Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
File:                     892fdf53-8d98-3430-af33-08660cd96851.roa (raw, json)
Hash identifier:          rtMVZiCmrZSMlAyYZeJ/DMWMnXoD8DJ86hxhmpxKq5w=
Subject key identifier:   0C:A5:F3:5F:A7:4A:6A:A0:C1:39:68:DE:76:AF:64:32:23:09:81:BB
Certificate issuer:       /CN=aae4f0de-2296-435c-b411-b16981804498
Certificate serial:       010D0C9F4328584A936B5DCFD0338EA8E8CA4700
Authority key identifier: 1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     215605
IP address blocks:        199.58.91.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5d:cf:d0:33:8e:a8:e8:ca:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=aae4f0de-2296-435c-b411-b16981804498
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=10b9983c-5bbe-44be-8eea-26368b313711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:42:43:1d:ea:82:0b:82:51:3a:4b:61:51:6e:
                    a3:5d:36:ac:18:b2:10:1c:d6:f9:c8:9e:7a:cc:70:
                    d8:67:e6:f6:ef:30:72:97:23:d8:fe:f4:35:71:b8:
                    44:f0:06:3b:39:55:3a:7c:9e:02:d6:cf:5d:8e:47:
                    1b:81:3f:e7:8c:d2:67:c1:d9:59:98:fa:7c:cd:67:
                    5d:4b:28:9f:b7:60:13:ed:8e:35:83:74:03:42:43:
                    21:ab:e9:83:25:80:78:2b:8f:3b:f5:13:cf:c9:a2:
                    3d:b9:d3:00:b1:8d:f7:5c:7d:ab:29:af:9a:a3:59:
                    f8:56:05:fe:37:db:40:c9:f4:80:e0:31:30:c1:7f:
                    4f:97:a9:ab:a2:0e:63:8c:46:3e:90:7f:07:c3:27:
                    5d:78:60:37:0f:9f:64:7e:85:72:0e:f7:fc:8b:94:
                    02:08:4a:62:63:7a:7c:ea:fd:fb:a2:fd:64:cc:f9:
                    c3:cb:4f:39:fd:3b:31:7e:3e:db:3e:c9:4e:74:65:
                    05:a5:3a:2a:56:7f:c2:f7:8f:bf:e5:88:eb:bc:9a:
                    65:d1:d7:98:a9:bd:0f:34:a9:b2:85:4a:0b:2f:13:
                    a3:a4:af:f6:b0:8d:48:40:f3:ee:9b:4e:bc:28:66:
                    f1:fd:04:b7:db:0d:25:87:4a:b1:1e:ee:5c:2d:21:
                    85:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:A5:F3:5F:A7:4A:6A:A0:C1:39:68:DE:76:AF:64:32:23:09:81:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/892fdf53-8d98-3430-af33-08660cd96851.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498/aae4f0de-2296-435c-b411-b16981804498.crl

            X509v3 Authority Key Identifier:
                keyid:1F:D3:27:64:4D:58:B9:AF:C5:7F:44:82:4D:FB:8F:B7:1E:18:CF:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/aae4f0de-2296-435c-b411-b16981804498.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.91.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:ea:67:22:57:3d:76:c1:ba:85:af:b3:f1:e7:b8:8c:60:c7:
         d4:dd:6e:71:10:62:22:d1:e2:1d:2d:a9:20:99:8d:13:f8:2f:
         a7:87:00:a0:49:2d:5b:b8:84:6c:34:34:1a:0a:3f:6b:45:de:
         63:11:67:f2:e1:60:7c:c2:5b:05:9a:93:fd:f2:bf:33:52:74:
         31:7c:1b:69:fc:3b:07:f1:15:58:fe:91:8f:b6:2e:68:25:93:
         53:2f:f7:94:76:5f:b3:a5:ad:4e:a2:81:8c:91:57:44:ba:e3:
         2e:98:dc:e3:ec:a3:c2:6c:17:5e:55:13:f0:c0:3b:32:ea:4b:
         2d:f4:93:eb:19:8b:e8:be:e6:6a:53:05:66:56:78:b0:fc:df:
         ce:e6:f1:1f:4d:70:44:1a:14:a5:3e:83:3f:c1:e2:59:81:0f:
         88:10:a0:8d:cd:33:e7:61:bb:f3:c7:ce:df:da:52:68:c7:f7:
         7e:35:ea:7b:f0:d2:66:d3:dc:f7:aa:66:e4:42:30:82:86:3f:
         62:a8:0f:b0:d0:c3:79:4d:55:33:79:cc:07:19:4a:1a:49:41:
         2a:09:6c:8f:2e:7f:83:a7:14:42:7a:52:f1:c1:f8:0b:7a:bd:
         2c:f5:e6:65:8b:2b:fd:93:e9:ed:87:7d:b5:be:ca:cb:a3:fc:
         d1:0d:af:7c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa13P0DOOqOjKRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWFlNGYwZGUtMjI5Ni00MzVjLWI0MTEtYjE2OTgxODA0
NDk4MB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
MTBiOTk4M2MtNWJiZS00NGJlLThlZWEtMjYzNjhiMzEzNzExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA00JDHeqCC4JROkthUW6jXTasGLIQHNb5yJ56
zHDYZ+b27zBylyPY/vQ1cbhE8AY7OVU6fJ4C1s9djkcbgT/njNJnwdlZmPp8zWdd
Syift2AT7Y41g3QDQkMhq+mDJYB4K4879RPPyaI9udMAsY33XH2rKa+ao1n4VgX+
N9tAyfSA4DEwwX9Pl6mrog5jjEY+kH8HwyddeGA3D59kfoVyDvf8i5QCCEpiY3p8
6v37ov1kzPnDy085/Tsxfj7bPslOdGUFpToqVn/C94+/5YjrvJpl0deYqb0PNKmy
hUoLLxOjpK/2sI1IQPPum068KGbx/QS32w0lh0qxHu5cLSGF5wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAyl81+nSmqgwTlo3navZDIjCYG7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0
ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5ODE4MDQ0OTgvODkyZmRmNTMtOGQ5OC0z
NDMwLWFmMzMtMDg2NjBjZDk2ODUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvYWFlNGYwZGUtMjI5Ni00MzVjLWI0
MTEtYjE2OTgxODA0NDk4L2FhZTRmMGRlLTIyOTYtNDM1Yy1iNDExLWIxNjk4MTgw
NDQ5OC5jcmwwHwYDVR0jBBgwFoAUH9MnZE1Yua/Ff0SCTfuPtx4Yz20wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9hYWU0ZjBkZS0yMjk2LTQzNWMtYjQxMS1iMTY5
ODE4MDQ0OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxzpbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFfqZyJXPXbBuoWvs/HnuIxgx9TdbnEQYiLR4h0tqSCZjRP4L6eHAKBJ
LVu4hGw0NBoKP2tF3mMRZ/LhYHzCWwWak/3yvzNSdDF8G2n8OwfxFVj+kY+2Lmgl
k1Mv95R2X7OlrU6igYyRV0S64y6Y3OPso8JsF15VE/DAOzLqSy30k+sZi+i+5mpT
BWZWeLD8387m8R9NcEQaFKU+gz/B4lmBD4gQoI3NM+dhu/PHzt/aUmjH93416nvw
0mbT3PeqZuRCMIKGP2KoD7DQw3lNVTN5zAcZShpJQSoJbI8uf4OnFEJ6UvHB+At6
vSz15mWLK/2T6e2HfbW+ysuj/NENr3w=
-----END CERTIFICATE-----
Generated at Wed Jul 23 02:17:44 2025 by rpki-client