Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/ecb5ff07-97eb-31d0-9bea-28ba918b8769.roa
File:                     ecb5ff07-97eb-31d0-9bea-28ba918b8769.roa (raw, json)
Hash identifier:          fOAa5i6TSRRbf96mVm3UrBh+UP2jxz5Xk8fNfygjtCQ=
Subject key identifier:   AF:CC:9D:78:BF:5B:0F:D0:F6:7C:8A:6F:F2:6B:17:FE:4C:09:FB:B5
Certificate issuer:       /CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
Certificate serial:       010D0C9F4328584A66C06F66E1EEF93B9CF5EE00
Authority key identifier: 16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/ecb5ff07-97eb-31d0-9bea-28ba918b8769.roa
Signing time:             Fri 04 Jul 2025 01:00:49 +0000
ROA not before:           Fri 04 Jul 2025 01:00:49 +0000
ROA not after:            Thu 02 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        135.109.196.0/24 maxlen: 24
                          135.109.197.0/24 maxlen: 24
                          135.109.198.0/24 maxlen: 24
                          135.109.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:66:c0:6f:66:e1:ee:f9:3b:9c:f5:ee:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6
        Validity
            Not Before: Jul  4 01:00:49 2025 GMT
            Not After : Oct  2 01:00:49 2025 GMT
        Subject: CN=a5ba6986-b055-4f19-a963-1c249ee5a42c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:14:97:7b:03:4b:a2:e6:4e:0a:d5:12:93:87:
                    2e:70:d7:fa:31:bd:e6:6e:d5:c0:4f:38:21:b2:cc:
                    fa:37:22:b3:8c:fb:04:c0:22:ba:ab:dc:27:25:36:
                    37:06:e4:ae:70:27:6c:85:ea:11:ad:cb:3b:5a:03:
                    b3:78:68:cf:e5:9b:5c:92:e3:6f:99:d1:be:83:8f:
                    23:81:86:a9:30:02:9d:03:de:41:6f:37:9a:4f:a6:
                    26:50:81:69:86:97:85:4e:e0:41:7b:6c:cc:09:49:
                    3d:d4:4d:cb:ff:1d:08:c1:48:66:14:c9:80:31:bf:
                    ef:3b:cd:ed:7a:cc:09:c9:34:83:8f:a9:f9:6b:cf:
                    51:38:ba:c3:54:93:f5:67:c5:fa:5c:ed:aa:81:7d:
                    80:02:b3:b7:99:ed:bc:4e:42:8e:f5:05:2e:d1:27:
                    5d:85:aa:28:fd:b2:5c:dc:19:c8:c4:2e:32:b3:f4:
                    30:9d:8b:0e:d9:a6:5f:63:e3:3a:a3:f9:98:84:c8:
                    37:ff:70:4b:3a:85:01:29:ce:89:76:16:61:3c:48:
                    b3:8b:50:5c:e4:62:35:16:c6:da:34:3d:97:a8:d0:
                    00:2d:e6:60:66:13:aa:b1:e1:1a:16:18:6c:62:b9:
                    c2:35:2e:a2:4b:ab:e4:b5:72:5c:86:0c:68:c7:cf:
                    cf:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CC:9D:78:BF:5B:0F:D0:F6:7C:8A:6F:F2:6B:17:FE:4C:09:FB:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/ecb5ff07-97eb-31d0-9bea-28ba918b8769.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.crl

            X509v3 Authority Key Identifier:
                keyid:16:5B:E6:6E:A9:0A:32:DE:82:B4:13:55:3F:BB:38:BE:04:F7:67:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/e33c7433-6d5d-4f7c-b2ef-98ccb1d108d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  135.109.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         98:bf:80:cd:11:c8:ad:b5:1e:c1:f2:8b:69:23:74:8c:78:fe:
         6d:15:65:5a:07:fd:d8:d0:a8:ed:f8:a2:54:9c:78:ce:3c:df:
         d0:e4:31:de:b6:08:42:b5:0b:8d:15:01:86:fc:75:15:65:59:
         ae:14:a6:54:c8:ff:19:f3:61:70:32:60:11:23:bc:94:8f:82:
         5e:f4:8c:af:23:5c:fd:46:c1:95:08:72:a7:e4:13:a5:56:92:
         e8:14:eb:a3:7b:fa:41:ab:48:8a:b5:29:df:9c:19:7f:7b:1f:
         4a:75:8b:f5:ae:c6:5c:ab:e4:c1:66:72:28:75:18:19:7b:89:
         0e:f5:e3:70:b5:db:9d:91:75:28:e1:75:1a:99:f2:ca:24:ce:
         e1:40:db:f1:b1:68:ff:4f:ea:54:ab:fe:9d:91:8b:61:3f:26:
         fb:05:6f:fb:26:73:d5:8c:28:0c:40:9f:1a:77:e4:df:a1:29:
         32:2b:55:41:76:f2:b6:70:86:e7:a3:8a:72:37:c6:f3:09:a2:
         c6:c2:28:c7:d1:d9:2a:81:8a:02:a6:4c:0c:69:f5:ed:1a:43:
         8a:03:43:40:14:02:e3:e6:11:85:80:b6:41:7b:16:27:0c:c7:
         62:79:95:08:26:c5:10:0e:ef:2d:3c:d2:b9:f1:2f:84:6c:8c:
         3b:a5:5d:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpmwG9m4e75O5z17gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTMzYzc0MzMtNmQ1ZC00ZjdjLWIyZWYtOThjY2IxZDEw
OGQ2MB4XDTI1MDcwNDAxMDA0OVoXDTI1MTAwMjAxMDA0OVowLzEtMCsGA1UEAxMk
YTViYTY5ODYtYjA1NS00ZjE5LWE5NjMtMWMyNDllZTVhNDJjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjhSXewNLouZOCtUSk4cucNf6Mb3mbtXATzgh
ssz6NyKzjPsEwCK6q9wnJTY3BuSucCdsheoRrcs7WgOzeGjP5ZtckuNvmdG+g48j
gYapMAKdA95BbzeaT6YmUIFphpeFTuBBe2zMCUk91E3L/x0IwUhmFMmAMb/vO83t
eswJyTSDj6n5a89ROLrDVJP1Z8X6XO2qgX2AArO3me28TkKO9QUu0Sddhaoo/bJc
3BnIxC4ys/QwnYsO2aZfY+M6o/mYhMg3/3BLOoUBKc6JdhZhPEizi1Bc5GI1Fsba
ND2XqNAALeZgZhOqseEaFhhsYrnCNS6iS6vktXJchgxox8/PQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK/MnXi/Ww/Q9nyKb/JrF/5MCfu1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNj
NzQzMy02ZDVkLTRmN2MtYjJlZi05OGNjYjFkMTA4ZDYvZWNiNWZmMDctOTdlYi0z
MWQwLTliZWEtMjhiYTkxOGI4NzY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZTMzYzc0MzMtNmQ1ZC00ZjdjLWIy
ZWYtOThjY2IxZDEwOGQ2L2UzM2M3NDMzLTZkNWQtNGY3Yy1iMmVmLTk4Y2NiMWQx
MDhkNi5jcmwwHwYDVR0jBBgwFoAUFlvmbqkKMt6CtBNVP7s4vgT3Z9gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9lMzNjNzQzMy02ZDVkLTRmN2MtYjJlZi05OGNj
YjFkMTA4ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCh23EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJi/gM0RyK21HsHyi2kjdIx4/m0VZVoH/djQqO34olSceM4839DkMd62
CEK1C40VAYb8dRVlWa4UplTI/xnzYXAyYBEjvJSPgl70jK8jXP1GwZUIcqfkE6VW
kugU66N7+kGrSIq1Kd+cGX97H0p1i/Wuxlyr5MFmcih1GBl7iQ7143C1252RdSjh
dRqZ8sokzuFA2/GxaP9P6lSr/p2Ri2E/JvsFb/smc9WMKAxAnxp35N+hKTIrVUF2
8rZwhuejinI3xvMJosbCKMfR2SqBigKmTAxp9e0aQ4oDQ0AUAuPmEYWAtkF7FicM
x2J5lQgmxRAO7y080rnxL4RsjDulXZg=
-----END CERTIFICATE-----
Generated at Thu Jul 10 11:30:44 2025 by rpki-client