Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5becdae2-52d5-38a5-b615-0d6f3f02cd60.roa
File:                     5becdae2-52d5-38a5-b615-0d6f3f02cd60.roa (raw, json)
Hash identifier:          1zrONumDDSpD2kld434YE5qeq/FCu4++VjV2htCtc0c=
Subject key identifier:   21:75:86:C4:B2:1B:BC:75:B5:82:58:82:4B:7A:CF:1F:DB:DF:17:B8
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CDE4B2E3A9EAF32734C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5becdae2-52d5-38a5-b615-0d6f3f02cd60.roa
Signing time:             Fri 30 May 2025 19:11:37 +0000
ROA not before:           Fri 30 May 2025 19:11:37 +0000
ROA not after:            Thu 28 Aug 2025 19:11:37 +0000
asID:                     81
IP address blocks:        128.109.177.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cd:e4:b2:e3:a9:ea:f3:27:34:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:37 2025 GMT
            Not After : Aug 28 19:11:37 2025 GMT
        Subject: CN=019abf2f-82c0-4b39-ab98-16a5dacd8da1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1c:84:d8:05:54:39:20:b2:33:f5:bc:d5:32:
                    24:d1:4e:8c:cf:76:1c:0a:f9:38:c6:6f:0c:c2:9a:
                    df:1f:cf:d6:14:57:93:1c:08:93:6f:13:b3:82:6b:
                    f1:5b:b3:95:38:0a:4b:7e:6f:d6:3d:fb:e6:08:de:
                    96:4a:71:19:f8:9b:8b:c2:b9:6b:14:10:ba:a5:0d:
                    b2:cc:b4:65:12:08:bb:89:56:95:3f:c9:4c:9e:52:
                    29:08:af:68:84:d2:c4:eb:2e:e0:98:81:8b:d1:0b:
                    27:05:1a:83:49:f2:4a:c5:f2:41:c0:28:2c:45:10:
                    78:c0:a5:12:20:a4:96:89:3e:fe:3c:87:db:41:68:
                    41:06:47:cb:bf:e5:d1:bb:1a:9f:d3:cc:f9:88:74:
                    2b:20:0c:41:84:03:dc:fd:7d:e7:53:b5:20:c1:81:
                    30:44:a6:bf:94:72:8e:34:ce:6c:14:34:60:1e:46:
                    04:bc:f4:f1:82:05:a4:47:d9:33:bd:ad:9e:b3:01:
                    a9:46:cd:a5:ca:42:60:0c:63:09:8d:e3:97:b8:a0:
                    f0:e4:df:11:97:26:36:de:e1:42:3f:c2:ab:66:8d:
                    a5:a9:e7:b2:61:34:21:51:af:9b:c8:43:78:58:05:
                    1b:a1:e4:ac:45:1a:2b:ac:d4:67:ee:36:d2:95:13:
                    3c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:75:86:C4:B2:1B:BC:75:B5:82:58:82:4B:7A:CF:1F:DB:DF:17:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/5becdae2-52d5-38a5-b615-0d6f3f02cd60.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.109.177.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:58:7b:6b:80:3b:be:ef:b4:43:b6:66:a4:f5:9f:3f:d7:13:
         f8:7a:d2:cd:f3:92:4b:41:d8:ea:d9:3d:f9:71:d0:5c:59:de:
         0d:7f:35:fc:93:c7:a0:47:7c:a3:8e:d6:c8:dc:f6:37:f5:7b:
         3d:ad:56:7b:b7:90:b1:72:67:00:61:96:fa:a7:10:aa:e0:85:
         58:5f:0e:62:8f:79:eb:4a:70:24:10:98:53:70:ad:7b:c8:e2:
         56:5e:b7:93:e8:89:9b:7d:f3:00:ef:06:76:d6:6a:ff:3c:09:
         7c:0a:e3:41:6c:0d:fa:a6:7e:5b:fb:ed:82:69:34:2b:7a:a4:
         dd:6c:3a:e7:6c:9f:08:1a:e7:e8:1d:7e:74:57:ce:8e:20:f5:
         e3:be:4f:dc:ef:7f:19:95:de:d3:c2:cb:2c:0a:fe:bb:9e:b4:
         4a:fb:04:ff:32:6f:9e:07:16:2c:c8:9d:48:17:06:6a:56:af:
         58:06:c6:38:ae:1a:87:72:3c:f8:b6:31:04:51:b6:af:6b:b3:
         8c:f2:fa:14:57:58:7d:3e:5a:79:b1:9d:47:2c:48:f5:a7:fb:
         43:70:fe:66:f9:d5:74:af:67:26:c3:d1:c7:10:50:dd:bf:17:
         e6:27:4b:58:f6:dd:da:1a:63:e8:7b:0c:a9:c9:fe:3d:fd:84:
         d9:b7:18:c5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ83ksuOp6vMnNMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
MDE5YWJmMmYtODJjMC00YjM5LWFiOTgtMTZhNWRhY2Q4ZGExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRyE2AVUOSCyM/W81TIk0U6Mz3YcCvk4xm8M
wprfH8/WFFeTHAiTbxOzgmvxW7OVOApLfm/WPfvmCN6WSnEZ+JuLwrlrFBC6pQ2y
zLRlEgi7iVaVP8lMnlIpCK9ohNLE6y7gmIGL0QsnBRqDSfJKxfJBwCgsRRB4wKUS
IKSWiT7+PIfbQWhBBkfLv+XRuxqf08z5iHQrIAxBhAPc/X3nU7UgwYEwRKa/lHKO
NM5sFDRgHkYEvPTxggWkR9kzva2eswGpRs2lykJgDGMJjeOXuKDw5N8RlyY23uFC
P8KrZo2lqeeyYTQhUa+byEN4WAUboeSsRRorrNRn7jbSlRM8gwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCF1hsSyG7x1tYJYgkt6zx/b3xe4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvNWJlY2RhZTItNTJkNS0z
OGE1LWI2MTUtMGQ2ZjNmMDJjZDYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAgG2xMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAChYe2uAO77vtEO2ZqT1nz/XE/h60s3zkktB2OrZPflx0FxZ3g1/NfyT
x6BHfKOO1sjc9jf1ez2tVnu3kLFyZwBhlvqnEKrghVhfDmKPeetKcCQQmFNwrXvI
4lZet5PoiZt98wDvBnbWav88CXwK40FsDfqmflv77YJpNCt6pN1sOudsnwga5+gd
fnRXzo4g9eO+T9zvfxmV3tPCyywK/ruetEr7BP8yb54HFizInUgXBmpWr1gGxjiu
GodyPPi2MQRRtq9rs4zy+hRXWH0+WnmxnUcsSPWn+0Nw/mb51XSvZybD0ccQUN2/
F+YnS1j23doaY+h7DKnJ/j39hNm3GMU=
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:15:16 2025 by rpki-client