Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa
File:                     7828704a-08b4-3ded-82e1-2b5e0b420c43.roa (raw, json)
Hash identifier:          FVCGDaXR9/tN2pIJa4AA23nvp258fHuda8igzF0GGXY=
Subject key identifier:   64:35:27:C1:62:35:CE:3D:87:6F:FF:57:E8:4D:E3:96:6C:C5:7B:28
Certificate issuer:       /CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
Certificate serial:       010D0C9F432858489FD09B6D7302E58317141820
Authority key identifier: B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa
Signing time:             Wed 22 Jan 2025 02:00:39 +0000
ROA not before:           Wed 22 Jan 2025 02:00:39 +0000
ROA not after:            Tue 22 Apr 2025 01:00:39 +0000
asID:                     399252
IP address blocks:        136.227.96.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 08 Apr 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:9f:d0:9b:6d:73:02:e5:83:17:14:18:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d2b7de7b-98de-4c9b-a37c-d7ecb88cf422
        Validity
            Not Before: Jan 22 02:00:39 2025 GMT
            Not After : Apr 22 01:00:39 2025 GMT
        Subject: CN=988fde58-8e91-4c3c-bfcb-6a88e1772f83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ab:0c:57:56:42:b4:1e:b7:a7:05:ab:cd:c5:
                    94:e4:8b:25:5f:c9:af:6b:fd:88:31:7d:97:cd:75:
                    b9:c9:97:70:36:86:c3:23:42:ad:1e:61:ef:54:0f:
                    40:a3:e7:c0:0b:17:52:50:8f:39:98:05:60:dd:ef:
                    41:5b:cd:8e:90:71:5f:df:03:f8:84:9b:be:57:70:
                    e1:16:d6:53:93:9d:26:18:4e:be:27:d4:8e:45:89:
                    4e:dd:da:24:53:dd:6b:41:b8:cb:a1:64:b1:e9:39:
                    ac:4e:8d:36:5c:8c:6a:2e:b9:9a:07:22:c0:41:78:
                    af:6a:0a:f0:06:d3:94:e8:6d:a3:78:d3:54:64:83:
                    42:51:cf:05:01:d1:00:17:b6:f2:f9:5f:56:8f:b2:
                    ae:48:16:e0:c6:46:3f:de:ab:23:cf:7d:6d:a2:47:
                    5e:6d:6c:4b:7d:66:1f:5f:c7:3a:cb:0b:84:63:cf:
                    7e:1a:80:09:0c:98:68:f9:37:28:0d:52:c8:df:01:
                    73:be:2f:5a:4a:54:24:20:4b:30:e0:7d:ff:2c:f4:
                    f8:18:9f:23:0f:82:8a:d3:ae:dc:36:ac:1c:0e:3d:
                    82:cb:15:6e:97:f1:40:86:c8:cd:cc:7c:85:bf:1a:
                    80:33:82:f1:2f:d6:d1:d7:cc:9f:fe:39:0b:65:e8:
                    ac:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:35:27:C1:62:35:CE:3D:87:6F:FF:57:E8:4D:E3:96:6C:C5:7B:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/7828704a-08b4-3ded-82e1-2b5e0b420c43.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.crl

            X509v3 Authority Key Identifier:
                keyid:B4:2C:83:EC:68:8A:F5:F3:27:A8:AB:B7:2B:A5:E1:78:35:A1:2B:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/d2b7de7b-98de-4c9b-a37c-d7ecb88cf422.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  136.227.96.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:59:2b:07:81:ee:c5:cf:ae:10:fd:8a:be:d4:eb:61:b8:13:
         80:39:e3:22:4f:04:47:37:78:fa:1d:f3:39:ae:e7:2d:26:91:
         15:a4:74:fd:c0:72:97:63:ce:f8:59:3b:fb:a0:aa:09:0a:cb:
         7f:b5:42:4f:6d:84:43:91:62:71:8e:60:84:26:f8:68:9a:e7:
         f2:94:2e:f1:2c:e8:83:ca:4b:b1:30:48:ec:d9:50:0c:d4:5f:
         81:d2:a6:f5:b2:31:87:f8:72:97:86:b6:4e:0c:37:d4:fb:7b:
         df:9a:a5:e7:9f:a7:d7:60:d8:79:25:32:5b:dd:e1:2b:7f:23:
         25:48:b5:88:94:8f:36:50:85:5b:e7:7c:53:96:f9:68:e3:8f:
         db:ad:08:42:6b:f5:07:01:e4:95:eb:68:de:30:9f:56:7d:5b:
         30:6d:f6:a2:09:9b:e1:4f:8a:a3:2a:d8:c6:07:2d:25:ed:0e:
         d4:b8:34:77:80:9e:ee:c2:6a:9e:db:2d:85:ac:54:5e:b6:95:
         77:bd:d9:87:ea:f4:04:ab:aa:7f:41:b3:39:a0:8b:9e:e5:da:
         dd:ac:f4:a7:d3:b4:df:c1:3b:e6:0c:42:f9:0a:55:00:60:42:
         13:32:02:23:48:e3:b6:fb:c0:00:85:f9:c5:89:5b:b3:16:62:
         85:c9:cd:db
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEif0JttcwLlgxcUGCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDJiN2RlN2ItOThkZS00YzliLWEzN2MtZDdlY2I4OGNm
NDIyMB4XDTI1MDEyMjAyMDAzOVoXDTI1MDQyMjAxMDAzOVowLzEtMCsGA1UEAxMk
OTg4ZmRlNTgtOGU5MS00YzNjLWJmY2ItNmE4OGUxNzcyZjgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiasMV1ZCtB63pwWrzcWU5IslX8mva/2IMX2X
zXW5yZdwNobDI0KtHmHvVA9Ao+fACxdSUI85mAVg3e9BW82OkHFf3wP4hJu+V3Dh
FtZTk50mGE6+J9SORYlO3dokU91rQbjLoWSx6TmsTo02XIxqLrmaByLAQXivagrw
BtOU6G2jeNNUZINCUc8FAdEAF7by+V9Wj7KuSBbgxkY/3qsjz31tokdebWxLfWYf
X8c6ywuEY89+GoAJDJho+TcoDVLI3wFzvi9aSlQkIEsw4H3/LPT4GJ8jD4KK067c
NqwcDj2CyxVul/FAhsjNzHyFvxqAM4LxL9bR18yf/jkLZeisDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGQ1J8FiNc49h2//V+hN45ZsxXsoMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9kMmI3
ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2VjYjg4Y2Y0MjIvNzgyODcwNGEtMDhiNC0z
ZGVkLTgyZTEtMmI1ZTBiNDIwYzQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZDJiN2RlN2ItOThkZS00YzliLWEz
N2MtZDdlY2I4OGNmNDIyL2QyYjdkZTdiLTk4ZGUtNGM5Yi1hMzdjLWQ3ZWNiODhj
ZjQyMi5jcmwwHwYDVR0jBBgwFoAUtCyD7GiK9fMnqKu3K6XheDWhK9swDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9kMmI3ZGU3Yi05OGRlLTRjOWItYTM3Yy1kN2Vj
Yjg4Y2Y0MjIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFiONgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZZKweB7sXPrhD9ir7U62G4E4A54yJPBEc3ePod8zmu5y0mkRWkdP3A
cpdjzvhZO/ugqgkKy3+1Qk9thEORYnGOYIQm+Gia5/KULvEs6IPKS7EwSOzZUAzU
X4HSpvWyMYf4cpeGtk4MN9T7e9+apeefp9dg2HklMlvd4St/IyVItYiUjzZQhVvn
fFOW+Wjjj9utCEJr9QcB5JXraN4wn1Z9WzBt9qIJm+FPiqMq2MYHLSXtDtS4NHeA
nu7Cap7bLYWsVF62lXe92Yfq9ASrqn9Bszmgi57l2t2s9KfTtN/BO+YMQvkKVQBg
QhMyAiNI47b7wACF+cWJW7MWYoXJzds=
-----END CERTIFICATE-----
Generated at Sun Apr 6 09:49:52 2025 by rpki-client