Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
File:                     f0853596-0315-33ac-b801-86570db6ad6d.roa (raw, json)
Hash identifier:          WRBIbT0ZZkOY9QVFB+pr4iw92UEGLAWqVzoMMAqdPnA=
Subject key identifier:   3A:F9:F1:E0:14:37:9B:72:A1:98:30:25:1E:30:84:BA:F1:C3:A3:9F
Certificate issuer:       /CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
Certificate serial:       010D0C9F4328584A51D06CAE77A4E5F03726A480
Authority key identifier: EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     395201
IP address blocks:        134.65.194.0/23 maxlen: 23
                          164.152.162.0/23 maxlen: 23
                          169.155.46.0/23 maxlen: 23
                          169.155.170.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 23 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:6c:ae:77:a4:e5:f0:37:26:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=390ceb1e-38f0-4690-8e12-fdef0dc0eddb
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=97339352-079a-4bfd-adf0-521856f688ff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6f:a9:fb:70:81:33:04:de:d1:9b:54:bf:2c:
                    74:4b:33:9e:4a:24:d8:f0:f8:f3:2a:43:97:7b:ac:
                    f1:2f:90:b0:21:b3:db:45:2f:c6:1a:db:0f:bd:4f:
                    bc:7d:9c:a6:97:0e:2c:a3:45:1e:3f:53:8a:27:aa:
                    08:22:50:0c:be:98:51:83:be:7c:0a:81:ae:4b:ad:
                    25:8d:1b:ba:a6:b7:26:26:2f:70:1a:62:7d:a1:19:
                    54:20:fc:13:3d:72:96:bc:8f:1f:f4:6a:bf:a6:37:
                    94:ac:32:d6:c7:ea:78:01:b6:c0:22:f7:b6:ff:6d:
                    8d:07:38:b3:c2:9b:6d:1d:ea:f8:d1:74:74:f1:85:
                    59:25:d3:64:09:b5:81:58:a7:75:28:fb:4c:60:ad:
                    d5:38:fd:be:3f:a4:12:b8:eb:7f:5d:ec:ec:7e:87:
                    ae:cf:db:10:83:85:da:19:18:62:62:05:47:d3:c3:
                    ae:04:e8:c2:7e:29:3e:c2:fb:f8:16:63:2a:3f:b7:
                    e8:d1:b6:92:f1:0e:73:57:7e:ba:c5:f4:9c:0f:8f:
                    21:de:f2:5e:9e:64:87:09:23:e2:04:cf:ee:47:84:
                    23:5a:0a:96:3f:8a:e8:af:bf:40:1f:d2:d9:a6:f3:
                    95:bf:c8:3e:1c:09:38:8e:03:63:a5:5c:e0:0a:3b:
                    c2:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:F9:F1:E0:14:37:9B:72:A1:98:30:25:1E:30:84:BA:F1:C3:A3:9F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/f0853596-0315-33ac-b801-86570db6ad6d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.crl

            X509v3 Authority Key Identifier:
                keyid:EC:88:55:61:E9:7D:FF:FC:46:28:CC:12:12:F1:10:92:D8:74:55:4B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/390ceb1e-38f0-4690-8e12-fdef0dc0eddb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  134.65.194.0/23
                  164.152.162.0/23
                  169.155.46.0/23
                  169.155.170.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:11:35:29:39:9c:e2:23:48:e3:06:73:b8:48:b8:a1:a4:27:
         8e:f6:7a:53:91:19:4f:30:c1:60:db:f2:70:3c:59:ce:e3:3d:
         00:c2:a8:14:b2:a1:c7:38:16:eb:29:00:f6:95:45:f5:c7:1c:
         6b:6a:43:76:58:17:0b:01:8a:f6:98:8e:f5:0e:f6:f0:7e:b9:
         d8:ff:b3:7d:c0:ff:73:b3:f0:13:9c:48:48:24:93:ca:9b:6e:
         7c:49:5c:b8:45:06:26:6e:4e:31:0c:02:e6:5c:84:1e:ba:0b:
         58:8e:9b:e4:ef:e2:20:61:ee:0c:df:33:a6:73:f8:f7:fa:74:
         d3:ac:60:f6:b5:1b:db:c4:bc:48:af:23:2d:61:09:46:ed:f4:
         10:46:a0:ef:71:6e:26:ac:b3:8c:33:15:e9:76:b8:0a:e9:5d:
         7f:7e:65:12:48:c5:7e:2a:b3:0f:f0:0d:ff:2f:ad:17:6f:0b:
         66:b3:af:91:a9:5f:17:20:5e:e5:59:67:b0:21:13:98:2d:8e:
         f4:62:b4:a3:a4:d5:31:38:bf:81:cf:bd:a2:3f:8f:e3:74:78:
         0d:cf:39:6b:d0:da:d3:0e:28:33:fc:28:d2:12:71:a8:e4:c8:
         b5:11:93:b5:81:c5:88:a5:7b:7b:af:eb:e6:13:ce:35:7d:ff:
         f8:27:70:7b
-----BEGIN CERTIFICATE-----
MIIGVTCCBT2gAwIBAgIUAQ0Mn0MoWEpR0Gyud6Tl8DcmpIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzkwY2ViMWUtMzhmMC00NjkwLThlMTItZmRlZjBkYzBl
ZGRiMB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
OTczMzkzNTItMDc5YS00YmZkLWFkZjAtNTIxODU2ZjY4OGZmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAom+p+3CBMwTe0ZtUvyx0SzOeSiTY8PjzKkOX
e6zxL5CwIbPbRS/GGtsPvU+8fZymlw4so0UeP1OKJ6oIIlAMvphRg758CoGuS60l
jRu6prcmJi9wGmJ9oRlUIPwTPXKWvI8f9Gq/pjeUrDLWx+p4AbbAIve2/22NBziz
wpttHer40XR08YVZJdNkCbWBWKd1KPtMYK3VOP2+P6QSuOt/Xezsfoeuz9sQg4Xa
GRhiYgVH08OuBOjCfik+wvv4FmMqP7fo0baS8Q5zV366xfScD48h3vJenmSHCSPi
BM/uR4QjWgqWP4ror79AH9LZpvOVv8g+HAk4jgNjpVzgCjvC4wIDAQABo4IDZzCC
A2MwHQYDVR0OBBYEFDr58eAUN5tyoZgwJR4whLrxw6OfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBj
ZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVmMGRjMGVkZGIvZjA4NTM1OTYtMDMxNS0z
M2FjLWI4MDEtODY1NzBkYjZhZDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMzkwY2ViMWUtMzhmMC00NjkwLThl
MTItZmRlZjBkYzBlZGRiLzM5MGNlYjFlLTM4ZjAtNDY5MC04ZTEyLWZkZWYwZGMw
ZWRkYi5jcmwwHwYDVR0jBBgwFoAU7IhVYel9//xGKMwSEvEQkth0VUswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8zOTBjZWIxZS0zOGYwLTQ2OTAtOGUxMi1mZGVm
MGRjMGVkZGIuY2VyMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQBhkHCAwQB
pJiiAwQBqZsuAwQBqZuqMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4Bggr
BgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3Bz
Lmh0bWwwDQYJKoZIhvcNAQELBQADggEBADIRNSk5nOIjSOMGc7hIuKGkJ472elOR
GU8wwWDb8nA8Wc7jPQDCqBSyocc4FuspAPaVRfXHHGtqQ3ZYFwsBivaYjvUO9vB+
udj/s33A/3Oz8BOcSEgkk8qbbnxJXLhFBiZuTjEMAuZchB66C1iOm+Tv4iBh7gzf
M6Zz+Pf6dNOsYPa1G9vEvEivIy1hCUbt9BBGoO9xbiass4wzFel2uArpXX9+ZRJI
xX4qsw/wDf8vrRdvC2azr5GpXxcgXuVZZ7AhE5gtjvRitKOk1TE4v4HPvaI/j+N0
eA3POWvQ2tMOKDP8KNIScajkyLURk7WBxYile3uv6+YTzjV9//gncHs=
-----END CERTIFICATE-----
Generated at Thu Aug 21 17:56:03 2025 by rpki-client