Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
File:                     b7a3cb31-6115-3593-b825-42ede5d33f0c.roa (raw, json)
Hash identifier:          jVTN8KC2wWkK324GmOXewW1LdUTWBd+lPyWLmP4mIlE=
Subject key identifier:   AE:09:5F:6A:9B:C0:8E:56:85:6C:17:45:21:94:56:0F:0A:86:D9:C5
Certificate issuer:       /CN=34b715b9-211f-4bf7-ace9-03b3446775ab
Certificate serial:       010D0C9F43285849F17FC12BFD9CCC9F03BAD300
Authority key identifier: A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     197122
IP address blocks:        204.155.122.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:c1:2b:fd:9c:cc:9f:03:ba:d3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=34b715b9-211f-4bf7-ace9-03b3446775ab
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=ff0c5031-2ecd-4c51-8b31-49c19cc7148f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:32:9a:a0:5a:bd:0c:34:91:92:7a:cf:1d:fc:
                    9a:31:14:39:e0:86:af:f0:b4:06:9b:57:46:eb:db:
                    3e:d0:6c:a3:eb:df:51:76:2a:9d:f9:37:08:40:13:
                    34:4e:07:4c:5e:c6:7e:99:19:0b:27:59:ea:e6:4d:
                    23:bf:00:06:50:40:a3:47:a5:08:60:4d:99:7d:49:
                    20:12:6c:95:ba:33:cd:5d:71:05:63:b1:eb:40:ef:
                    fc:a8:91:55:fe:44:83:c2:38:ff:88:f1:7e:6a:96:
                    da:c6:88:34:c8:46:71:0d:0f:87:01:ca:2e:03:55:
                    d4:98:69:e2:b7:5c:13:11:b3:7c:e0:6e:e4:2a:d3:
                    8f:0b:86:d1:0c:fc:03:05:10:06:08:91:7b:56:6b:
                    54:17:2c:cf:e9:b1:77:a3:e3:51:11:a3:1d:50:8c:
                    71:b9:a3:4f:bc:e9:b1:3b:ed:b2:dc:49:d1:c0:d4:
                    aa:a8:26:37:c1:5c:76:09:b2:ba:33:ff:53:77:17:
                    20:48:21:e2:89:0e:27:58:ca:a3:29:23:c1:d3:f8:
                    1d:91:c2:99:49:49:ef:51:58:88:1b:ed:07:a1:5c:
                    d0:2b:2a:d5:bc:72:67:cc:f6:47:de:50:49:f0:ce:
                    dd:fc:54:34:6e:45:64:5f:e5:38:a7:91:4e:ed:65:
                    b4:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:09:5F:6A:9B:C0:8E:56:85:6C:17:45:21:94:56:0F:0A:86:D9:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/b7a3cb31-6115-3593-b825-42ede5d33f0c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab/34b715b9-211f-4bf7-ace9-03b3446775ab.crl

            X509v3 Authority Key Identifier:
                keyid:A2:06:2D:8C:8F:04:C6:8E:B7:00:2D:04:38:3A:77:9F:8C:EB:67:AC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/34b715b9-211f-4bf7-ace9-03b3446775ab.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.155.122.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:00:82:1f:a6:c7:70:19:ed:71:cc:de:7d:30:b0:81:da:ef:
         ae:20:ca:57:08:14:21:b2:ca:84:94:fc:a3:37:09:eb:ac:a6:
         a2:fb:64:a1:f9:2e:18:ac:c2:50:2a:8d:da:4a:b2:7e:03:05:
         52:98:69:38:67:cc:fb:15:40:3f:cf:61:bc:bb:0b:13:ad:9f:
         36:ba:dc:ce:00:4b:e5:50:6f:2f:67:65:14:d5:76:7e:ad:ea:
         d3:a1:cb:cd:77:60:b6:9d:e1:f8:d5:7f:ed:05:04:41:52:31:
         f7:a3:0b:0b:43:18:b0:a1:cf:ab:0d:d3:81:96:39:76:3f:42:
         e9:b9:bb:d8:f8:16:8d:0a:e8:e8:b6:fd:b7:a6:9a:0d:5b:44:
         ab:24:a4:98:3c:08:e3:4b:e2:07:1f:29:1c:ec:a0:e0:ad:1e:
         1a:7e:9b:c1:15:9a:5b:d6:7c:eb:e3:09:dc:1a:72:ee:d0:81:
         6e:d0:f8:08:f1:53:28:74:5e:8f:9a:44:0a:ce:14:a5:7b:c5:
         c6:54:f7:58:f1:de:e9:63:a8:ad:4f:7f:e8:36:bd:08:e4:dd:
         5f:58:fd:5f:17:af:8c:eb:78:2e:4b:f0:dc:6f:c9:5c:ec:81:
         c4:18:15:58:aa:bb:9d:41:1a:1a:40:62:e6:32:d5:ac:10:31:
         9a:70:51:24
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf8Er/ZzMnwO60wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzRiNzE1YjktMjExZi00YmY3LWFjZTktMDNiMzQ0Njc3
NWFiMB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZmYwYzUwMzEtMmVjZC00YzUxLThiMzEtNDljMTljYzcxNDhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgzKaoFq9DDSRknrPHfyaMRQ54Iav8LQGm1dG
69s+0Gyj699Rdiqd+TcIQBM0TgdMXsZ+mRkLJ1nq5k0jvwAGUECjR6UIYE2ZfUkg
EmyVujPNXXEFY7HrQO/8qJFV/kSDwjj/iPF+apbaxog0yEZxDQ+HAcouA1XUmGni
t1wTEbN84G7kKtOPC4bRDPwDBRAGCJF7VmtUFyzP6bF3o+NREaMdUIxxuaNPvOmx
O+2y3EnRwNSqqCY3wVx2CbK6M/9TdxcgSCHiiQ4nWMqjKSPB0/gdkcKZSUnvUViI
G+0HoVzQKyrVvHJnzPZH3lBJ8M7d/FQ0bkVkX+U4p5FO7WW0WwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK4JX2qbwI5WhWwXRSGUVg8KhtnFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3
MTViOS0yMTFmLTRiZjctYWNlOS0wM2IzNDQ2Nzc1YWIvYjdhM2NiMzEtNjExNS0z
NTkzLWI4MjUtNDJlZGU1ZDMzZjBjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMzRiNzE1YjktMjExZi00YmY3LWFj
ZTktMDNiMzQ0Njc3NWFiLzM0YjcxNWI5LTIxMWYtNGJmNy1hY2U5LTAzYjM0NDY3
NzVhYi5jcmwwHwYDVR0jBBgwFoAUogYtjI8Exo63AC0EODp3n4zrZ6wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8zNGI3MTViOS0yMTFmLTRiZjctYWNlOS0wM2Iz
NDQ2Nzc1YWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFYAgh+mx3AZ7XHM3n0wsIHa764gylcIFCGyyoSU/KM3CeuspqL7ZKH5
LhiswlAqjdpKsn4DBVKYaThnzPsVQD/PYby7CxOtnza63M4AS+VQby9nZRTVdn6t
6tOhy813YLad4fjVf+0FBEFSMfejCwtDGLChz6sN04GWOXY/Qum5u9j4Fo0K6Oi2
/bemmg1bRKskpJg8CONL4gcfKRzsoOCtHhp+m8EVmlvWfOvjCdwacu7QgW7Q+Ajx
Uyh0Xo+aRArOFKV7xcZU91jx3uljqK1Pf+g2vQjk3V9Y/V8Xr4zreC5L8NxvyVzs
gcQYFViqu51BGhpAYuYy1awQMZpwUSQ=
-----END CERTIFICATE-----
Generated at Fri Jun 6 19:46:47 2025 by rpki-client