Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa
File:                     43897ce9-872d-33ba-8c28-6a0f98cde28c.roa (raw, json)
Hash identifier:          Ob1iF7UzFPT0Bej6uVTd30zTxHddhPdIK7MJU0ffFcE=
Subject key identifier:   D0:93:23:44:89:02:03:D6:01:D0:8B:C8:E0:94:2A:D3:A5:80:0A:BC
Certificate issuer:       /CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
Certificate serial:       010D0C9F4328584A17300A4D0054830E38DC8260
Authority key identifier: 2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     51965
IP address blocks:        134.195.121.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:0a:4d:00:54:83:0e:38:dc:82:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=472e527a-848a-4f3d-b7a0-4f001e757ee7
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=d46fb7bb-bdb9-497d-94b3-f37a194ce5d8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:60:7c:96:85:b2:12:c9:86:44:7a:e4:47:d7:
                    1c:83:76:2e:37:9b:fc:2b:3d:c1:7c:d9:71:fa:7f:
                    60:1e:34:69:7d:e2:29:44:5a:a0:06:a2:7f:d6:33:
                    49:bf:34:15:40:5b:c0:e1:8c:86:b5:b6:f0:48:15:
                    a4:cd:8e:01:bc:e1:c7:b0:85:4c:35:97:50:c9:b6:
                    c1:02:98:73:da:78:10:2d:ea:1c:1b:48:ce:d0:97:
                    24:26:fb:c3:48:63:d1:a1:3b:41:7f:e8:13:91:c9:
                    b3:83:56:a1:5a:a8:39:fc:0d:18:90:28:46:43:91:
                    33:65:c3:18:13:87:2e:d3:78:a8:59:d9:91:3c:bb:
                    2c:4c:1a:f1:63:fe:ab:ba:09:9e:fc:c1:55:a5:e9:
                    8c:30:af:5b:8a:7c:ec:6f:9f:20:17:f8:71:17:72:
                    f7:1e:1c:4c:f5:e3:02:f0:92:dd:ba:b9:2d:ed:57:
                    8a:4f:c4:fa:cb:d8:50:b8:65:f9:e1:f9:12:ff:e5:
                    06:e7:10:d8:ca:35:4d:c9:01:b5:b6:dd:c1:7d:19:
                    3d:b9:cf:1f:b9:8d:b1:f7:f3:93:f5:4e:45:be:c2:
                    c9:6d:f8:f7:a7:d6:c2:7d:c7:89:5c:56:fa:1d:17:
                    a4:d7:d1:20:62:41:ec:cf:37:8e:59:5b:10:37:14:
                    b2:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:93:23:44:89:02:03:D6:01:D0:8B:C8:E0:94:2A:D3:A5:80:0A:BC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/43897ce9-872d-33ba-8c28-6a0f98cde28c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7/472e527a-848a-4f3d-b7a0-4f001e757ee7.crl

            X509v3 Authority Key Identifier:
                keyid:2C:3A:2F:6B:C8:5B:37:1A:29:05:9B:D1:83:82:B5:85:4D:45:C5:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/472e527a-848a-4f3d-b7a0-4f001e757ee7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.195.121.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         89:f2:5e:dd:32:4a:83:b6:3f:50:0a:ee:2b:ca:5b:25:50:25:
         4e:5f:20:fb:1d:93:71:91:a5:c8:f0:d3:73:7b:07:42:2f:3f:
         85:2c:c0:f5:df:17:b1:8b:8f:f7:bd:ef:bf:6c:27:ab:26:cf:
         f7:db:08:ed:ee:d3:92:00:6e:67:e9:80:ba:3d:b8:38:e5:24:
         c4:ca:76:7c:88:50:bf:d7:c4:8f:57:98:26:0b:87:e8:1c:eb:
         60:07:d3:31:ce:4f:a1:f8:34:9e:d6:c7:a2:3b:ba:d4:64:22:
         1b:64:2e:38:9b:33:6e:98:fe:db:7e:14:cc:75:ae:cf:ef:62:
         5b:6c:41:99:de:8b:65:bc:80:32:23:d9:67:e5:a6:6a:92:5b:
         33:c2:aa:f4:dd:7a:ad:61:79:10:05:44:a2:38:78:9c:4f:b1:
         6e:1a:f2:2a:6a:13:ad:ec:03:37:99:e2:58:58:b8:ad:cf:18:
         85:c6:a6:90:ac:9a:a0:c6:c3:26:9e:27:c5:6d:2c:b8:9f:44:
         b7:ac:bb:e2:ee:34:4a:98:28:83:63:67:b6:79:85:0a:18:e8:
         cf:23:93:c0:29:94:36:cc:6f:a9:6b:6c:82:0b:9c:bb:68:81:
         44:15:45:49:6a:8f:77:24:09:90:7e:27:dd:df:d3:c4:ac:7b:
         cf:68:37:65
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMApNAFSDDjjcgmAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDcyZTUyN2EtODQ4YS00ZjNkLWI3YTAtNGYwMDFlNzU3
ZWU3MB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
ZDQ2ZmI3YmItYmRiOS00OTdkLTk0YjMtZjM3YTE5NGNlNWQ4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2B8loWyEsmGRHrkR9ccg3YuN5v8Kz3BfNlx
+n9gHjRpfeIpRFqgBqJ/1jNJvzQVQFvA4YyGtbbwSBWkzY4BvOHHsIVMNZdQybbB
Aphz2ngQLeocG0jO0JckJvvDSGPRoTtBf+gTkcmzg1ahWqg5/A0YkChGQ5EzZcMY
E4cu03ioWdmRPLssTBrxY/6rugme/MFVpemMMK9binzsb58gF/hxF3L3HhxM9eMC
8JLdurkt7VeKT8T6y9hQuGX54fkS/+UG5xDYyjVNyQG1tt3BfRk9uc8fuY2x9/OT
9U5FvsLJbfj3p9bCfceJXFb6HRek19EgYkHszzeOWVsQNxSyzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNCTI0SJAgPWAdCLyOCUKtOlgAq8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NzJl
NTI3YS04NDhhLTRmM2QtYjdhMC00ZjAwMWU3NTdlZTcvNDM4OTdjZTktODcyZC0z
M2JhLThjMjgtNmEwZjk4Y2RlMjhjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDcyZTUyN2EtODQ4YS00ZjNkLWI3
YTAtNGYwMDFlNzU3ZWU3LzQ3MmU1MjdhLTg0OGEtNGYzZC1iN2EwLTRmMDAxZTc1
N2VlNy5jcmwwHwYDVR0jBBgwFoAULDova8hbNxopBZvRg4K1hU1FxXAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NzJlNTI3YS04NDhhLTRmM2QtYjdhMC00ZjAw
MWU3NTdlZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAhsN5MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAInyXt0ySoO2P1AK7ivKWyVQJU5fIPsdk3GRpcjw03N7B0IvP4UswPXf
F7GLj/e9779sJ6smz/fbCO3u05IAbmfpgLo9uDjlJMTKdnyIUL/XxI9XmCYLh+gc
62AH0zHOT6H4NJ7Wx6I7utRkIhtkLjibM26Y/tt+FMx1rs/vYltsQZnei2W8gDIj
2WflpmqSWzPCqvTdeq1heRAFRKI4eJxPsW4a8ipqE63sAzeZ4lhYuK3PGIXGppCs
mqDGwyaeJ8VtLLifRLesu+LuNEqYKINjZ7Z5hQoY6M8jk8AplDbMb6lrbIILnLto
gUQVRUlqj3ckCZB+J93f08Sse89oN2U=
-----END CERTIFICATE-----
Generated at Sun Jun 15 05:11:19 2025 by rpki-client