Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa
File:                     021ee080-938d-3d1d-a45d-a26f37869c9e.roa (raw, json)
Hash identifier:          A2s2SWo1owOkBgZYZ1q84RaBsXTxh43pCH88EgFNlSE=
Subject key identifier:   37:4F:E3:21:35:52:5C:69:A0:D8:9F:39:5B:AE:3B:D5:BC:8A:18:A8
Certificate issuer:       /CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
Certificate serial:       010D0C9F4328584A6C55D962B491C5F635228680
Authority key identifier: 42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     6250
IP address blocks:        76.164.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 13 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:d9:62:b4:91:c5:f6:35:22:86:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0d0378a9-103c-45ca-869d-7c9115c7b0f6
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=d6478b1c-056c-459d-86de-6dac85af6885
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d6:24:f0:3e:e9:68:fb:a6:df:02:c1:37:24:
                    89:1c:1b:47:e8:11:36:3b:9e:a2:e8:35:97:9b:fc:
                    5c:9e:61:4d:53:67:b5:dc:2f:3e:8e:c2:09:9b:15:
                    da:4f:bd:07:e4:fa:8f:53:72:d4:03:67:df:0b:19:
                    8c:71:07:74:c7:f6:b2:09:2c:1d:dc:be:28:f2:c2:
                    e6:d3:c5:d2:70:b1:83:39:f3:69:8d:49:a3:8a:70:
                    d9:cf:56:06:50:ae:7a:ae:dc:21:02:58:98:77:f3:
                    15:3c:00:f7:de:de:75:cd:04:82:19:63:57:4a:c0:
                    f8:9b:93:5a:e8:9d:f2:5b:aa:e4:e5:bd:d4:c3:03:
                    d3:7e:b6:52:7c:4b:2c:a5:ce:e9:69:44:b2:cd:1d:
                    6f:ac:1e:dd:74:40:ed:21:75:56:56:d4:3c:fd:a7:
                    b7:97:d7:ee:ec:d9:92:c5:30:c4:8f:fd:c3:cf:77:
                    84:32:16:9c:d4:66:6d:80:00:79:a7:66:ee:be:69:
                    a4:2c:2b:88:ee:8b:cf:54:b5:ed:69:b0:43:b8:52:
                    05:45:1c:cd:0e:63:14:5c:83:8a:2a:92:ba:9c:c4:
                    cd:d9:f0:33:41:4d:ad:64:be:1c:a9:10:af:f0:7d:
                    1c:e1:32:1a:a9:fd:82:da:76:8d:c4:ce:9e:bb:9c:
                    d0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:4F:E3:21:35:52:5C:69:A0:D8:9F:39:5B:AE:3B:D5:BC:8A:18:A8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/021ee080-938d-3d1d-a45d-a26f37869c9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6/0d0378a9-103c-45ca-869d-7c9115c7b0f6.crl

            X509v3 Authority Key Identifier:
                keyid:42:97:2F:2F:73:59:EB:7A:F5:61:60:0D:0E:39:57:85:38:D6:1B:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/0d0378a9-103c-45ca-869d-7c9115c7b0f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  76.164.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:7e:84:fb:55:4c:ac:b3:63:91:57:f4:39:14:71:67:c7:40:
         16:6a:f7:33:34:35:4f:76:c8:cb:63:0d:54:8c:00:17:da:e2:
         b5:73:8d:7b:5a:68:4e:6f:12:de:b3:03:65:74:c0:c4:8d:55:
         65:74:58:73:d7:78:5c:01:3f:64:9c:87:5b:6d:80:f1:af:72:
         b2:13:9a:9d:a7:2d:90:b9:0b:c4:03:b0:95:4e:6b:12:32:dc:
         47:3a:ad:44:fc:72:65:70:21:c5:9f:67:58:77:02:a4:76:e6:
         4b:73:dd:07:88:cd:8a:06:71:2d:49:66:85:be:c4:a6:53:7b:
         e0:4e:b2:3d:60:e4:e2:39:ea:5a:e0:cc:8f:e6:69:9c:99:a3:
         a8:f8:b6:e6:06:c6:4d:f7:e5:82:b2:3e:48:62:49:7c:eb:9f:
         86:96:59:63:a8:81:8e:8b:f0:93:f1:93:da:c0:25:f1:3e:52:
         76:3f:38:e0:0d:6a:cd:dc:40:cf:d7:1a:ed:fa:84:1e:c8:54:
         5a:0c:3f:e4:fb:d2:b4:1f:a0:f2:3d:92:36:66:f6:9c:bc:4e:
         85:d0:d9:c1:50:49:3f:25:af:96:93:91:75:4d:0e:7f:b0:4b:
         11:2d:01:c6:74:83:2d:e9:8d:b7:85:0a:ec:cb:94:71:99:e7:
         43:5c:8e:e4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVdlitJHF9jUihoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGQwMzc4YTktMTAzYy00NWNhLTg2OWQtN2M5MTE1Yzdi
MGY2MB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZDY0NzhiMWMtMDU2Yy00NTlkLTg2ZGUtNmRhYzg1YWY2ODg1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9Yk8D7paPum3wLBNySJHBtH6BE2O56i6DWX
m/xcnmFNU2e13C8+jsIJmxXaT70H5PqPU3LUA2ffCxmMcQd0x/ayCSwd3L4o8sLm
08XScLGDOfNpjUmjinDZz1YGUK56rtwhAliYd/MVPAD33t51zQSCGWNXSsD4m5Na
6J3yW6rk5b3UwwPTfrZSfEsspc7paUSyzR1vrB7ddEDtIXVWVtQ8/ae3l9fu7NmS
xTDEj/3Dz3eEMhac1GZtgAB5p2buvmmkLCuI7ovPVLXtabBDuFIFRRzNDmMUXIOK
KpK6nMTN2fAzQU2tZL4cqRCv8H0c4TIaqf2C2naNxM6eu5zQVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDdP4yE1UlxpoNifOVuuO9W8ihioMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAz
NzhhOS0xMDNjLTQ1Y2EtODY5ZC03YzkxMTVjN2IwZjYvMDIxZWUwODAtOTM4ZC0z
ZDFkLWE0NWQtYTI2ZjM3ODY5YzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMGQwMzc4YTktMTAzYy00NWNhLTg2
OWQtN2M5MTE1YzdiMGY2LzBkMDM3OGE5LTEwM2MtNDVjYS04NjlkLTdjOTExNWM3
YjBmNi5jcmwwHwYDVR0jBBgwFoAUQpcvL3NZ63r1YWANDjlXhTjWG8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8wZDAzNzhhOS0xMDNjLTQ1Y2EtODY5ZC03Yzkx
MTVjN2IwZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFTKSgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADd+hPtVTKyzY5FX9DkUcWfHQBZq9zM0NU92yMtjDVSMABfa4rVzjXta
aE5vEt6zA2V0wMSNVWV0WHPXeFwBP2Sch1ttgPGvcrITmp2nLZC5C8QDsJVOaxIy
3Ec6rUT8cmVwIcWfZ1h3AqR25ktz3QeIzYoGcS1JZoW+xKZTe+BOsj1g5OI56lrg
zI/maZyZo6j4tuYGxk335YKyPkhiSXzrn4aWWWOogY6L8JPxk9rAJfE+UnY/OOAN
as3cQM/XGu36hB7IVFoMP+T70rQfoPI9kjZm9py8ToXQ2cFQST8lr5aTkXVNDn+w
SxEtAcZ0gy3pjbeFCuzLlHGZ50NcjuQ=
-----END CERTIFICATE-----
Generated at Sat Jul 12 00:18:11 2025 by rpki-client