Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3f3f378a-fd3e-3a3e-be3b-f4e38adb09e2.roa
File:                     3f3f378a-fd3e-3a3e-be3b-f4e38adb09e2.roa (raw, json)
Hash identifier:          EdPgYVl0iES/V+RdAyRAOmAduZadj3XwrgtzTl1+44c=
Subject key identifier:   A3:78:B0:F2:D2:E2:8E:B4:27:90:A1:EA:49:1E:0E:C9:31:67:02:F4
Certificate issuer:       /CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
Certificate serial:       010D0C9F4328584A936B5BDD95EED228F1C2A2A0
Authority key identifier: F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3f3f378a-fd3e-3a3e-be3b-f4e38adb09e2.roa
Signing time:             Sun 20 Jul 2025 01:00:50 +0000
ROA not before:           Sun 20 Jul 2025 01:00:50 +0000
ROA not after:            Sat 18 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        199.200.96.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 23 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:93:6b:5b:dd:95:ee:d2:28:f1:c2:a2:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7c5f272-a2ae-458a-a75f-3cf41f19b603
        Validity
            Not Before: Jul 20 01:00:50 2025 GMT
            Not After : Oct 18 01:00:50 2025 GMT
        Subject: CN=7e7286e2-a610-4e48-b36c-e393b18f7b8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0f:46:0e:d6:a2:21:ea:22:e5:48:91:1f:34:
                    f7:71:59:dd:7a:58:12:48:17:f8:a9:4d:e9:7f:f7:
                    9f:ce:30:a4:86:75:7c:a1:25:ea:f3:ca:a4:8d:d8:
                    60:71:ab:cc:b4:6b:ee:d6:fa:d1:ab:54:b2:22:fe:
                    8c:81:00:0d:06:c3:7a:46:6b:f6:d9:0e:2d:3c:8a:
                    66:96:17:af:d3:f0:b8:ea:93:84:17:76:44:82:7a:
                    74:26:41:0a:87:61:ce:26:1b:57:bd:59:ee:af:35:
                    27:37:95:54:94:45:05:27:33:82:97:ae:32:b8:3f:
                    68:4c:4b:9a:b1:68:7d:fd:98:71:72:f0:a5:13:1e:
                    83:f5:35:23:68:1e:fe:df:4f:f2:04:de:07:41:2f:
                    a4:dd:10:57:b8:40:5b:2a:8a:5a:21:32:83:52:e7:
                    dd:cf:f3:fa:56:af:43:83:5f:f5:f0:71:17:7a:a4:
                    99:de:7d:fb:54:45:48:4b:dd:59:17:5e:12:1d:0e:
                    90:0d:85:0a:82:4c:d5:51:56:44:7a:61:61:c9:e1:
                    3b:82:db:2e:9c:1c:2d:cb:ae:86:f3:88:ba:0c:5f:
                    d3:42:11:0d:53:b0:8a:1e:c8:49:17:62:aa:7c:a4:
                    2f:82:2c:6e:10:fe:27:e6:03:1d:92:8b:41:33:fc:
                    b9:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:78:B0:F2:D2:E2:8E:B4:27:90:A1:EA:49:1E:0E:C9:31:67:02:F4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/3f3f378a-fd3e-3a3e-be3b-f4e38adb09e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603/d7c5f272-a2ae-458a-a75f-3cf41f19b603.crl

            X509v3 Authority Key Identifier:
                keyid:F4:5C:47:B2:3D:90:2A:CD:3F:20:AE:E4:16:DD:FD:80:0F:CC:F2:9F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d7c5f272-a2ae-458a-a75f-3cf41f19b603.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.200.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:cf:7c:60:33:33:3d:8a:eb:1e:54:de:8a:16:3a:47:00:8c:
         a3:d9:96:08:23:4b:68:19:99:97:8c:35:90:17:6b:2a:b3:00:
         63:d7:ae:3c:9e:6b:fa:08:3d:85:57:5f:6e:c9:5c:ec:ba:e1:
         1a:f0:d5:cd:92:7f:1f:f4:51:a5:1b:88:a3:bf:fe:c9:f2:2d:
         43:f4:45:ed:8c:19:f3:44:08:9a:4e:22:cf:9b:7a:c3:07:be:
         cb:5d:28:3c:7a:53:c0:b8:15:e3:73:9e:81:f0:7b:6c:d0:8e:
         27:4c:b7:0a:2a:c7:bf:7e:bb:14:49:8d:92:cd:a7:01:c3:85:
         15:67:68:03:07:4e:ac:fe:7a:e5:76:dc:43:bf:ae:38:4b:60:
         b1:3c:8d:95:c7:f4:60:e8:58:77:96:8f:aa:ee:15:d6:fb:4d:
         23:e0:dc:aa:ed:dc:7b:7d:c0:73:3e:b4:ae:64:f8:a2:4e:84:
         5d:ad:1b:fa:fa:c7:e2:ce:99:69:31:d0:5b:96:03:40:d0:1f:
         36:d5:89:53:d4:c9:43:81:fd:3a:4b:86:ec:24:2e:95:c2:ec:
         9f:0b:1f:c6:0f:21:b5:65:82:16:ac:7f:96:ba:ef:1b:aa:c1:
         1e:96:01:f3:e2:23:2a:89:dc:9f:31:ba:84:23:7e:4c:9e:ae:
         45:75:fa:99
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqTa1vdle7SKPHCoqAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdjNWYyNzItYTJhZS00NThhLWE3NWYtM2NmNDFmMTli
NjAzMB4XDTI1MDcyMDAxMDA1MFoXDTI1MTAxODAxMDA1MFowLzEtMCsGA1UEAxMk
N2U3Mjg2ZTItYTYxMC00ZTQ4LWIzNmMtZTM5M2IxOGY3YjhmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhw9GDtaiIeoi5UiRHzT3cVndelgSSBf4qU3p
f/efzjCkhnV8oSXq88qkjdhgcavMtGvu1vrRq1SyIv6MgQANBsN6Rmv22Q4tPIpm
lhev0/C46pOEF3ZEgnp0JkEKh2HOJhtXvVnurzUnN5VUlEUFJzOCl64yuD9oTEua
sWh9/ZhxcvClEx6D9TUjaB7+30/yBN4HQS+k3RBXuEBbKopaITKDUufdz/P6Vq9D
g1/18HEXeqSZ3n37VEVIS91ZF14SHQ6QDYUKgkzVUVZEemFhyeE7gtsunBwty66G
84i6DF/TQhENU7CKHshJF2KqfKQvgixuEP4n5gMdkotBM/y5HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKN4sPLS4o60J5Ch6kkeDskxZwL0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1
ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0MWYxOWI2MDMvM2YzZjM3OGEtZmQzZS0z
YTNlLWJlM2ItZjRlMzhhZGIwOWUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDdjNWYyNzItYTJhZS00NThhLWE3
NWYtM2NmNDFmMTliNjAzL2Q3YzVmMjcyLWEyYWUtNDU4YS1hNzVmLTNjZjQxZjE5
YjYwMy5jcmwwHwYDVR0jBBgwFoAU9FxHsj2QKs0/IK7kFt39gA/M8p8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kN2M1ZjI3Mi1hMmFlLTQ1OGEtYTc1Zi0zY2Y0
MWYxOWI2MDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCx8hgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3PfGAzMz2K6x5U3ooWOkcAjKPZlggjS2gZmZeMNZAXayqzAGPXrjye
a/oIPYVXX27JXOy64Rrw1c2Sfx/0UaUbiKO//snyLUP0Re2MGfNECJpOIs+besMH
vstdKDx6U8C4FeNznoHwe2zQjidMtwoqx79+uxRJjZLNpwHDhRVnaAMHTqz+euV2
3EO/rjhLYLE8jZXH9GDoWHeWj6ruFdb7TSPg3Krt3Ht9wHM+tK5k+KJOhF2tG/r6
x+LOmWkx0FuWA0DQHzbViVPUyUOB/TpLhuwkLpXC7J8LH8YPIbVlghasf5a67xuq
wR6WAfPiIyqJ3J8xuoQjfkyerkV1+pk=
-----END CERTIFICATE-----
Generated at Tue Jul 22 04:14:48 2025 by rpki-client