Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
File:                     b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa (raw, json)
Hash identifier:          QXpsZnibAvuSGcZOFZLBDttg98L5DxVRLNzDXi0zz/4=
Subject key identifier:   34:CD:53:F0:2D:FA:FC:3C:4C:B1:A5:72:E1:74:92:1F:9A:00:2E:1F
Certificate issuer:       /CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
Certificate serial:       010D0C9F4328584A612B10DDABA08443FA3E6980
Authority key identifier: CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     8070
IP address blocks:        165.159.132.0/22 maxlen: 22
                          165.159.136.0/22 maxlen: 22
                          165.159.188.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:10:dd:ab:a0:84:43:fa:3e:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=76ac0113-a1fd-489d-8666-dd2c67515c41
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:09:35:15:46:1c:e4:d2:a0:41:59:09:da:8c:
                    85:e9:aa:0e:49:b3:e7:48:4d:cf:b4:d4:55:5d:5c:
                    94:d7:7b:b2:66:59:89:fc:43:7f:8c:5f:d5:86:3e:
                    bc:6b:17:95:6c:ed:a3:70:31:ae:83:60:69:67:51:
                    41:20:77:48:04:ef:fc:db:8a:89:cc:4a:7b:1d:9c:
                    c0:4c:f5:8d:9d:fc:79:cd:d2:49:8c:4f:b9:f9:d4:
                    99:92:17:49:99:30:b5:c0:ea:d0:20:e8:be:a0:84:
                    83:fa:ab:13:c3:2e:55:3e:bd:68:c9:df:c7:43:da:
                    50:a6:8c:6a:23:5c:79:a9:fe:4e:e9:85:7b:16:b3:
                    a1:2d:7b:0b:95:b0:3b:13:17:19:2c:20:24:fb:f1:
                    c4:69:9d:ea:07:4b:ca:f6:78:9f:de:16:38:a3:8e:
                    02:2e:fb:36:4e:55:0b:18:9c:51:cd:f0:90:c7:89:
                    85:c4:0c:89:19:a1:e2:21:3c:0a:73:04:99:05:c2:
                    00:ae:79:01:1e:b9:d3:86:c0:02:35:ed:2a:fd:6d:
                    2a:de:62:26:3f:90:f9:30:60:88:32:65:2f:3e:7f:
                    cf:03:0a:9d:84:7b:cc:c0:4a:fa:3b:7b:c2:7c:86:
                    74:eb:30:c5:1e:a3:c3:94:0f:48:dc:c1:03:95:67:
                    ca:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:CD:53:F0:2D:FA:FC:3C:4C:B1:A5:72:E1:74:92:1F:9A:00:2E:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/b4690704-29a0-3fb0-9c91-5d04a3a74d75.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.crl

            X509v3 Authority Key Identifier:
                keyid:CB:8F:EB:83:E8:D2:B5:7B:16:20:34:6B:E5:C4:FB:80:A6:06:86:45

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c017ee6c-2f1f-4d5a-82d9-cdecbffe68fa.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.159.132.0-165.159.139.255
                  165.159.188.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:d1:33:eb:81:cb:fc:72:fc:6e:a1:ea:e3:d7:26:88:82:c7:
         c2:40:86:ff:c5:f5:2f:ac:82:06:1a:15:b5:d3:fd:ec:77:1e:
         8c:63:d6:02:2e:6a:3e:77:23:39:8a:6c:14:5d:d4:5f:26:92:
         64:7e:03:d7:c4:ae:86:5e:9f:3c:47:51:7c:af:9f:98:9d:ef:
         de:39:86:11:0e:02:47:f7:0c:a2:b5:76:2d:c5:2a:c3:30:29:
         e1:9d:82:d1:e6:50:55:52:4d:50:db:97:e9:90:29:86:48:fb:
         a2:fb:a7:6c:3d:d6:d0:9b:2e:1a:54:eb:4a:1c:c6:f9:56:91:
         a2:fd:e0:82:3c:13:f1:8f:8d:f6:c2:36:5c:cf:4a:66:8b:dd:
         3f:60:9f:b0:c8:a5:af:ea:eb:09:11:60:2b:1e:61:7e:5e:b1:
         df:4d:8b:77:13:35:a3:cd:c1:5f:55:71:9f:98:2c:56:77:d4:
         94:54:20:55:02:31:61:ee:0d:b3:4f:a8:69:9e:71:7c:4e:11:
         28:69:bd:e2:0b:fd:b2:76:c1:0c:a6:9d:75:ed:04:cf:96:dd:
         2b:e4:a8:9a:48:4a:ab:c4:16:a9:14:ac:78:af:cc:6e:a6:eb:
         cc:a5:b9:b4:7a:e9:32:b8:84:93:7c:54:17:51:8b:54:f1:8e:
         88:31:33:89
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEphKxDdq6CEQ/o+aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzAxN2VlNmMtMmYxZi00ZDVhLTgyZDktY2RlY2JmZmU2
OGZhMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
NzZhYzAxMTMtYTFmZC00ODlkLTg2NjYtZGQyYzY3NTE1YzQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmQk1FUYc5NKgQVkJ2oyF6aoOSbPnSE3PtNRV
XVyU13uyZlmJ/EN/jF/Vhj68axeVbO2jcDGug2BpZ1FBIHdIBO/824qJzEp7HZzA
TPWNnfx5zdJJjE+5+dSZkhdJmTC1wOrQIOi+oISD+qsTwy5VPr1oyd/HQ9pQpoxq
I1x5qf5O6YV7FrOhLXsLlbA7ExcZLCAk+/HEaZ3qB0vK9nif3hY4o44CLvs2TlUL
GJxRzfCQx4mFxAyJGaHiITwKcwSZBcIArnkBHrnThsACNe0q/W0q3mImP5D5MGCI
MmUvPn/PAwqdhHvMwEr6O3vCfIZ06zDFHqPDlA9I3MEDlWfKXQIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFDTNU/At+vw8TLGlcuF0kh+aAC4fMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jMDE3
ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVjYmZmZTY4ZmEvYjQ2OTA3MDQtMjlhMC0z
ZmIwLTljOTEtNWQwNGEzYTc0ZDc1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzAxN2VlNmMtMmYxZi00ZDVhLTgy
ZDktY2RlY2JmZmU2OGZhL2MwMTdlZTZjLTJmMWYtNGQ1YS04MmQ5LWNkZWNiZmZl
NjhmYS5jcmwwHwYDVR0jBBgwFoAUy4/rg+jStXsWIDRr5cT7gKYGhkUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jMDE3ZWU2Yy0yZjFmLTRkNWEtODJkOS1jZGVj
YmZmZTY4ZmEuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAKln4QD
BAKln4gDBAKln7wwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAGdEz64HL/HL8bqHq49cmiILHwkCG/8X1L6yC
BhoVtdP97HcejGPWAi5qPncjOYpsFF3UXyaSZH4D18Suhl6fPEdRfK+fmJ3v3jmG
EQ4CR/cMorV2LcUqwzAp4Z2C0eZQVVJNUNuX6ZAphkj7ovunbD3W0JsuGlTrShzG
+VaRov3ggjwT8Y+N9sI2XM9KZovdP2CfsMilr+rrCRFgKx5hfl6x302LdxM1o83B
X1Vxn5gsVnfUlFQgVQIxYe4Ns0+oaZ5xfE4RKGm94gv9snbBDKadde0Ez5bdK+So
mkhKq8QWqRSseK/MbqbrzKW5tHrpMriEk3xUF1GLVPGOiDEziQ==
-----END CERTIFICATE-----
Generated at Fri Jul 11 04:57:20 2025 by rpki-client