Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa
File:                     7901f39e-c07f-3b6b-b41a-95477156131f.roa (raw, json)
Hash identifier:          YKX0PNjPfO+rAkUJ70tGgwBL0mAW2suyvHdCAYMzlWY=
Subject key identifier:   BD:AD:9F:8C:8D:E9:E2:3C:62:0B:9E:D6:B0:8C:C5:6F:CA:39:E3:CF
Certificate issuer:       /CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
Certificate serial:       010D0C9F4328584A2C20193D5EDAE5E2DF1B8480
Authority key identifier: 58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     19905
IP address blocks:        216.144.128.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:19:3d:5e:da:e5:e2:df:1b:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=11ab59e3-a19c-4636-a1a3-d525baedbcc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b7:be:c6:60:de:c0:30:5e:af:86:b6:3c:99:
                    e8:cb:e5:db:21:75:18:50:a4:2e:05:0f:9f:1f:f5:
                    c5:9f:a1:3b:d3:60:e8:c3:28:e2:3d:53:8c:9c:94:
                    62:d3:4c:77:e6:a2:92:eb:0d:2e:90:fe:e2:97:b5:
                    36:c4:26:8c:13:af:05:d3:de:43:68:ba:d5:8b:e7:
                    fa:2f:d0:09:e5:7a:cf:8f:a2:a5:ea:75:26:c2:d1:
                    91:2f:1e:c1:88:d5:e1:15:fe:5e:0c:ec:33:ca:cd:
                    5b:4d:48:90:71:1e:fe:aa:05:96:87:f3:75:0a:4d:
                    1b:ff:d1:a6:15:d1:a9:5c:0d:77:22:7f:f7:7a:8b:
                    8a:6b:15:e3:b3:ae:e0:ac:cc:9b:73:0d:95:8b:c4:
                    5c:74:cb:ca:8d:3b:c2:3d:5f:8c:dc:fb:f6:44:37:
                    ae:9d:80:ba:45:8d:5e:48:e5:cd:0d:f6:74:7f:66:
                    ba:66:2c:60:a9:c5:88:fc:64:9f:7e:12:21:74:36:
                    d8:1d:05:74:c2:58:84:5e:28:d2:27:96:3f:95:84:
                    3d:17:1d:b5:d5:8e:07:ae:7e:de:a5:4f:09:f2:09:
                    14:2e:73:2a:b4:88:7b:e2:22:1b:66:67:87:e5:0e:
                    1b:e6:49:2c:f3:36:5f:f1:63:54:3c:51:c6:07:9b:
                    ac:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:AD:9F:8C:8D:E9:E2:3C:62:0B:9E:D6:B0:8C:C5:6F:CA:39:E3:CF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7901f39e-c07f-3b6b-b41a-95477156131f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.crl

            X509v3 Authority Key Identifier:
                keyid:58:3E:E9:C4:0D:90:D1:B2:B5:1F:30:DF:0D:0E:F3:BD:3D:61:CD:A2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/7e9c4ca3-1dc7-42eb-856e-fd99bbe4f56f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.144.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5b:79:7d:68:5f:cd:4d:ad:a5:d5:25:53:31:17:75:d4:a9:00:
         ec:a1:79:4b:ea:61:d1:ba:09:ba:36:d9:e2:08:66:61:77:43:
         da:52:59:53:3b:62:e7:b8:7f:c0:45:2d:61:f2:d4:0a:e1:f7:
         e0:3b:ed:03:4e:29:4f:b7:e1:f6:f0:71:fe:06:a7:c2:8d:49:
         dd:71:3c:f9:84:e2:50:4f:c4:d8:c6:b3:c0:a5:b1:ec:e9:20:
         22:12:17:45:67:ba:3f:5d:da:66:43:8f:fd:58:be:88:3b:dd:
         a9:41:5c:cb:bc:61:97:0a:bc:b2:d2:18:69:8e:28:93:1c:e5:
         f1:09:e1:37:ac:e3:06:11:af:e8:1d:73:41:ce:86:11:17:7a:
         62:e7:1a:54:a3:78:8b:a4:83:39:b1:5c:2b:aa:9d:d1:27:a8:
         6e:9c:87:67:23:e2:dd:37:de:ca:07:25:f5:f7:2e:c5:0f:6c:
         79:47:35:86:e7:30:f8:c6:b3:f8:bb:0b:ac:24:61:2d:fd:72:
         3f:8d:fc:86:f2:a3:63:ab:a4:6d:9e:38:a6:59:37:c1:d9:53:
         77:69:ba:b0:38:b1:3b:51:aa:b4:cf:40:44:e2:5b:d3:5a:e1:
         f3:5b:13:ec:3d:f7:51:62:59:c1:79:b1:fd:a8:31:9b:26:48:
         34:f7:87:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIBk9Xtrl4t8bhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2U5YzRjYTMtMWRjNy00MmViLTg1NmUtZmQ5OWJiZTRm
NTZmMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
MTFhYjU5ZTMtYTE5Yy00NjM2LWExYTMtZDUyNWJhZWRiY2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtLe+xmDewDBer4a2PJnoy+XbIXUYUKQuBQ+f
H/XFn6E702DowyjiPVOMnJRi00x35qKS6w0ukP7il7U2xCaME68F095DaLrVi+f6
L9AJ5XrPj6Kl6nUmwtGRLx7BiNXhFf5eDOwzys1bTUiQcR7+qgWWh/N1Ck0b/9Gm
FdGpXA13In/3eouKaxXjs67grMybcw2Vi8RcdMvKjTvCPV+M3Pv2RDeunYC6RY1e
SOXNDfZ0f2a6ZixgqcWI/GSffhIhdDbYHQV0wliEXijSJ5Y/lYQ9Fx211Y4Hrn7e
pU8J8gkULnMqtIh74iIbZmeH5Q4b5kks8zZf8WNUPFHGB5usCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL2tn4yN6eI8Ygue1rCMxW/KOePPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83ZTlj
NGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5YmJlNGY1NmYvNzkwMWYzOWUtYzA3Zi0z
YjZiLWI0MWEtOTU0NzcxNTYxMzFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvN2U5YzRjYTMtMWRjNy00MmViLTg1
NmUtZmQ5OWJiZTRmNTZmLzdlOWM0Y2EzLTFkYzctNDJlYi04NTZlLWZkOTliYmU0
ZjU2Zi5jcmwwHwYDVR0jBBgwFoAUWD7pxA2Q0bK1HzDfDQ7zvT1hzaIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83ZTljNGNhMy0xZGM3LTQyZWItODU2ZS1mZDk5
YmJlNGY1NmYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2JCAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFt5fWhfzU2tpdUlUzEXddSpAOyheUvqYdG6Cbo22eIIZmF3Q9pSWVM7
Yue4f8BFLWHy1Arh9+A77QNOKU+34fbwcf4Gp8KNSd1xPPmE4lBPxNjGs8Clsezp
ICISF0Vnuj9d2mZDj/1Yvog73alBXMu8YZcKvLLSGGmOKJMc5fEJ4Tes4wYRr+gd
c0HOhhEXemLnGlSjeIukgzmxXCuqndEnqG6ch2cj4t033soHJfX3LsUPbHlHNYbn
MPjGs/i7C6wkYS39cj+N/Ibyo2OrpG2eOKZZN8HZU3dpurA4sTtRqrTPQETiW9Na
4fNbE+w991FiWcF5sf2oMZsmSDT3h2c=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:12:29 2025 by rpki-client