Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c786b92f-e877-3ef7-85fd-5f93405c8f05.roa
File:                     c786b92f-e877-3ef7-85fd-5f93405c8f05.roa (raw, json)
Hash identifier:          mkxNNlcnTNc2SlVtYDNERantFvn1F7e1I6HKhVtQVg4=
Subject key identifier:   E9:A0:BE:98:DC:8C:82:77:75:FA:1A:51:F6:CF:E3:D7:C6:C8:86:EB
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849ED4FC98FB2296219C9A447C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c786b92f-e877-3ef7-85fd-5f93405c8f05.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     19437
IP address blocks:        131.153.156.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:c9:8f:b2:29:62:19:c9:a4:47:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=6d825a5b-990c-4f18-99e9-4e7ba631fff2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:f2:37:17:0b:ff:e8:52:28:b7:35:26:3f:
                    31:d9:20:02:4e:6e:48:d9:38:b9:62:f5:ed:fb:09:
                    e4:98:c1:8d:0c:25:78:20:e4:e3:89:fc:96:63:94:
                    ae:46:b3:c7:90:1e:cb:de:75:78:77:43:63:a9:cc:
                    43:a6:22:10:60:db:55:45:c0:74:37:01:fc:a1:bd:
                    8b:c0:de:fb:6f:84:f9:f5:a5:00:83:6a:bb:fd:4a:
                    76:49:f2:e8:a1:1d:60:a3:08:20:17:b7:72:35:00:
                    ba:51:c2:b5:2b:24:9e:ce:a9:b6:b9:5c:6c:0a:87:
                    b8:78:26:d2:3b:90:ef:5e:9d:3a:d0:83:a7:18:f3:
                    f2:9c:7c:d0:ce:6c:0f:d2:1d:dd:a9:fb:7b:91:4c:
                    94:13:1f:7d:ab:90:7f:ec:1e:0b:40:a3:83:23:33:
                    9d:63:b2:fe:12:bb:73:13:5f:40:f2:5c:f7:4a:d6:
                    98:f8:d0:46:0d:46:56:45:12:d3:8f:6e:72:c2:c6:
                    ae:36:a2:87:36:60:86:c1:b9:ff:35:5e:bb:c1:ed:
                    ea:f5:8a:3a:43:a2:00:0c:68:27:55:d3:26:a9:0f:
                    a6:b2:6c:f8:96:f1:ba:86:67:fc:dd:90:57:12:c5:
                    9c:93:31:8a:54:c3:25:51:42:b7:46:3d:6e:3d:fe:
                    8f:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A0:BE:98:DC:8C:82:77:75:FA:1A:51:F6:CF:E3:D7:C6:C8:86:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/c786b92f-e877-3ef7-85fd-5f93405c8f05.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.156.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:ad:77:2a:15:eb:a8:2e:66:04:c0:22:c1:02:00:ad:19:07:
         d2:a9:43:9b:bc:c8:9e:5d:8e:3b:ca:e5:c8:de:e3:75:65:d8:
         e4:0f:fe:3f:82:d4:87:c7:8b:df:46:77:bb:9a:55:bd:fb:75:
         d1:5c:c4:42:08:1a:64:98:7d:01:9a:ac:77:6e:87:74:1b:5f:
         05:b3:f2:da:8f:b1:31:81:34:4f:ac:27:a6:32:0f:a9:60:2c:
         19:26:60:15:0d:74:e2:04:4d:dc:c2:3c:c3:49:d5:35:cf:9a:
         27:f4:e5:e2:b0:5b:40:e0:fe:b9:7d:7d:ef:8d:61:0d:5a:6a:
         b5:7c:c6:32:df:21:53:f7:0c:08:86:18:e7:b5:fb:f0:17:b0:
         46:f5:78:d2:e6:4b:f4:7f:ca:12:ae:af:57:c8:d7:a1:0c:bd:
         68:1b:77:15:20:de:74:4e:4d:da:f4:7f:e1:4c:d9:2e:62:a7:
         f9:1d:91:47:57:df:32:c5:d4:9a:e5:ea:11:ad:54:18:18:4b:
         ee:46:10:30:73:28:78:5e:4b:5b:c4:43:fc:37:53:5b:e2:10:
         9e:9f:fd:4f:89:2b:e8:f4:d3:f1:74:18:aa:0c:d4:e0:ab:10:
         1a:c2:88:1b:90:5b:e7:88:3c:68:37:10:bc:ba:da:8e:20:d3:
         6d:71:85:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT8mPsiliGcmkR8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
NmQ4MjVhNWItOTkwYy00ZjE4LTk5ZTktNGU3YmE2MzFmZmYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgOPyNxcL/+hSKLc1Jj8x2SACTm5I2Ti5YvXt
+wnkmMGNDCV4IOTjifyWY5SuRrPHkB7L3nV4d0NjqcxDpiIQYNtVRcB0NwH8ob2L
wN77b4T59aUAg2q7/Up2SfLooR1gowggF7dyNQC6UcK1KySezqm2uVxsCoe4eCbS
O5DvXp060IOnGPPynHzQzmwP0h3dqft7kUyUEx99q5B/7B4LQKODIzOdY7L+Ertz
E19A8lz3StaY+NBGDUZWRRLTj25ywsauNqKHNmCGwbn/NV67we3q9Yo6Q6IADGgn
VdMmqQ+msmz4lvG6hmf83ZBXEsWckzGKVMMlUUK3Rj1uPf6PSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOmgvpjcjIJ3dfoaUfbP49fGyIbrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvYzc4NmI5MmYtZTg3Ny0z
ZWY3LTg1ZmQtNWY5MzQwNWM4ZjA1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5mcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD2tdyoV66guZgTAIsECAK0ZB9KpQ5u8yJ5djjvK5cje43Vl2OQP/j+C
1IfHi99Gd7uaVb37ddFcxEIIGmSYfQGarHduh3QbXwWz8tqPsTGBNE+sJ6YyD6lg
LBkmYBUNdOIETdzCPMNJ1TXPmif05eKwW0Dg/rl9fe+NYQ1aarV8xjLfIVP3DAiG
GOe1+/AXsEb1eNLmS/R/yhKur1fI16EMvWgbdxUg3nROTdr0f+FM2S5ip/kdkUdX
3zLF1Jrl6hGtVBgYS+5GEDBzKHheS1vEQ/w3U1viEJ6f/U+JK+j00/F0GKoM1OCr
EBrCiBuQW+eIPGg3ELy62o4g021xheI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:09:27 2025 by rpki-client