Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b7ae2a88-a769-3e1a-888c-92beaad10a99.roa
File:                     b7ae2a88-a769-3e1a-888c-92beaad10a99.roa (raw, json)
Hash identifier:          L+vuA6g2i0bcZOsQe1ERzxHaa6aphHtGDbnatIvq0co=
Subject key identifier:   F8:FD:19:FA:0D:AA:50:1F:99:0C:5D:FF:D5:12:3B:A6:28:D2:DC:4A
Certificate issuer:       /CN=1e268aaa-6306-4988-99f7-d5802a67b577
Certificate serial:       010D0C9F432858493243E4E723A25E58E4FDF200
Authority key identifier: 6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b7ae2a88-a769-3e1a-888c-92beaad10a99.roa
Signing time:             Sat 15 Mar 2025 13:00:52 +0000
ROA not before:           Sat 15 Mar 2025 13:00:52 +0000
ROA not after:            Fri 13 Jun 2025 13:00:52 +0000
asID:                     397763
IP address blocks:        135.129.21.0/24 maxlen: 24
                          143.131.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:32:43:e4:e7:23:a2:5e:58:e4:fd:f2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e268aaa-6306-4988-99f7-d5802a67b577
        Validity
            Not Before: Mar 15 13:00:52 2025 GMT
            Not After : Jun 13 13:00:52 2025 GMT
        Subject: CN=2bce25eb-76c9-4110-8e6c-711e1db94930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:47:09:63:20:01:a6:6e:2a:db:68:ed:b6:83:
                    6f:d4:e4:c6:f5:6e:13:23:09:38:ba:b4:8c:2e:95:
                    e9:57:a0:7d:f6:77:5d:a2:6d:1a:c7:ab:a4:6c:81:
                    a6:1e:84:ad:9e:d3:c1:14:f5:72:d1:fa:ea:fb:00:
                    a4:d6:76:99:fa:2f:c9:24:5e:78:fe:67:7c:74:2d:
                    b9:9d:bd:46:a7:04:4b:03:a0:8e:c6:90:7d:9e:46:
                    92:a8:08:57:d8:ed:57:dc:9b:b5:91:ae:e3:08:31:
                    58:4a:14:9a:21:18:2b:40:28:db:d1:d4:c4:da:61:
                    b6:03:aa:3c:72:39:34:a7:d6:2d:6a:84:13:e0:b2:
                    dc:2a:db:45:a9:fd:91:57:9a:a6:3b:f1:fc:45:89:
                    9d:10:aa:ca:0d:af:28:74:38:e0:31:d9:e4:ac:33:
                    55:af:4f:ad:a2:c4:e8:a4:eb:a4:fa:c5:d5:d8:55:
                    fc:81:ab:c5:94:fb:f7:5e:ff:fb:50:ba:02:e0:72:
                    c7:48:26:6c:68:e2:1a:bf:16:e4:c0:1e:25:0c:4d:
                    56:bf:a1:84:83:e0:38:8a:46:60:7c:a9:ef:9e:d2:
                    26:3d:63:00:1d:c8:99:a7:c3:86:94:e4:6f:58:54:
                    c0:6d:06:22:e8:0b:e1:38:04:b4:39:a4:7c:ec:a3:
                    a1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FD:19:FA:0D:AA:50:1F:99:0C:5D:FF:D5:12:3B:A6:28:D2:DC:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/b7ae2a88-a769-3e1a-888c-92beaad10a99.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577/1e268aaa-6306-4988-99f7-d5802a67b577.crl

            X509v3 Authority Key Identifier:
                keyid:6E:EA:DD:B7:88:28:8A:01:91:6E:A3:89:AB:C9:61:FD:20:7D:73:CC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e268aaa-6306-4988-99f7-d5802a67b577.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.129.21.0/24
                  143.131.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cb:b2:0e:df:9f:2a:81:58:7a:b0:09:36:ab:6f:dc:3b:77:c1:
         d8:3f:e9:92:26:4c:b1:1d:6c:34:09:f7:77:39:a4:6d:2e:a1:
         79:bd:ec:19:81:db:81:1b:dd:1c:16:9f:c5:8a:33:c5:17:7a:
         f2:e1:9a:db:9f:36:10:7e:3a:56:f4:11:de:4e:cc:89:a4:7d:
         f7:d3:75:e0:35:cb:34:89:d3:e3:b3:37:ae:da:0c:7e:60:f3:
         00:f7:03:a1:f1:a7:df:cd:c0:f5:84:c4:7c:60:60:dd:9c:f1:
         eb:01:ec:d1:3a:2b:08:f4:53:b9:e2:91:04:05:35:b5:35:31:
         fd:d4:21:eb:4c:7b:df:25:9e:41:85:11:41:a2:ee:88:07:6d:
         26:f0:dd:1d:fd:46:a2:8e:3a:e8:a7:1c:0f:89:ce:24:09:0f:
         8d:af:53:2d:bc:ef:9f:36:4a:0b:e6:f0:9f:65:fe:ba:af:83:
         03:8a:e4:bb:ba:3f:c6:9c:ba:37:1c:79:66:e5:bd:3e:3c:3d:
         78:4f:d3:8b:04:a0:37:26:78:4d:ec:0d:9b:25:b6:fc:d2:49:
         90:42:c2:ee:bd:8b:58:82:33:a4:e9:c1:9b:de:79:af:ca:95:
         89:90:93:7a:2d:33:c4:35:65:ce:82:33:29:77:a9:7d:51:07:
         12:e8:7e:31
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEkyQ+TnI6JeWOT98gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWUyNjhhYWEtNjMwNi00OTg4LTk5ZjctZDU4MDJhNjdi
NTc3MB4XDTI1MDMxNTEzMDA1MloXDTI1MDYxMzEzMDA1MlowLzEtMCsGA1UEAxMk
MmJjZTI1ZWItNzZjOS00MTEwLThlNmMtNzExZTFkYjk0OTMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUcJYyABpm4q22jttoNv1OTG9W4TIwk4urSM
LpXpV6B99nddom0ax6ukbIGmHoStntPBFPVy0frq+wCk1naZ+i/JJF54/md8dC25
nb1GpwRLA6COxpB9nkaSqAhX2O1X3Ju1ka7jCDFYShSaIRgrQCjb0dTE2mG2A6o8
cjk0p9YtaoQT4LLcKttFqf2RV5qmO/H8RYmdEKrKDa8odDjgMdnkrDNVr0+tosTo
pOuk+sXV2FX8gavFlPv3Xv/7ULoC4HLHSCZsaOIavxbkwB4lDE1Wv6GEg+A4ikZg
fKnvntImPWMAHciZp8OGlORvWFTAbQYi6AvhOAS0OaR87KOhtwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFPj9GfoNqlAfmQxd/9USO6Yo0txKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2
OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgwMmE2N2I1NzcvYjdhZTJhODgtYTc2OS0z
ZTFhLTg4OGMtOTJiZWFhZDEwYTk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWUyNjhhYWEtNjMwNi00OTg4LTk5
ZjctZDU4MDJhNjdiNTc3LzFlMjY4YWFhLTYzMDYtNDk4OC05OWY3LWQ1ODAyYTY3
YjU3Ny5jcmwwHwYDVR0jBBgwFoAUburdt4goigGRbqOJq8lh/SB9c8wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTI2OGFhYS02MzA2LTQ5ODgtOTlmNy1kNTgw
MmE2N2I1NzcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAh4EVAwQA
j4MPMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAMuyDt+fKoFYerAJNqtv3Dt3wdg/6ZImTLEdbDQJ93c5pG0u
oXm97BmB24Eb3RwWn8WKM8UXevLhmtufNhB+Olb0Ed5OzImkfffTdeA1yzSJ0+Oz
N67aDH5g8wD3A6Hxp9/NwPWExHxgYN2c8esB7NE6Kwj0U7nikQQFNbU1Mf3UIetM
e98lnkGFEUGi7ogHbSbw3R39RqKOOuinHA+JziQJD42vUy287582Sgvm8J9l/rqv
gwOK5Lu6P8acujcceWblvT48PXhP04sEoDcmeE3sDZsltvzSSZBCwu69i1iCM6Tp
wZveea/KlYmQk3otM8Q1Zc6CMyl3qX1RBxLofjE=
-----END CERTIFICATE-----
Generated at Sun Apr 6 03:36:11 2025 by rpki-client