Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa
File:                     0df61094-b3d1-3800-8547-92865e27dec2.roa (raw, json)
Hash identifier:          GlzlVmTprceUAKscMQEgMfkp7kDy/hBOLZ8DPettV3A=
Subject key identifier:   40:87:08:0F:F7:51:29:8F:AE:D4:E6:06:4B:4A:F4:AE:1C:32:EC:0A
Certificate issuer:       /CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
Certificate serial:       010D0C9F4328584A698B349564D78A381421A558
Authority key identifier: 5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa
Signing time:             Sat 05 Jul 2025 01:00:50 +0000
ROA not before:           Sat 05 Jul 2025 01:00:50 +0000
ROA not after:            Fri 03 Oct 2025 01:00:50 +0000
asID:                     21700
IP address blocks:        216.126.57.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 22 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:69:8b:34:95:64:d7:8a:38:14:21:a5:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a48c74e-ed9e-44e7-bbf5-76f473a21d74
        Validity
            Not Before: Jul  5 01:00:50 2025 GMT
            Not After : Oct  3 01:00:50 2025 GMT
        Subject: CN=04968660-7db0-446e-957f-f22b11373a19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:af:ae:05:ff:c9:66:04:a0:2e:e3:86:44:
                    e1:74:4e:d1:5b:e9:64:d8:20:7a:17:2d:d9:3f:86:
                    b5:64:ea:e2:96:2b:78:86:53:e3:f4:e9:ae:86:c5:
                    a8:9d:bc:5f:1f:ca:48:a6:90:8a:05:dc:8a:d2:1d:
                    a9:41:52:4a:f2:a4:b5:72:08:2c:27:fe:64:00:07:
                    6b:89:14:c9:16:e6:25:a7:20:ce:01:d7:07:f9:6e:
                    34:1b:06:d7:9e:7d:d6:12:b0:c6:a2:5a:50:a7:23:
                    88:a8:16:3f:17:fa:15:17:b5:ae:cd:83:8a:8f:57:
                    73:aa:75:af:d8:27:cf:b0:ef:83:aa:06:cf:07:a2:
                    a4:a5:ed:6e:34:a8:0a:9f:92:fe:21:2f:bf:18:28:
                    5d:42:28:94:c8:90:78:9e:72:71:cf:09:93:05:0c:
                    e0:e5:f6:0a:45:28:88:2d:56:f5:53:46:cd:ca:0e:
                    87:b9:e1:83:c1:b2:0e:6a:b1:a2:5d:cc:be:31:98:
                    42:44:b9:cb:fc:b6:91:bf:4e:d7:75:a0:e1:84:56:
                    7a:7d:97:26:62:81:90:a2:4f:96:90:09:5c:ca:53:
                    32:4a:ab:29:1f:f8:08:bc:f2:39:ec:50:fe:ca:dc:
                    de:14:19:51:b4:fc:fa:13:72:ce:d6:7f:3a:23:fc:
                    07:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:87:08:0F:F7:51:29:8F:AE:D4:E6:06:4B:4A:F4:AE:1C:32:EC:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/0df61094-b3d1-3800-8547-92865e27dec2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.crl

            X509v3 Authority Key Identifier:
                keyid:5C:5A:EC:29:32:45:08:07:B2:B6:98:82:EF:E0:88:D5:65:E5:3C:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/2a48c74e-ed9e-44e7-bbf5-76f473a21d74.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.126.57.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:28:06:60:5b:f6:c2:53:ed:05:11:5e:8f:a2:e4:df:25:2d:
         3e:39:09:08:c1:00:02:fa:c4:c9:06:f2:a9:00:fe:c3:93:1a:
         c1:98:61:3e:ed:c8:c6:f6:dd:cc:fa:61:49:fe:4b:fc:60:b9:
         ca:a8:2c:d6:9a:72:83:d1:c1:f2:34:74:bf:ca:80:5f:76:4b:
         4a:58:b0:6b:d2:f6:be:1d:9c:dc:3f:df:8e:97:68:2d:48:da:
         78:67:0c:a6:dd:52:fa:81:3e:58:4e:c9:ed:30:e9:c6:7b:09:
         fc:b6:63:00:44:ac:55:11:8b:72:b4:e2:71:07:2e:90:c6:2c:
         f6:f1:cb:85:1d:2d:4c:39:df:e9:36:9c:d9:61:67:b9:32:5f:
         87:53:b0:65:ab:24:16:51:34:15:74:23:56:00:8e:26:1a:5d:
         b5:f5:79:d0:88:85:b9:be:ae:db:c6:97:32:82:be:39:3f:39:
         f3:ce:ee:b1:0c:2a:14:a6:20:90:50:81:cb:bb:91:03:72:6e:
         8d:3c:3f:0b:8d:d3:f5:39:32:1d:94:e6:d8:21:3d:65:c5:6c:
         d1:38:93:89:96:29:c7:af:14:dd:bb:f2:50:1f:4e:fb:9e:4c:
         74:bb:49:c7:95:6a:b0:cd:44:60:3c:12:d0:31:39:f5:35:ab:
         67:a9:e7:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEppizSVZNeKOBQhpVgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmE0OGM3NGUtZWQ5ZS00NGU3LWJiZjUtNzZmNDczYTIx
ZDc0MB4XDTI1MDcwNTAxMDA1MFoXDTI1MTAwMzAxMDA1MFowLzEtMCsGA1UEAxMk
MDQ5Njg2NjAtN2RiMC00NDZlLTk1N2YtZjIyYjExMzczYTE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj2vrgX/yWYEoC7jhkThdE7RW+lk2CB6Fy3Z
P4a1ZOrilit4hlPj9OmuhsWonbxfH8pIppCKBdyK0h2pQVJK8qS1cggsJ/5kAAdr
iRTJFuYlpyDOAdcH+W40GwbXnn3WErDGolpQpyOIqBY/F/oVF7WuzYOKj1dzqnWv
2CfPsO+DqgbPB6Kkpe1uNKgKn5L+IS+/GChdQiiUyJB4nnJxzwmTBQzg5fYKRSiI
LVb1U0bNyg6HueGDwbIOarGiXcy+MZhCRLnL/LaRv07XdaDhhFZ6fZcmYoGQok+W
kAlcylMySqspH/gIvPI57FD+ytzeFBlRtPz6E3LO1n86I/wHDwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFECHCA/3USmPrtTmBktK9K4cMuwKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4
Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0NzNhMjFkNzQvMGRmNjEwOTQtYjNkMS0z
ODAwLTg1NDctOTI4NjVlMjdkZWMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMmE0OGM3NGUtZWQ5ZS00NGU3LWJi
ZjUtNzZmNDczYTIxZDc0LzJhNDhjNzRlLWVkOWUtNDRlNy1iYmY1LTc2ZjQ3M2Ey
MWQ3NC5jcmwwHwYDVR0jBBgwFoAUXFrsKTJFCAeytpiC7+CI1WXlPLcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yYTQ4Yzc0ZS1lZDllLTQ0ZTctYmJmNS03NmY0
NzNhMjFkNzQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2H45MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAEoBmBb9sJT7QURXo+i5N8lLT45CQjBAAL6xMkG8qkA/sOTGsGYYT7t
yMb23cz6YUn+S/xgucqoLNaacoPRwfI0dL/KgF92S0pYsGvS9r4dnNw/346XaC1I
2nhnDKbdUvqBPlhOye0w6cZ7Cfy2YwBErFURi3K04nEHLpDGLPbxy4UdLUw53+k2
nNlhZ7kyX4dTsGWrJBZRNBV0I1YAjiYaXbX1edCIhbm+rtvGlzKCvjk/OfPO7rEM
KhSmIJBQgcu7kQNybo08PwuN0/U5Mh2U5tghPWXFbNE4k4mWKcevFN278lAfTvue
THS7SceVarDNRGA8EtAxOfU1q2ep54A=
-----END CERTIFICATE-----
Generated at Mon Jul 21 02:14:21 2025 by rpki-client