Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa
File:                     0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa (raw, json)
Hash identifier:          2vHWm09E1ZQWzFcN4FJ0elVEddQZYHcwFbmommW4v8Q=
Subject key identifier:   7E:C4:1B:53:93:07:CC:F4:B3:41:00:A2:EB:BA:EB:11:63:69:AC:0F
Certificate issuer:       /CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
Certificate serial:       010D0C9F43285849E22518CBEFDD2177FCA70DC0
Authority key identifier: 6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa
Signing time:             Sat 17 May 2025 13:01:02 +0000
ROA not before:           Sat 17 May 2025 13:01:02 +0000
ROA not after:            Fri 15 Aug 2025 13:01:02 +0000
asID:                     36100
IP address blocks:        72.10.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e2:25:18:cb:ef:dd:21:77:fc:a7:0d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d
        Validity
            Not Before: May 17 13:01:02 2025 GMT
            Not After : Aug 15 13:01:02 2025 GMT
        Subject: CN=e23d99a2-48a3-47bf-835d-a349c0306cc8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:30:49:05:13:74:49:75:d5:dc:da:93:43:e2:
                    74:d8:b2:ff:cb:ca:18:6c:ea:93:b7:f8:e0:68:56:
                    5b:7e:dd:9e:d9:2f:cb:cd:00:e2:b4:51:2a:cd:fc:
                    40:d1:ef:65:19:e6:68:87:33:6a:f2:83:d9:ff:6b:
                    e0:cf:4d:00:02:24:3d:e7:d6:03:93:50:59:9e:38:
                    68:23:e8:ff:36:56:bb:b5:8b:07:d1:5a:ed:8c:44:
                    f5:13:1a:a0:7a:71:63:fb:3c:ea:80:4c:06:97:6a:
                    fa:44:2f:c8:ee:7b:3a:41:e2:0d:ff:e7:a1:ef:e5:
                    32:82:d6:72:c9:66:54:ed:44:59:14:ac:da:89:98:
                    1a:15:e3:1d:44:47:ab:8b:d4:49:7f:a5:6f:fb:06:
                    ea:b5:a3:55:a7:cb:85:c6:dd:05:14:fb:48:59:7b:
                    27:5f:72:75:01:71:79:6e:f6:23:15:8f:d4:9c:0a:
                    56:ae:62:81:53:ec:83:ae:2f:94:ea:a2:bd:08:b9:
                    24:2e:37:a6:9b:a7:e7:4c:0c:3a:78:c0:72:1d:8e:
                    03:a0:0c:af:a6:0b:98:c7:33:72:5f:64:2e:85:e3:
                    f9:89:b1:a8:60:58:da:4e:08:60:a3:a0:02:c7:db:
                    0d:4c:ed:62:b3:1a:1c:db:cd:59:9b:82:f0:d8:cc:
                    e2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:C4:1B:53:93:07:CC:F4:B3:41:00:A2:EB:BA:EB:11:63:69:AC:0F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/0e89bdba-09c4-3f9b-9f55-492ca291ac39.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.crl

            X509v3 Authority Key Identifier:
                keyid:6A:77:CB:BB:80:7D:AF:E0:C1:67:43:E2:B0:D6:B8:0B:A5:45:39:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d1b005f5-a312-4cb5-81d8-a5c0bed5ca4d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.10.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:39:77:96:9a:bb:8d:cb:7c:6b:06:c2:d2:9e:75:cd:f0:c0:
         24:c8:4d:d4:80:23:b0:f9:dc:90:2e:29:25:3b:fb:70:41:3f:
         d6:62:b2:d6:43:ac:4b:ff:0d:c2:a5:5a:16:62:a7:78:98:80:
         36:55:69:b9:37:28:75:5d:d7:33:be:ae:b3:90:e7:d1:76:a0:
         a6:dc:2b:92:e4:ae:ec:0b:80:e0:a0:9b:2c:f2:c7:ad:c6:63:
         77:ac:6a:b2:79:85:45:ff:2c:5e:6c:ed:52:17:ab:d0:d8:ee:
         21:af:a0:15:3f:4e:67:06:e9:4a:10:f6:05:8f:3f:aa:92:dc:
         ee:ca:f9:fe:77:59:ae:89:21:56:80:63:c2:98:03:de:da:92:
         b7:b0:c1:e4:51:9b:46:1d:f3:f4:07:a0:6e:09:b3:21:05:4f:
         b5:f1:57:98:ce:57:30:68:45:a3:c4:e5:26:03:aa:66:fb:17:
         69:82:fb:8c:2a:c0:f0:d5:34:7d:22:ca:a6:32:90:34:0d:1c:
         6c:9d:65:b7:e4:db:19:c9:78:46:2b:af:a7:52:ef:56:c7:19:
         66:e2:07:e3:7c:4d:2c:3a:ae:05:e2:77:3e:02:f3:9d:4c:5c:
         e8:a7:86:b7:18:85:6a:8e:18:38:20:03:ca:ff:84:22:32:0c:
         63:0e:b7:9c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEniJRjL790hd/ynDcAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDFiMDA1ZjUtYTMxMi00Y2I1LTgxZDgtYTVjMGJlZDVj
YTRkMB4XDTI1MDUxNzEzMDEwMloXDTI1MDgxNTEzMDEwMlowLzEtMCsGA1UEAxMk
ZTIzZDk5YTItNDhhMy00N2JmLTgzNWQtYTM0OWMwMzA2Y2M4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzBJBRN0SXXV3NqTQ+J02LL/y8oYbOqTt/jg
aFZbft2e2S/LzQDitFEqzfxA0e9lGeZohzNq8oPZ/2vgz00AAiQ959YDk1BZnjho
I+j/Nla7tYsH0VrtjET1ExqgenFj+zzqgEwGl2r6RC/I7ns6QeIN/+eh7+UygtZy
yWZU7URZFKzaiZgaFeMdREeri9RJf6Vv+wbqtaNVp8uFxt0FFPtIWXsnX3J1AXF5
bvYjFY/UnApWrmKBU+yDri+U6qK9CLkkLjemm6fnTAw6eMByHY4DoAyvpguYxzNy
X2QuheP5ibGoYFjaTghgo6ACx9sNTO1isxoc281Zm4Lw2MziAwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH7EG1OTB8z0s0EAouu66xFjaawPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIw
MDVmNS1hMzEyLTRjYjUtODFkOC1hNWMwYmVkNWNhNGQvMGU4OWJkYmEtMDljNC0z
ZjliLTlmNTUtNDkyY2EyOTFhYzM5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDFiMDA1ZjUtYTMxMi00Y2I1LTgx
ZDgtYTVjMGJlZDVjYTRkL2QxYjAwNWY1LWEzMTItNGNiNS04MWQ4LWE1YzBiZWQ1
Y2E0ZC5jcmwwHwYDVR0jBBgwFoAUanfLu4B9r+DBZ0PisNa4C6VFOXswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kMWIwMDVmNS1hMzEyLTRjYjUtODFkOC1hNWMw
YmVkNWNhNGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBSArMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIM5d5aau43LfGsGwtKedc3wwCTITdSAI7D53JAuKSU7+3BBP9ZistZD
rEv/DcKlWhZip3iYgDZVabk3KHVd1zO+rrOQ59F2oKbcK5LkruwLgOCgmyzyx63G
Y3esarJ5hUX/LF5s7VIXq9DY7iGvoBU/TmcG6UoQ9gWPP6qS3O7K+f53Wa6JIVaA
Y8KYA97akrewweRRm0Yd8/QHoG4JsyEFT7XxV5jOVzBoRaPE5SYDqmb7F2mC+4wq
wPDVNH0iyqYykDQNHGydZbfk2xnJeEYrr6dS71bHGWbiB+N8TSw6rgXidz4C851M
XOinhrcYhWqOGDggA8r/hCIyDGMOt5w=
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:03:24 2025 by rpki-client