Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa
File:                     3da7ba70-1bb3-3819-afcf-716cf19c6678.roa (raw, json)
Hash identifier:          qegL8Ql9gZBa7WsiCMp8FfUxqxF/CrJGwxwHUFN97ec=
Subject key identifier:   5A:5F:0D:8B:AC:77:5C:EB:88:26:7F:FE:07:1A:53:CC:18:8D:95:C4
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F43285849E7BA9E1A7D489A0D253CCF00
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa
Signing time:             Mon 19 May 2025 13:01:01 +0000
ROA not before:           Mon 19 May 2025 13:01:01 +0000
ROA not after:            Sun 17 Aug 2025 13:01:01 +0000
asID:                     13335
IP address blocks:        172.64.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e7:ba:9e:1a:7d:48:9a:0d:25:3c:cf:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: May 19 13:01:01 2025 GMT
            Not After : Aug 17 13:01:01 2025 GMT
        Subject: CN=1c7d54bd-9a53-4a10-9008-ba93d9c1dbbe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:4d:15:b1:2a:61:b8:bf:08:a8:af:a1:2e:d1:
                    ea:63:38:c2:52:0f:46:51:ba:6a:b7:ae:c1:95:d3:
                    11:d0:33:68:05:27:5c:db:fe:a0:38:48:ff:f7:d4:
                    63:02:88:4b:37:c7:ed:67:d2:85:cd:45:21:dc:79:
                    bc:db:9e:a7:24:73:c6:09:e0:15:de:ae:a8:c9:85:
                    f2:1a:e2:0c:44:26:91:01:96:c5:fc:28:08:7d:c3:
                    7b:4d:dc:ee:4e:56:c8:b8:4a:92:cf:b7:15:a4:0b:
                    bb:4e:be:0a:6e:75:23:6c:6d:66:c4:54:8a:d2:09:
                    10:22:07:84:40:94:97:a6:5c:87:98:aa:2b:71:4d:
                    48:2b:07:e7:9c:a4:a5:b7:7c:2b:df:e4:39:eb:0f:
                    87:d6:ee:9c:2c:b2:ba:0b:26:be:42:ed:d4:71:cb:
                    2a:b9:82:58:82:02:78:71:63:fa:5f:b7:0e:4f:4b:
                    ae:ef:43:d9:c1:69:a2:6c:ba:fe:fe:7c:f3:85:85:
                    0c:10:b8:39:5b:e1:da:b4:1d:01:7c:54:32:fd:2d:
                    e0:ea:9e:d9:9a:7c:ac:40:a8:76:fc:6b:86:b6:3e:
                    60:9e:d1:c7:88:ff:4b:71:1f:f9:da:69:2d:d4:96:
                    f1:c3:57:a2:ac:c7:fb:85:95:5d:53:ad:5b:0f:0c:
                    71:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5F:0D:8B:AC:77:5C:EB:88:26:7F:FE:07:1A:53:CC:18:8D:95:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/3da7ba70-1bb3-3819-afcf-716cf19c6678.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.64.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:5f:0b:64:5d:1b:ec:96:02:43:4d:83:c9:e7:d9:52:13:3e:
         ac:cf:6a:40:ab:c7:84:59:c4:b7:9a:64:a1:bc:9e:28:ec:3a:
         2c:38:16:05:ac:cc:6e:fa:fd:d8:1c:52:fd:bb:94:d1:5e:14:
         cd:f9:8c:42:df:ed:d8:53:48:d8:f4:11:8a:72:b7:5f:bc:8f:
         75:fc:e5:da:36:b0:b6:de:fa:47:88:ee:57:b7:22:6c:80:52:
         82:e4:84:73:59:75:a8:c9:0c:c5:f4:81:c0:df:29:e8:1e:be:
         77:2f:66:fb:04:48:9c:07:d5:9a:88:93:1d:6a:a0:33:78:fc:
         35:25:b8:b1:94:86:d0:6c:94:dc:1e:d1:67:4e:87:2d:49:5e:
         fc:35:45:d8:81:37:9b:1b:46:54:b1:57:b1:7b:39:10:68:71:
         73:41:1a:e8:7d:4c:42:0b:82:d3:e0:93:3f:7f:ed:aa:e9:7a:
         f9:66:0a:5d:5d:e4:df:04:23:09:d5:3e:06:e4:01:85:f6:d9:
         bc:d3:03:2c:54:1b:a7:f2:be:67:c1:ae:ff:c3:a7:2f:c8:8a:
         b1:43:a4:8e:bb:ae:25:c3:52:a7:bf:66:b2:da:d0:53:93:7b:
         bc:36:bd:71:17:0f:a0:b9:8b:33:0b:3d:34:bf:42:9a:12:f4:
         bd:05:ef:51
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnnup4afUiaDSU8zwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDUxOTEzMDEwMVoXDTI1MDgxNzEzMDEwMVowLzEtMCsGA1UEAxMk
MWM3ZDU0YmQtOWE1My00YTEwLTkwMDgtYmE5M2Q5YzFkYmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4E0VsSphuL8IqK+hLtHqYzjCUg9GUbpqt67B
ldMR0DNoBSdc2/6gOEj/99RjAohLN8ftZ9KFzUUh3Hm8256nJHPGCeAV3q6oyYXy
GuIMRCaRAZbF/CgIfcN7TdzuTlbIuEqSz7cVpAu7Tr4KbnUjbG1mxFSK0gkQIgeE
QJSXplyHmKorcU1IKwfnnKSlt3wr3+Q56w+H1u6cLLK6Cya+Qu3UccsquYJYggJ4
cWP6X7cOT0uu70PZwWmibLr+/nzzhYUMELg5W+HatB0BfFQy/S3g6p7ZmnysQKh2
/GuGtj5gntHHiP9LcR/52mkt1Jbxw1eirMf7hZVdU61bDwxxaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFpfDYusd1zriCZ//gcaU8wYjZXEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvM2RhN2JhNzAtMWJiMy0z
ODE5LWFmY2YtNzE2Y2YxOWM2Njc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArEDsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpfC2RdG+yWAkNNg8nn2VITPqzPakCrx4RZxLeaZKG8nijsOiw4FgWs
zG76/dgcUv27lNFeFM35jELf7dhTSNj0EYpyt1+8j3X85do2sLbe+keI7le3ImyA
UoLkhHNZdajJDMX0gcDfKegevncvZvsESJwH1ZqIkx1qoDN4/DUluLGUhtBslNwe
0WdOhy1JXvw1RdiBN5sbRlSxV7F7ORBocXNBGuh9TEILgtPgkz9/7arpevlmCl1d
5N8EIwnVPgbkAYX22bzTAyxUG6fyvmfBrv/Dpy/IirFDpI67riXDUqe/ZrLa0FOT
e7w2vXEXD6C5izMLPTS/QpoS9L0F71E=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:27:32 2025 by rpki-client