Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa
File:                     df5adfc5-c427-36a1-9353-c23d1976c935.roa (raw, json)
Hash identifier:          FWYFXC5yOe6UFG/8piCdITw9Po1oQL1DVxf4TS6RZt8=
Subject key identifier:   3D:F7:27:0C:10:24:78:13:68:DF:B8:C6:D4:E7:3B:CE:4C:E5:CB:81
Certificate issuer:       /CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
Certificate serial:       010D0C9F43285849DC8FD0F8372F1C8583431580
Authority key identifier: 76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     10310
IP address blocks:        198.178.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d0:f8:37:2f:1c:85:83:43:15:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b3580ca-2fc3-48f5-bd65-dcc9f0b19481
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=6da4a36e-c9ba-44a7-a5f8-706cc06998f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:24:89:c2:b3:be:c6:67:3d:f2:18:3a:bc:68:
                    e2:1b:fc:b4:22:24:a2:df:36:36:fb:05:9c:34:76:
                    0d:a8:04:9f:9b:3b:39:ba:b4:88:0a:35:6b:ee:b7:
                    61:07:c7:dd:eb:b9:8f:ba:6d:23:d2:e2:bd:3e:9f:
                    05:ac:84:cf:6d:05:e9:ae:7e:25:58:c4:31:19:a2:
                    be:6d:76:25:ce:1d:b6:4a:ec:f5:fe:e1:9c:d7:eb:
                    23:40:d6:ee:11:2b:fd:b8:93:7a:3b:f8:fe:70:15:
                    18:63:cf:01:6d:69:2b:4d:9b:5f:19:96:f2:4a:54:
                    1b:52:d1:0c:b1:2e:c3:22:e0:43:a6:d6:f0:4e:f0:
                    e3:9e:29:14:b6:ba:4b:1e:72:cd:e5:c7:b5:24:38:
                    3a:3b:fe:a1:ea:32:dd:c4:aa:ba:17:08:56:9b:99:
                    c4:c5:70:12:6e:e3:e7:eb:28:dc:2c:52:8e:26:86:
                    14:d2:cb:82:57:ff:1d:e3:13:7a:30:06:a5:76:ba:
                    3c:fe:45:1f:68:da:7f:0b:5c:2a:50:0c:e7:56:62:
                    69:d7:28:f3:09:0f:d7:87:6e:ec:0e:3c:53:3d:15:
                    08:dc:12:15:81:e5:da:d7:c3:4b:2a:7a:7f:a7:f9:
                    c0:5d:69:6c:9f:e8:f0:de:ce:68:08:d9:13:4b:f7:
                    57:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:F7:27:0C:10:24:78:13:68:DF:B8:C6:D4:E7:3B:CE:4C:E5:CB:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/df5adfc5-c427-36a1-9353-c23d1976c935.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.crl

            X509v3 Authority Key Identifier:
                keyid:76:1B:26:A3:E9:3D:A1:91:F5:E4:1E:1E:48:2D:F7:36:82:12:D1:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1b3580ca-2fc3-48f5-bd65-dcc9f0b19481.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.178.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         61:e6:81:0f:81:22:c2:46:17:56:07:5c:04:b8:10:49:da:00:
         f7:ce:96:19:06:6e:c1:38:ff:6a:9f:3f:41:bd:76:e9:32:f9:
         d9:8b:6f:a8:63:96:3c:06:6c:76:73:1f:70:84:9a:e3:dc:11:
         14:f7:4c:e1:c4:88:30:5a:2c:c7:54:0d:7e:d3:87:1c:94:09:
         b9:97:5a:19:79:cd:df:6d:d8:37:21:cb:6b:5a:78:45:16:6f:
         26:04:1e:a8:fc:d7:5c:c5:8d:8d:71:97:92:87:c9:97:80:d1:
         70:0f:b9:33:3e:81:ad:06:e8:07:41:1f:df:12:c4:88:9c:49:
         a1:ab:15:aa:e8:1b:16:53:e2:1d:3a:1e:63:e6:cc:ff:77:19:
         a6:05:2f:b2:93:88:48:fd:93:db:e5:41:e5:bb:fc:9f:6c:72:
         35:f6:d1:cd:b9:d8:1b:1a:0a:bb:db:91:2c:b6:85:1b:0e:25:
         45:4b:01:78:a1:f0:e8:4c:fd:3f:b8:2b:76:29:2a:2a:a7:b9:
         e6:ec:b9:52:db:0a:4b:2e:1f:d1:61:db:64:ca:01:5c:ce:0d:
         ea:04:cc:bb:e2:b4:54:80:1a:54:b4:9b:e3:5c:b6:e4:27:38:
         39:5e:31:dd:c3:c2:61:3a:79:5a:12:1a:62:0c:49:a1:ad:3d:
         ce:6a:8f:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9D4Ny8chYNDFYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWIzNTgwY2EtMmZjMy00OGY1LWJkNjUtZGNjOWYwYjE5
NDgxMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
NmRhNGEzNmUtYzliYS00NGE3LWE1ZjgtNzA2Y2MwNjk5OGYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkCSJwrO+xmc98hg6vGjiG/y0IiSi3zY2+wWc
NHYNqASfmzs5urSICjVr7rdhB8fd67mPum0j0uK9Pp8FrITPbQXprn4lWMQxGaK+
bXYlzh22Suz1/uGc1+sjQNbuESv9uJN6O/j+cBUYY88BbWkrTZtfGZbySlQbUtEM
sS7DIuBDptbwTvDjnikUtrpLHnLN5ce1JDg6O/6h6jLdxKq6FwhWm5nExXASbuPn
6yjcLFKOJoYU0suCV/8d4xN6MAaldro8/kUfaNp/C1wqUAznVmJp1yjzCQ/Xh27s
DjxTPRUI3BIVgeXa18NLKnp/p/nAXWlsn+jw3s5oCNkTS/dXbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD33JwwQJHgTaN+4xtTnO85M5cuBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1
ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5ZjBiMTk0ODEvZGY1YWRmYzUtYzQyNy0z
NmExLTkzNTMtYzIzZDE5NzZjOTM1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWIzNTgwY2EtMmZjMy00OGY1LWJk
NjUtZGNjOWYwYjE5NDgxLzFiMzU4MGNhLTJmYzMtNDhmNS1iZDY1LWRjYzlmMGIx
OTQ4MS5jcmwwHwYDVR0jBBgwFoAUdhsmo+k9oZH15B4eSC33NoIS0XYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xYjM1ODBjYS0yZmMzLTQ4ZjUtYmQ2NS1kY2M5
ZjBiMTk0ODEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrKdMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGHmgQ+BIsJGF1YHXAS4EEnaAPfOlhkGbsE4/2qfP0G9duky+dmLb6hj
ljwGbHZzH3CEmuPcERT3TOHEiDBaLMdUDX7ThxyUCbmXWhl5zd9t2Dchy2taeEUW
byYEHqj811zFjY1xl5KHyZeA0XAPuTM+ga0G6AdBH98SxIicSaGrFaroGxZT4h06
HmPmzP93GaYFL7KTiEj9k9vlQeW7/J9scjX20c252BsaCrvbkSy2hRsOJUVLAXih
8OhM/T+4K3YpKiqnuebsuVLbCksuH9Fh22TKAVzODeoEzLvitFSAGlS0m+NctuQn
ODleMd3DwmE6eVoSGmIMSaGtPc5qj1Y=
-----END CERTIFICATE-----
Generated at Tue Jun 17 16:19:32 2025 by rpki-client