Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa
File:                     d7271296-6190-328c-b419-75acc3fc495a.roa (raw, json)
Hash identifier:          qJY4Scn00KiJ6nwpUM9cBI73gOhSwE9Ev9iuEzXe+Ng=
Subject key identifier:   EC:DC:5B:5F:20:C8:12:81:4B:EF:8A:36:6D:22:97:6C:E9:45:8F:2D
Certificate issuer:       /CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
Certificate serial:       010D0C9F43285849EA1C8F214BE641FB7A5DE140
Authority key identifier: 3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa
Signing time:             Tue 20 May 2025 09:30:31 +0000
ROA not before:           Tue 20 May 2025 09:30:31 +0000
ROA not after:            Mon 18 Aug 2025 09:30:31 +0000
asID:                     396982
IP address blocks:        157.239.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:1c:8f:21:4b:e6:41:fb:7a:5d:e1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47
        Validity
            Not Before: May 20 09:30:31 2025 GMT
            Not After : Aug 18 09:30:31 2025 GMT
        Subject: CN=de52fc93-7e48-4b67-9684-e2e8044b53b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:ee:22:56:3f:91:9d:f4:9b:80:b1:5a:65:4d:
                    db:b2:56:df:0c:e6:0a:81:87:12:22:b9:3b:3b:9e:
                    5a:cd:6e:c3:59:3e:57:f8:27:bd:67:8d:3a:c3:d2:
                    15:18:c5:da:13:5c:3f:ba:eb:40:ee:08:d9:11:f4:
                    41:8b:c5:ce:b1:21:0e:88:4a:ca:00:b1:86:62:e0:
                    de:11:d6:de:83:bc:1b:c6:ac:95:a5:bf:7f:23:91:
                    09:cc:5c:cb:0f:b4:5f:2b:15:2e:df:2b:a4:e7:fe:
                    56:35:3d:0b:1e:8f:70:03:71:6f:53:11:49:46:99:
                    5b:2e:cb:98:7e:31:fb:bb:09:b1:fa:02:a7:a2:0b:
                    63:75:27:bf:f1:66:5f:49:ec:e9:ee:19:43:93:c1:
                    1e:02:3f:a4:ab:0d:08:86:db:07:d9:59:d0:b8:2d:
                    bf:f2:5d:ea:a0:ae:47:51:85:d2:c3:ae:34:6e:f6:
                    f2:72:df:b7:aa:05:8d:74:6c:95:45:25:4f:bc:91:
                    3e:b7:49:78:23:74:73:90:14:4d:e2:68:9b:8e:62:
                    f0:59:b5:ba:cc:81:f1:9e:cf:30:1f:31:e3:21:6a:
                    9c:f1:90:17:37:1a:5c:68:f4:fc:a8:bb:4c:89:9f:
                    d8:f3:2b:20:f4:d2:2b:17:30:46:ee:63:85:6c:16:
                    d8:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:DC:5B:5F:20:C8:12:81:4B:EF:8A:36:6D:22:97:6C:E9:45:8F:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/d7271296-6190-328c-b419-75acc3fc495a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.crl

            X509v3 Authority Key Identifier:
                keyid:3C:6C:69:39:64:64:92:8F:20:CE:38:CA:26:66:1B:C8:69:F6:52:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/fdd4b5ad-bbca-4fe9-85b4-8f2e5cca1d47.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.239.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:a8:34:32:17:d2:0f:2a:39:0e:e1:55:af:ea:60:50:b7:
         4f:74:6d:cd:e6:78:70:e5:f4:ef:2a:58:f2:ec:70:c0:f0:33:
         9e:7c:1c:bf:92:5e:b5:cd:65:8a:26:50:55:44:3a:fd:43:e6:
         b7:26:14:b4:33:08:6d:8a:73:c6:67:43:7e:4a:73:56:b3:1f:
         38:30:65:61:46:cb:b1:e0:f2:cd:60:32:13:7a:21:84:de:e4:
         2e:fe:d0:41:3e:f2:8a:27:0d:36:8e:e8:c4:f6:45:1a:e8:db:
         3e:de:7a:45:8a:c9:2a:a0:08:e0:49:1b:52:67:e1:fe:c4:52:
         9c:80:1d:d8:53:81:a7:92:76:1b:f3:80:b8:2c:41:fb:0c:c7:
         a1:d3:af:96:35:91:35:bc:45:13:99:99:4d:21:2f:7d:5a:85:
         44:6f:fc:19:99:33:5f:02:0c:4c:f0:f0:32:fd:61:46:63:44:
         0d:5d:8b:16:e2:cb:ee:e3:7e:77:a7:72:b9:08:61:7d:ae:a9:
         2d:f8:fb:91:0d:68:eb:4d:d0:02:f8:33:c7:e0:ea:99:46:a5:
         bb:b4:2b:6f:9d:be:ea:66:b3:c8:f2:82:41:7c:80:b5:15:2e:
         a8:a5:71:67:9b:dd:ec:7b:37:f1:57:60:51:e5:0f:be:33:a2:
         fe:21:8b:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqHI8hS+ZB+3pd4UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmRkNGI1YWQtYmJjYS00ZmU5LTg1YjQtOGYyZTVjY2Ex
ZDQ3MB4XDTI1MDUyMDA5MzAzMVoXDTI1MDgxODA5MzAzMVowLzEtMCsGA1UEAxMk
ZGU1MmZjOTMtN2U0OC00YjY3LTk2ODQtZTJlODA0NGI1M2I4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgu4iVj+RnfSbgLFaZU3bslbfDOYKgYcSIrk7
O55azW7DWT5X+Ce9Z406w9IVGMXaE1w/uutA7gjZEfRBi8XOsSEOiErKALGGYuDe
Edbeg7wbxqyVpb9/I5EJzFzLD7RfKxUu3yuk5/5WNT0LHo9wA3FvUxFJRplbLsuY
fjH7uwmx+gKnogtjdSe/8WZfSezp7hlDk8EeAj+kqw0IhtsH2VnQuC2/8l3qoK5H
UYXSw640bvbyct+3qgWNdGyVRSVPvJE+t0l4I3RzkBRN4mibjmLwWbW6zIHxns8w
HzHjIWqc8ZAXNxpcaPT8qLtMiZ/Y8ysg9NIrFzBG7mOFbBbYKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOzcW18gyBKBS++KNm0il2zpRY8tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0
YjVhZC1iYmNhLTRmZTktODViNC04ZjJlNWNjYTFkNDcvZDcyNzEyOTYtNjE5MC0z
MjhjLWI0MTktNzVhY2MzZmM0OTVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZmRkNGI1YWQtYmJjYS00ZmU5LTg1
YjQtOGYyZTVjY2ExZDQ3L2ZkZDRiNWFkLWJiY2EtNGZlOS04NWI0LThmMmU1Y2Nh
MWQ0Ny5jcmwwHwYDVR0jBBgwFoAUPGxpOWRkko8gzjjKJmYbyGn2UjwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mZGQ0YjVhZC1iYmNhLTRmZTktODViNC04ZjJl
NWNjYTFkNDcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAne8PMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH3pqDQyF9IPKjkO4VWv6mBQt090bc3meHDl9O8qWPLscMDwM558HL+S
XrXNZYomUFVEOv1D5rcmFLQzCG2Kc8ZnQ35Kc1azHzgwZWFGy7Hg8s1gMhN6IYTe
5C7+0EE+8oonDTaO6MT2RRro2z7eekWKySqgCOBJG1Jn4f7EUpyAHdhTgaeSdhvz
gLgsQfsMx6HTr5Y1kTW8RROZmU0hL31ahURv/BmZM18CDEzw8DL9YUZjRA1dixbi
y+7jfnencrkIYX2uqS34+5ENaOtN0AL4M8fg6plGpbu0K2+dvupms8jygkF8gLUV
LqilcWeb3ex7N/FXYFHlD74zov4hi+Q=
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:46:38 2025 by rpki-client