Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/5580774b-9bb0-3081-887e-2c3fcd0e2d80.roa
File:                     5580774b-9bb0-3081-887e-2c3fcd0e2d80.roa (raw, json)
Hash identifier:          mTZ1vL65dmCQNVKraAQfy7yS2+kUvcgWTE0UMh8UJpc=
Subject key identifier:   EA:F5:73:5D:9A:F7:7C:E7:7F:9E:8A:FF:F8:4E:04:DE:E6:6A:7D:F7
Certificate issuer:       /CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
Certificate serial:       010D0C9F4328584A51D0694D44ECFDF78FD2E780
Authority key identifier: 8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/5580774b-9bb0-3081-887e-2c3fcd0e2d80.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     8849
IP address blocks:        162.247.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:69:4d:44:ec:fd:f7:8f:d2:e7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cfcba74-1157-44e6-a1e9-7f4d4d9218d9
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=55b4d3df-4d05-4bf4-a471-eac29fe39668
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:78:d8:67:09:7e:9c:36:63:03:e9:1d:1c:92:
                    e8:4a:a4:e5:ae:62:e2:0d:ed:47:c4:c4:22:6e:03:
                    80:11:4c:c2:36:14:9b:21:88:f5:87:08:ae:d3:32:
                    60:c3:29:39:43:51:15:92:23:98:f5:b4:88:72:80:
                    cc:9c:9d:33:01:fd:a1:3b:b2:a7:f9:6c:0e:33:41:
                    4e:b1:e8:30:36:ba:22:6c:dd:0c:6c:f1:2e:59:d8:
                    ce:93:b0:9b:3d:32:ea:44:18:cb:48:95:95:d7:f8:
                    b7:85:01:a6:17:a1:c8:f6:cb:da:7d:12:0e:16:e5:
                    18:a9:3a:e8:2c:c6:9d:e1:ce:a8:f6:6b:a6:1c:1e:
                    06:bc:32:da:e7:4d:3c:ed:93:5a:db:c8:aa:e5:47:
                    eb:ba:c5:27:8b:26:5f:00:a8:32:75:48:f1:f5:60:
                    95:fe:ed:1b:65:93:ee:17:9a:09:de:8f:e3:b4:28:
                    f0:0c:5b:b8:7c:40:c9:6a:65:de:90:a7:b5:3d:f1:
                    98:40:9f:e5:27:98:7a:77:fc:41:61:33:cb:51:9d:
                    b9:47:0a:fa:e1:94:40:ee:22:1f:0d:07:72:d5:18:
                    63:be:27:31:51:1c:1c:c4:b8:f2:93:2b:94:06:cd:
                    88:03:72:8b:e3:03:a9:44:2d:e2:5b:b7:9e:22:22:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:F5:73:5D:9A:F7:7C:E7:7F:9E:8A:FF:F8:4E:04:DE:E6:6A:7D:F7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/5580774b-9bb0-3081-887e-2c3fcd0e2d80.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.crl

            X509v3 Authority Key Identifier:
                keyid:8B:18:D5:1E:6B:A2:D7:59:38:10:5B:CE:FB:79:DE:97:F9:62:91:7D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/4cfcba74-1157-44e6-a1e9-7f4d4d9218d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.247.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:5e:75:6a:40:9f:d5:cb:c6:e2:30:b1:72:1b:4a:6f:16:74:
         53:9c:85:23:6e:2c:66:69:1c:00:47:08:2f:c8:a7:9b:c3:75:
         f0:c1:aa:b4:92:ad:24:1d:fa:e8:97:f1:6a:7a:8b:fb:c9:f7:
         bb:0d:65:4b:91:e4:be:3c:2a:36:cd:6d:25:44:e9:91:ae:16:
         46:3c:64:97:c8:92:0f:3e:14:ee:62:a9:26:f8:66:a7:ba:bc:
         06:6a:5d:c0:25:66:91:90:22:22:ac:4a:e5:2e:8e:5b:cc:1f:
         ce:26:b2:3f:4e:d1:08:4c:dd:e1:1e:5e:21:e3:35:e5:48:16:
         4a:38:19:68:92:f5:43:d4:32:df:6b:80:0d:3e:be:33:89:43:
         75:3b:07:22:a4:b8:a0:29:b4:75:cb:c5:a2:e0:d7:a5:0f:a5:
         2b:c5:25:80:33:79:08:33:4d:43:67:29:4a:55:d6:75:02:12:
         73:98:03:53:c1:f4:11:37:99:26:ba:79:e6:2d:61:44:4f:98:
         66:7d:00:21:0f:2d:48:55:0e:6b:81:db:18:d0:9d:a3:de:d1:
         57:a9:21:52:14:b9:a6:2d:04:fd:51:47:b7:93:ab:e0:dc:0c:
         a7:c2:74:5a:60:31:09:37:0c:1f:87:0f:02:69:09:ab:2f:1f:
         c8:c7:79:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GlNROz994/S54AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGNmY2JhNzQtMTE1Ny00NGU2LWExZTktN2Y0ZDRkOTIx
OGQ5MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
NTViNGQzZGYtNGQwNS00YmY0LWE0NzEtZWFjMjlmZTM5NjY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt3jYZwl+nDZjA+kdHJLoSqTlrmLiDe1HxMQi
bgOAEUzCNhSbIYj1hwiu0zJgwyk5Q1EVkiOY9bSIcoDMnJ0zAf2hO7Kn+WwOM0FO
segwNroibN0MbPEuWdjOk7CbPTLqRBjLSJWV1/i3hQGmF6HI9svafRIOFuUYqTro
LMad4c6o9mumHB4GvDLa50087ZNa28iq5UfrusUniyZfAKgydUjx9WCV/u0bZZPu
F5oJ3o/jtCjwDFu4fEDJamXekKe1PfGYQJ/lJ5h6d/xBYTPLUZ25Rwr64ZRA7iIf
DQdy1RhjvicxURwcxLjykyuUBs2IA3KL4wOpRC3iW7eeIiJrUQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOr1c12a93znf56K//hOBN7man33MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy80Y2Zj
YmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRkNGQ5MjE4ZDkvNTU4MDc3NGItOWJiMC0z
MDgxLTg4N2UtMmMzZmNkMGUyZDgwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNGNmY2JhNzQtMTE1Ny00NGU2LWEx
ZTktN2Y0ZDRkOTIxOGQ5LzRjZmNiYTc0LTExNTctNDRlNi1hMWU5LTdmNGQ0ZDky
MThkOS5jcmwwHwYDVR0jBBgwFoAUixjVHmui11k4EFvO+3nel/likX0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy80Y2ZjYmE3NC0xMTU3LTQ0ZTYtYTFlOS03ZjRk
NGQ5MjE4ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoveaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAExedWpAn9XLxuIwsXIbSm8WdFOchSNuLGZpHABHCC/Ip5vDdfDBqrSS
rSQd+uiX8Wp6i/vJ97sNZUuR5L48KjbNbSVE6ZGuFkY8ZJfIkg8+FO5iqSb4Zqe6
vAZqXcAlZpGQIiKsSuUujlvMH84msj9O0QhM3eEeXiHjNeVIFko4GWiS9UPUMt9r
gA0+vjOJQ3U7ByKkuKAptHXLxaLg16UPpSvFJYAzeQgzTUNnKUpV1nUCEnOYA1PB
9BE3mSa6eeYtYURPmGZ9ACEPLUhVDmuB2xjQnaPe0VepIVIUuaYtBP1RR7eTq+Dc
DKfCdFpgMQk3DB+HDwJpCasvH8jHeTw=
-----END CERTIFICATE-----
Generated at Sat Jul 26 15:14:54 2025 by rpki-client