Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa
File:                     c06a0134-244a-33d2-9036-ed623dbb2f10.roa (raw, json)
Hash identifier:          +VnXDJ2Zt7cl5e+/u0VbL4uYmpmUUEujh1YRps2BbUg=
Subject key identifier:   40:83:D3:5F:F0:08:44:B0:D2:ED:C6:95:C7:CF:EE:AE:F5:67:3D:8E
Certificate issuer:       /CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
Certificate serial:       010D0C9F4328584A2C201467BB311F736C9815A0
Authority key identifier: C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     3503
IP address blocks:        147.72.224.0/21 maxlen: 21
                          147.72.234.0/24 maxlen: 24
                          147.72.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:14:67:bb:31:1f:73:6c:98:15:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad8ab3e-495b-49e2-b49d-ded00f2330d2
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=1d7f30e5-72d8-4fc3-99a5-f08a94d10479
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:17:95:85:d6:e6:a6:2f:cc:76:ed:b5:01:fd:
                    4b:22:32:06:26:7b:34:b6:59:8d:52:b1:97:14:f4:
                    d6:85:c1:6c:e5:25:ea:96:51:8f:05:89:bb:d3:c3:
                    f7:64:68:8c:a1:6a:a5:9e:72:97:df:96:4f:ae:28:
                    83:b2:ad:3e:2d:fc:84:3b:92:c4:f5:fe:0c:25:b9:
                    2a:fc:f0:f2:45:31:b6:0f:64:87:7b:fc:55:58:7a:
                    21:7e:fd:24:41:83:bb:d1:ae:46:ba:f3:2e:90:90:
                    6c:3c:be:30:8d:e7:94:9a:af:97:b8:f1:13:14:8f:
                    a3:28:6f:c1:3b:c9:8d:ed:83:80:2e:0b:71:b6:62:
                    6d:66:73:ae:ea:fc:62:cd:d6:73:19:7a:da:8f:31:
                    28:11:32:e7:59:46:ec:fe:67:1d:33:a5:95:e1:6a:
                    ce:a0:40:9a:c2:96:f7:42:94:39:69:99:c7:7a:28:
                    7d:d0:ad:ea:f7:9b:27:b7:70:06:0c:f1:b4:9e:0f:
                    f0:a4:66:19:8c:78:a8:7c:6c:40:03:6d:92:27:51:
                    a2:8b:1f:f6:3b:1a:dc:fa:65:6e:f4:c5:02:05:13:
                    61:f6:68:52:c6:e0:1d:f6:ea:ac:fe:59:73:34:69:
                    99:60:96:e5:0f:5e:67:3c:c7:e6:bc:ed:25:6d:4f:
                    54:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:83:D3:5F:F0:08:44:B0:D2:ED:C6:95:C7:CF:EE:AE:F5:67:3D:8E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/c06a0134-244a-33d2-9036-ed623dbb2f10.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.crl

            X509v3 Authority Key Identifier:
                keyid:C5:D0:BE:D8:B3:F1:16:6C:88:91:1B:20:07:FC:85:AE:76:B9:1E:29

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/8ad8ab3e-495b-49e2-b49d-ded00f2330d2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  147.72.224.0/21
                  147.72.234.0/24
                  147.72.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         07:3c:ad:c9:bc:f7:1d:20:b1:7f:7d:6c:7e:bc:bc:76:1d:62:
         8f:db:8f:27:c9:a2:b4:6a:b2:fe:c5:77:6d:20:c8:d8:df:79:
         e2:5f:b9:3a:be:41:97:cc:31:01:bf:39:ee:64:3d:4c:fa:08:
         65:51:18:68:c9:c3:c6:38:e2:12:bb:22:06:c1:6c:ae:8c:ff:
         07:cf:1f:05:17:c5:1b:fa:d6:8c:7a:4a:85:5b:c1:d8:4e:66:
         a4:5e:8c:09:2c:71:4c:90:68:2f:fa:d1:1b:7e:a4:9e:63:6e:
         55:68:01:69:01:fc:b6:40:ee:94:b0:22:91:ad:75:34:67:6b:
         9d:37:37:8c:4d:a3:ea:73:7d:bd:21:97:f1:bd:3b:88:02:22:
         86:74:ae:36:44:36:aa:ae:e1:2b:ed:7b:b0:29:87:44:f1:8f:
         40:7f:20:8c:56:02:80:d4:c6:5a:b7:bc:9d:9c:61:43:38:e5:
         47:22:c5:1f:c2:ed:bc:73:81:eb:d4:0e:ea:02:df:52:ad:38:
         1e:3b:99:f3:d9:64:98:c5:f4:ff:11:4c:c5:9b:28:4e:89:ac:
         46:d0:7b:99:a3:91:af:e6:99:ee:59:9f:16:30:45:83:d4:17:
         d1:34:09:9b:d6:f3:10:64:a6:17:d6:17:08:8a:0d:cb:2c:43:
         24:91:92:f7
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEosIBRnuzEfc2yYFaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkOGFiM2UtNDk1Yi00OWUyLWI0OWQtZGVkMDBmMjMz
MGQyMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
MWQ3ZjMwZTUtNzJkOC00ZmMzLTk5YTUtZjA4YTk0ZDEwNDc5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnReVhdbmpi/Mdu21Af1LIjIGJns0tlmNUrGX
FPTWhcFs5SXqllGPBYm708P3ZGiMoWqlnnKX35ZPriiDsq0+LfyEO5LE9f4MJbkq
/PDyRTG2D2SHe/xVWHohfv0kQYO70a5GuvMukJBsPL4wjeeUmq+XuPETFI+jKG/B
O8mN7YOALgtxtmJtZnOu6vxizdZzGXrajzEoETLnWUbs/mcdM6WV4WrOoECawpb3
QpQ5aZnHeih90K3q95snt3AGDPG0ng/wpGYZjHiofGxAA22SJ1Giix/2Oxrc+mVu
9MUCBRNh9mhSxuAd9uqs/llzNGmZYJblD15nPMfmvO0lbU9UzwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFECD01/wCESw0u3GlcfP7q71Zz2OMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4
YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQwMGYyMzMwZDIvYzA2YTAxMzQtMjQ0YS0z
M2QyLTkwMzYtZWQ2MjNkYmIyZjEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvOGFkOGFiM2UtNDk1Yi00OWUyLWI0
OWQtZGVkMDBmMjMzMGQyLzhhZDhhYjNlLTQ5NWItNDllMi1iNDlkLWRlZDAwZjIz
MzBkMi5jcmwwHwYDVR0jBBgwFoAUxdC+2LPxFmyIkRsgB/yFrna5HikwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84YWQ4YWIzZS00OTViLTQ5ZTItYjQ5ZC1kZWQw
MGYyMzMwZDIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQDk0jgAwQA
k0jqAwQBk0jwMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAc8rcm89x0gsX99bH68vHYdYo/bjyfJorRqsv7F
d20gyNjfeeJfuTq+QZfMMQG/Oe5kPUz6CGVRGGjJw8Y44hK7IgbBbK6M/wfPHwUX
xRv61ox6SoVbwdhOZqRejAkscUyQaC/60Rt+pJ5jblVoAWkB/LZA7pSwIpGtdTRn
a503N4xNo+pzfb0hl/G9O4gCIoZ0rjZENqqu4Svte7Aph0Txj0B/IIxWAoDUxlq3
vJ2cYUM45UcixR/C7bxzgevUDuoC31KtOB47mfPZZJjF9P8RTMWbKE6JrEbQe5mj
ka/mme5ZnxYwRYPUF9E0CZvW8xBkphfWFwiKDcssQySRkvc=
-----END CERTIFICATE-----
Generated at Mon Jun 16 12:22:23 2025 by rpki-client