Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa
File:                     2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa (raw, json)
Hash identifier:          oTRsgntA7OiPcRTIW6n8nBClLJNjbHFeQcsfEoOV+ac=
Subject key identifier:   41:0F:72:A9:C8:AD:A7:2C:FA:9F:1D:E0:C6:44:5F:35:0A:19:29:A9
Certificate issuer:       /CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
Certificate serial:       010D0C9F4328584A71EB70B1AD6AD44B664F5D00
Authority key identifier: F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa
Signing time:             Tue 08 Jul 2025 01:00:51 +0000
ROA not before:           Tue 08 Jul 2025 01:00:51 +0000
ROA not after:            Mon 06 Oct 2025 01:00:51 +0000
asID:                     396982
IP address blocks:        130.41.138.0/23 maxlen: 24
                          130.41.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:71:eb:70:b1:ad:6a:d4:4b:66:4f:5d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0090b0ee-3d7e-47d6-b73d-36494798d9e7
        Validity
            Not Before: Jul  8 01:00:51 2025 GMT
            Not After : Oct  6 01:00:51 2025 GMT
        Subject: CN=6dee2483-2cca-4851-ab39-d38c8f57928a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b3:1d:4b:b6:4d:23:d4:c6:3b:f6:c9:65:e8:
                    c4:e3:12:d6:fc:9d:e3:3c:71:a8:db:ab:b2:5b:06:
                    fd:d3:20:18:cf:bf:ae:9d:a1:ee:26:e8:fd:9a:84:
                    7b:a7:a8:87:2c:df:86:12:eb:30:15:95:86:36:2c:
                    88:55:04:84:87:cd:59:cf:6e:3e:2f:77:fc:6b:91:
                    9a:b1:ac:81:1a:a8:e7:d8:51:e7:83:94:74:aa:d5:
                    08:6d:17:7f:3f:42:14:ef:cc:94:b2:35:79:b7:2c:
                    ac:d8:ce:2a:c6:a2:cb:ca:03:89:68:2b:18:01:c2:
                    92:d5:86:34:5c:83:b3:c5:61:60:be:e2:ef:ad:11:
                    0e:b2:8d:65:b6:23:c4:69:95:d9:c9:37:0d:51:94:
                    c5:58:39:2b:8a:0f:5b:d4:af:02:83:bb:64:8e:ae:
                    a4:94:c3:76:b8:56:80:9f:c1:db:a0:d5:a5:56:98:
                    4c:4f:d4:ad:bd:4c:ab:fa:97:e4:e9:cd:71:ce:57:
                    d1:8a:66:e5:34:84:98:23:4c:3d:99:9c:c9:d4:7e:
                    1b:5e:9b:7d:19:aa:20:a2:77:df:0e:9a:26:e3:a7:
                    e6:b4:73:84:b0:cd:a1:bd:99:78:6a:37:de:20:cf:
                    f5:44:8d:99:9d:e1:ac:4a:30:67:0b:e7:94:c7:43:
                    36:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0F:72:A9:C8:AD:A7:2C:FA:9F:1D:E0:C6:44:5F:35:0A:19:29:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/2c3f2356-4506-34a1-8de8-ebabdf36cbda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7/0090b0ee-3d7e-47d6-b73d-36494798d9e7.crl

            X509v3 Authority Key Identifier:
                keyid:F8:C1:BA:7B:E0:5D:2E:86:50:75:BA:87:D5:90:30:5C:B7:36:0A:D1

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0090b0ee-3d7e-47d6-b73d-36494798d9e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.41.138.0-130.41.143.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e2:11:36:43:51:8d:ca:77:e4:69:ae:b5:ec:e6:ff:5e:22:69:
         8c:1d:5c:86:08:0e:f0:89:70:e8:40:be:a1:0c:8b:25:ed:d7:
         c3:2f:8f:15:2e:5f:87:b2:2d:6c:4c:7b:94:01:50:75:1c:71:
         7e:63:b8:b9:d4:e2:3d:b4:a8:a0:77:0e:21:8c:c6:0d:86:45:
         86:b4:fb:b0:c9:0e:ee:9c:f0:ea:a2:34:53:52:c8:9c:58:4e:
         dd:c7:a1:6f:f2:01:6c:ad:60:91:21:2b:3e:a6:64:6b:91:ee:
         19:85:b5:fa:2a:4c:38:40:8a:f4:cb:3b:84:3f:04:de:21:61:
         c0:8e:9b:f0:c0:61:1a:50:97:4e:6e:ac:70:11:12:5f:f7:17:
         e3:3d:d3:35:0b:ed:0e:61:63:34:c3:99:43:d2:5b:58:87:b3:
         c4:cf:86:e6:d2:64:cb:f9:6c:fe:5a:fd:c3:a5:8c:a2:c4:36:
         ce:35:aa:1f:80:cc:30:bf:e5:85:a1:c0:0f:ce:71:e2:14:4b:
         4c:23:54:b5:a3:7c:0a:7c:9d:04:ba:43:3e:aa:9a:9b:a2:39:
         0e:74:2a:27:19:f6:a2:d9:31:12:be:10:72:e9:b8:b1:f0:3c:
         8f:c9:44:f1:1b:05:d2:21:ea:bd:96:30:4e:5d:77:2c:0d:d2:
         19:2c:01:cf
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpx63CxrWrUS2ZPXQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3M2QtMzY0OTQ3OThk
OWU3MB4XDTI1MDcwODAxMDA1MVoXDTI1MTAwNjAxMDA1MVowLzEtMCsGA1UEAxMk
NmRlZTI0ODMtMmNjYS00ODUxLWFiMzktZDM4YzhmNTc5MjhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvrMdS7ZNI9TGO/bJZejE4xLW/J3jPHGo26uy
Wwb90yAYz7+unaHuJuj9moR7p6iHLN+GEuswFZWGNiyIVQSEh81Zz24+L3f8a5Ga
sayBGqjn2FHng5R0qtUIbRd/P0IU78yUsjV5tyys2M4qxqLLygOJaCsYAcKS1YY0
XIOzxWFgvuLvrREOso1ltiPEaZXZyTcNUZTFWDkrig9b1K8Cg7tkjq6klMN2uFaA
n8HboNWlVphMT9StvUyr+pfk6c1xzlfRimblNISYI0w9mZzJ1H4bXpt9Gaogonff
Dpom46fmtHOEsM2hvZl4ajfeIM/1RI2ZneGsSjBnC+eUx0M2bQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEEPcqnIracs+p8d4MZEXzUKGSmpMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkw
YjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5NDc5OGQ5ZTcvMmMzZjIzNTYtNDUwNi0z
NGExLThkZTgtZWJhYmRmMzZjYmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMDA5MGIwZWUtM2Q3ZS00N2Q2LWI3
M2QtMzY0OTQ3OThkOWU3LzAwOTBiMGVlLTNkN2UtNDdkNi1iNzNkLTM2NDk0Nzk4
ZDllNy5jcmwwHwYDVR0jBBgwFoAU+MG6e+BdLoZQdbqH1ZAwXLc2CtEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wMDkwYjBlZS0zZDdlLTQ3ZDYtYjczZC0zNjQ5
NDc5OGQ5ZTcuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAGCKYoD
BASCKYAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEA4hE2Q1GNynfkaa617Ob/XiJpjB1chggO8Ilw6EC+oQyL
Je3Xwy+PFS5fh7ItbEx7lAFQdRxxfmO4udTiPbSooHcOIYzGDYZFhrT7sMkO7pzw
6qI0U1LInFhO3cehb/IBbK1gkSErPqZka5HuGYW1+ipMOECK9Ms7hD8E3iFhwI6b
8MBhGlCXTm6scBESX/cX4z3TNQvtDmFjNMOZQ9JbWIezxM+G5tJky/ls/lr9w6WM
osQ2zjWqH4DMML/lhaHAD85x4hRLTCNUtaN8CnydBLpDPqqam6I5DnQqJxn2otkx
Er4Qcum4sfA8j8lE8RsF0iHqvZYwTl13LA3SGSwBzw==
-----END CERTIFICATE-----
Generated at Thu Jul 10 09:46:26 2025 by rpki-client