Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
File:                     b0d4a783-aede-347d-a376-96810f016fda.roa (raw, json)
Hash identifier:          R9AuWcwD9U1et9wJPQPQUp6eYiDxplBIleJbDBRAd88=
Subject key identifier:   81:03:AE:BC:E5:51:07:68:B8:13:44:56:FC:7F:24:C6:B2:E1:5E:73
Certificate issuer:       /CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
Certificate serial:       010D0C9F432858495EEEDD70E6EC354E45163080
Authority key identifier: A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa
Signing time:             Mon 31 Mar 2025 13:00:59 +0000
ROA not before:           Mon 31 Mar 2025 13:00:59 +0000
ROA not after:            Sun 29 Jun 2025 13:00:59 +0000
asID:                     19551
IP address blocks:        107.154.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 06 Apr 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:5e:ee:dd:70:e6:ec:35:4e:45:16:30:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=341b7e96-a6f0-44d3-aecc-9294d6bccc78
        Validity
            Not Before: Mar 31 13:00:59 2025 GMT
            Not After : Jun 29 13:00:59 2025 GMT
        Subject: CN=9589dd6a-b660-462c-a669-4f48f01ed992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:61:33:60:df:00:5f:7e:e2:8f:ed:55:88:c2:
                    50:57:3b:00:b9:1c:80:ea:05:2e:68:e9:b1:27:2f:
                    66:55:fa:b3:03:09:39:93:e8:6c:7b:db:3e:dc:9e:
                    59:bd:f6:e4:5c:18:d9:4b:05:ee:d1:b5:3e:55:00:
                    60:6a:66:ad:39:7b:6f:0f:bc:54:be:23:46:22:ce:
                    59:3f:aa:b8:ff:5b:e0:48:97:83:c9:21:8d:9a:fd:
                    93:90:64:59:ff:be:ad:7d:f8:0a:7a:40:24:f7:eb:
                    a5:28:e0:45:89:c5:14:18:51:da:40:52:a8:7a:b2:
                    e6:34:65:48:d9:72:41:b8:b2:5a:3b:77:22:7d:9a:
                    c3:ee:d9:1b:1a:b5:01:bc:e9:d8:21:88:81:82:62:
                    ef:c2:d3:1d:57:36:b5:d3:e2:36:33:a9:af:23:8b:
                    e4:fe:bd:65:6f:e8:b1:b4:48:15:72:6f:10:77:a6:
                    fa:73:44:99:47:40:d8:9b:32:43:ab:44:1d:79:62:
                    01:38:59:5d:3e:ad:7e:34:82:0b:ff:20:20:e3:49:
                    35:0a:d1:50:83:b4:14:15:bc:21:e3:11:ea:ce:ec:
                    6e:36:9a:f9:7b:1e:c8:89:5b:93:0e:cc:45:01:da:
                    5f:1b:a9:14:60:32:5d:2e:53:1e:07:16:37:a6:5a:
                    e0:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:03:AE:BC:E5:51:07:68:B8:13:44:56:FC:7F:24:C6:B2:E1:5E:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/b0d4a783-aede-347d-a376-96810f016fda.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78/341b7e96-a6f0-44d3-aecc-9294d6bccc78.crl

            X509v3 Authority Key Identifier:
                keyid:A0:F0:41:78:61:8C:48:96:CF:A9:8C:C6:9A:53:8B:40:50:28:B2:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/341b7e96-a6f0-44d3-aecc-9294d6bccc78.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.154.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         b5:c0:f5:6a:7b:80:f0:aa:be:fc:71:b1:00:cd:3d:17:ee:fe:
         e2:9a:9f:14:44:1f:e2:2b:39:6a:cf:83:c2:28:c7:99:43:e6:
         3d:61:24:5a:b5:0f:1e:e9:dc:ab:5e:38:2d:2c:db:e5:35:06:
         ee:5f:ce:db:b3:c6:30:68:fb:27:ce:3a:51:77:3f:db:35:21:
         57:fd:ca:2a:5b:d5:c6:24:ca:ab:35:43:39:04:53:7e:07:0f:
         b1:45:cd:31:c0:f0:a2:9a:a3:fe:cc:f6:76:96:42:cb:b3:4b:
         e1:a5:8b:23:7c:c3:37:cb:6d:01:96:98:a2:d7:e1:03:37:d4:
         a1:84:d1:9d:a9:ea:45:38:f3:53:3c:91:6d:ae:a3:61:8b:83:
         16:7f:f6:eb:1d:65:0f:1a:8b:1b:80:24:0b:5d:6b:a6:8d:1f:
         34:28:7c:e7:00:0c:34:63:0a:78:1e:6a:a0:cc:87:7f:e3:08:
         33:1d:17:b2:aa:20:2b:04:0f:84:da:8d:88:42:4d:da:42:84:
         d0:b8:63:0c:0c:f1:88:92:56:93:f1:33:1f:29:c9:da:36:7e:
         53:fb:ea:02:17:61:8d:74:f4:5d:75:89:ae:94:c3:dc:78:30:
         0e:c2:a7:fd:4e:24:9d:81:a1:7e:38:4b:9b:01:5d:5e:c9:d6:
         db:73:47:23
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEle7t1w5uw1TkUWMIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzQxYjdlOTYtYTZmMC00NGQzLWFlY2MtOTI5NGQ2YmNj
Yzc4MB4XDTI1MDMzMTEzMDA1OVoXDTI1MDYyOTEzMDA1OVowLzEtMCsGA1UEAxMk
OTU4OWRkNmEtYjY2MC00NjJjLWE2NjktNGY0OGYwMWVkOTkyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3mEzYN8AX37ij+1ViMJQVzsAuRyA6gUuaOmx
Jy9mVfqzAwk5k+hse9s+3J5ZvfbkXBjZSwXu0bU+VQBgamatOXtvD7xUviNGIs5Z
P6q4/1vgSJeDySGNmv2TkGRZ/76tffgKekAk9+ulKOBFicUUGFHaQFKoerLmNGVI
2XJBuLJaO3cifZrD7tkbGrUBvOnYIYiBgmLvwtMdVza10+I2M6mvI4vk/r1lb+ix
tEgVcm8Qd6b6c0SZR0DYmzJDq0QdeWIBOFldPq1+NIIL/yAg40k1CtFQg7QUFbwh
4xHqzuxuNpr5ex7IiVuTDsxFAdpfG6kUYDJdLlMeBxY3plrg0wIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFIEDrrzlUQdouBNEVvx/JMay4V5zMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFi
N2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0ZDZiY2NjNzgvYjBkNGE3ODMtYWVkZS0z
NDdkLWEzNzYtOTY4MTBmMDE2ZmRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzQxYjdlOTYtYTZmMC00NGQzLWFl
Y2MtOTI5NGQ2YmNjYzc4LzM0MWI3ZTk2LWE2ZjAtNDRkMy1hZWNjLTkyOTRkNmJj
Y2M3OC5jcmwwHwYDVR0jBBgwFoAUoPBBeGGMSJbPqYzGmlOLQFAosrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNDFiN2U5Ni1hNmYwLTQ0ZDMtYWVjYy05Mjk0
ZDZiY2NjNzguY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAa5owVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAtcD1anuA8Kq+/HGxAM09F+7+4pqfFEQf4is5as+DwijHmUPmPWEkWrUP
Huncq144LSzb5TUG7l/O27PGMGj7J846UXc/2zUhV/3KKlvVxiTKqzVDOQRTfgcP
sUXNMcDwopqj/sz2dpZCy7NL4aWLI3zDN8ttAZaYotfhAzfUoYTRnanqRTjzUzyR
ba6jYYuDFn/26x1lDxqLG4AkC11rpo0fNCh85wAMNGMKeB5qoMyHf+MIMx0Xsqog
KwQPhNqNiEJN2kKE0LhjDAzxiJJWk/EzHynJ2jZ+U/vqAhdhjXT0XXWJrpTD3Hgw
DsKn/U4knYGhfjhLmwFdXsnW23NHIw==
-----END CERTIFICATE-----
Generated at Sat Apr 5 03:48:16 2025 by rpki-client