Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa
File:                     52ea8b98-74f4-3122-acd5-365ad4949a5e.roa (raw, json)
Hash identifier:          rj5xUMZk8Iq8/gSNF5bzuh6z3dj3Dw4+lIbOBr18S4k=
Subject key identifier:   3C:D1:2C:CE:9A:45:1D:D5:F9:17:28:64:D2:1F:35:BE:C7:E7:9E:E5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A71EB3CEABC59F05748B44540
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     7861
IP address blocks:        209.115.158.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:3c:ea:bc:59:f0:57:48:b4:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=008a8029-fc24-47be-8db1-72609dfee086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:51:ee:39:28:ab:73:5b:bc:4e:a8:fc:48:ec:
                    09:83:dd:38:fa:56:6a:13:80:6d:36:77:07:59:03:
                    66:2b:38:d3:c1:3f:4c:26:15:d1:31:75:d7:6c:ff:
                    00:69:2a:f0:e7:8d:37:6b:94:3d:82:df:9e:22:33:
                    90:db:7e:60:2e:ca:cf:dc:85:9a:f6:d8:a9:dd:a9:
                    b8:f3:f8:7c:a8:78:fd:79:0d:a8:8c:01:73:8b:6e:
                    f9:cb:d5:8d:84:f3:e6:de:a1:cc:2b:78:01:23:30:
                    14:4c:91:ac:bd:52:95:06:4f:76:84:87:43:f8:9a:
                    71:4f:86:bf:7c:66:2c:84:b8:3e:6c:e1:b8:55:78:
                    ca:3c:28:88:17:f6:5a:e4:ce:3b:fa:09:a1:ce:be:
                    fd:01:5c:fb:ab:72:04:91:1f:22:ee:19:c9:77:b5:
                    77:11:7a:8b:a3:bc:70:8f:39:8e:e1:71:f3:0b:73:
                    d7:fa:b3:39:5e:11:3b:77:65:2b:85:85:7d:67:a9:
                    6d:5c:49:c8:eb:6a:e2:f4:4e:ba:03:2a:40:07:72:
                    f4:59:ef:77:ff:f5:d9:69:0b:d9:ce:18:e6:b0:1f:
                    d0:32:16:51:8c:2a:b9:34:37:2b:ea:0d:b0:85:7e:
                    aa:ff:91:89:14:70:5c:56:3a:3e:36:38:f6:72:17:
                    fe:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:D1:2C:CE:9A:45:1D:D5:F9:17:28:64:D2:1F:35:BE:C7:E7:9E:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/52ea8b98-74f4-3122-acd5-365ad4949a5e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.115.158.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:34:77:79:ea:39:34:29:08:25:e3:b1:a0:86:56:a2:f0:0c:
         32:ce:7f:6c:21:d9:51:dd:62:30:72:a1:df:30:af:49:eb:df:
         c8:51:c4:71:3c:63:3d:96:58:d2:05:9c:5a:09:95:31:cd:31:
         c5:c7:6f:5c:d3:5e:c0:17:15:a9:7f:ff:6e:2b:7d:55:bf:37:
         59:f1:b8:ad:42:7e:ce:30:a7:47:f7:4a:e6:0d:36:cf:03:09:
         09:ad:25:c8:b5:aa:4a:a6:c3:46:d8:86:ef:09:dd:cb:99:80:
         b3:31:d7:2e:48:d2:05:9d:53:76:e0:13:f3:90:48:75:f5:b6:
         43:f1:a9:15:30:42:dd:06:e3:b1:cb:96:5e:9d:20:3a:bb:55:
         13:ed:61:21:fd:19:14:9c:53:04:9b:6a:75:7f:38:73:87:a8:
         7c:e9:69:bb:9c:e4:e1:15:8e:5b:75:08:a9:c2:51:d5:a5:8c:
         b2:44:ec:fe:aa:c7:55:74:ab:de:f5:ad:b8:33:e8:f6:4c:68:
         b6:16:2c:7c:69:bf:9f:51:9b:54:84:57:db:8a:6d:5c:cd:16:
         3e:be:13:54:17:0c:41:fb:9a:6e:02:b0:e9:fc:60:f5:58:b5:
         9c:a4:b5:b8:bc:0b:65:56:39:6c:1c:28:b8:24:a4:7f:29:db:
         2f:08:d6:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpx6zzqvFnwV0i0RUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
MDA4YTgwMjktZmMyNC00N2JlLThkYjEtNzI2MDlkZmVlMDg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1FHuOSirc1u8Tqj8SOwJg904+lZqE4BtNncH
WQNmKzjTwT9MJhXRMXXXbP8AaSrw5403a5Q9gt+eIjOQ235gLsrP3IWa9tip3am4
8/h8qHj9eQ2ojAFzi275y9WNhPPm3qHMK3gBIzAUTJGsvVKVBk92hIdD+JpxT4a/
fGYshLg+bOG4VXjKPCiIF/Za5M47+gmhzr79AVz7q3IEkR8i7hnJd7V3EXqLo7xw
jzmO4XHzC3PX+rM5XhE7d2UrhYV9Z6ltXEnI62ri9E66AypAB3L0We93//XZaQvZ
zhjmsB/QMhZRjCq5NDcr6g2whX6q/5GJFHBcVjo+Njj2chf+BwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDzRLM6aRR3V+RcoZNIfNb7H557lMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNTJlYThiOTgtNzRmNC0z
MTIyLWFjZDUtMzY1YWQ0OTQ5YTVlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB0XOeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA00d3nqOTQpCCXjsaCGVqLwDDLOf2wh2VHdYjByod8wr0nr38hRxHE8
Yz2WWNIFnFoJlTHNMcXHb1zTXsAXFal//24rfVW/N1nxuK1Cfs4wp0f3SuYNNs8D
CQmtJci1qkqmw0bYhu8J3cuZgLMx1y5I0gWdU3bgE/OQSHX1tkPxqRUwQt0G47HL
ll6dIDq7VRPtYSH9GRScUwSbanV/OHOHqHzpabuc5OEVjlt1CKnCUdWljLJE7P6q
x1V0q971rbgz6PZMaLYWLHxpv59Rm1SEV9uKbVzNFj6+E1QXDEH7mm4CsOn8YPVY
tZyktbi8C2VWOWwcKLgkpH8p2y8I1no=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:37:31 2025 by rpki-client