Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fcb8c079-f87d-3a61-9fbb-6f9462ee4db0.roa
File:                     fcb8c079-f87d-3a61-9fbb-6f9462ee4db0.roa (raw, json)
Hash identifier:          gYZXZ+ryQ2lsszqYkjRITm8yJG4e/y9nX9+WbK3G+rw=
Subject key identifier:   76:0B:A8:73:CC:02:EB:A7:B1:42:2C:EB:23:A3:D2:09:2A:42:E2:FC
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F43285849955F1C3D551AE3D1B7BE7680
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fcb8c079-f87d-3a61-9fbb-6f9462ee4db0.roa
Signing time:             Sun 20 Apr 2025 01:00:47 +0000
ROA not before:           Sun 20 Apr 2025 01:00:47 +0000
ROA not after:            Sat 19 Jul 2025 01:00:47 +0000
asID:                     852
IP address blocks:        207.102.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:95:5f:1c:3d:55:1a:e3:d1:b7:be:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 20 01:00:47 2025 GMT
            Not After : Jul 19 01:00:47 2025 GMT
        Subject: CN=be58dc69-cf3d-4ea5-bef3-0a0a2e59dc99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:87:99:25:8d:0d:31:02:ed:b0:f2:08:c7:d5:
                    aa:cf:72:89:6f:38:1d:3e:0a:77:ed:ad:2f:15:c6:
                    d1:5d:6f:2d:7c:4e:df:55:d7:65:e4:9e:9b:2f:9e:
                    15:ff:a2:fe:c7:69:df:9e:84:5a:69:f1:67:ad:fc:
                    62:75:04:be:81:da:ae:7c:6f:52:a7:29:bd:81:2f:
                    09:09:eb:62:3d:92:b2:87:59:ee:73:8c:07:f5:07:
                    dd:ce:22:4c:80:22:65:61:23:76:4f:5c:7b:1f:04:
                    34:53:5f:f4:55:e5:dd:81:19:5a:83:3d:c5:f6:78:
                    f6:94:f8:78:00:e9:0b:58:92:fd:b9:3e:a7:db:72:
                    63:d1:1c:ae:66:93:d6:1d:79:38:a0:3a:20:1d:8d:
                    5b:2d:7e:4f:9d:e9:43:e9:af:19:21:2d:6b:6c:6e:
                    9d:f8:ba:1a:76:1a:4c:b3:10:90:29:f4:0a:fc:7f:
                    b3:d6:c2:6c:ea:3f:d0:87:f9:df:42:d7:e6:1b:60:
                    2d:66:e5:75:60:93:bc:9b:57:11:2d:70:dd:8d:3a:
                    59:a5:35:73:f5:69:ba:82:ff:68:43:17:62:81:06:
                    34:26:36:8c:e4:c2:f2:9a:d1:89:6a:33:0c:02:97:
                    8c:37:3c:9d:57:04:a1:7d:22:86:5f:cf:c1:2f:04:
                    5c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0B:A8:73:CC:02:EB:A7:B1:42:2C:EB:23:A3:D2:09:2A:42:E2:FC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/fcb8c079-f87d-3a61-9fbb-6f9462ee4db0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.102.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a8:9f:85:e2:fb:0f:17:30:07:ae:44:ea:ce:c8:33:f4:8e:18:
         10:a7:48:52:41:60:43:2a:f5:42:0a:c7:3b:4c:51:97:3d:18:
         03:b6:c6:82:ee:ef:77:82:52:bb:2c:81:73:4a:6b:a9:67:1c:
         85:4c:cf:60:ab:d9:cb:25:c8:82:8b:0c:30:7c:87:bb:7f:4d:
         12:8e:46:57:98:1a:41:99:87:f7:95:af:16:b5:8b:2c:3c:bd:
         a5:1d:f1:25:1c:80:00:6f:45:c9:20:f5:18:ba:4a:46:ec:f2:
         cc:ec:9b:76:2e:74:ad:3c:a1:98:7a:95:8a:6a:ef:74:88:79:
         f4:cc:a2:4e:43:86:17:46:65:cb:38:73:78:dc:cf:88:00:cb:
         e0:4a:11:e3:51:56:a8:53:c8:8b:13:8e:47:26:d0:c3:09:16:
         46:cd:4f:00:9b:75:21:14:b8:7a:61:8e:e1:9c:fa:cd:35:5b:
         7f:96:62:22:cc:aa:82:b9:45:1f:e9:45:3a:66:63:88:15:b8:
         a2:df:da:f1:36:f6:c9:81:5e:49:57:f7:7e:b9:70:a7:41:e9:
         26:23:cb:62:df:98:e6:e6:8d:75:d2:ac:87:4b:06:e1:ea:bf:
         50:a6:46:d9:24:6f:ba:fb:00:de:0a:c4:a6:9e:49:27:a2:7e:
         62:b2:11:df
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmVXxw9VRrj0be+doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQyMDAxMDA0N1oXDTI1MDcxOTAxMDA0N1owLzEtMCsGA1UEAxMk
YmU1OGRjNjktY2YzZC00ZWE1LWJlZjMtMGEwYTJlNTlkYzk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgIeZJY0NMQLtsPIIx9Wqz3KJbzgdPgp37a0v
FcbRXW8tfE7fVddl5J6bL54V/6L+x2nfnoRaafFnrfxidQS+gdqufG9Spym9gS8J
CetiPZKyh1nuc4wH9QfdziJMgCJlYSN2T1x7HwQ0U1/0VeXdgRlagz3F9nj2lPh4
AOkLWJL9uT6n23Jj0RyuZpPWHXk4oDogHY1bLX5PnelD6a8ZIS1rbG6d+LoadhpM
sxCQKfQK/H+z1sJs6j/Qh/nfQtfmG2AtZuV1YJO8m1cRLXDdjTpZpTVz9Wm6gv9o
QxdigQY0JjaM5MLymtGJajMMApeMNzydVwShfSKGX8/BLwRc4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHYLqHPMAuunsUIs6yOj0gkqQuL8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvZmNiOGMwNzktZjg3ZC0z
YTYxLTlmYmItNmY5NDYyZWU0ZGIwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz2aHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKifheL7DxcwB65E6s7IM/SOGBCnSFJBYEMq9UIKxztMUZc9GAO2xoLu
73eCUrssgXNKa6lnHIVMz2Cr2cslyIKLDDB8h7t/TRKORleYGkGZh/eVrxa1iyw8
vaUd8SUcgABvRckg9Ri6Skbs8szsm3YudK08oZh6lYpq73SIefTMok5DhhdGZcs4
c3jcz4gAy+BKEeNRVqhTyIsTjkcm0MMJFkbNTwCbdSEUuHphjuGc+s01W3+WYiLM
qoK5RR/pRTpmY4gVuKLf2vE29smBXklX9365cKdB6SYjy2LfmObmjXXSrIdLBuHq
v1CmRtkkb7r7AN4KxKaeSSeifmKyEd8=
-----END CERTIFICATE-----
Generated at Sun Apr 27 10:40:54 2025 by rpki-client