Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa
File:                     43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa (raw, json)
Hash identifier:          Fp89WrW0ytyPTv1yIRSlWn6wIuZRLi+MosJKxVp7O74=
Subject key identifier:   4A:8E:EC:59:7A:9B:67:43:96:39:7F:0B:87:AD:DC:66:5B:C2:77:94
Certificate issuer:       /CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
Certificate serial:       010D0C9F4328584A612B14573A51AEB6BC9F3EE0
Authority key identifier: D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     397984
IP address blocks:        198.184.131.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 03 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:14:57:3a:51:ae:b6:bc:9f:3e:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d7f827b-f59c-40f4-83a5-cd0c4b16f42e
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=5384b7a4-1a30-4821-9b57-bf0580db729d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:58:b7:67:70:f7:02:37:67:cf:3e:1a:1a:
                    22:30:51:2e:d3:24:c2:6c:66:4c:f6:91:05:aa:dc:
                    78:82:79:ff:3e:cd:08:17:0e:06:14:fc:23:0f:41:
                    5c:e8:9f:de:ad:f7:5c:76:c0:aa:8a:96:f3:6d:2a:
                    13:0e:a1:f9:4a:34:00:57:53:ce:02:87:a0:30:42:
                    ec:fa:36:72:df:56:82:93:39:9c:cf:1d:f1:dd:78:
                    fb:cb:de:99:23:9b:f7:45:e0:ff:3e:16:0c:cf:74:
                    94:0d:6e:ee:00:5d:9a:07:36:85:36:97:1a:de:6b:
                    4f:a1:91:a8:d3:1a:8f:6d:b9:eb:76:62:58:07:ac:
                    97:aa:8c:af:3f:8d:85:d0:8b:71:ee:76:e4:cb:d2:
                    b1:3b:83:7e:c0:e4:c3:2c:61:39:8a:87:00:b9:ac:
                    41:f4:72:9e:ed:2d:fe:3b:22:01:72:ac:da:45:bd:
                    0c:46:1e:2b:d4:e2:bf:89:b3:45:12:9d:bd:9f:ea:
                    6d:9c:59:d5:05:8c:96:b7:93:60:ee:64:ab:30:a2:
                    ca:69:d8:13:c1:f7:a1:36:bb:b0:b5:b8:cd:78:a3:
                    c9:0b:be:e8:d8:76:5d:9a:8f:aa:31:5a:2f:0b:7e:
                    21:4a:b5:87:4a:8e:1d:64:39:75:a4:69:bb:2b:78:
                    7c:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:8E:EC:59:7A:9B:67:43:96:39:7F:0B:87:AD:DC:66:5B:C2:77:94
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/43e78634-eca8-3158-8fb3-e3d9f3ba5f4b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.crl

            X509v3 Authority Key Identifier:
                keyid:D3:F5:EC:E0:5E:22:D9:CF:D6:34:82:88:FC:38:89:5F:E6:57:C2:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5d7f827b-f59c-40f4-83a5-cd0c4b16f42e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.184.131.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3b:ac:62:41:5e:92:d9:93:e0:2f:13:46:fb:be:50:c8:5c:b3:
         81:19:3b:23:99:ac:eb:39:4c:d1:51:42:67:0c:33:4e:7b:c4:
         5d:63:91:4a:38:d7:ce:fd:6a:92:ec:ed:1c:ba:88:e2:69:16:
         d0:9b:f2:c3:93:be:5f:93:f1:65:a7:c0:07:2d:74:5f:be:f4:
         3e:ee:86:4b:92:8f:e6:28:3f:d4:23:46:f8:6b:72:88:84:77:
         f7:47:ea:f0:15:f3:53:e6:c8:cf:e5:40:da:19:4d:f7:1b:98:
         d4:7f:df:71:ed:3f:19:a4:5c:68:ad:b4:7b:31:28:e1:3a:71:
         2d:68:34:99:9f:47:98:ea:5c:00:11:a0:98:24:7d:ce:88:8c:
         5f:3f:45:5e:7d:e3:d6:c7:41:90:36:8a:8c:10:3a:fb:2f:4c:
         96:73:12:10:e2:39:c9:d2:01:5a:8e:be:bd:35:6a:fe:27:02:
         53:35:e1:6e:f6:fc:9f:97:0b:d2:6c:07:fd:44:4e:82:99:ca:
         ad:4b:66:52:67:60:4e:7f:f6:ad:e2:47:74:ed:11:65:b1:d5:
         ea:56:3f:ce:83:86:67:a4:c8:78:d1:7b:d0:27:4a:1e:0c:0a:
         79:1f:3e:78:65:f4:e6:4e:19:13:69:ab:4b:af:8c:31:f2:07:
         0a:19:9f:1b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEphKxRXOlGutryfPuAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ3ZjgyN2ItZjU5Yy00MGY0LTgzYTUtY2QwYzRiMTZm
NDJlMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
NTM4NGI3YTQtMWEzMC00ODIxLTliNTctYmYwNTgwZGI3MjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn59Yt2dw9wI3Z88+GhoiMFEu0yTCbGZM9pEF
qtx4gnn/Ps0IFw4GFPwjD0Fc6J/erfdcdsCqipbzbSoTDqH5SjQAV1POAoegMELs
+jZy31aCkzmczx3x3Xj7y96ZI5v3ReD/PhYMz3SUDW7uAF2aBzaFNpca3mtPoZGo
0xqPbbnrdmJYB6yXqoyvP42F0Itx7nbky9KxO4N+wOTDLGE5iocAuaxB9HKe7S3+
OyIBcqzaRb0MRh4r1OK/ibNFEp29n+ptnFnVBYyWt5Ng7mSrMKLKadgTwfehNruw
tbjNeKPJC77o2HZdmo+qMVovC34hSrWHSo4dZDl1pGm7K3h8JwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEqO7Fl6m2dDljl/C4et3GZbwneUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZDdm
ODI3Yi1mNTljLTQwZjQtODNhNS1jZDBjNGIxNmY0MmUvNDNlNzg2MzQtZWNhOC0z
MTU4LThmYjMtZTNkOWYzYmE1ZjRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWQ3ZjgyN2ItZjU5Yy00MGY0LTgz
YTUtY2QwYzRiMTZmNDJlLzVkN2Y4MjdiLWY1OWMtNDBmNC04M2E1LWNkMGM0YjE2
ZjQyZS5jcmwwHwYDVR0jBBgwFoAU0/Xs4F4i2c/WNIKI/DiJX+ZXwhcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZDdmODI3Yi1mNTljLTQwZjQtODNhNS1jZDBj
NGIxNmY0MmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxriDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADusYkFektmT4C8TRvu+UMhcs4EZOyOZrOs5TNFRQmcMM057xF1jkUo4
1879apLs7Ry6iOJpFtCb8sOTvl+T8WWnwActdF++9D7uhkuSj+YoP9QjRvhrcoiE
d/dH6vAV81PmyM/lQNoZTfcbmNR/33HtPxmkXGittHsxKOE6cS1oNJmfR5jqXAAR
oJgkfc6IjF8/RV5949bHQZA2iowQOvsvTJZzEhDiOcnSAVqOvr01av4nAlM14W72
/J+XC9JsB/1EToKZyq1LZlJnYE5/9q3iR3TtEWWx1epWP86DhmekyHjRe9AnSh4M
CnkfPnhl9OZOGRNpq0uvjDHyBwoZnxs=
-----END CERTIFICATE-----
Generated at Sat Aug 2 05:24:54 2025 by rpki-client