Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa
File:                     0f3992cf-5a89-327d-a390-90748ec5ecbd.roa (raw, json)
Hash identifier:          cVQi0aP/cVDV5b0er4Y1XfR2u6MEWdkQZw11GjzEY1M=
Subject key identifier:   07:39:77:26:23:9D:20:EB:62:F4:E3:23:26:9B:B2:15:A5:24:86:86
Certificate issuer:       /CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1
Certificate serial:       010D0C9F4328584A846785362C15DE5650EA5000
Authority key identifier: E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa
Signing time:             Mon 14 Jul 2025 15:56:03 +0000
ROA not before:           Mon 14 Jul 2025 15:56:03 +0000
ROA not after:            Sun 12 Oct 2025 15:56:03 +0000
asID:                     8075
IP address blocks:        192.132.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/fde169ed-d0d2-4165-8308-df2597e343f8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 21 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:67:85:36:2c:15:de:56:50:ea:50:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6ef967-ca04-4afb-96ba-6e674a35f4a1
        Validity
            Not Before: Jul 14 15:56:03 2025 GMT
            Not After : Oct 12 15:56:03 2025 GMT
        Subject: CN=fcfec125-8266-4acd-ab88-e581de89c55e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:af:a5:55:39:be:44:4b:9c:e6:e1:cf:f6:fd:
                    c8:bb:57:a3:28:66:2f:37:33:2b:5d:fa:7d:76:b6:
                    a8:4e:58:4c:3e:8d:ea:b4:ee:ae:40:29:3f:c8:62:
                    29:08:0a:71:71:aa:18:45:3c:b9:d8:c0:0e:4e:36:
                    83:33:ae:ff:38:84:bf:c0:da:22:20:da:b9:1a:07:
                    e5:df:a4:a3:d2:92:11:35:ef:cc:0a:07:21:58:47:
                    ca:7f:5f:72:14:0f:bb:c8:57:13:f8:7a:fa:3e:c0:
                    b7:03:ed:28:4f:c4:15:7f:8c:37:e0:e8:82:db:34:
                    51:24:16:f6:f4:4b:37:0f:f6:f4:22:54:46:01:6a:
                    89:b2:10:49:ab:d9:cb:36:aa:ff:32:e6:b0:f7:f0:
                    fe:a0:db:4f:59:b9:d2:2c:54:45:92:e7:d1:f9:0b:
                    8e:92:4b:50:0e:bc:f4:1b:eb:e1:bf:c4:c2:8f:5f:
                    38:0c:aa:8a:3f:19:f9:54:94:7e:9b:f6:6b:ad:b5:
                    00:6d:2e:9a:df:2d:f4:dd:d9:a3:34:72:7a:9d:c1:
                    74:37:39:b4:2c:fb:5e:ea:3b:fa:fe:32:38:70:32:
                    05:ae:2e:6d:d6:fe:f4:43:d2:82:d0:bc:90:59:4d:
                    a6:07:64:9b:eb:18:2d:cc:d1:a7:70:73:0b:41:5d:
                    57:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:39:77:26:23:9D:20:EB:62:F4:E3:23:26:9B:B2:15:A5:24:86:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/0f3992cf-5a89-327d-a390-90748ec5ecbd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1/df6ef967-ca04-4afb-96ba-6e674a35f4a1.crl

            X509v3 Authority Key Identifier:
                keyid:E4:88:B0:54:11:17:1B:42:76:0A:5C:9B:13:1C:19:5B:92:67:D3:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/fde169ed-d0d2-4165-8308-df2597e343f8/df6ef967-ca04-4afb-96ba-6e674a35f4a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:5b:b1:32:2f:72:f7:4f:0b:02:5d:5d:5d:c7:19:f7:7b:12:
         e7:75:f0:68:27:64:d4:1f:3a:e3:20:d5:10:d9:2d:50:b0:47:
         6f:a6:a2:60:e7:c2:b3:22:fe:63:02:93:5f:c7:c2:15:5c:3c:
         58:9e:24:cc:1d:ef:39:0b:fd:52:e4:11:b1:cd:53:51:15:f9:
         93:34:79:cd:95:b5:5f:b5:d3:8e:cb:73:8f:d4:c2:41:52:98:
         f8:94:db:72:87:d1:0a:e8:71:3a:1e:93:30:8f:c6:d0:54:4f:
         44:3c:f0:84:fa:a3:c6:f3:df:9b:b1:61:3f:e9:9a:d5:10:e4:
         7f:81:5a:57:ea:ab:7b:96:67:b7:52:ac:4b:42:13:9d:81:f5:
         d4:ef:00:e8:ab:32:ad:e1:7c:ac:be:2b:2d:2c:2d:fe:72:ec:
         e6:0b:80:70:1e:00:c7:5d:21:ba:f8:cb:80:12:07:97:50:dd:
         84:0f:1c:41:5f:4f:59:70:11:a5:a9:47:cc:0d:96:a8:3e:b4:
         d4:1b:a4:f6:8d:c4:21:77:db:42:c2:71:49:1b:07:b8:b8:b0:
         b3:19:56:79:5b:6d:3c:46:ec:5e:e6:84:0e:8c:30:20:d0:df:
         1a:86:33:95:ea:38:af:89:d2:f9:f3:c1:3d:f8:58:a2:5f:02:
         8c:e8:51:0c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEZ4U2LBXeVlDqUAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY2ZWY5NjctY2EwNC00YWZiLTk2YmEtNmU2NzRhMzVm
NGExMB4XDTI1MDcxNDE1NTYwM1oXDTI1MTAxMjE1NTYwM1owLzEtMCsGA1UEAxMk
ZmNmZWMxMjUtODI2Ni00YWNkLWFiODgtZTU4MWRlODljNTVlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgq+lVTm+REuc5uHP9v3Iu1ejKGYvNzMrXfp9
draoTlhMPo3qtO6uQCk/yGIpCApxcaoYRTy52MAOTjaDM67/OIS/wNoiINq5Ggfl
36Sj0pIRNe/MCgchWEfKf19yFA+7yFcT+Hr6PsC3A+0oT8QVf4w34OiC2zRRJBb2
9Es3D/b0IlRGAWqJshBJq9nLNqr/Muaw9/D+oNtPWbnSLFRFkufR+QuOkktQDrz0
G+vhv8TCj184DKqKPxn5VJR+m/ZrrbUAbS6a3y303dmjNHJ6ncF0Nzm0LPte6jv6
/jI4cDIFri5t1v70Q9KC0LyQWU2mB2Sb6xgtzNGncHMLQV1XqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAc5dyYjnSDrYvTjIyabshWlJIaGMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZl
Zjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3NGEzNWY0YTEvMGYzOTkyY2YtNWE4OS0z
MjdkLWEzOTAtOTA3NDhlYzVlY2JkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mZGUxNjllZC1k
MGQyLTQxNjUtODMwOC1kZjI1OTdlMzQzZjgvZGY2ZWY5NjctY2EwNC00YWZiLTk2
YmEtNmU2NzRhMzVmNGExL2RmNmVmOTY3LWNhMDQtNGFmYi05NmJhLTZlNjc0YTM1
ZjRhMS5jcmwwHwYDVR0jBBgwFoAU5IiwVBEXG0J2ClybExwZW5Jn0yYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2ZkZTE2OWVkLWQwZDItNDE2
NS04MzA4LWRmMjU5N2UzNDNmOC9kZjZlZjk2Ny1jYTA0LTRhZmItOTZiYS02ZTY3
NGEzNWY0YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIQbMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG1bsTIvcvdPCwJdXV3HGfd7Eud18GgnZNQfOuMg1RDZLVCwR2+momDn
wrMi/mMCk1/HwhVcPFieJMwd7zkL/VLkEbHNU1EV+ZM0ec2VtV+1047Lc4/UwkFS
mPiU23KH0QrocToekzCPxtBUT0Q88IT6o8bz35uxYT/pmtUQ5H+BWlfqq3uWZ7dS
rEtCE52B9dTvAOirMq3hfKy+Ky0sLf5y7OYLgHAeAMddIbr4y4ASB5dQ3YQPHEFf
T1lwEaWpR8wNlqg+tNQbpPaNxCF320LCcUkbB7i4sLMZVnlbbTxG7F7mhA6MMCDQ
3xqGM5XqOK+J0vnzwT34WKJfAozoUQw=
-----END CERTIFICATE-----
Generated at Sun Jul 20 09:33:04 2025 by rpki-client