Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa
File:                     b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa (raw, json)
Hash identifier:          cJZw5auvcf/KiXeYBp1XraCj4DaI3PpNP+UtKD/wUFI=
Subject key identifier:   38:6B:6F:2E:1B:71:E4:59:31:E5:33:DD:92:6A:A9:9F:55:E8:A1:B0
Certificate issuer:       /CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
Certificate serial:       010D0C9F4328584A7BB0B560FBC8CB5196BA5180
Authority key identifier: A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa
Signing time:             Fri 11 Jul 2025 13:01:05 +0000
ROA not before:           Fri 11 Jul 2025 13:01:05 +0000
ROA not after:            Thu 09 Oct 2025 13:01:05 +0000
asID:                     18013
IP address blocks:        107.151.244.0/22 maxlen: 24
                          198.44.170.0/24 maxlen: 24
                          198.44.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7b:b0:b5:60:fb:c8:cb:51:96:ba:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=dcf48eb5-c08a-4793-8dd8-a83f660c3f82
        Validity
            Not Before: Jul 11 13:01:05 2025 GMT
            Not After : Oct  9 13:01:05 2025 GMT
        Subject: CN=986050ea-11da-4567-b9e9-fdc9c3a99dc3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:32:45:f8:65:fd:da:c9:d0:24:de:3f:cf:9b:
                    84:d1:24:be:43:80:98:ae:80:e7:81:6c:a8:96:66:
                    5b:76:31:37:9f:c1:b9:28:1d:a7:84:68:a5:26:16:
                    75:90:33:72:ab:4a:cf:5c:c1:5b:2a:62:a2:74:3d:
                    e5:35:c6:0f:f1:3c:07:13:95:11:b2:8c:70:24:95:
                    03:89:3a:2f:93:f2:29:d7:b4:87:37:fb:14:b2:fc:
                    5b:92:f0:a6:cd:50:c6:07:82:b7:45:8f:09:d6:3f:
                    6b:4e:02:a9:c1:82:47:01:28:b2:e5:fb:c1:ac:80:
                    ef:22:c1:e2:ed:0c:3b:6c:46:07:0b:ef:b6:ee:ec:
                    0f:c7:b3:8e:61:79:c3:a3:66:7c:11:a4:a8:d5:e4:
                    38:b1:f8:c0:53:01:8e:1c:94:bd:92:13:c8:1f:e0:
                    10:24:a5:66:9e:24:42:d4:43:c0:23:4c:a1:74:2b:
                    66:cd:8b:cf:07:4e:2b:45:ac:7e:7e:c7:03:a2:fe:
                    e9:53:e2:ad:bc:29:80:7e:b5:be:d8:0e:fe:89:33:
                    55:a4:3b:56:29:14:2b:18:bc:1d:4a:58:b2:c3:71:
                    cd:ca:04:5f:fd:d8:2e:17:72:51:1b:a0:cf:0f:16:
                    ff:5e:9a:68:f4:5e:70:57:11:2e:0a:8b:80:a8:18:
                    c8:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:6B:6F:2E:1B:71:E4:59:31:E5:33:DD:92:6A:A9:9F:55:E8:A1:B0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/b862d73e-f0dd-3c21-b14c-eac344a9c9e4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.crl

            X509v3 Authority Key Identifier:
                keyid:A7:E9:8D:68:1B:DE:B5:00:E7:0C:08:8C:F4:E1:1A:41:07:0B:63:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/dcf48eb5-c08a-4793-8dd8-a83f660c3f82.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.151.244.0/22
                  198.44.170.0/24
                  198.44.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         37:12:55:ce:22:ed:9d:af:1d:32:5f:72:46:de:8d:75:33:9b:
         b7:32:c4:82:91:0c:00:fc:24:f4:b5:e1:12:c4:e5:48:fc:fa:
         af:bd:32:b6:22:43:84:c0:f4:00:b8:e6:df:d6:95:d5:24:05:
         16:89:91:c4:7e:eb:66:27:72:a7:5a:7a:bf:69:91:d9:b3:3f:
         bd:b0:b1:f5:c6:a0:40:03:4c:35:d9:93:9c:aa:a4:59:07:e3:
         1d:07:d0:0c:d1:81:56:5f:88:79:62:01:39:73:9f:6c:81:70:
         35:ca:9f:44:65:90:4f:7a:72:cc:84:9d:8a:0c:e5:51:0d:33:
         58:7a:9e:a7:8d:9d:09:3b:d3:d5:ba:f7:80:8d:ee:44:f7:4c:
         23:a9:34:cc:da:33:5f:37:ff:be:0b:4a:38:16:c3:7d:a0:b2:
         1f:da:72:bf:9f:b3:29:d8:a6:77:9b:59:3b:67:9f:74:44:88:
         b5:06:43:e1:0c:fb:7f:82:d4:c0:c3:ba:fc:32:ad:85:80:24:
         38:af:ff:e7:1d:a3:4b:30:b4:1b:16:38:ce:a5:12:f1:0f:80:
         f1:9e:3b:18:4a:3b:9e:ee:96:1e:c6:ee:15:3d:1b:bc:b3:80:
         6b:fc:da:8c:59:52:ec:c2:76:b8:14:f6:61:a6:c8:8e:99:b5:
         8d:30:7c:b1
-----BEGIN CERTIFICATE-----
MIIGTzCCBTegAwIBAgIUAQ0Mn0MoWEp7sLVg+8jLUZa6UYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGNmNDhlYjUtYzA4YS00NzkzLThkZDgtYTgzZjY2MGMz
ZjgyMB4XDTI1MDcxMTEzMDEwNVoXDTI1MTAwOTEzMDEwNVowLzEtMCsGA1UEAxMk
OTg2MDUwZWEtMTFkYS00NTY3LWI5ZTktZmRjOWMzYTk5ZGMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TJF+GX92snQJN4/z5uE0SS+Q4CYroDngWyo
lmZbdjE3n8G5KB2nhGilJhZ1kDNyq0rPXMFbKmKidD3lNcYP8TwHE5URsoxwJJUD
iTovk/Ip17SHN/sUsvxbkvCmzVDGB4K3RY8J1j9rTgKpwYJHASiy5fvBrIDvIsHi
7Qw7bEYHC++27uwPx7OOYXnDo2Z8EaSo1eQ4sfjAUwGOHJS9khPIH+AQJKVmniRC
1EPAI0yhdCtmzYvPB04rRax+fscDov7pU+KtvCmAfrW+2A7+iTNVpDtWKRQrGLwd
Sliyw3HNygRf/dguF3JRG6DPDxb/Xppo9F5wVxEuCouAqBjInwIDAQABo4IDYTCC
A10wHQYDVR0OBBYEFDhrby4bceRZMeUz3ZJqqZ9V6KGwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0
OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNmNjYwYzNmODIvYjg2MmQ3M2UtZjBkZC0z
YzIxLWIxNGMtZWFjMzQ0YTljOWU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvZGNmNDhlYjUtYzA4YS00NzkzLThk
ZDgtYTgzZjY2MGMzZjgyL2RjZjQ4ZWI1LWMwOGEtNDc5My04ZGQ4LWE4M2Y2NjBj
M2Y4Mi5jcmwwHwYDVR0jBBgwFoAUp+mNaBvetQDnDAiM9OEaQQcLY14wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9kY2Y0OGViNS1jMDhhLTQ3OTMtOGRkOC1hODNm
NjYwYzNmODIuY2VyMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQCa5f0AwQA
xiyqAwQCxiywMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcC
ARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWww
DQYJKoZIhvcNAQELBQADggEBADcSVc4i7Z2vHTJfckbejXUzm7cyxIKRDAD8JPS1
4RLE5Uj8+q+9MrYiQ4TA9AC45t/WldUkBRaJkcR+62Yncqdaer9pkdmzP72wsfXG
oEADTDXZk5yqpFkH4x0H0AzRgVZfiHliATlzn2yBcDXKn0RlkE96csyEnYoM5VEN
M1h6nqeNnQk709W694CN7kT3TCOpNMzaM183/74LSjgWw32gsh/acr+fsynYpneb
WTtnn3REiLUGQ+EM+3+C1MDDuvwyrYWAJDiv/+cdo0swtBsWOM6lEvEPgPGeOxhK
O57ulh7G7hU9G7yzgGv82oxZUuzCdrgU9mGmyI6ZtY0wfLE=
-----END CERTIFICATE-----
Generated at Sun Jul 20 12:56:44 2025 by rpki-client