Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa
File:                     78fd81d3-f270-39b2-af62-f77ed2e55a28.roa (raw, json)
Hash identifier:          WAJH8AlCAhH2JROiAyAuFrj+jJ4GjVUB9jLTVpOqC3o=
Subject key identifier:   B1:D3:09:73:D7:04:7F:BA:AE:9A:47:70:C7:44:47:C3:B3:3F:A5:A5
Certificate issuer:       /CN=b51cbf27-0dce-4657-a317-7c7d86245986
Certificate serial:       010D0C9F4328584A8410F7837639386348BB8A70
Authority key identifier: 69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     10737
IP address blocks:        199.255.215.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 25 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:10:f7:83:76:39:38:63:48:bb:8a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b51cbf27-0dce-4657-a317-7c7d86245986
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=b1455354-1393-4e71-84aa-5af8028ca6b3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:35:6f:d6:37:56:73:b7:e8:15:6b:87:6b:ae:
                    e6:23:ab:ae:10:0b:7d:96:6c:c8:a1:51:ca:2b:0e:
                    7b:38:03:52:62:f5:75:31:6f:17:af:cb:8b:d0:09:
                    51:38:15:b1:a7:d6:34:11:d3:1b:f3:7c:94:aa:6a:
                    a0:2f:ab:3b:ef:d6:03:5b:ec:c2:fc:31:24:ad:2c:
                    76:11:a4:fc:08:e6:43:7a:14:82:10:3b:64:e2:4f:
                    cf:f8:45:6b:41:91:55:6e:09:a2:f7:24:f4:38:8a:
                    40:48:51:ff:76:15:46:2f:c8:b9:51:16:6e:df:cc:
                    ff:71:5c:27:5c:3e:ce:52:b5:d8:ed:7f:30:93:95:
                    e0:46:2b:de:33:b5:40:05:b5:04:ab:00:bb:6d:3e:
                    b0:76:e2:58:a1:2d:0a:89:ff:16:36:6f:90:8f:41:
                    6d:8d:b2:24:72:c4:57:bb:7a:1d:80:73:87:33:99:
                    95:05:e3:26:53:a6:5e:d3:5c:b5:40:87:bd:27:c3:
                    30:bf:c7:48:64:72:db:f6:5b:ec:30:e6:4a:e6:9d:
                    00:72:b3:9a:c4:fa:4d:0a:d7:15:a9:b5:21:8b:cb:
                    6f:c7:b0:68:27:68:25:27:5c:4d:04:0e:d6:b9:5e:
                    90:db:38:7a:fa:66:be:ca:f6:41:08:26:ae:37:42:
                    c6:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:D3:09:73:D7:04:7F:BA:AE:9A:47:70:C7:44:47:C3:B3:3F:A5:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/78fd81d3-f270-39b2-af62-f77ed2e55a28.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986/b51cbf27-0dce-4657-a317-7c7d86245986.crl

            X509v3 Authority Key Identifier:
                keyid:69:17:38:5C:FD:79:54:F4:11:5A:3D:2A:53:A8:B4:66:96:A5:34:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/b51cbf27-0dce-4657-a317-7c7d86245986.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.255.215.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3d:2e:c5:6e:83:d2:5a:3c:56:c4:c0:25:dc:b6:a4:32:b8:ba:
         8a:c0:98:77:49:bb:8e:9c:33:95:91:85:b0:50:bd:62:42:6b:
         da:22:d0:78:5b:3c:51:71:18:91:a3:f3:06:76:02:a2:4a:26:
         05:22:23:3d:74:89:fa:62:1c:7e:3f:7c:ab:d0:08:fc:47:05:
         cc:13:fa:38:93:26:18:dc:97:78:73:12:17:18:f4:29:ad:76:
         32:f3:d7:bd:cd:71:2a:d2:68:07:1b:76:68:85:20:50:2a:44:
         bb:3b:55:05:da:bb:cb:4d:50:6a:b0:8b:47:43:46:ca:e2:eb:
         53:40:a8:46:14:60:1b:67:fb:33:04:62:7b:5d:4a:f1:0b:25:
         7e:01:00:d5:1a:37:0f:8d:46:8c:1d:4c:1f:9a:be:75:6b:b7:
         cb:22:6a:30:40:01:d1:90:5f:69:a1:f6:1f:6e:61:3c:2f:ae:
         44:02:1e:3a:60:b4:74:35:2d:75:55:52:f5:c2:59:35:96:03:
         e4:b1:cc:be:8b:44:3b:f3:b9:19:b2:c6:a8:8a:d9:95:1e:ef:
         ed:c2:e3:44:2e:04:ea:0c:99:d7:36:60:01:44:b4:4c:03:61:
         2f:52:16:30:99:aa:84:23:06:64:31:e1:85:d4:ae:ba:82:a5:
         52:2e:ea:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEPeDdjk4Y0i7inAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjUxY2JmMjctMGRjZS00NjU3LWEzMTctN2M3ZDg2MjQ1
OTg2MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YjE0NTUzNTQtMTM5My00ZTcxLTg0YWEtNWFmODAyOGNhNmIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzVv1jdWc7foFWuHa67mI6uuEAt9lmzIoVHK
Kw57OANSYvV1MW8Xr8uL0AlROBWxp9Y0EdMb83yUqmqgL6s779YDW+zC/DEkrSx2
EaT8COZDehSCEDtk4k/P+EVrQZFVbgmi9yT0OIpASFH/dhVGL8i5URZu38z/cVwn
XD7OUrXY7X8wk5XgRiveM7VABbUEqwC7bT6wduJYoS0Kif8WNm+Qj0FtjbIkcsRX
u3odgHOHM5mVBeMmU6Ze01y1QIe9J8Mwv8dIZHLb9lvsMOZK5p0AcrOaxPpNCtcV
qbUhi8tvx7BoJ2glJ1xNBA7WuV6Q2zh6+ma+yvZBCCauN0LGYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLHTCXPXBH+6rppHcMdER8OzP6WlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFj
YmYyNy0wZGNlLTQ2NTctYTMxNy03YzdkODYyNDU5ODYvNzhmZDgxZDMtZjI3MC0z
OWIyLWFmNjItZjc3ZWQyZTU1YTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvYjUxY2JmMjctMGRjZS00NjU3LWEz
MTctN2M3ZDg2MjQ1OTg2L2I1MWNiZjI3LTBkY2UtNDY1Ny1hMzE3LTdjN2Q4NjI0
NTk4Ni5jcmwwHwYDVR0jBBgwFoAUaRc4XP15VPQRWj0qU6i0ZpalNMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9iNTFjYmYyNy0wZGNlLTQ2NTctYTMxNy03Yzdk
ODYyNDU5ODYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx//XMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAD0uxW6D0lo8VsTAJdy2pDK4uorAmHdJu46cM5WRhbBQvWJCa9oi0Hhb
PFFxGJGj8wZ2AqJKJgUiIz10ifpiHH4/fKvQCPxHBcwT+jiTJhjcl3hzEhcY9Cmt
djLz173NcSrSaAcbdmiFIFAqRLs7VQXau8tNUGqwi0dDRsri61NAqEYUYBtn+zME
YntdSvELJX4BANUaNw+NRowdTB+avnVrt8siajBAAdGQX2mh9h9uYTwvrkQCHjpg
tHQ1LXVVUvXCWTWWA+SxzL6LRDvzuRmyxqiK2ZUe7+3C40QuBOoMmdc2YAFEtEwD
YS9SFjCZqoQjBmQx4YXUrrqCpVIu6uE=
-----END CERTIFICATE-----
Generated at Wed Jul 23 11:38:46 2025 by rpki-client