Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7afe04a-1c8a-3bd9-8fbb-6e8908a3effe.roa
File:                     c7afe04a-1c8a-3bd9-8fbb-6e8908a3effe.roa (raw, json)
Hash identifier:          JgnszmpvmxeirXu84OjRlXcdDSDwPVStOheozYQrWig=
Subject key identifier:   8D:16:02:3F:5A:92:EC:6B:C6:4E:12:AA:90:84:7A:D2:EE:93:E9:E4
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A00DADA22F808E1B2236AB600
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7afe04a-1c8a-3bd9-8fbb-6e8908a3effe.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     16625
IP address blocks:        184.30.156.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:da:22:f8:08:e1:b2:23:6a:b6:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=26babcc5-4026-4d31-9905-0453b2b6c7db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:f5:d2:73:d6:b5:c3:ab:89:4e:5e:59:ad:f0:
                    2f:12:1a:85:3b:86:43:97:44:59:82:ad:6e:fc:7d:
                    ca:6b:82:02:d3:b3:26:d8:88:a0:cc:e7:6c:27:94:
                    5a:56:8c:a3:43:47:88:c5:a0:1f:34:cb:00:df:5c:
                    3d:e0:60:ce:21:82:60:a3:93:4b:fc:e9:33:c3:e5:
                    09:61:ab:f2:bd:24:9b:d2:c9:f2:ee:1f:5f:d3:e7:
                    ed:f8:41:b5:a2:f8:3e:ca:78:ca:2c:82:d9:bc:79:
                    ce:00:8e:fa:29:f8:0e:ad:68:9b:d4:5e:0d:ed:a8:
                    07:67:3a:39:bd:fe:68:0e:96:f4:a4:3a:81:0e:aa:
                    d8:f3:11:10:01:59:7e:38:7f:4f:96:78:24:e5:c1:
                    63:52:c0:aa:97:e3:38:a5:02:63:97:8a:ad:19:ce:
                    b3:a9:0e:93:cc:6e:c6:07:9c:ce:59:d2:24:18:97:
                    b0:a9:dd:cc:b5:ba:50:d9:95:03:ef:26:c4:63:ad:
                    23:4d:f0:a8:7c:4b:ec:c4:3b:c1:b3:42:fa:15:24:
                    ac:17:04:8a:a0:99:3c:28:14:d3:f3:ed:1f:9b:9a:
                    eb:a3:f4:71:1a:c8:a0:96:04:04:0e:7f:57:06:4d:
                    b3:65:52:35:a5:e2:8c:93:28:03:d8:52:57:b8:5b:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:16:02:3F:5A:92:EC:6B:C6:4E:12:AA:90:84:7A:D2:EE:93:E9:E4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/c7afe04a-1c8a-3bd9-8fbb-6e8908a3effe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.30.156.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:2e:d1:8c:94:02:44:35:ed:14:60:b1:99:13:76:4a:77:77:
         64:58:74:f1:8b:0f:a6:95:d8:2c:fd:33:f9:4f:76:25:c4:8b:
         36:fc:7b:77:f3:07:8b:b3:7e:eb:ee:82:26:17:3f:f5:c7:3b:
         4c:bb:fb:28:c1:62:ea:a5:7c:73:75:bc:e6:e8:77:b6:62:3e:
         77:57:96:96:6d:93:c4:11:e1:ae:0c:2f:a0:6d:bb:30:ed:30:
         b6:4f:17:cf:5f:f8:68:14:ed:02:66:24:56:68:10:36:cf:8e:
         2b:c2:56:bf:6c:2e:1a:37:c6:8a:33:31:ca:25:bb:8a:72:ee:
         a8:3d:c4:b9:fc:14:11:13:b4:c8:f9:41:81:b6:85:a7:72:66:
         0a:f9:b8:eb:e6:89:c7:ce:1c:1c:87:7d:5e:2e:b9:db:99:04:
         01:eb:df:da:60:dd:9e:a1:e6:2f:d3:e8:f7:eb:1e:42:a3:f9:
         0d:bb:7a:83:8e:35:fd:4e:20:03:5d:a5:50:78:d0:8d:d3:7d:
         fe:f7:f5:de:4c:13:be:0b:da:40:27:14:5d:ea:6a:b5:bc:91:
         5a:eb:bb:17:81:42:11:14:d4:98:79:db:64:7b:a5:4b:0d:0a:
         1b:93:06:20:68:ce:0f:57:03:85:4b:63:07:c0:78:0f:d6:21:
         9e:d4:d8:f5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2toi+AjhsiNqtgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
MjZiYWJjYzUtNDAyNi00ZDMxLTk5MDUtMDQ1M2IyYjZjN2RiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPXSc9a1w6uJTl5ZrfAvEhqFO4ZDl0RZgq1u
/H3Ka4IC07Mm2IigzOdsJ5RaVoyjQ0eIxaAfNMsA31w94GDOIYJgo5NL/Okzw+UJ
YavyvSSb0sny7h9f0+ft+EG1ovg+ynjKLILZvHnOAI76KfgOrWib1F4N7agHZzo5
vf5oDpb0pDqBDqrY8xEQAVl+OH9Plngk5cFjUsCql+M4pQJjl4qtGc6zqQ6TzG7G
B5zOWdIkGJewqd3MtbpQ2ZUD7ybEY60jTfCofEvsxDvBs0L6FSSsFwSKoJk8KBTT
8+0fm5rro/RxGsiglgQEDn9XBk2zZVI1peKMkygD2FJXuFv7yQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI0WAj9akuxrxk4SqpCEetLuk+nkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvYzdhZmUwNGEtMWM4YS0z
YmQ5LThmYmItNmU4OTA4YTNlZmZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuB6cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcu0YyUAkQ17RRgsZkTdkp3d2RYdPGLD6aV2Cz9M/lPdiXEizb8e3fz
B4uzfuvugiYXP/XHO0y7+yjBYuqlfHN1vObod7ZiPndXlpZtk8QR4a4ML6BtuzDt
MLZPF89f+GgU7QJmJFZoEDbPjivCVr9sLho3xoozMcolu4py7qg9xLn8FBETtMj5
QYG2hadyZgr5uOvmicfOHByHfV4uuduZBAHr39pg3Z6h5i/T6PfrHkKj+Q27eoOO
Nf1OIANdpVB40I3Tff739d5ME74L2kAnFF3qarW8kVrruxeBQhEU1Jh522R7pUsN
ChuTBiBozg9XA4VLYwfAeA/WIZ7U2PU=
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:04:18 2025 by rpki-client