+J00TgIzYzBMp/vt04x1RLO/9YF/1DWeDyAgHArXwKUpJCu2DRPRxGrwAGL
9Qrj4U+dFQovdIZatVlvfjmYjbK3/EnB3dF2G/vAEY9g+87zlRtK+esODMHTHJ01
Pdc55B6LbvmhJ3RVQPOuCj9Q6frG/KAmZ3urniUZzjjPv0jlvXC73oGT7LEJz/+O
wms0tJ70JOUrQFUp4tqGdEldU9vSQn9uQv+bZ6jyVb6llO7Dt8kzaHniNg+u7Vff
FTUpeb9CwwIoadY8h9YB6+iBFN/FUSJB6FTzT1girXqOwjrQZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGSLnMaMOCP+dKAu8YIE2yGaLeoSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iNjBm
ZDM2OC1jYjUwLTQxOGItODg0MC01N2M4NDkxMDY2YjMvZjRkN2YxM2ItNzFlNS0z
NmY5LTg1MTUtOTk3NjU1NjY5NjMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYjYwZmQzNjgtY2I1MC00MThiLTg4
NDAtNTdjODQ5MTA2NmIzL2I2MGZkMzY4LWNiNTAtNDE4Yi04ODQwLTU3Yzg0OTEw
NjZiMy5jcmwwHwYDVR0jBBgwFoAUjhxPtuK4uF3ILe3kgEfDhhtcnYowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iNjBmZDM2OC1jYjUwLTQxOGItODg0MC01N2M4
NDkxMDY2YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGmCSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAErmJJDzU+xUalsob/GsLaW2XyA3LAwDUsfX285L1pltgckCPrXEgvfu
75mFaXjQ9nICxXp9C48vIUVjo20LzCJ/Dfb6EzkPVzCIt//ww/GKPljoDryCYkWu
wp+fh6jwha/PHKVGTO4gqPe3YXoiMcQ22ATjA/Jn5k7poFYbg8apmwTSU24hRa1H
8VD8MeQC00VHYbFQ9xu7rLgIwrl65OZd/jorN8IP7tME145h2W7x4xvRc3RBe9EB
VK+4/JEmlPTzSpX0GVodizcuW9QQLcF2oi17HqwadCt4qRNFsUjaLLqKQGZPyMlp
ENTEjQYOMjByj032YWYk7WrWzPEK/Jg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:38:23 2025 by rpki-client