Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b36c3fe4-6d50-3523-b051-e6a0933c158d.roa
File:                     b36c3fe4-6d50-3523-b051-e6a0933c158d.roa (raw, json)
Hash identifier:          VJmQbEjEm+ABr99/Jj7qFX3V+qY3Hty/sk+ZRNh1UN8=
Subject key identifier:   69:77:B8:CC:84:FB:2D:7F:21:94:6F:F7:AF:30:16:4C:DF:65:41:A2
Certificate issuer:       /CN=93458135-7183-45e8-9dbc-dd82d2ffa119
Certificate serial:       010D0C9F43285848F22C6FA3DACA4CA0753FAE40
Authority key identifier: EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b36c3fe4-6d50-3523-b051-e6a0933c158d.roa
Signing time:             Thu 20 Feb 2025 14:00:52 +0000
ROA not before:           Thu 20 Feb 2025 14:00:52 +0000
ROA not after:            Wed 21 May 2025 13:00:52 +0000
asID:                     17025
IP address blocks:        64.124.134.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Apr 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:f2:2c:6f:a3:da:ca:4c:a0:75:3f:ae:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93458135-7183-45e8-9dbc-dd82d2ffa119
        Validity
            Not Before: Feb 20 14:00:52 2025 GMT
            Not After : May 21 13:00:52 2025 GMT
        Subject: CN=826a0f83-af8e-48ce-a33a-ada883ece925
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:da:15:b3:bf:dc:97:c4:43:a7:4d:05:5e:87:
                    90:6c:ce:a7:4e:14:53:de:97:ac:73:db:d4:f2:41:
                    0b:90:59:63:c3:fe:0d:ad:e0:1b:74:b9:33:f5:71:
                    d4:77:01:7a:a8:db:86:7b:f4:47:18:aa:3f:8b:86:
                    21:3a:89:be:46:86:02:a6:8d:b2:42:b5:b0:88:7f:
                    bb:c6:2d:67:bb:14:d6:b4:01:c6:c8:2d:a2:6d:23:
                    87:80:cb:91:07:f1:db:9a:10:23:b1:e7:96:5c:85:
                    70:be:21:cd:12:29:8f:46:58:fc:5b:8f:fc:42:96:
                    52:5d:ac:75:b8:27:a9:58:51:08:60:ee:c7:db:bc:
                    be:35:8e:f6:54:c8:8f:3e:41:bf:36:32:4a:eb:57:
                    ec:d6:c4:6d:f5:d0:cb:99:f8:71:72:7b:ca:2d:19:
                    8f:e2:94:0a:24:35:33:e1:9a:00:bf:98:24:5f:b6:
                    f2:c5:3b:ca:94:2c:99:84:73:2d:05:c6:eb:f1:3b:
                    52:ec:34:81:bc:c6:cd:b0:a9:0c:91:fb:fa:28:88:
                    01:ff:8e:a5:2e:9b:aa:17:3d:0f:13:70:88:32:3f:
                    fb:a6:12:e0:6f:7d:11:be:4a:ba:17:dc:99:4e:57:
                    e1:ad:e7:a4:31:a8:eb:bb:f5:0e:c0:a9:0c:d1:9f:
                    48:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:77:B8:CC:84:FB:2D:7F:21:94:6F:F7:AF:30:16:4C:DF:65:41:A2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/b36c3fe4-6d50-3523-b051-e6a0933c158d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119/93458135-7183-45e8-9dbc-dd82d2ffa119.crl

            X509v3 Authority Key Identifier:
                keyid:EA:B4:18:7E:09:07:4B:16:FC:10:B7:7B:BE:F4:BC:B2:04:21:DE:E7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/93458135-7183-45e8-9dbc-dd82d2ffa119.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.124.134.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5f:e2:78:3c:83:fc:54:87:a9:7f:f9:70:9d:d7:a8:9e:a0:be:
         47:e2:e4:fe:33:5f:23:ef:8a:af:88:0b:58:76:64:69:c3:ec:
         7f:6b:c4:bf:32:30:9d:0d:da:90:0c:15:8e:b1:c4:45:6d:da:
         9a:4b:21:8b:aa:8d:74:f1:06:e5:9c:03:c8:d1:0a:59:95:0b:
         28:e2:40:dd:9b:77:98:c5:30:c0:74:a6:8d:b6:d8:ff:89:bb:
         39:fa:4b:cf:d4:7f:13:8c:6d:2a:98:cd:8c:00:7b:af:dd:a2:
         d0:f5:8f:3c:54:4a:d2:84:48:54:46:02:59:5e:7c:fe:05:09:
         f2:a8:83:1d:cf:0f:31:dc:63:d8:fe:34:26:5a:2d:13:b9:8e:
         45:ad:ce:99:21:b0:18:2c:3f:54:c4:77:dc:ad:b4:c1:b6:53:
         55:14:42:af:c5:6d:15:71:77:97:7e:6f:73:d4:c3:91:a9:1b:
         6d:0c:2d:fc:99:45:17:d4:95:3c:10:0c:61:d2:a3:a9:b1:97:
         a2:75:45:e5:c9:ec:78:4d:70:7e:5a:15:84:fb:fc:db:90:b7:
         2a:a0:98:78:2c:bb:09:19:57:82:b0:05:6f:82:3f:ab:9d:54:
         85:c1:10:aa:ad:1a:20:e5:3d:97:10:e0:f4:18:43:66:01:40:
         63:9b:a6:8f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEjyLG+j2spMoHU/rkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTM0NTgxMzUtNzE4My00NWU4LTlkYmMtZGQ4MmQyZmZh
MTE5MB4XDTI1MDIyMDE0MDA1MloXDTI1MDUyMTEzMDA1MlowLzEtMCsGA1UEAxMk
ODI2YTBmODMtYWY4ZS00OGNlLWEzM2EtYWRhODgzZWNlOTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAldoVs7/cl8RDp00FXoeQbM6nThRT3pesc9vU
8kELkFljw/4NreAbdLkz9XHUdwF6qNuGe/RHGKo/i4YhOom+RoYCpo2yQrWwiH+7
xi1nuxTWtAHGyC2ibSOHgMuRB/HbmhAjseeWXIVwviHNEimPRlj8W4/8QpZSXax1
uCepWFEIYO7H27y+NY72VMiPPkG/NjJK61fs1sRt9dDLmfhxcnvKLRmP4pQKJDUz
4ZoAv5gkX7byxTvKlCyZhHMtBcbr8TtS7DSBvMbNsKkMkfv6KIgB/46lLpuqFz0P
E3CIMj/7phLgb30Rvkq6F9yZTlfhreekMajru/UOwKkM0Z9ILQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGl3uMyE+y1/IZRv968wFkzfZUGiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1
ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgyZDJmZmExMTkvYjM2YzNmZTQtNmQ1MC0z
NTIzLWIwNTEtZTZhMDkzM2MxNThkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOTM0NTgxMzUtNzE4My00NWU4LTlk
YmMtZGQ4MmQyZmZhMTE5LzkzNDU4MTM1LTcxODMtNDVlOC05ZGJjLWRkODJkMmZm
YTExOS5jcmwwHwYDVR0jBBgwFoAU6rQYfgkHSxb8ELd7vvS8sgQh3ucwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85MzQ1ODEzNS03MTgzLTQ1ZTgtOWRiYy1kZDgy
ZDJmZmExMTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQHyGMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF/ieDyD/FSHqX/5cJ3XqJ6gvkfi5P4zXyPviq+IC1h2ZGnD7H9rxL8y
MJ0N2pAMFY6xxEVt2ppLIYuqjXTxBuWcA8jRClmVCyjiQN2bd5jFMMB0po222P+J
uzn6S8/UfxOMbSqYzYwAe6/dotD1jzxUStKESFRGAllefP4FCfKogx3PDzHcY9j+
NCZaLRO5jkWtzpkhsBgsP1TEd9yttMG2U1UUQq/FbRVxd5d+b3PUw5GpG20MLfyZ
RRfUlTwQDGHSo6mxl6J1ReXJ7HhNcH5aFYT7/NuQtyqgmHgsuwkZV4KwBW+CP6ud
VIXBEKqtGiDlPZcQ4PQYQ2YBQGObpo8=
-----END CERTIFICATE-----
Generated at Sun Apr 6 04:37:37 2025 by rpki-client