Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa
File:                     3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa (raw, json)
Hash identifier:          mx+NIfAXiV6+39l0JgSwfKiSOj/m+SJUN1LCHKRejVs=
Subject key identifier:   C4:92:70:C7:C1:2A:28:1C:1B:30:43:07:4F:0E:64:A4:83:C0:43:53
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC328ECEBF1988E9B7540
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     19181
IP address blocks:        131.153.164.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c3:28:ec:eb:f1:98:8e:9b:75:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=707654eb-43fe-4715-9aaa-7a0999eeeaf0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fd:a3:fb:9f:02:56:f6:af:61:fb:1f:81:f8:
                    5b:bd:ee:85:fa:74:3f:8d:e7:3c:76:a0:07:91:d0:
                    93:4f:ef:0f:93:66:6c:4c:7b:14:7f:e3:08:ab:e8:
                    b2:d6:1d:b6:5d:2f:42:a4:21:4c:27:e8:89:71:0f:
                    40:7f:08:2b:73:32:7e:96:89:57:74:89:4e:6d:be:
                    27:f0:ed:d9:be:ed:9c:30:48:2c:9f:9c:e1:a8:f9:
                    16:91:f4:f9:c4:a3:f0:60:f8:79:d6:9c:a1:43:8d:
                    45:43:56:e5:8b:d7:57:a7:9f:1e:af:74:73:04:69:
                    42:a0:e3:7d:24:26:7d:8a:63:f0:1d:33:8a:c3:0e:
                    9e:a0:6f:2f:67:96:49:61:46:eb:93:55:20:b6:65:
                    50:dd:b9:18:5b:6a:6f:ab:6f:2f:fe:c9:2f:f8:04:
                    f7:90:39:70:07:6b:69:b9:8f:9a:89:ca:24:21:83:
                    d1:42:0e:9a:e0:fb:a6:6e:2c:dc:48:f3:9a:eb:88:
                    84:f8:08:c4:4e:f8:0d:c7:01:71:09:c4:73:88:f7:
                    48:83:6d:01:8b:d1:13:a4:be:66:45:b3:ab:44:4b:
                    56:8c:ff:c5:0d:bc:8c:60:60:6a:ec:50:94:31:d8:
                    9c:81:1d:33:15:f3:42:50:6d:2b:a3:cc:7d:9a:fe:
                    a0:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:92:70:C7:C1:2A:28:1C:1B:30:43:07:4F:0E:64:A4:83:C0:43:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/3ee46f12-74ae-363f-b31c-2dfd7fd4d228.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.164.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         86:be:4f:a3:92:3e:49:17:ec:f6:1e:5f:4c:9a:7e:88:9e:11:
         22:62:0a:dc:62:0e:e2:e7:25:b9:7e:ad:bd:2b:8d:cb:74:2d:
         b4:56:b8:7c:a9:e9:66:64:10:f3:23:b7:b0:27:d1:58:bd:4c:
         d2:3a:12:a2:4d:5d:64:70:05:f9:d7:ed:64:69:2e:bf:ab:6a:
         fb:1f:99:dd:cb:1b:67:75:7b:57:47:d9:22:a2:71:ab:25:54:
         27:df:da:c4:8d:5c:58:b1:94:ba:d2:9e:89:f2:84:c9:85:c9:
         0d:1a:61:aa:48:03:43:fa:59:9f:1a:32:02:56:ee:ce:08:ec:
         ff:09:75:70:69:85:5a:c1:9c:77:f7:78:48:4e:b7:74:56:50:
         76:a8:53:a6:e9:f5:ff:20:b6:b1:25:8e:30:03:e6:5b:ae:0c:
         6b:a6:11:b8:12:61:b4:47:ba:57:a5:1b:d3:05:3f:33:57:a4:
         73:b1:29:2a:ec:80:4b:22:76:4e:22:5d:4a:1e:d6:a4:0f:b6:
         d4:f5:f5:87:35:46:9a:9e:ea:98:c8:a3:ae:45:bc:78:5b:8c:
         92:f5:57:51:f0:f5:fe:85:96:9b:ca:17:75:26:5b:19:fd:79:
         87:16:18:f2:6d:81:7c:66:81:95:7c:3f:36:a2:47:83:fa:4e:
         11:9c:14:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8Mo7OvxmI6bdUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
NzA3NjU0ZWItNDNmZS00NzE1LTlhYWEtN2EwOTk5ZWVlYWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2f2j+58CVvavYfsfgfhbve6F+nQ/jec8dqAH
kdCTT+8Pk2ZsTHsUf+MIq+iy1h22XS9CpCFMJ+iJcQ9AfwgrczJ+lolXdIlObb4n
8O3Zvu2cMEgsn5zhqPkWkfT5xKPwYPh51pyhQ41FQ1bli9dXp58er3RzBGlCoON9
JCZ9imPwHTOKww6eoG8vZ5ZJYUbrk1UgtmVQ3bkYW2pvq28v/skv+AT3kDlwB2tp
uY+aicokIYPRQg6a4PumbizcSPOa64iE+AjETvgNxwFxCcRziPdIg20Bi9ETpL5m
RbOrREtWjP/FDbyMYGBq7FCUMdicgR0zFfNCUG0ro8x9mv6gBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMSScMfBKigcGzBDB08OZKSDwENTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvM2VlNDZmMTItNzRhZS0z
NjNmLWIzMWMtMmRmZDdmZDRkMjI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAg5mkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIa+T6OSPkkX7PYeX0yafoieESJiCtxiDuLnJbl+rb0rjct0LbRWuHyp
6WZkEPMjt7An0Vi9TNI6EqJNXWRwBfnX7WRpLr+ravsfmd3LG2d1e1dH2SKicasl
VCff2sSNXFixlLrSnonyhMmFyQ0aYapIA0P6WZ8aMgJW7s4I7P8JdXBphVrBnHf3
eEhOt3RWUHaoU6bp9f8gtrEljjAD5luuDGumEbgSYbRHulelG9MFPzNXpHOxKSrs
gEsidk4iXUoe1qQPttT19Yc1Rpqe6pjIo65FvHhbjJL1V1Hw9f6FlpvKF3UmWxn9
eYcWGPJtgXxmgZV8PzaiR4P6ThGcFLU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:17:36 2025 by rpki-client