Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa
File:                     ab563bca-9d33-301b-a905-f1dafd60ddba.roa (raw, json)
Hash identifier:          /x7VwZvbDUaewip7Ujrg6UhvbWxg/RN55IKPa7jWldU=
Subject key identifier:   42:E0:32:23:5B:B8:92:5A:6B:8F:DA:2E:54:75:DD:81:D3:26:BA:65
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584AAC61F99D8AFA92804F8AC310
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa
Signing time:             Mon 28 Jul 2025 23:37:12 +0000
ROA not before:           Mon 28 Jul 2025 23:37:12 +0000
ROA not after:            Sun 26 Oct 2025 23:37:12 +0000
asID:                     1426
IP address blocks:        174.140.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 01 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ac:61:f9:9d:8a:fa:92:80:4f:8a:c3:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jul 28 23:37:12 2025 GMT
            Not After : Oct 26 23:37:12 2025 GMT
        Subject: CN=1b624943-3223-4cc3-98e2-058f61ce2d23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:a7:5b:84:57:73:c8:f8:cb:a3:5f:a2:03:75:
                    90:37:40:54:75:1f:71:3b:25:08:44:84:3f:3d:cb:
                    cd:79:fa:1b:f0:a2:78:b4:bc:6c:52:00:e6:63:89:
                    df:b1:ec:71:b5:e8:51:83:d9:18:66:47:aa:36:d4:
                    b9:02:7d:36:fc:88:71:4a:65:e9:83:a6:c7:1c:d0:
                    ed:65:b9:c8:08:a8:37:b4:cb:5e:86:a1:2c:77:4e:
                    ff:71:98:47:b4:9d:d0:90:f8:35:e6:38:9d:b2:d8:
                    17:c8:08:dd:38:8f:f3:21:32:f8:f5:4a:b9:9d:5f:
                    b6:5b:51:aa:7e:c6:2d:04:8e:d7:6a:12:74:4c:24:
                    26:ae:97:ec:5f:e6:2e:4e:21:02:ce:64:11:90:38:
                    a4:1f:a4:50:e9:32:57:7c:fe:b4:17:39:bb:be:0c:
                    58:99:02:e6:8a:0d:ae:8f:11:f5:9a:20:7f:27:c9:
                    45:fb:3d:b7:54:8c:d4:66:d3:d4:d1:60:ce:9a:e6:
                    92:af:49:f0:40:f9:c6:29:a6:de:9f:fa:66:fb:f9:
                    bd:ad:68:1d:d5:34:fe:20:23:bc:84:15:6a:cd:48:
                    ca:fe:53:f0:0a:80:b3:0e:76:ce:00:0f:30:73:96:
                    a0:9d:b8:32:f5:73:a0:18:68:d8:5c:58:30:20:15:
                    45:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:E0:32:23:5B:B8:92:5A:6B:8F:DA:2E:54:75:DD:81:D3:26:BA:65
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/ab563bca-9d33-301b-a905-f1dafd60ddba.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  174.140.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         d2:00:4d:df:1c:b8:98:84:b2:62:37:8c:d4:64:9c:5f:27:de:
         99:8f:df:6c:85:15:cb:89:7b:d7:fe:43:e8:49:7c:58:4d:e9:
         86:72:d1:dc:ab:f8:cd:70:0f:69:9b:c8:35:40:f2:09:83:23:
         22:bf:ef:7a:d7:ec:a3:2b:18:0c:8d:f4:e3:68:6e:07:0c:37:
         df:89:0d:b7:3e:c1:78:77:66:00:67:33:d6:1c:3c:74:f6:9d:
         8a:c6:ad:d9:fa:84:b9:f9:53:55:3b:a7:b5:04:34:00:9c:b2:
         dc:dd:3f:a1:39:b3:84:71:fb:24:95:13:9a:8d:41:15:1d:f2:
         3c:8d:f2:30:14:24:cd:92:04:eb:d4:99:e0:60:89:7b:d9:6c:
         cf:cd:5b:d0:41:e4:07:8d:f2:5a:b2:f0:ed:4b:dc:d9:62:0f:
         1a:26:8c:39:9e:9c:7e:54:f6:a7:3a:7b:8a:5d:08:14:67:16:
         39:e5:0a:a6:2d:9e:00:1e:ba:99:c9:c9:ed:b1:36:ee:54:a5:
         f7:a9:2a:8e:b3:11:47:b5:b3:14:16:41:5f:02:09:c2:33:ab:
         80:6c:0c:bd:85:49:f3:3c:07:03:38:ed:26:f1:b9:6e:74:46:
         2b:33:f5:56:3d:0b:d9:75:e8:78:14:29:01:a9:cc:60:96:10:
         20:31:df:e5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqsYfmdivqSgE+KwxAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDcyODIzMzcxMloXDTI1MTAyNjIzMzcxMlowLzEtMCsGA1UEAxMk
MWI2MjQ5NDMtMzIyMy00Y2MzLTk4ZTItMDU4ZjYxY2UyZDIzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxadbhFdzyPjLo1+iA3WQN0BUdR9xOyUIRIQ/
PcvNefob8KJ4tLxsUgDmY4nfsexxtehRg9kYZkeqNtS5An02/IhxSmXpg6bHHNDt
ZbnICKg3tMtehqEsd07/cZhHtJ3QkPg15jidstgXyAjdOI/zITL49Uq5nV+2W1Gq
fsYtBI7XahJ0TCQmrpfsX+YuTiECzmQRkDikH6RQ6TJXfP60Fzm7vgxYmQLmig2u
jxH1miB/J8lF+z23VIzUZtPU0WDOmuaSr0nwQPnGKaben/pm+/m9rWgd1TT+ICO8
hBVqzUjK/lPwCoCzDnbOAA8wc5agnbgy9XOgGGjYXFgwIBVFDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFELgMiNbuJJaa4/aLlR13YHTJrplMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvYWI1NjNiY2EtOWQzMy0z
MDFiLWE5MDUtZjFkYWZkNjBkZGJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAroznMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANIATd8cuJiEsmI3jNRknF8n3pmP32yFFcuJe9f+Q+hJfFhN6YZy0dyr
+M1wD2mbyDVA8gmDIyK/73rX7KMrGAyN9ONobgcMN9+JDbc+wXh3ZgBnM9YcPHT2
nYrGrdn6hLn5U1U7p7UENACcstzdP6E5s4Rx+ySVE5qNQRUd8jyN8jAUJM2SBOvU
meBgiXvZbM/NW9BB5AeN8lqy8O1L3NliDxomjDmenH5U9qc6e4pdCBRnFjnlCqYt
ngAeupnJye2xNu5UpfepKo6zEUe1sxQWQV8CCcIzq4BsDL2FSfM8BwM47SbxuW50
Risz9VY9C9l16HgUKQGpzGCWECAx3+U=
-----END CERTIFICATE-----
Generated at Thu Jul 31 13:22:30 2025 by rpki-client