Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa
File:                     ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa (raw, json)
Hash identifier:          uQnwkmP4icdxMRg7frsXRpdXwkDWmGiZs/7hW8Xzva4=
Subject key identifier:   E9:E3:E8:26:0E:0E:2A:17:6A:E9:63:3D:C9:F4:68:95:A0:64:45:14
Certificate issuer:       /CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
Certificate serial:       010D0C9F4328584A305037986EFF41872B0B83B3
Authority key identifier: DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     21559
IP address blocks:        72.46.157.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:37:98:6e:ff:41:87:2b:0b:83:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e301bd0f-c80a-4158-9ada-f506bae0aa3c
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=5eaf6fe3-5cc0-4089-b4c6-c5f8742ec1a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:76:e3:68:38:a3:ab:04:6c:33:29:4a:b8:11:
                    c7:4f:01:10:5d:3b:ae:4a:ef:73:fb:da:a2:cd:88:
                    74:c7:7f:9c:13:d7:f0:a8:7b:12:8f:bb:23:f0:eb:
                    67:36:8e:6e:08:ff:2f:88:6f:0b:47:7c:a3:df:45:
                    0e:3a:d5:fa:a4:60:3e:1e:a9:ec:30:49:6c:06:8b:
                    af:87:b2:99:cd:c9:5d:1c:07:4d:7b:9b:70:89:3a:
                    1f:0f:2b:6e:08:17:4b:4f:0a:94:05:9b:65:8f:c1:
                    3a:cb:5d:3c:63:f0:8f:49:09:bc:1f:ec:d5:93:64:
                    b6:40:d9:58:ab:e5:4c:b5:d1:83:47:39:48:d7:d9:
                    b3:36:d1:41:58:e4:9d:81:47:bd:df:90:45:42:4c:
                    c1:bb:ae:9b:29:a3:25:6f:1e:f9:11:3b:5d:a1:03:
                    bb:82:83:64:b9:26:da:39:6c:67:d8:8e:21:59:11:
                    2e:20:3c:16:53:f9:a4:f6:7a:82:d4:30:9c:44:3f:
                    a3:9a:54:45:b0:dc:b3:87:10:c6:5e:36:63:c2:a1:
                    6d:69:c1:fe:75:6f:52:c0:8e:11:b0:dd:84:d9:5a:
                    80:09:f2:6b:bc:ef:43:f5:11:7e:ef:9c:48:e6:e6:
                    2c:b5:d7:b0:c0:ae:d6:5e:55:72:da:9f:fa:2a:08:
                    fb:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E3:E8:26:0E:0E:2A:17:6A:E9:63:3D:C9:F4:68:95:A0:64:45:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/ef45f13b-3949-3a40-8bc3-6a04344c00b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c/e301bd0f-c80a-4158-9ada-f506bae0aa3c.crl

            X509v3 Authority Key Identifier:
                keyid:DB:EB:72:1B:D0:C2:5D:DA:E9:75:37:6A:AD:9F:34:76:FE:2C:95:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/e301bd0f-c80a-4158-9ada-f506bae0aa3c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.46.157.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:78:ce:9f:10:0d:ad:65:b2:12:60:30:fa:f8:6c:13:a3:1a:
         77:96:5b:75:d8:0f:3b:f2:79:54:da:db:db:79:20:e2:5b:ae:
         3d:a9:9c:35:86:1b:56:7c:0e:e1:79:d3:a1:b0:26:8e:91:09:
         08:26:ca:1b:49:19:58:be:51:f8:60:f6:92:64:b3:a3:5f:99:
         fa:2d:c4:7b:93:2e:b5:9b:e7:77:aa:13:0e:2b:6d:aa:bb:37:
         22:63:60:4c:d8:d5:af:54:34:e5:7f:73:7d:5d:8b:1a:9c:48:
         7a:44:fc:b1:17:d1:7f:f2:07:5f:8d:71:96:f6:fb:29:86:b6:
         1d:d7:a4:c5:44:81:bc:d1:74:bc:88:75:65:58:13:95:62:64:
         a0:76:53:11:5a:3d:ae:f0:e9:3d:34:4f:52:65:8f:ae:14:d9:
         84:29:8a:8e:d9:06:14:2b:c7:10:bd:e4:b8:dc:65:b1:38:b1:
         58:0b:53:74:70:10:40:72:43:bf:eb:da:ad:48:ba:7c:83:cb:
         60:ea:65:9c:4f:33:65:15:19:59:4b:94:26:25:59:de:c5:56:
         82:e8:8e:07:1f:5e:bd:a9:0d:89:ff:8d:52:a6:c8:c6:e1:51:
         47:f5:46:04:cd:84:98:31:a5:5e:1b:ba:31:30:3c:9b:dd:72:
         2d:1e:a5:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDeYbv9BhysLg7MwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMwMWJkMGYtYzgwYS00MTU4LTlhZGEtZjUwNmJhZTBh
YTNjMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NWVhZjZmZTMtNWNjMC00MDg5LWI0YzYtYzVmODc0MmVjMWE2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2XbjaDijqwRsMylKuBHHTwEQXTuuSu9z+9qi
zYh0x3+cE9fwqHsSj7sj8OtnNo5uCP8viG8LR3yj30UOOtX6pGA+HqnsMElsBouv
h7KZzcldHAdNe5twiTofDytuCBdLTwqUBZtlj8E6y108Y/CPSQm8H+zVk2S2QNlY
q+VMtdGDRzlI19mzNtFBWOSdgUe935BFQkzBu66bKaMlbx75ETtdoQO7goNkuSba
OWxn2I4hWREuIDwWU/mk9nqC1DCcRD+jmlRFsNyzhxDGXjZjwqFtacH+dW9SwI4R
sN2E2VqACfJrvO9D9RF+75xI5uYstdewwK7WXlVy2p/6Kgj7OwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOnj6CYODioXauljPcn0aJWgZEUUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9lMzAx
YmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2YmFlMGFhM2MvZWY0NWYxM2ItMzk0OS0z
YTQwLThiYzMtNmEwNDM0NGMwMGI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZTMwMWJkMGYtYzgwYS00MTU4LTlh
ZGEtZjUwNmJhZTBhYTNjL2UzMDFiZDBmLWM4MGEtNDE1OC05YWRhLWY1MDZiYWUw
YWEzYy5jcmwwHwYDVR0jBBgwFoAU2+tyG9DCXdrpdTdqrZ80dv4slR8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9lMzAxYmQwZi1jODBhLTQxNTgtOWFkYS1mNTA2
YmFlMGFhM2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASC6dMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABx4zp8QDa1lshJgMPr4bBOjGneWW3XYDzvyeVTa29t5IOJbrj2pnDWG
G1Z8DuF506GwJo6RCQgmyhtJGVi+Ufhg9pJks6NfmfotxHuTLrWb53eqEw4rbaq7
NyJjYEzY1a9UNOV/c31dixqcSHpE/LEX0X/yB1+NcZb2+ymGth3XpMVEgbzRdLyI
dWVYE5ViZKB2UxFaPa7w6T00T1Jlj64U2YQpio7ZBhQrxxC95LjcZbE4sVgLU3Rw
EEByQ7/r2q1IunyDy2DqZZxPM2UVGVlLlCYlWd7FVoLojgcfXr2pDYn/jVKmyMbh
UUf1RgTNhJgxpV4bujEwPJvdci0epT4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:22 2025 by rpki-client