Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa
File:                     4192f1c2-749b-3db3-91c0-5d2c74f91617.roa (raw, json)
Hash identifier:          +cbdkYZCwefm+ipbl4w61z+PZmb9q78D+MfCWP7s3v8=
Subject key identifier:   A9:4A:1E:57:48:E6:E8:CF:61:A7:A3:DF:02:7A:A4:4F:BE:33:11:BA
Certificate issuer:       /CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
Certificate serial:       010D0C9F4328584A8840A03D657A1EC0B5ED5CC0
Authority key identifier: 52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     5645
IP address blocks:        107.190.0.0/17 maxlen: 17
                          107.190.16.0/20 maxlen: 20
                          107.190.32.0/20 maxlen: 20
                          107.190.64.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 30 Jul 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:a0:3d:65:7a:1e:c0:b5:ed:5c:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c32e4c57-f588-46c2-a752-708ae6efb1cc
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=34800e59-1740-45da-b8bb-eb7dad29a58a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c6:2a:4e:da:68:df:34:99:d5:19:36:f2:1f:
                    56:54:b3:85:a1:c5:13:11:52:95:c8:54:df:d2:af:
                    b3:e2:48:59:5d:48:78:c2:21:6b:d0:d5:ee:ff:aa:
                    f0:4b:a3:74:77:a6:73:e1:64:51:27:76:ba:8b:5e:
                    64:12:fb:db:ec:6f:e8:57:54:be:80:d8:34:34:07:
                    01:cb:a8:d9:19:be:f3:81:44:48:4e:b1:31:f0:95:
                    c1:f5:5f:12:46:2b:03:ca:b0:bd:01:91:78:38:7e:
                    2e:99:b4:2b:35:63:63:36:f6:6d:6f:65:d3:1a:09:
                    45:32:26:94:e7:a1:43:a6:a1:60:67:bd:f3:08:d4:
                    40:0e:20:e0:25:c4:94:f5:26:56:26:5f:05:8a:48:
                    39:a9:e3:c7:44:69:59:fb:12:8d:61:46:3b:17:53:
                    cc:5b:78:a3:eb:ab:58:56:85:28:38:4b:c8:78:44:
                    60:a9:56:13:75:81:92:d4:ac:f9:6c:94:c2:9b:d0:
                    28:48:9c:63:93:fe:2c:53:9c:3e:84:b7:d7:f8:0b:
                    91:df:a2:c9:b0:ea:ba:c9:fc:3c:79:65:25:45:e1:
                    b1:9e:41:c6:2f:a7:00:b3:19:85:90:43:c2:29:5b:
                    0a:12:d5:26:08:25:18:a9:a0:e7:74:73:29:29:6e:
                    13:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:4A:1E:57:48:E6:E8:CF:61:A7:A3:DF:02:7A:A4:4F:BE:33:11:BA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/4192f1c2-749b-3db3-91c0-5d2c74f91617.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc/c32e4c57-f588-46c2-a752-708ae6efb1cc.crl

            X509v3 Authority Key Identifier:
                keyid:52:A5:85:0C:85:52:99:77:29:10:7A:A4:BB:EB:90:98:74:50:F0:89

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/c32e4c57-f588-46c2-a752-708ae6efb1cc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.190.0.0/17

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:f9:c0:71:ed:1b:b6:4c:22:8d:5f:fc:65:9a:69:83:9b:cb:
         71:9c:72:a9:29:38:8f:43:c0:06:8a:e8:c3:46:f3:3d:51:de:
         03:f4:71:f5:e9:b4:4f:5e:c5:8c:d4:bb:4c:79:ce:f3:3e:a4:
         17:31:16:5d:e8:85:8e:80:b8:bb:07:a7:a7:a3:73:ec:d1:0e:
         e3:fb:b7:31:f0:a8:2d:16:49:51:3b:46:21:dc:dc:63:da:93:
         90:7d:73:16:d8:c9:8f:1b:b7:9b:0b:a0:90:45:ef:39:50:b9:
         d0:2e:af:e9:d6:83:56:52:ff:d7:ff:e4:3e:96:70:fc:d4:26:
         19:9d:5e:cf:fd:87:d2:a4:fa:67:5e:85:09:8b:f9:74:bb:89:
         22:c7:ca:a6:ce:4c:35:52:11:10:41:bd:59:02:bf:a7:7e:b0:
         7d:47:12:c7:1a:d9:78:f1:b5:23:ed:53:f5:24:3c:62:e0:74:
         11:d6:cc:48:e9:9a:44:62:1a:65:e3:c5:58:62:80:05:ad:2b:
         f2:9d:84:53:c3:a8:0a:46:7c:a3:03:b5:01:ba:bd:74:9f:44:
         d9:14:09:fd:40:1a:11:27:91:f5:ff:7c:8a:3a:76:08:96:b5:
         31:f4:f8:9f:61:2d:46:69:95:dc:e6:73:51:1f:2b:8f:3c:90:
         40:f5:27:1c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQKA9ZXoewLXtXMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzMyZTRjNTctZjU4OC00NmMyLWE3NTItNzA4YWU2ZWZi
MWNjMB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk
MzQ4MDBlNTktMTc0MC00NWRhLWI4YmItZWI3ZGFkMjlhNThhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApcYqTtpo3zSZ1Rk28h9WVLOFocUTEVKVyFTf
0q+z4khZXUh4wiFr0NXu/6rwS6N0d6Zz4WRRJ3a6i15kEvvb7G/oV1S+gNg0NAcB
y6jZGb7zgURITrEx8JXB9V8SRisDyrC9AZF4OH4umbQrNWNjNvZtb2XTGglFMiaU
56FDpqFgZ73zCNRADiDgJcSU9SZWJl8Fikg5qePHRGlZ+xKNYUY7F1PMW3ij66tY
VoUoOEvIeERgqVYTdYGS1Kz5bJTCm9AoSJxjk/4sU5w+hLfX+AuR36LJsOq6yfw8
eWUlReGxnkHGL6cAsxmFkEPCKVsKEtUmCCUYqaDndHMpKW4T5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKlKHldI5ujPYaej3wJ6pE++MxG6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJl
NGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhhZTZlZmIxY2MvNDE5MmYxYzItNzQ5Yi0z
ZGIzLTkxYzAtNWQyYzc0ZjkxNjE3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYzMyZTRjNTctZjU4OC00NmMyLWE3
NTItNzA4YWU2ZWZiMWNjL2MzMmU0YzU3LWY1ODgtNDZjMi1hNzUyLTcwOGFlNmVm
YjFjYy5jcmwwHwYDVR0jBBgwFoAUUqWFDIVSmXcpEHqku+uQmHRQ8IkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jMzJlNGM1Ny1mNTg4LTQ2YzItYTc1Mi03MDhh
ZTZlZmIxY2MuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQHa74AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF75wHHtG7ZMIo1f/GWaaYOby3GccqkpOI9DwAaK6MNG8z1R3gP0cfXp
tE9exYzUu0x5zvM+pBcxFl3ohY6AuLsHp6ejc+zRDuP7tzHwqC0WSVE7RiHc3GPa
k5B9cxbYyY8bt5sLoJBF7zlQudAur+nWg1ZS/9f/5D6WcPzUJhmdXs/9h9Kk+mde
hQmL+XS7iSLHyqbOTDVSERBBvVkCv6d+sH1HEsca2XjxtSPtU/UkPGLgdBHWzEjp
mkRiGmXjxVhigAWtK/KdhFPDqApGfKMDtQG6vXSfRNkUCf1AGhEnkfX/fIo6dgiW
tTH0+J9hLUZpldzmc1EfK488kED1Jxw=
-----END CERTIFICATE-----
Generated at Mon Jul 28 22:13:34 2025 by rpki-client