Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6a70c0cb-9ac5-3165-b6b4-f03732231157.roa
File:                     6a70c0cb-9ac5-3165-b6b4-f03732231157.roa (raw, json)
Hash identifier:          rE8CHnfGHon+WmiBEd2a7e5+N3LlLWQXHHK6i9N/FNA=
Subject key identifier:   4B:F1:5A:79:97:BC:58:0C:BE:B0:C7:89:58:19:B9:6D:B9:FE:2D:E1
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F432858496B7ECD791D9DCB5D1247B140
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6a70c0cb-9ac5-3165-b6b4-f03732231157.roa
Signing time:             Sat 05 Apr 2025 01:00:47 +0000
ROA not before:           Sat 05 Apr 2025 01:00:47 +0000
ROA not after:            Fri 04 Jul 2025 01:00:47 +0000
asID:                     19901
IP address blocks:        146.135.0.0/17 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Apr 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:6b:7e:cd:79:1d:9d:cb:5d:12:47:b1:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Apr  5 01:00:47 2025 GMT
            Not After : Jul  4 01:00:47 2025 GMT
        Subject: CN=36a2c647-6dc6-4015-96f5-5db146c84819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:60:50:5b:e6:d8:a9:9e:4c:55:ff:bf:5f:09:
                    26:a5:f4:66:dd:4c:f7:bd:cb:2c:a9:58:6a:05:78:
                    53:3e:ac:f4:6f:58:45:dc:29:f1:2b:78:82:12:91:
                    c4:c5:ce:da:81:04:ef:94:78:af:ca:e3:58:81:37:
                    3b:4c:16:83:d9:63:7e:5b:5a:4c:a5:d2:e9:ee:fb:
                    cc:79:91:f0:b8:09:a7:8b:05:25:c6:fd:44:9b:b8:
                    50:4f:85:08:fa:0e:bc:a7:10:f2:b9:55:0a:08:07:
                    4f:33:95:32:65:b4:26:8f:06:9e:df:1b:86:85:53:
                    e3:07:81:d3:6d:f0:ad:66:20:18:79:29:c7:2a:49:
                    a2:92:90:da:fa:e6:7d:1c:6e:d4:d0:3f:8e:19:a4:
                    d3:b1:f0:27:44:d8:ae:38:d7:85:16:fa:ab:d8:d6:
                    4c:11:2f:57:62:15:73:af:15:1e:2a:fb:6e:8d:df:
                    88:72:d8:32:d1:9a:d2:c9:32:61:bf:93:be:d8:74:
                    50:64:64:5c:24:17:9b:96:5a:24:13:53:ce:7a:7c:
                    b6:bf:a0:4d:ee:e2:c0:c9:d4:cd:a5:a8:2e:9f:97:
                    96:5a:cc:be:f2:cb:59:a3:0e:77:6c:d2:e8:a3:4b:
                    c6:b4:93:b5:d7:33:f0:93:bf:5a:31:a3:57:86:00:
                    9b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:F1:5A:79:97:BC:58:0C:BE:B0:C7:89:58:19:B9:6D:B9:FE:2D:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/6a70c0cb-9ac5-3165-b6b4-f03732231157.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.135.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:e1:c7:a3:65:cc:7d:bf:cb:d5:95:08:c1:ff:ae:f6:80:9c:
         ef:b9:ae:d5:bd:8e:bb:fb:58:4d:4e:e1:68:27:c9:68:55:68:
         cf:6d:14:b3:ba:9e:46:70:b1:bb:45:b6:51:2d:0b:e9:e5:5a:
         43:93:10:b9:96:71:18:1e:33:a5:b2:5f:a2:16:39:f5:28:f0:
         e2:68:6d:2f:c5:9e:80:50:92:3b:df:da:5b:bd:d0:80:25:c0:
         12:25:97:4b:fe:5b:e0:fb:c4:82:f1:90:bd:86:05:62:3f:0a:
         f2:bc:98:cd:ca:1c:1c:19:e3:37:e9:fa:0b:5b:18:21:86:5a:
         20:f1:03:47:41:76:c4:70:c7:c3:b9:a2:c4:be:e4:0f:ed:37:
         35:ad:39:ee:30:d7:93:5f:f1:75:7c:83:8d:1a:9d:20:c7:17:
         2f:cc:5e:fc:aa:fa:ab:47:cf:30:1f:c4:9f:6d:3a:5a:0b:a6:
         7c:68:39:5a:e4:e1:c3:8c:27:0d:b6:4e:4b:a0:48:2f:33:6b:
         c1:51:17:41:62:f8:07:92:d1:37:1c:17:a2:18:5e:2f:5a:1b:
         16:d6:80:4f:6c:3a:5d:91:1b:ee:47:e6:44:55:e3:01:2d:7e:
         29:21:55:13:b4:13:24:9e:a3:f2:72:fd:fa:4c:e0:e8:86:48:
         50:c3:f4:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWElrfs15HZ3LXRJHsUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MDQwNTAxMDA0N1oXDTI1MDcwNDAxMDA0N1owLzEtMCsGA1UEAxMk
MzZhMmM2NDctNmRjNi00MDE1LTk2ZjUtNWRiMTQ2Yzg0ODE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhGBQW+bYqZ5MVf+/XwkmpfRm3Uz3vcssqVhq
BXhTPqz0b1hF3CnxK3iCEpHExc7agQTvlHivyuNYgTc7TBaD2WN+W1pMpdLp7vvM
eZHwuAmniwUlxv1Em7hQT4UI+g68pxDyuVUKCAdPM5UyZbQmjwae3xuGhVPjB4HT
bfCtZiAYeSnHKkmikpDa+uZ9HG7U0D+OGaTTsfAnRNiuONeFFvqr2NZMES9XYhVz
rxUeKvtujd+Ictgy0ZrSyTJhv5O+2HRQZGRcJBebllokE1POeny2v6BN7uLAydTN
pagun5eWWsy+8stZow53bNLoo0vGtJO11zPwk79aMaNXhgCbQQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEvxWnmXvFgMvrDHiVgZuW25/i3hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNmE3MGMwY2ItOWFjNS0z
MTY1LWI2YjQtZjAzNzMyMjMxMTU3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHkocAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfhx6NlzH2/y9WVCMH/rvaAnO+5rtW9jrv7WE1O4WgnyWhVaM9tFLO6
nkZwsbtFtlEtC+nlWkOTELmWcRgeM6WyX6IWOfUo8OJobS/FnoBQkjvf2lu90IAl
wBIll0v+W+D7xILxkL2GBWI/CvK8mM3KHBwZ4zfp+gtbGCGGWiDxA0dBdsRwx8O5
osS+5A/tNzWtOe4w15Nf8XV8g40anSDHFy/MXvyq+qtHzzAfxJ9tOloLpnxoOVrk
4cOMJw22TkugSC8za8FRF0Fi+AeS0TccF6IYXi9aGxbWgE9sOl2RG+5H5kRV4wEt
fikhVRO0EySeo/Jy/fpM4OiGSFDD9F8=
-----END CERTIFICATE-----
Generated at Sat Apr 12 00:31:05 2025 by rpki-client