Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa
File:                     46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa (raw, json)
Hash identifier:          71RdzGuLq11M00V+0CCjE1t1gJOsyVxYNarmpuJWnYA=
Subject key identifier:   C2:37:DA:3E:3F:F6:81:98:1F:E1:13:36:62:15:3B:71:2F:28:1E:92
Certificate issuer:       /CN=73298062-bd8b-4b9f-8613-deb6e9c20878
Certificate serial:       010D0C9F43285849F17FE0CF7EE95C788AD00C00
Authority key identifier: 29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa
Signing time:             Fri 23 May 2025 01:00:49 +0000
ROA not before:           Fri 23 May 2025 01:00:49 +0000
ROA not after:            Thu 21 Aug 2025 01:00:49 +0000
asID:                     701
IP address blocks:        100.40.128.0/17 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f1:7f:e0:cf:7e:e9:5c:78:8a:d0:0c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73298062-bd8b-4b9f-8613-deb6e9c20878
        Validity
            Not Before: May 23 01:00:49 2025 GMT
            Not After : Aug 21 01:00:49 2025 GMT
        Subject: CN=1c62c494-aa6f-4454-a0aa-b40421450bef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:5e:5a:6c:52:95:50:02:01:ba:d3:71:f4:0b:
                    1f:cb:53:0e:82:0c:80:0f:24:5a:24:54:a5:43:cd:
                    1d:80:b6:c0:3c:c1:3f:a1:0b:19:81:f9:ab:38:8d:
                    e6:79:be:2a:ec:6b:52:c6:81:10:97:ef:f1:fe:fe:
                    3e:c4:e0:85:69:4c:ef:5c:2d:cf:02:10:6f:73:f1:
                    17:6c:80:37:47:d5:b7:75:1d:d9:33:94:26:08:75:
                    66:cc:a6:43:ff:27:34:93:dc:84:63:0b:ef:1b:9c:
                    18:34:4c:b4:9b:78:56:7c:d6:90:d2:38:c3:c1:0e:
                    dc:1f:3d:07:28:f2:17:9d:8d:b6:23:89:cb:dd:fe:
                    98:57:e8:6a:92:42:0c:e1:bd:eb:42:eb:33:a7:d1:
                    00:8f:d0:6a:f4:38:3a:13:6b:19:f4:dd:7e:ca:f8:
                    93:44:d2:fa:eb:fe:57:3f:08:76:f2:e6:ef:91:62:
                    4e:14:35:c7:ac:e3:53:b6:41:77:ae:e5:76:ce:5e:
                    0a:2f:04:e3:d2:79:d3:57:b9:89:22:1c:52:eb:32:
                    6a:1b:d0:30:a7:01:22:98:62:1d:d4:0c:7f:72:36:
                    8e:7f:02:13:37:1c:a8:aa:70:65:ed:ac:ef:aa:b1:
                    83:97:11:ea:ac:28:e6:b0:7a:a3:35:e1:a4:83:78:
                    64:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:37:DA:3E:3F:F6:81:98:1F:E1:13:36:62:15:3B:71:2F:28:1E:92
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/46d66a4e-b01a-3f9a-bf3d-15d8bbc6f00d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878/73298062-bd8b-4b9f-8613-deb6e9c20878.crl

            X509v3 Authority Key Identifier:
                keyid:29:92:C2:35:B0:89:40:BE:8D:AD:31:CA:CF:13:A4:BB:5F:58:EA:E6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/73298062-bd8b-4b9f-8613-deb6e9c20878.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  100.40.128.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a2:fc:e0:11:5a:df:3f:de:1e:69:2a:ed:53:6b:ff:3c:7f:60:
         06:e9:2c:7a:44:3d:26:00:60:0c:d3:be:5d:ef:52:ef:9e:65:
         0a:ae:78:5c:c7:60:ba:32:75:25:9e:e8:64:ca:a6:82:f4:79:
         0d:66:ae:99:a2:92:63:83:e6:3e:bd:80:58:5b:5f:4e:54:12:
         9b:f6:a8:c8:6e:30:ca:38:83:af:dc:72:5d:73:e9:1e:ad:b5:
         d7:7a:81:e9:06:d2:8f:4b:be:92:1c:a6:60:21:74:b6:30:0a:
         a7:63:5b:4a:73:eb:8e:e8:18:d7:eb:99:5a:81:ce:e5:9e:1a:
         81:76:d3:5a:43:9a:97:b9:94:56:2e:7b:d9:f6:f3:a4:1e:14:
         70:f1:df:fb:c3:a1:36:d8:48:0f:64:98:bf:ed:61:4b:4d:c2:
         b1:bc:dd:7a:56:5b:cf:c3:07:e8:71:f4:3c:47:dd:57:87:cc:
         35:4f:eb:26:f8:87:80:ec:c1:bd:b1:7f:90:ec:3f:6a:f5:e8:
         a1:a3:23:80:92:1d:25:f4:da:26:85:d3:6f:07:5f:9e:08:74:
         19:aa:9e:8a:c1:fe:e3:ab:ef:c2:30:52:1a:ce:10:97:cb:38:
         2c:50:a6:61:1b:7f:3f:ba:08:6d:e2:4e:22:6a:85:94:33:fa:
         6b:72:8e:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnxf+DPfulceIrQDAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzMyOTgwNjItYmQ4Yi00YjlmLTg2MTMtZGViNmU5YzIw
ODc4MB4XDTI1MDUyMzAxMDA0OVoXDTI1MDgyMTAxMDA0OVowLzEtMCsGA1UEAxMk
MWM2MmM0OTQtYWE2Zi00NDU0LWEwYWEtYjQwNDIxNDUwYmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiF5abFKVUAIButNx9Asfy1MOggyADyRaJFSl
Q80dgLbAPME/oQsZgfmrOI3meb4q7GtSxoEQl+/x/v4+xOCFaUzvXC3PAhBvc/EX
bIA3R9W3dR3ZM5QmCHVmzKZD/yc0k9yEYwvvG5wYNEy0m3hWfNaQ0jjDwQ7cHz0H
KPIXnY22I4nL3f6YV+hqkkIM4b3rQuszp9EAj9Bq9Dg6E2sZ9N1+yviTRNL66/5X
Pwh28ubvkWJOFDXHrONTtkF3ruV2zl4KLwTj0nnTV7mJIhxS6zJqG9AwpwEimGId
1Ax/cjaOfwITNxyoqnBl7azvqrGDlxHqrCjmsHqjNeGkg3hkLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMI32j4/9oGYH+ETNmIVO3EvKB6SMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5
ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2ZTljMjA4NzgvNDZkNjZhNGUtYjAxYS0z
ZjlhLWJmM2QtMTVkOGJiYzZmMDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzMyOTgwNjItYmQ4Yi00YjlmLTg2
MTMtZGViNmU5YzIwODc4LzczMjk4MDYyLWJkOGItNGI5Zi04NjEzLWRlYjZlOWMy
MDg3OC5jcmwwHwYDVR0jBBgwFoAUKZLCNbCJQL6NrTHKzxOku19Y6uYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83MzI5ODA2Mi1iZDhiLTRiOWYtODYxMy1kZWI2
ZTljMjA4NzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHZCiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKL84BFa3z/eHmkq7VNr/zx/YAbpLHpEPSYAYAzTvl3vUu+eZQqueFzH
YLoydSWe6GTKpoL0eQ1mrpmikmOD5j69gFhbX05UEpv2qMhuMMo4g6/ccl1z6R6t
tdd6gekG0o9LvpIcpmAhdLYwCqdjW0pz647oGNfrmVqBzuWeGoF201pDmpe5lFYu
e9n286QeFHDx3/vDoTbYSA9kmL/tYUtNwrG83XpWW8/DB+hx9DxH3VeHzDVP6yb4
h4Dswb2xf5DsP2r16KGjI4CSHSX02iaF028HX54IdBmqnorB/uOr78IwUhrOEJfL
OCxQpmEbfz+6CG3iTiJqhZQz+mtyjkc=
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:46:32 2025 by rpki-client