Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa
File:                     20142d99-e924-3a6c-8751-7d6218a6ea0f.roa (raw, json)
Hash identifier:          kXpw8nVC+22+5LaR63zzRkR4hhUDpernU2JN0px0po0=
Subject key identifier:   2E:6C:0E:33:4C:1D:C2:1C:74:91:36:03:BB:7A:02:D1:D8:84:FE:81
Certificate issuer:       /CN=6d91ccc1-4217-4cde-9687-260a5f00361b
Certificate serial:       010D0C9F43285849DB8E43805D8CFBE640B977C0
Authority key identifier: 76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa
Signing time:             Thu 15 May 2025 04:22:30 +0000
ROA not before:           Thu 15 May 2025 04:22:30 +0000
ROA not after:            Wed 13 Aug 2025 04:22:30 +0000
asID:                     7015
IP address blocks:        72.46.136.0/24 maxlen: 24
                          72.46.137.0/24 maxlen: 24
                          72.46.138.0/24 maxlen: 24
                          72.46.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:db:8e:43:80:5d:8c:fb:e6:40:b9:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d91ccc1-4217-4cde-9687-260a5f00361b
        Validity
            Not Before: May 15 04:22:30 2025 GMT
            Not After : Aug 13 04:22:30 2025 GMT
        Subject: CN=65d47b36-30a2-4e76-9ff9-29bf76441c16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ec:2e:d2:cc:b4:2a:d9:66:f8:f0:29:41:d1:
                    60:f7:f3:74:21:07:b5:53:18:ea:23:6b:fd:b3:5f:
                    d0:52:a1:f9:84:fc:7e:4b:b0:d0:71:e8:b2:a8:19:
                    c8:22:b4:7e:af:00:91:05:65:ab:0b:76:c1:c8:40:
                    1f:51:30:7f:c9:95:62:00:45:68:6e:5a:2e:46:8f:
                    57:58:91:3e:8c:c9:6d:01:9e:b8:bf:61:c0:a1:95:
                    75:d6:bd:3b:4c:b2:21:e6:1f:ba:cf:ed:86:52:a0:
                    17:b7:fd:d5:bc:3f:a4:10:a9:db:c8:79:0a:9d:7e:
                    0c:f1:29:de:d9:e1:ac:f4:ef:c7:d4:c5:fa:aa:b7:
                    2b:0f:76:58:7a:d3:b3:81:c0:78:78:e7:b2:a3:ff:
                    13:0e:f6:f1:0d:81:d6:5e:80:ef:b8:1f:e1:38:3f:
                    91:3a:82:c5:83:72:22:23:43:e6:3f:33:cf:99:d7:
                    af:97:fa:1b:13:5d:9b:a1:05:31:91:54:8d:e9:42:
                    2b:05:25:31:4c:f1:b1:4f:6e:7c:fc:1b:68:63:39:
                    97:bb:ce:5b:e7:4c:b5:ad:6b:b4:56:dd:35:73:d4:
                    32:55:e8:06:8f:88:a9:83:93:69:3f:ab:7b:58:3d:
                    f8:7b:9c:8e:03:d2:cd:a1:f3:d9:c2:2d:11:85:ec:
                    38:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:6C:0E:33:4C:1D:C2:1C:74:91:36:03:BB:7A:02:D1:D8:84:FE:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/20142d99-e924-3a6c-8751-7d6218a6ea0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b/6d91ccc1-4217-4cde-9687-260a5f00361b.crl

            X509v3 Authority Key Identifier:
                keyid:76:6C:6F:7C:28:EC:36:26:94:51:BF:D2:7A:7E:99:56:29:22:9A:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d91ccc1-4217-4cde-9687-260a5f00361b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:07:ca:61:5b:46:e1:07:7c:63:64:f2:53:9b:b8:26:9b:42:
         78:0b:1b:ae:5c:2b:f2:71:f8:ed:19:47:1b:81:fb:aa:36:29:
         6a:66:4f:89:2c:24:ef:6a:83:59:8b:aa:73:c2:01:46:2d:4b:
         44:80:5a:4e:7c:e8:19:74:28:d1:58:f2:3a:f1:33:09:59:0c:
         a0:f0:dd:0e:d5:a3:7c:01:09:23:7f:83:65:f8:6a:07:d4:09:
         45:43:1e:22:e0:d7:61:40:2f:77:27:77:5c:71:48:f6:15:93:
         a3:41:23:c6:86:ef:ec:3c:a7:6c:bd:d4:3f:55:60:03:da:c8:
         b2:21:48:8e:c3:22:c6:a3:8a:88:c1:80:25:21:2b:74:9b:ad:
         04:e9:b6:34:11:1e:c5:2a:7c:1f:40:46:88:d8:a7:91:95:f1:
         db:0a:f6:4c:38:28:7d:e8:51:d5:8e:8f:45:b0:09:6d:73:8d:
         e4:a5:56:3b:f4:9f:d8:ae:0d:46:1b:42:60:16:ee:cd:a3:87:
         b9:ec:92:bd:12:5f:12:91:62:b0:f8:27:c3:da:f5:79:d1:bd:
         cf:85:0a:6e:55:94:a0:f0:05:f9:60:c6:11:78:ce:b1:48:22:
         50:c4:8a:1c:b8:c1:cd:70:24:40:7f:02:9e:97:82:4b:33:27:
         5b:d6:53:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnbjkOAXYz75kC5d8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQ5MWNjYzEtNDIxNy00Y2RlLTk2ODctMjYwYTVmMDAz
NjFiMB4XDTI1MDUxNTA0MjIzMFoXDTI1MDgxMzA0MjIzMFowLzEtMCsGA1UEAxMk
NjVkNDdiMzYtMzBhMi00ZTc2LTlmZjktMjliZjc2NDQxYzE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmOwu0sy0Ktlm+PApQdFg9/N0IQe1UxjqI2v9
s1/QUqH5hPx+S7DQceiyqBnIIrR+rwCRBWWrC3bByEAfUTB/yZViAEVoblouRo9X
WJE+jMltAZ64v2HAoZV11r07TLIh5h+6z+2GUqAXt/3VvD+kEKnbyHkKnX4M8Sne
2eGs9O/H1MX6qrcrD3ZYetOzgcB4eOeyo/8TDvbxDYHWXoDvuB/hOD+ROoLFg3Ii
I0PmPzPPmdevl/obE12boQUxkVSN6UIrBSUxTPGxT258/BtoYzmXu85b50y1rWu0
Vt01c9QyVegGj4ipg5NpP6t7WD34e5yOA9LNofPZwi0Rhew4/QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC5sDjNMHcIcdJE2A7t6AtHYhP6BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkx
Y2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBhNWYwMDM2MWIvMjAxNDJkOTktZTkyNC0z
YTZjLTg3NTEtN2Q2MjE4YTZlYTBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQ5MWNjYzEtNDIxNy00Y2RlLTk2
ODctMjYwYTVmMDAzNjFiLzZkOTFjY2MxLTQyMTctNGNkZS05Njg3LTI2MGE1ZjAw
MzYxYi5jcmwwHwYDVR0jBBgwFoAUdmxvfCjsNiaUUb/Sen6ZVikimvwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDkxY2NjMS00MjE3LTRjZGUtOTY4Ny0yNjBh
NWYwMDM2MWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCSC6IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAoHymFbRuEHfGNk8lObuCabQngLG65cK/Jx+O0ZRxuB+6o2KWpmT4ks
JO9qg1mLqnPCAUYtS0SAWk586Bl0KNFY8jrxMwlZDKDw3Q7Vo3wBCSN/g2X4agfU
CUVDHiLg12FAL3cnd1xxSPYVk6NBI8aG7+w8p2y91D9VYAPayLIhSI7DIsajiojB
gCUhK3SbrQTptjQRHsUqfB9ARojYp5GV8dsK9kw4KH3oUdWOj0WwCW1zjeSlVjv0
n9iuDUYbQmAW7s2jh7nskr0SXxKRYrD4J8Pa9XnRvc+FCm5VlKDwBflgxhF4zrFI
IlDEihy4wc1wJEB/Ap6XgkszJ1vWU+U=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:12:38 2025 by rpki-client