Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/ecf32b1b-3969-3ba4-ad86-0747f72b5c1d.roa
File:                     ecf32b1b-3969-3ba4-ad86-0747f72b5c1d.roa (raw, json)
Hash identifier:          9UVsFd5N+Xm8DdeNpVDIBlOXNrzvOc/phLNkj8hyFUM=
Subject key identifier:   73:DF:25:81:71:25:3C:4F:CF:38:BB:5D:49:AF:B5:0E:EA:87:21:73
Certificate issuer:       /CN=fc9bd684-883b-41b8-9890-8cd78117898c
Certificate serial:       010D0C9F43285849DF5A7676C27EF788EAC07000
Authority key identifier: 51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/ecf32b1b-3969-3ba4-ad86-0747f72b5c1d.roa
Signing time:             Fri 16 May 2025 13:00:59 +0000
ROA not before:           Fri 16 May 2025 13:00:59 +0000
ROA not after:            Thu 14 Aug 2025 13:00:59 +0000
asID:                     13379
IP address blocks:        139.104.4.0/24 maxlen: 24
                          153.7.233.0/24 maxlen: 24
                          153.7.252.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:df:5a:76:76:c2:7e:f7:88:ea:c0:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fc9bd684-883b-41b8-9890-8cd78117898c
        Validity
            Not Before: May 16 13:00:59 2025 GMT
            Not After : Aug 14 13:00:59 2025 GMT
        Subject: CN=3c29c49d-2559-496e-94f5-f1320922d326
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a9:18:d8:79:fd:1b:a4:b4:c4:db:58:f9:87:
                    0b:41:24:d2:d9:4b:b2:bb:f3:66:d5:f3:c0:84:17:
                    3c:84:f3:23:f4:42:e6:ef:a7:a7:d8:28:b8:ef:05:
                    09:ae:80:1a:d6:cc:e0:fe:46:b6:b6:4c:fb:1a:28:
                    f0:36:56:a5:7e:69:a1:61:85:fb:ce:b5:6b:98:0b:
                    bd:57:fd:88:b3:2c:e5:e5:c3:b6:d9:39:91:cc:08:
                    55:a0:83:74:39:71:c2:d0:24:25:02:f9:e4:df:c9:
                    88:4f:eb:ca:4a:d4:0f:07:cb:d5:1e:c7:ba:17:24:
                    53:12:6f:15:13:60:5e:f1:c6:e4:4e:04:59:71:48:
                    c3:a6:7f:47:1a:7f:97:55:c2:eb:6a:2c:3a:05:33:
                    d7:e8:47:2f:c9:8c:1a:9b:70:aa:65:32:71:9e:cf:
                    4d:62:d6:f3:e5:1f:e7:dd:59:1d:8a:cb:68:14:79:
                    5a:b8:cb:4a:7e:53:25:98:e5:aa:0e:c8:de:43:eb:
                    ed:0a:31:ff:f5:f2:d2:62:0c:ad:74:6d:a3:0e:d2:
                    0b:17:44:d5:bb:fe:a4:f6:05:62:55:b5:8a:78:d5:
                    ca:49:46:5e:82:e3:35:0f:d9:fd:8e:cf:29:7b:33:
                    06:4a:a2:c6:44:cd:0a:48:ac:89:f4:0e:07:66:a0:
                    fe:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:DF:25:81:71:25:3C:4F:CF:38:BB:5D:49:AF:B5:0E:EA:87:21:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/ecf32b1b-3969-3ba4-ad86-0747f72b5c1d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c/fc9bd684-883b-41b8-9890-8cd78117898c.crl

            X509v3 Authority Key Identifier:
                keyid:51:A1:EF:EA:12:2D:8F:6F:30:15:9A:BB:20:8B:60:98:01:89:83:78

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fc9bd684-883b-41b8-9890-8cd78117898c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  139.104.4.0/24
                  153.7.233.0/24
                  153.7.252.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:0b:4c:94:9c:50:69:4f:70:4b:d1:42:ae:2a:29:d6:53:d0:
         23:95:ad:7e:40:03:cb:57:09:f1:c8:d9:a4:e5:2d:06:7a:c8:
         c7:30:3b:c0:76:99:80:d9:57:e5:70:1f:d2:e4:52:c3:62:9c:
         5a:a9:4c:0f:35:6a:0e:77:0a:73:b3:c2:2e:66:9d:98:b3:31:
         63:85:63:b2:ce:c4:11:06:f5:44:1f:d5:1d:a2:c2:53:39:19:
         08:2b:86:06:ee:f8:56:d3:9d:f9:08:8e:5a:c9:ad:5d:bf:25:
         23:49:84:77:e9:79:ba:07:6d:0d:4e:a8:e7:e8:23:63:9b:0a:
         d7:08:b3:ed:3f:c1:ca:9c:08:3b:13:12:6f:7f:3b:07:ae:79:
         54:d1:8e:e9:09:8a:e8:9e:df:72:0a:e6:43:16:d9:91:ec:1e:
         19:eb:3a:a4:73:65:21:1b:98:04:b2:07:68:97:0a:fe:5b:05:
         29:7b:0d:2f:ae:b1:50:23:8f:28:25:c7:46:d0:ad:31:b5:58:
         9f:7d:97:b2:e3:a5:a1:31:d7:67:98:f6:21:a5:b4:d8:2e:68:
         a1:1f:cd:94:8d:ee:07:b0:1c:1a:bd:4b:a0:26:07:62:5f:3d:
         ec:1a:82:0d:82:15:24:5a:24:bc:cc:51:e4:0d:ee:d9:9c:3f:
         b9:ed:99:fa
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEnfWnZ2wn73iOrAcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmM5YmQ2ODQtODgzYi00MWI4LTk4OTAtOGNkNzgxMTc4
OThjMB4XDTI1MDUxNjEzMDA1OVoXDTI1MDgxNDEzMDA1OVowLzEtMCsGA1UEAxMk
M2MyOWM0OWQtMjU1OS00OTZlLTk0ZjUtZjEzMjA5MjJkMzI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtKkY2Hn9G6S0xNtY+YcLQSTS2Uuyu/Nm1fPA
hBc8hPMj9ELm76en2Ci47wUJroAa1szg/ka2tkz7GijwNlalfmmhYYX7zrVrmAu9
V/2Isyzl5cO22TmRzAhVoIN0OXHC0CQlAvnk38mIT+vKStQPB8vVHse6FyRTEm8V
E2Be8cbkTgRZcUjDpn9HGn+XVcLraiw6BTPX6EcvyYwam3CqZTJxns9NYtbz5R/n
3VkdistoFHlauMtKflMlmOWqDsjeQ+vtCjH/9fLSYgytdG2jDtILF0TVu/6k9gVi
VbWKeNXKSUZeguM1D9n9js8pezMGSqLGRM0KSKyJ9A4HZqD+zQIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFHPfJYFxJTxPzzi7XUmvtQ7qhyFzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mYzli
ZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3ODExNzg5OGMvZWNmMzJiMWItMzk2OS0z
YmE0LWFkODYtMDc0N2Y3MmI1YzFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmM5YmQ2ODQtODgzYi00MWI4LTk4
OTAtOGNkNzgxMTc4OThjL2ZjOWJkNjg0LTg4M2ItNDFiOC05ODkwLThjZDc4MTE3
ODk4Yy5jcmwwHwYDVR0jBBgwFoAUUaHv6hItj28wFZq7IItgmAGJg3gwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mYzliZDY4NC04ODNiLTQxYjgtOTg5MC04Y2Q3
ODExNzg5OGMuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAi2gEAwQA
mQfpAwQAmQf8MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBAAULTJScUGlPcEvRQq4qKdZT0COVrX5AA8tXCfHI
2aTlLQZ6yMcwO8B2mYDZV+VwH9LkUsNinFqpTA81ag53CnOzwi5mnZizMWOFY7LO
xBEG9UQf1R2iwlM5GQgrhgbu+FbTnfkIjlrJrV2/JSNJhHfpeboHbQ1OqOfoI2Ob
CtcIs+0/wcqcCDsTEm9/OweueVTRjukJiuie33IK5kMW2ZHsHhnrOqRzZSEbmASy
B2iXCv5bBSl7DS+usVAjjyglx0bQrTG1WJ99l7LjpaEx12eY9iGltNguaKEfzZSN
7gewHBq9S6AmB2JfPewagg2CFSRaJLzMUeQN7tmcP7ntmfo=
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:31:54 2025 by rpki-client