Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
File:                     9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa (raw, json)
Hash identifier:          6xi8ee+pQXDTXsMhISkZ3JhbYnZ8JMKojaA5AsJ6R34=
Subject key identifier:   8B:A2:4A:EA:22:C7:CF:43:6C:34:ED:7B:DD:9E:C7:81:D1:19:76:05
Certificate issuer:       /CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
Certificate serial:       010D0C9F4328584A90A0BBEC6B5E4875245B1388
Authority key identifier: DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     270147
IP address blocks:        192.64.205.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 24 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:bb:ec:6b:5e:48:75:24:5b:13:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a4e3e72e-32cb-4e83-8d44-862466bb0c8b
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=0b65262f-246a-49d0-a4d6-1856276b5e84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:73:49:6c:af:b5:46:6a:05:f3:9f:a9:ff:af:
                    e6:f8:38:49:a0:a5:d7:d8:ad:34:71:2a:dc:b2:7b:
                    db:79:4e:db:5c:73:95:84:24:52:28:4d:0a:b5:e5:
                    2e:e1:e7:4c:5f:3e:bb:29:6d:4d:59:c5:fb:c9:4b:
                    95:3f:de:0b:7c:6c:5a:b4:5d:0f:7e:67:80:7c:4d:
                    1c:82:ee:b8:8d:79:3a:19:cb:b1:0e:23:18:b1:df:
                    85:fe:39:2e:40:d1:37:fe:59:81:55:3c:08:63:8a:
                    df:70:b2:65:3c:36:a3:ae:a4:70:64:fd:5c:10:39:
                    73:76:3b:e4:67:e8:60:93:65:69:34:08:c0:66:8c:
                    a0:0e:ba:91:6f:63:4b:4d:0d:c4:77:da:f8:2a:3c:
                    f0:7f:ff:ba:5f:f1:9a:64:1c:4f:98:b2:21:3b:18:
                    0d:8a:c1:2d:5c:2f:e9:65:69:43:25:ca:3c:6c:bb:
                    da:e7:7a:89:51:b0:b0:01:e7:39:23:a5:bc:c1:b2:
                    ac:a3:69:28:5e:ac:57:cc:bb:31:cf:20:0b:57:e5:
                    70:46:90:5a:e5:3f:f4:c6:cd:54:06:ba:0f:6f:79:
                    32:15:52:05:fd:8b:23:09:54:bc:88:b5:6f:7b:b1:
                    9e:1a:17:2c:5e:38:41:6b:e0:5b:cb:e4:96:85:66:
                    f0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:A2:4A:EA:22:C7:CF:43:6C:34:ED:7B:DD:9E:C7:81:D1:19:76:05
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/9d24522e-48c5-31cc-93f4-aa8d5c2a4fbf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.crl

            X509v3 Authority Key Identifier:
                keyid:DF:A6:A8:E0:C3:72:E6:C7:0F:84:85:C6:B1:18:A0:CB:5C:3E:BD:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/a4e3e72e-32cb-4e83-8d44-862466bb0c8b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.64.205.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2a:6c:be:7b:c5:d1:11:0a:18:a0:c3:53:3e:9f:4e:54:e5:30:
         28:00:2b:24:f2:65:0e:02:4d:6e:f2:c3:c6:36:9c:d8:f7:6c:
         43:a5:d6:e4:c4:02:8d:2f:5c:8a:52:cf:a8:6d:dd:02:b6:cc:
         1d:f5:18:ec:90:03:ee:89:49:be:14:d9:68:d8:8b:2c:5d:a9:
         07:12:b7:91:a5:9b:ec:1f:84:3c:4d:0b:72:c5:c6:e4:f4:49:
         96:64:ce:58:5d:5c:a7:09:65:b7:39:26:92:6a:3f:9c:0c:8d:
         66:f2:c6:50:ac:af:9c:e6:74:45:89:99:f2:f2:3d:4e:fc:32:
         3f:f5:a4:dc:ba:08:21:25:30:84:9d:84:bd:f5:b8:b7:8c:59:
         cb:88:37:50:24:51:7f:a3:52:2a:d2:d6:20:3e:80:6b:cc:1b:
         42:61:a1:ef:68:27:9f:45:2e:f4:d9:d1:00:c5:95:e2:c4:7b:
         aa:63:5d:3e:70:8d:db:ee:6e:47:11:cb:99:21:60:eb:5f:58:
         46:fd:1e:0b:91:36:76:39:1d:e6:76:e7:bd:03:ee:83:18:b6:
         31:35:aa:ae:46:16:ba:3f:ca:88:e8:60:ac:a2:42:c0:ab:8b:
         4b:df:2c:28:cb:aa:47:db:19:04:f5:07:54:a3:0c:96:b1:2a:
         7a:a6:ae:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLvsa15IdSRbE4gwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTRlM2U3MmUtMzJjYi00ZTgzLThkNDQtODYyNDY2YmIw
YzhiMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
MGI2NTI2MmYtMjQ2YS00OWQwLWE0ZDYtMTg1NjI3NmI1ZTg0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXNJbK+1RmoF85+p/6/m+DhJoKXX2K00cSrc
snvbeU7bXHOVhCRSKE0KteUu4edMXz67KW1NWcX7yUuVP94LfGxatF0PfmeAfE0c
gu64jXk6GcuxDiMYsd+F/jkuQNE3/lmBVTwIY4rfcLJlPDajrqRwZP1cEDlzdjvk
Z+hgk2VpNAjAZoygDrqRb2NLTQ3Ed9r4Kjzwf/+6X/GaZBxPmLIhOxgNisEtXC/p
ZWlDJco8bLva53qJUbCwAec5I6W8wbKso2koXqxXzLsxzyALV+VwRpBa5T/0xs1U
BroPb3kyFVIF/YsjCVS8iLVve7GeGhcsXjhBa+Bby+SWhWbwYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIuiSuoix89DbDTte92ex4HRGXYFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUz
ZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0NjZiYjBjOGIvOWQyNDUyMmUtNDhjNS0z
MWNjLTkzZjQtYWE4ZDVjMmE0ZmJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYTRlM2U3MmUtMzJjYi00ZTgzLThk
NDQtODYyNDY2YmIwYzhiL2E0ZTNlNzJlLTMyY2ItNGU4My04ZDQ0LTg2MjQ2NmJi
MGM4Yi5jcmwwHwYDVR0jBBgwFoAU36ao4MNy5scPhIXGsRigy1w+vcMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9hNGUzZTcyZS0zMmNiLTRlODMtOGQ0NC04NjI0
NjZiYjBjOGIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwEDNMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACpsvnvF0REKGKDDUz6fTlTlMCgAKyTyZQ4CTW7yw8Y2nNj3bEOl1uTE
Ao0vXIpSz6ht3QK2zB31GOyQA+6JSb4U2WjYiyxdqQcSt5Glm+wfhDxNC3LFxuT0
SZZkzlhdXKcJZbc5JpJqP5wMjWbyxlCsr5zmdEWJmfLyPU78Mj/1pNy6CCElMISd
hL31uLeMWcuIN1AkUX+jUirS1iA+gGvMG0Jhoe9oJ59FLvTZ0QDFleLEe6pjXT5w
jdvubkcRy5khYOtfWEb9HguRNnY5HeZ2570D7oMYtjE1qq5GFro/yojoYKyiQsCr
i0vfLCjLqkfbGQT1B1SjDJaxKnqmrvk=
-----END CERTIFICATE-----
Generated at Wed Jul 23 06:23:18 2025 by rpki-client