Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
File:                     286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa (raw, json)
Hash identifier:          rYuSKkWF3HmKpRQSPoXS5D/rZDs+VvumHBwjHA9I6wU=
Subject key identifier:   E5:95:50:87:FA:FA:BB:7D:EE:C6:06:17:F4:D4:6A:3E:0E:9D:46:33
Certificate issuer:       /CN=f80f9298-8029-4285-89d7-27308341b2e0
Certificate serial:       010D0C9F4328584A0C0557E5223B9BE6324DCC80
Authority key identifier: 67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     397849
IP address blocks:        136.143.174.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:57:e5:22:3b:9b:e6:32:4d:cc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f80f9298-8029-4285-89d7-27308341b2e0
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=6f956464-e7b1-47fc-8de0-9ea8b8b38373
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:c6:e9:5b:71:8b:f5:24:9d:f8:f4:21:a9:
                    54:4f:c4:35:94:4f:9b:47:e4:19:1e:15:f8:49:2d:
                    b4:82:d3:8d:25:61:e0:50:be:5f:f2:18:71:05:9e:
                    ec:b0:8f:26:70:c8:8c:bb:f8:ea:eb:ca:91:87:2f:
                    47:1c:6d:f8:d2:c5:e3:f0:57:5a:57:15:01:bf:9f:
                    a7:3d:70:e5:d6:5a:4a:ea:c5:f9:09:20:26:f3:f3:
                    51:16:3b:38:49:73:8f:26:39:b4:ac:ce:7b:cd:34:
                    02:59:bd:2d:92:c5:89:bb:3b:b5:99:6c:1a:4c:78:
                    cc:40:60:eb:93:bb:22:f0:ca:59:cd:44:ce:95:ee:
                    11:f2:06:48:c8:2e:76:92:e5:d1:95:da:7b:a4:3a:
                    66:20:8f:fb:33:4f:e7:a2:b6:35:53:1b:0e:3d:fd:
                    b5:8b:6e:bb:02:d9:10:ec:96:2d:86:5b:4a:65:be:
                    4e:b9:c5:c8:0c:fd:67:9a:dd:f2:aa:7e:8e:4f:02:
                    46:40:74:bc:ef:26:14:df:a0:e0:37:02:be:46:4c:
                    b2:73:01:a4:a5:5e:17:e7:d4:94:9a:32:2a:f6:42:
                    04:02:9f:7e:8b:1e:0c:ec:09:29:6f:d2:c7:36:74:
                    36:aa:e8:0a:8e:f3:b2:c6:7c:b9:96:71:a4:a9:0c:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:50:87:FA:FA:BB:7D:EE:C6:06:17:F4:D4:6A:3E:0E:9D:46:33
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/286fe0b2-0fc1-33fd-9e01-500c99c244d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0/f80f9298-8029-4285-89d7-27308341b2e0.crl

            X509v3 Authority Key Identifier:
                keyid:67:6F:DF:98:DD:C5:B2:D6:A7:9F:9F:CF:0E:49:5C:38:64:D1:44:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/f80f9298-8029-4285-89d7-27308341b2e0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.143.174.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         52:66:8d:04:20:aa:dd:05:a7:2b:60:23:64:37:40:3a:ef:0f:
         69:d8:df:9a:af:44:a5:6b:a8:f0:64:f3:4b:3c:0a:cb:70:43:
         61:36:03:81:01:b9:90:33:bb:7f:24:41:78:15:35:73:62:5b:
         7e:7a:a2:ef:77:4b:ed:ea:46:57:ef:c5:10:3c:18:cb:e9:71:
         59:4a:5d:28:57:50:d4:a0:a7:79:bb:b3:ac:ea:02:80:fc:8f:
         33:50:51:89:e8:b3:12:e5:e2:45:b1:99:93:d4:ff:aa:84:95:
         7e:f6:95:41:9f:70:ef:ce:6b:00:01:59:f5:2b:e4:fa:ae:11:
         f0:11:61:5e:43:be:f5:69:50:5a:f8:4e:ca:1e:d1:62:aa:33:
         0e:b6:15:85:16:f2:3b:f4:7e:b6:08:25:70:f9:dc:28:a0:d4:
         17:17:78:3a:37:a8:0c:51:f0:8d:36:d8:2c:1e:e8:f0:46:11:
         64:91:67:21:b1:fc:b7:75:30:04:39:7c:84:08:65:a5:1a:64:
         44:f4:25:ba:c1:73:7d:cb:06:d1:98:53:e1:74:2b:36:41:ba:
         73:f6:40:cc:cc:57:a6:81:b1:6b:66:2a:b2:2b:77:e0:d3:5c:
         b4:4f:aa:14:f7:25:41:99:23:fd:03:50:54:f9:c6:25:1d:e4:
         52:7f:28:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBVflIjub5jJNzIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjgwZjkyOTgtODAyOS00Mjg1LTg5ZDctMjczMDgzNDFi
MmUwMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NmY5NTY0NjQtZTdiMS00N2ZjLThkZTAtOWVhOGI4YjM4MzczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLXG6Vtxi/Uknfj0IalUT8Q1lE+bR+QZHhX4
SS20gtONJWHgUL5f8hhxBZ7ssI8mcMiMu/jq68qRhy9HHG340sXj8FdaVxUBv5+n
PXDl1lpK6sX5CSAm8/NRFjs4SXOPJjm0rM57zTQCWb0tksWJuzu1mWwaTHjMQGDr
k7si8MpZzUTOle4R8gZIyC52kuXRldp7pDpmII/7M0/norY1UxsOPf21i267AtkQ
7JYthltKZb5OucXIDP1nmt3yqn6OTwJGQHS87yYU36DgNwK+RkyycwGkpV4X59SU
mjIq9kIEAp9+ix4M7Akpb9LHNnQ2qugKjvOyxny5lnGkqQzsoQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOWVUIf6+rt97sYGF/TUaj4OnUYzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mODBm
OTI5OC04MDI5LTQyODUtODlkNy0yNzMwODM0MWIyZTAvMjg2ZmUwYjItMGZjMS0z
M2ZkLTllMDEtNTAwYzk5YzI0NGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZjgwZjkyOTgtODAyOS00Mjg1LTg5
ZDctMjczMDgzNDFiMmUwL2Y4MGY5Mjk4LTgwMjktNDI4NS04OWQ3LTI3MzA4MzQx
YjJlMC5jcmwwHwYDVR0jBBgwFoAUZ2/fmN3Fstann5/PDklcOGTRROcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mODBmOTI5OC04MDI5LTQyODUtODlkNy0yNzMw
ODM0MWIyZTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAiI+uMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFJmjQQgqt0FpytgI2Q3QDrvD2nY35qvRKVrqPBk80s8CstwQ2E2A4EB
uZAzu38kQXgVNXNiW356ou93S+3qRlfvxRA8GMvpcVlKXShXUNSgp3m7s6zqAoD8
jzNQUYnosxLl4kWxmZPU/6qElX72lUGfcO/OawABWfUr5PquEfARYV5DvvVpUFr4
Tsoe0WKqMw62FYUW8jv0frYIJXD53Cig1BcXeDo3qAxR8I022Cwe6PBGEWSRZyGx
/Ld1MAQ5fIQIZaUaZET0JbrBc33LBtGYU+F0KzZBunP2QMzMV6aBsWtmKrIrd+DT
XLRPqhT3JUGZI/0DUFT5xiUd5FJ/KPw=
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:41:41 2025 by rpki-client