Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa
File:                     5e386efa-6a0a-3a93-a17d-6222299df7c6.roa (raw, json)
Hash identifier:          L/bzIBWUnzVZLZjEEQQX68XBRT8W/FaudAzfGwJDkeA=
Subject key identifier:   23:19:3E:02:B0:3B:F4:78:90:D4:B4:FB:C1:DE:FC:1D:7A:20:CB:83
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F4328584A778087D4509E8F8EFA1C4880
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa
Signing time:             Thu 10 Jul 2025 01:00:51 +0000
ROA not before:           Thu 10 Jul 2025 01:00:51 +0000
ROA not after:            Wed 08 Oct 2025 01:00:51 +0000
asID:                     852
IP address blocks:        207.194.176.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 27 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:77:80:87:d4:50:9e:8f:8e:fa:1c:48:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Jul 10 01:00:51 2025 GMT
            Not After : Oct  8 01:00:51 2025 GMT
        Subject: CN=d3fd3010-ee42-41b0-8258-e3613390255a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:6a:51:fd:cd:e4:ba:a7:97:6b:37:8c:b4:59:
                    49:af:00:8e:11:4a:c4:b5:47:f8:f5:21:f3:10:92:
                    b2:64:8e:3d:64:da:97:c1:43:63:3f:fe:0a:18:79:
                    3d:fd:b9:b0:b9:96:f5:d6:2c:ba:97:5f:0f:bd:2d:
                    20:57:25:90:a4:76:c8:24:1a:5f:b3:48:7a:09:5b:
                    d4:57:87:52:cd:80:73:4a:d4:78:e0:22:7d:79:70:
                    b4:8b:73:9e:7f:38:33:ec:48:9c:c9:67:11:93:4f:
                    75:5c:b9:b2:9f:83:cb:ed:6b:09:e3:e2:15:cf:78:
                    8f:74:bb:95:eb:e2:6f:28:d4:30:bd:ea:f4:c4:49:
                    19:c6:6e:be:34:3f:b5:fa:6c:09:cb:5b:83:83:69:
                    ae:d3:e2:73:93:18:57:34:65:34:b0:0a:a8:50:fe:
                    cc:e7:80:b5:2a:b5:c6:94:5e:eb:e5:2d:f9:be:d2:
                    39:3b:b7:d7:52:c4:44:7d:44:9f:55:78:02:ad:49:
                    ac:77:a7:27:80:4c:8c:28:70:9d:90:9c:ba:1b:2c:
                    07:da:84:1c:fc:43:8b:16:17:ba:52:a2:85:88:6b:
                    85:75:d1:07:d7:22:f5:d3:6d:cd:0d:7d:e9:7c:86:
                    4b:a3:1e:8c:26:0c:b6:26:c1:96:c6:aa:86:5e:e3:
                    65:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:19:3E:02:B0:3B:F4:78:90:D4:B4:FB:C1:DE:FC:1D:7A:20:CB:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/5e386efa-6a0a-3a93-a17d-6222299df7c6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.194.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         cf:4f:ec:e4:ed:a8:5c:c7:50:29:d5:b6:d4:f4:0a:04:b8:a1:
         6e:7b:c1:92:36:62:ec:f0:8e:a3:f3:30:68:3d:53:18:59:3e:
         5d:48:0f:1a:b2:2d:a3:5f:39:e3:d8:52:89:f3:84:e3:6c:d0:
         10:2f:12:14:1a:dd:92:35:a5:a4:b4:c0:fd:60:b4:34:b8:91:
         bb:4d:9d:e9:49:80:ea:80:86:ca:39:73:bb:6a:e9:f9:76:66:
         3b:68:1a:cf:c2:8d:75:97:56:42:b1:5d:d3:c4:c0:6f:29:31:
         bd:87:55:93:a8:48:72:7b:b5:c5:8c:b1:db:53:a0:85:c7:51:
         85:5e:67:5c:bc:a0:39:3a:e7:27:f4:a6:d7:d2:fa:08:b2:38:
         7c:e3:ed:0f:45:a5:bd:1c:3e:53:ea:b6:ca:9c:87:f0:9b:05:
         cf:11:f3:f9:5a:9b:0c:90:1e:a1:8d:dd:e6:86:2c:86:01:a0:
         1d:28:11:3e:3d:65:a6:a2:33:de:cc:aa:c1:b9:53:7b:34:11:
         8f:b8:b1:54:31:4b:a7:4c:f1:f2:ec:ee:90:65:31:67:f9:15:
         37:e5:a7:86:4c:76:e2:02:90:06:ad:5b:0c:2e:dc:de:61:9a:
         a4:74:ac:4f:2b:ce:f0:67:d2:6e:0f:cd:44:6e:1d:8f:6c:a5:
         ca:bb:20:4b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp3gIfUUJ6PjvocSIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDcxMDAxMDA1MVoXDTI1MTAwODAxMDA1MVowLzEtMCsGA1UEAxMk
ZDNmZDMwMTAtZWU0Mi00MWIwLTgyNTgtZTM2MTMzOTAyNTVhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhmpR/c3kuqeXazeMtFlJrwCOEUrEtUf49SHz
EJKyZI49ZNqXwUNjP/4KGHk9/bmwuZb11iy6l18PvS0gVyWQpHbIJBpfs0h6CVvU
V4dSzYBzStR44CJ9eXC0i3Oefzgz7EicyWcRk091XLmyn4PL7WsJ4+IVz3iPdLuV
6+JvKNQwver0xEkZxm6+ND+1+mwJy1uDg2mu0+JzkxhXNGU0sAqoUP7M54C1KrXG
lF7r5S35vtI5O7fXUsREfUSfVXgCrUmsd6cngEyMKHCdkJy6GywH2oQc/EOLFhe6
UqKFiGuFddEH1yL1023NDX3pfIZLox6MJgy2JsGWxqqGXuNl6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCMZPgKwO/R4kNS0+8He/B16IMuDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvNWUzODZlZmEtNmEwYS0z
YTkzLWExN2QtNjIyMjI5OWRmN2M2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCz8KwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM9P7OTtqFzHUCnVttT0CgS4oW57wZI2YuzwjqPzMGg9UxhZPl1IDxqy
LaNfOePYUonzhONs0BAvEhQa3ZI1paS0wP1gtDS4kbtNnelJgOqAhso5c7tq6fl2
ZjtoGs/CjXWXVkKxXdPEwG8pMb2HVZOoSHJ7tcWMsdtToIXHUYVeZ1y8oDk65yf0
ptfS+giyOHzj7Q9Fpb0cPlPqtsqch/CbBc8R8/lamwyQHqGN3eaGLIYBoB0oET49
ZaaiM97MqsG5U3s0EY+4sVQxS6dM8fLs7pBlMWf5FTflp4ZMduICkAatWwwu3N5h
mqR0rE8rzvBn0m4PzURuHY9spcq7IEs=
-----END CERTIFICATE-----
Generated at Fri Jul 25 19:34:04 2025 by rpki-client