Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
File:                     cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa (raw, json)
Hash identifier:          9NADPgyrr8FZXKJkEZl69xtd/jY/KP+KcbdZpL8OD6A=
Subject key identifier:   32:3B:15:7C:08:7E:D6:AE:0B:F2:E5:99:83:E6:28:49:02:82:89:A3
Certificate issuer:       /CN=a340834d-d728-405c-95f1-caa6810aa7d9
Certificate serial:       010D0C9F43285849F17FB21E2957D6D47AAAE7C0
Authority key identifier: 83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     19437
IP address blocks:        131.153.200.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:b2:1e:29:57:d6:d4:7a:aa:e7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a340834d-d728-405c-95f1-caa6810aa7d9
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=bb4f6f37-4323-4c2e-9e69-149513b420f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:a2:13:09:a8:ca:5f:4f:8f:44:d7:49:3a:0f:
                    04:80:10:ed:a7:5b:0b:92:6d:f5:e6:a7:92:35:00:
                    37:86:7d:29:85:9a:4d:2d:90:91:3c:07:ee:61:5f:
                    97:b5:8a:d9:f0:75:ae:bd:c1:b7:32:40:4e:60:c5:
                    51:71:f1:5b:02:66:d0:95:c8:b9:39:84:fa:53:cc:
                    ae:d9:4d:a6:31:9e:cc:8f:8f:91:7a:6c:3a:67:9a:
                    0a:c8:cd:dd:fd:13:f4:5b:00:6c:e3:c0:93:6a:fd:
                    4b:c5:37:e4:7e:94:ee:46:0e:4e:f9:6a:b1:44:ac:
                    98:aa:43:02:fa:dc:bb:9c:f7:60:ed:86:3c:d4:be:
                    e0:12:59:4d:47:46:89:48:38:8a:25:de:d2:fd:20:
                    49:d0:f7:3b:fd:00:fc:91:67:6c:09:49:56:53:32:
                    12:5a:6a:6e:2b:3b:79:4d:c7:4b:c5:a0:d7:52:cf:
                    2c:e9:c3:a4:1e:ff:23:77:49:31:4e:a7:b0:a3:ea:
                    cc:f8:b3:32:3b:26:32:19:f0:fe:7d:fd:ca:d1:e2:
                    dd:e9:3a:0c:4c:56:8b:98:fa:59:27:e3:7a:60:9c:
                    97:c1:fb:7f:c3:a2:6e:55:9f:53:08:90:41:42:01:
                    a4:9e:96:da:53:32:e9:8f:dd:c8:f9:95:6f:6e:fc:
                    d8:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3B:15:7C:08:7E:D6:AE:0B:F2:E5:99:83:E6:28:49:02:82:89:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/cbc1f567-c14a-38d1-917a-e3f1f193c5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9/a340834d-d728-405c-95f1-caa6810aa7d9.crl

            X509v3 Authority Key Identifier:
                keyid:83:C6:E8:CD:02:CF:5F:C7:0A:7E:12:DB:6C:32:83:E3:4C:35:F7:21

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a340834d-d728-405c-95f1-caa6810aa7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.153.200.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8f:82:42:d7:0c:59:ae:0f:13:c0:31:9a:3b:fb:52:3f:23:0a:
         27:a6:fd:cb:97:56:78:43:59:c4:9d:9d:0b:d9:1c:af:48:b3:
         d6:46:d2:05:44:de:2f:fe:6b:af:62:0a:d5:26:9d:47:d5:fd:
         2b:4c:ba:20:ef:a0:f9:6e:e8:1a:b3:b4:fd:40:35:ff:04:18:
         70:95:e6:15:59:ec:c4:46:9b:12:d3:0e:94:d2:27:c2:ea:f3:
         80:57:85:01:5e:6c:16:15:19:28:35:56:3d:cf:d1:78:b7:16:
         80:60:00:05:3f:e8:9e:a6:cc:a9:92:a3:75:a5:6b:55:97:08:
         c0:81:4b:73:e8:f3:15:37:c2:77:a8:9e:49:a7:43:12:9b:d1:
         ba:0c:82:8a:d7:8f:bb:d4:7c:0f:09:a2:aa:6b:d9:3f:df:6c:
         bc:03:14:8e:e7:74:f0:f7:f4:60:21:e8:f9:55:e5:96:53:51:
         ad:b1:33:e6:7a:9e:dc:50:ce:5f:83:3f:b2:0f:b5:33:f3:06:
         7d:5a:e7:04:01:4f:84:3d:28:d7:ec:76:32:24:7c:12:47:f0:
         24:cc:a7:6d:d5:40:db:c7:b8:67:5f:37:d3:f6:7d:90:81:94:
         30:ef:6e:43:31:86:e8:1b:83:73:0f:3c:c7:c4:95:f3:ab:be:
         89:b4:01:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf7IeKVfW1Hqq58AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTM0MDgzNGQtZDcyOC00MDVjLTk1ZjEtY2FhNjgxMGFh
N2Q5MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
YmI0ZjZmMzctNDMyMy00YzJlLTllNjktMTQ5NTEzYjQyMGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj6ITCajKX0+PRNdJOg8EgBDtp1sLkm315qeS
NQA3hn0phZpNLZCRPAfuYV+XtYrZ8HWuvcG3MkBOYMVRcfFbAmbQlci5OYT6U8yu
2U2mMZ7Mj4+Remw6Z5oKyM3d/RP0WwBs48CTav1LxTfkfpTuRg5O+WqxRKyYqkMC
+ty7nPdg7YY81L7gEllNR0aJSDiKJd7S/SBJ0Pc7/QD8kWdsCUlWUzISWmpuKzt5
TcdLxaDXUs8s6cOkHv8jd0kxTqewo+rM+LMyOyYyGfD+ff3K0eLd6ToMTFaLmPpZ
J+N6YJyXwft/w6JuVZ9TCJBBQgGknpbaUzLpj93I+ZVvbvzYwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDI7FXwIftauC/LlmYPmKEkCgomjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQw
ODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2ODEwYWE3ZDkvY2JjMWY1NjctYzE0YS0z
OGQxLTkxN2EtZTNmMWYxOTNjNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTM0MDgzNGQtZDcyOC00MDVjLTk1
ZjEtY2FhNjgxMGFhN2Q5L2EzNDA4MzRkLWQ3MjgtNDA1Yy05NWYxLWNhYTY4MTBh
YTdkOS5jcmwwHwYDVR0jBBgwFoAUg8bozQLPX8cKfhLbbDKD40w19yEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hMzQwODM0ZC1kNzI4LTQwNWMtOTVmMS1jYWE2
ODEwYWE3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBg5nIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI+CQtcMWa4PE8Axmjv7Uj8jCiem/cuXVnhDWcSdnQvZHK9Is9ZG0gVE
3i/+a69iCtUmnUfV/StMuiDvoPlu6BqztP1ANf8EGHCV5hVZ7MRGmxLTDpTSJ8Lq
84BXhQFebBYVGSg1Vj3P0Xi3FoBgAAU/6J6mzKmSo3Wla1WXCMCBS3Po8xU3wneo
nkmnQxKb0boMgorXj7vUfA8Joqpr2T/fbLwDFI7ndPD39GAh6PlV5ZZTUa2xM+Z6
ntxQzl+DP7IPtTPzBn1a5wQBT4Q9KNfsdjIkfBJH8CTMp23VQNvHuGdfN9P2fZCB
lDDvbkMxhugbg3MPPMfElfOrvom0AdU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 12:01:45 2025 by rpki-client