Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa
File:                     c78e85a2-0607-3182-ab4e-06b14b721642.roa (raw, json)
Hash identifier:          FsLvMXLCM5UWe0gKmozjUa+Zcux9jtc0uR/8gb5S0Vs=
Subject key identifier:   09:CB:F9:C7:8F:FE:DB:0E:A6:DE:2D:BE:AC:98:F9:B4:72:CC:CF:81
Certificate issuer:       /CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
Certificate serial:       010D0C9F4328584A050A7AE0993ED2F8567E0BF0
Authority key identifier: D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa
Signing time:             Fri 30 May 2025 01:00:48 +0000
ROA not before:           Fri 30 May 2025 01:00:48 +0000
ROA not after:            Thu 28 Aug 2025 01:00:48 +0000
asID:                     26777
IP address blocks:        204.13.136.0/22 maxlen: 22
                          204.13.136.0/24 maxlen: 24
                          204.13.137.0/24 maxlen: 24
                          204.13.138.0/24 maxlen: 24
                          204.13.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:05:0a:7a:e0:99:3e:d2:f8:56:7e:0b:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cc31951-8581-4fc7-a691-41d9e992a7cc
        Validity
            Not Before: May 30 01:00:48 2025 GMT
            Not After : Aug 28 01:00:48 2025 GMT
        Subject: CN=c28290ea-1da5-4b92-b99c-f9dac446c9da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:09:d2:d8:db:3e:08:2d:0d:5b:eb:37:25:1a:
                    68:2e:bf:1d:41:90:ec:cc:fa:7b:9a:b2:20:4a:83:
                    fc:55:80:64:af:06:aa:7d:aa:2c:6f:88:69:ec:f0:
                    30:e1:46:6c:81:49:f5:da:34:f1:5e:68:c7:d3:8b:
                    16:8d:0a:2d:a0:c5:32:ae:27:15:5e:4b:72:e1:15:
                    2b:ac:88:94:42:d1:8e:59:8c:d4:b7:44:68:9d:2d:
                    70:e9:a7:3b:d7:0e:ba:06:4e:a8:97:08:fe:2c:bf:
                    c2:17:48:b5:7d:45:bc:5b:b5:28:54:04:5b:cb:21:
                    97:9a:1f:6a:58:9f:d1:ba:ab:06:0b:7b:35:be:b7:
                    10:dd:fd:96:8f:b2:8b:2a:59:3a:17:22:11:75:7c:
                    b4:67:09:4c:db:c5:57:ac:09:de:68:d6:e7:da:84:
                    05:6c:19:37:6e:31:7b:fd:31:e4:4f:f0:01:cc:9b:
                    88:d8:68:d0:a9:c4:ed:55:f2:fc:42:9f:cc:77:2e:
                    89:bc:3a:e4:c9:de:5c:cf:de:1f:d7:6b:a0:08:5a:
                    d1:ee:d3:95:4e:4c:a8:7c:57:f4:01:ed:09:71:18:
                    18:a7:b9:68:48:66:e6:88:e8:1f:4f:3d:56:bb:af:
                    88:66:b7:d5:d4:5b:40:ee:10:4b:24:27:cf:b6:0e:
                    c8:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:CB:F9:C7:8F:FE:DB:0E:A6:DE:2D:BE:AC:98:F9:B4:72:CC:CF:81
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/c78e85a2-0607-3182-ab4e-06b14b721642.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc/6cc31951-8581-4fc7-a691-41d9e992a7cc.crl

            X509v3 Authority Key Identifier:
                keyid:D7:2C:52:8E:CC:F9:6F:78:BB:0D:8F:B7:F9:E6:FC:2A:8F:5D:C2:0D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cc31951-8581-4fc7-a691-41d9e992a7cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.136.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:db:30:f2:3d:45:b6:c7:42:a7:30:48:7f:80:69:43:c5:84:
         3f:aa:dd:25:84:a8:42:bd:d5:ce:3c:38:05:e5:57:8d:2b:38:
         9b:c2:0e:37:c3:e9:9b:e7:e5:06:38:93:8d:1f:c7:00:83:04:
         25:e9:12:2e:5c:48:bb:ee:23:f3:d1:d6:cd:eb:57:43:82:6b:
         6a:6f:fb:ad:54:1a:a1:53:9e:87:17:e8:a3:74:9e:0a:3d:b8:
         d5:d4:38:68:4b:23:65:f7:49:89:dc:5e:e9:7f:ec:db:52:92:
         e9:20:f0:6c:af:ee:3c:73:22:d3:c5:b6:40:8a:24:e3:e9:17:
         60:ab:39:78:5b:b6:5b:5f:93:1b:a4:ec:35:14:cb:f5:65:37:
         3c:24:1b:89:fe:8c:66:24:f1:fa:94:ec:cd:9e:ef:f4:1a:0b:
         30:77:d2:57:db:96:6c:46:16:90:7d:ee:f9:6a:4f:b2:a5:7e:
         27:fe:51:12:45:bb:17:11:a1:4d:e2:92:1c:b0:6d:68:f7:d8:
         1a:bf:c2:a8:d7:d9:a4:57:b0:12:79:3f:fa:22:2f:e6:5d:41:
         bb:0a:e4:5b:33:26:68:d8:f2:b1:38:a8:de:ca:ee:93:78:51:
         81:b8:ff:52:1e:ea:27:10:bf:4a:59:1e:15:75:b6:9b:aa:15:
         fb:a5:27:d7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoFCnrgmT7S+FZ+C/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNjMzE5NTEtODU4MS00ZmM3LWE2OTEtNDFkOWU5OTJh
N2NjMB4XDTI1MDUzMDAxMDA0OFoXDTI1MDgyODAxMDA0OFowLzEtMCsGA1UEAxMk
YzI4MjkwZWEtMWRhNS00YjkyLWI5OWMtZjlkYWM0NDZjOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwnS2Ns+CC0NW+s3JRpoLr8dQZDszPp7mrIg
SoP8VYBkrwaqfaosb4hp7PAw4UZsgUn12jTxXmjH04sWjQotoMUyricVXkty4RUr
rIiUQtGOWYzUt0RonS1w6ac71w66Bk6olwj+LL/CF0i1fUW8W7UoVARbyyGXmh9q
WJ/RuqsGC3s1vrcQ3f2Wj7KLKlk6FyIRdXy0ZwlM28VXrAneaNbn2oQFbBk3bjF7
/THkT/ABzJuI2GjQqcTtVfL8Qp/Mdy6JvDrkyd5cz94f12ugCFrR7tOVTkyofFf0
Ae0JcRgYp7loSGbmiOgfTz1Wu6+IZrfV1FtA7hBLJCfPtg7IiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAnL+ceP/tsOpt4tvqyY+bRyzM+BMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Y2Mz
MTk1MS04NTgxLTRmYzctYTY5MS00MWQ5ZTk5MmE3Y2MvYzc4ZTg1YTItMDYwNy0z
MTgyLWFiNGUtMDZiMTRiNzIxNjQyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmNjMzE5NTEtODU4MS00ZmM3LWE2
OTEtNDFkOWU5OTJhN2NjLzZjYzMxOTUxLTg1ODEtNGZjNy1hNjkxLTQxZDllOTky
YTdjYy5jcmwwHwYDVR0jBBgwFoAU1yxSjsz5b3i7DY+3+eb8Ko9dwg0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82Y2MzMTk1MS04NTgxLTRmYzctYTY5MS00MWQ5
ZTk5MmE3Y2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA2IMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADnbMPI9RbbHQqcwSH+AaUPFhD+q3SWEqEK91c48OAXlV40rOJvCDjfD
6Zvn5QY4k40fxwCDBCXpEi5cSLvuI/PR1s3rV0OCa2pv+61UGqFTnocX6KN0ngo9
uNXUOGhLI2X3SYncXul/7NtSkukg8Gyv7jxzItPFtkCKJOPpF2CrOXhbtltfkxuk
7DUUy/VlNzwkG4n+jGYk8fqU7M2e7/QaCzB30lfblmxGFpB97vlqT7Klfif+URJF
uxcRoU3ikhywbWj32Bq/wqjX2aRXsBJ5P/oiL+ZdQbsK5FszJmjY8rE4qN7K7pN4
UYG4/1Ie6icQv0pZHhV1tpuqFfulJ9c=
-----END CERTIFICATE-----
Generated at Sun Jun 8 07:43:16 2025 by rpki-client