Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa
File:                     c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa (raw, json)
Hash identifier:          oQ6wM3QRGu++acHIo+9yrcyV6MKmSPvfl2EtG5ir7Mw=
Subject key identifier:   5C:B8:EA:42:52:FB:CF:7F:60:4B:E4:8B:BD:24:78:EE:81:35:48:E7
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A7A4B3CCA61E0DC7D6B65F980
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa
Signing time:             Fri 11 Jul 2025 01:00:51 +0000
ROA not before:           Fri 11 Jul 2025 01:00:51 +0000
ROA not after:            Thu 09 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        154.11.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7a:4b:3c:ca:61:e0:dc:7d:6b:65:f9:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 11 01:00:51 2025 GMT
            Not After : Oct  9 01:00:51 2025 GMT
        Subject: CN=c9eb3771-7585-49f8-baaa-3909fcd100f5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:10:61:29:0e:09:c6:44:dd:34:fb:b4:4c:a7:
                    28:0d:bc:41:9b:4a:f1:77:00:f6:5c:49:d1:93:32:
                    a6:cc:bd:1f:86:da:6f:0b:14:27:06:80:8e:53:cd:
                    38:bc:77:ef:49:e2:a2:36:78:25:49:5b:3f:5a:8e:
                    97:cd:26:1f:a5:84:7a:57:dd:de:de:bf:08:de:34:
                    03:59:97:40:6e:c1:cb:df:3e:c2:ac:74:a9:55:2f:
                    ab:cb:7f:b3:bf:64:cf:45:5a:01:78:78:17:ef:b3:
                    a1:18:6d:6a:c0:c4:1f:07:45:e6:c5:ab:de:03:9e:
                    0b:48:d5:a2:21:37:6e:33:a3:80:7d:6e:a4:e2:d2:
                    40:28:70:c5:f2:a7:e5:2f:54:54:41:c0:bb:e8:e3:
                    4a:a3:96:41:9f:b3:ff:4d:f7:3e:35:db:64:c8:27:
                    00:24:16:4d:07:65:8a:f4:b5:c9:f0:71:b9:8f:75:
                    b4:4f:41:50:2c:63:0e:ed:85:b9:29:2c:fd:fa:38:
                    2f:48:ae:9d:85:9b:81:d9:1f:2c:b1:d0:9f:83:39:
                    96:68:83:88:1d:d6:49:85:cc:1e:a7:a8:12:df:95:
                    5c:2d:5f:8f:b4:6f:ee:32:2f:ca:34:2e:00:1d:43:
                    65:02:bb:bc:08:d7:e4:0b:f3:f7:9a:8b:f6:10:5e:
                    b8:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:B8:EA:42:52:FB:CF:7F:60:4B:E4:8B:BD:24:78:EE:81:35:48:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c3a1f0b6-19f6-3fb9-ac5c-134aeee1640b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  154.11.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:f4:eb:f0:c9:90:96:b7:19:c6:8b:41:3e:00:b7:30:18:76:
         f6:e2:1d:c9:8f:08:32:2e:c3:b4:35:9b:46:33:b4:b7:39:0a:
         a9:dc:2b:6d:6a:e4:91:71:b9:bf:7d:15:2f:e0:16:df:77:ac:
         b2:c6:33:43:d3:26:e0:14:ee:21:b4:6d:eb:e8:88:ce:e6:40:
         00:14:22:2e:99:7d:15:c1:ac:33:27:66:9b:ca:c9:de:87:01:
         7a:07:17:2d:26:1d:e0:a4:6c:13:a6:12:d0:e6:52:b4:84:3a:
         12:7f:d5:1a:c2:1d:f6:ba:fd:48:da:0e:24:2c:81:e3:e8:f6:
         3b:f8:b5:15:5c:ab:62:d7:a6:71:32:b8:56:b6:f8:ed:6b:a9:
         db:fe:94:a8:87:9c:02:e8:15:d1:d6:25:af:33:0a:72:58:d3:
         a9:db:53:ae:8a:b5:d0:2b:6e:d6:fc:77:48:5c:56:81:67:f2:
         29:37:98:f6:eb:9b:52:ed:9c:16:cc:84:a5:16:d0:9a:18:e1:
         2c:3e:32:b8:eb:17:26:58:79:73:a9:d8:d1:b9:e9:78:70:d1:
         28:40:34:49:48:fe:e6:71:2e:2f:a9:7b:e8:2c:90:1b:bb:2d:
         24:be:63:5b:42:13:c8:cf:5f:aa:bd:3d:6b:74:3a:2b:1c:fc:
         d4:49:52:a3
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEp6SzzKYeDcfWtl+YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMTAxMDA1MVoXDTI1MTAwOTAxMDA1MVowLzEtMCsGA1UEAxMk
YzllYjM3NzEtNzU4NS00OWY4LWJhYWEtMzkwOWZjZDEwMGY1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2BBhKQ4JxkTdNPu0TKcoDbxBm0rxdwD2XEnR
kzKmzL0fhtpvCxQnBoCOU804vHfvSeKiNnglSVs/Wo6XzSYfpYR6V93e3r8I3jQD
WZdAbsHL3z7CrHSpVS+ry3+zv2TPRVoBeHgX77OhGG1qwMQfB0XmxaveA54LSNWi
ITduM6OAfW6k4tJAKHDF8qflL1RUQcC76ONKo5ZBn7P/Tfc+NdtkyCcAJBZNB2WK
9LXJ8HG5j3W0T0FQLGMO7YW5KSz9+jgvSK6dhZuB2R8ssdCfgzmWaIOIHdZJhcwe
p6gS35VcLV+PtG/uMi/KNC4AHUNlAru8CNfkC/P3mov2EF64+QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFFy46kJS+89/YEvki70keO6BNUjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzNhMWYwYjYtMTlmNi0z
ZmI5LWFjNWMtMTM0YWVlZTE2NDBiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAmgswVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAAfTr8MmQlrcZxotBPgC3MBh29uIdyY8IMi7DtDWbRjO0tzkKqdwrbWrk
kXG5v30VL+AW33esssYzQ9Mm4BTuIbRt6+iIzuZAABQiLpl9FcGsMydmm8rJ3ocB
egcXLSYd4KRsE6YS0OZStIQ6En/VGsId9rr9SNoOJCyB4+j2O/i1FVyrYtemcTK4
Vrb47Wup2/6UqIecAugV0dYlrzMKcljTqdtTroq10Ctu1vx3SFxWgWfyKTeY9uub
Uu2cFsyEpRbQmhjhLD4yuOsXJlh5c6nY0bnpeHDRKEA0SUj+5nEuL6l76CyQG7st
JL5jW0ITyM9fqr09a3Q6Kxz81ElSow==
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:21:02 2025 by rpki-client