Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0bd6621-0405-3e18-a0bb-7f971ba782be.roa
File:                     a0bd6621-0405-3e18-a0bb-7f971ba782be.roa (raw, json)
Hash identifier:          NIZrRCrCYKARlfRuo09gH4d/MLvc6WeLy8NQVFphSEo=
Subject key identifier:   4C:7B:AB:B2:6B:5E:B6:42:00:6E:6D:03:A6:99:D4:7D:8C:F1:1F:8D
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF07A1CDB41C947DB801860
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0bd6621-0405-3e18-a0bb-7f971ba782be.roa
Signing time:             Thu 24 Jul 2025 12:38:49 +0000
ROA not before:           Thu 24 Jul 2025 12:38:49 +0000
ROA not after:            Wed 22 Oct 2025 12:38:49 +0000
asID:                     396659
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 29 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:7a:1c:db:41:c9:47:db:80:18:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:49 2025 GMT
            Not After : Oct 22 12:38:49 2025 GMT
        Subject: CN=5afdb160-570f-49b9-ab6c-eda1f60d7fe4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:57:bd:aa:75:89:ec:e1:77:38:a8:51:8e:4e:
                    5f:8a:93:e2:67:00:7e:a4:3c:ff:2d:ae:75:d1:3c:
                    cc:7a:b0:5e:0a:e0:96:5e:66:c5:6a:2d:6a:a2:79:
                    06:f2:b8:16:98:7f:c2:a4:a6:05:b8:3d:e6:eb:8d:
                    ff:90:9c:27:40:68:f6:3b:ca:db:84:de:cf:09:66:
                    23:27:b6:30:08:66:a1:cf:a3:78:6d:7f:75:80:7c:
                    f3:82:16:6a:51:5d:18:6e:bc:ec:55:74:51:f1:55:
                    cf:31:02:8f:50:af:04:88:8f:2f:72:1e:0b:fe:d3:
                    f7:c9:57:38:a5:41:41:5f:7a:83:08:41:d5:1d:4e:
                    22:84:ff:36:13:9e:d7:bd:6b:d1:55:0b:8d:72:00:
                    0d:6b:3d:c9:40:f8:7c:de:fa:1b:71:7e:51:2b:c6:
                    89:64:35:ba:a1:a0:8f:2c:32:0f:71:22:de:3f:a2:
                    65:aa:da:c4:1f:ad:ab:f9:d8:f0:75:2f:4a:91:00:
                    38:cf:84:53:e6:6f:ba:37:d7:92:99:85:d2:24:4b:
                    d5:11:dc:b8:cb:c8:c0:5b:7f:e8:a7:7f:47:01:f1:
                    a9:de:f7:dc:a3:bd:ad:cd:43:73:96:f8:5b:d6:5c:
                    0d:28:92:19:55:ff:68:82:cb:2b:75:87:69:16:c8:
                    7f:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7B:AB:B2:6B:5E:B6:42:00:6E:6D:03:A6:99:D4:7D:8C:F1:1F:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a0bd6621-0405-3e18-a0bb-7f971ba782be.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:0e:e9:3f:02:96:46:73:7a:8f:e8:e6:98:bf:cc:22:13:
         f9:29:cd:a5:a2:4b:2c:d1:5c:e6:bf:34:dd:7f:72:eb:9f:b6:
         42:9f:01:73:24:0d:ff:87:cd:b5:b7:0a:80:07:d7:b1:ea:92:
         57:36:07:f5:89:0b:cc:d0:85:01:47:6e:8b:c1:e1:3e:eb:b3:
         bb:a3:e9:42:cf:87:48:e7:0f:ae:75:6b:8f:32:04:38:6a:5f:
         61:98:2d:c8:d7:dd:68:8a:b7:d6:b3:4e:b0:fd:88:b0:69:9b:
         3b:d1:a4:ea:6b:4b:ce:2e:c2:45:7c:09:b7:59:7b:26:9c:cd:
         12:4c:ca:d9:16:ae:4f:8a:4f:8c:db:5d:f4:61:5a:ee:2a:bd:
         00:fa:89:99:95:05:47:65:e5:95:98:a8:26:1c:a5:4f:6f:63:
         35:5a:a3:2c:92:3a:36:22:4b:4c:06:a7:89:92:73:db:51:53:
         f5:4e:55:ce:51:97:34:32:29:48:e4:99:61:5f:76:5d:d7:3c:
         27:66:3e:a2:39:b1:3b:57:e5:a5:dd:f9:fd:36:9c:ca:c7:d8:
         e4:d6:5a:4c:38:05:ea:9e:11:eb:88:e1:30:33:23:66:a4:b8:
         3c:ae:b7:cc:52:1e:5c:df:68:31:46:54:a1:73:cd:bb:6c:a8:
         bd:c2:f1:03
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8Hoc20HJR9uAGGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg0OVoXDTI1MTAyMjEyMzg0OVowLzEtMCsGA1UEAxMk
NWFmZGIxNjAtNTcwZi00OWI5LWFiNmMtZWRhMWY2MGQ3ZmU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnFe9qnWJ7OF3OKhRjk5fipPiZwB+pDz/La51
0TzMerBeCuCWXmbFai1qonkG8rgWmH/CpKYFuD3m643/kJwnQGj2O8rbhN7PCWYj
J7YwCGahz6N4bX91gHzzghZqUV0YbrzsVXRR8VXPMQKPUK8EiI8vch4L/tP3yVc4
pUFBX3qDCEHVHU4ihP82E57XvWvRVQuNcgANaz3JQPh83vobcX5RK8aJZDW6oaCP
LDIPcSLeP6JlqtrEH62r+djwdS9KkQA4z4RT5m+6N9eSmYXSJEvVEdy4y8jAW3/o
p39HAfGp3vfco72tzUNzlvhb1lwNKJIZVf9ogssrdYdpFsh/sQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEx7q7JrXrZCAG5tA6aZ1H2M8R+NMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTBiZDY2MjEtMDQwNS0z
ZTE4LWEwYmItN2Y5NzFiYTc4MmJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE9bDuk/ApZGc3qP6OaYv8wiE/kpzaWiSyzRXOa/NN1/cuuftkKfAXMk
Df+HzbW3CoAH17Hqklc2B/WJC8zQhQFHbovB4T7rs7uj6ULPh0jnD651a48yBDhq
X2GYLcjX3WiKt9azTrD9iLBpmzvRpOprS84uwkV8CbdZeyaczRJMytkWrk+KT4zb
XfRhWu4qvQD6iZmVBUdl5ZWYqCYcpU9vYzVaoyySOjYiS0wGp4mSc9tRU/VOVc5R
lzQyKUjkmWFfdl3XPCdmPqI5sTtX5aXd+f02nMrH2OTWWkw4BeqeEeuI4TAzI2ak
uDyut8xSHlzfaDFGVKFzzbtsqL3C8QM=
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:56:47 2025 by rpki-client