Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
File:                     01949cb6-dbef-38e7-b253-ca7fee6dea68.roa (raw, json)
Hash identifier:          2JnvAs/onqU7kQkFZ6Gm8R43oCrWKrIHIHpQBq7vsHk=
Subject key identifier:   2E:05:71:E6:85:19:CD:D9:EB:5E:20:94:83:7F:86:76:32:9D:F8:E7
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A63F5B97CE3EACC0D381B4F00
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa
Signing time:             Thu 03 Jul 2025 01:00:48 +0000
ROA not before:           Thu 03 Jul 2025 01:00:48 +0000
ROA not after:            Wed 01 Oct 2025 01:00:48 +0000
asID:                     11233
IP address blocks:        162.255.40.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:63:f5:b9:7c:e3:ea:cc:0d:38:1b:4f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul  3 01:00:48 2025 GMT
            Not After : Oct  1 01:00:48 2025 GMT
        Subject: CN=53bc7296-0600-48d3-a228-c7e424e9d720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:63:72:2b:5b:07:7b:61:41:26:58:aa:6d:10:
                    b7:e6:62:4f:11:72:dc:6d:02:50:b7:3c:45:d2:48:
                    5c:c3:cb:dd:40:3e:60:66:21:86:f4:ed:fb:15:43:
                    23:50:de:46:f8:45:ba:fc:78:08:66:af:b6:eb:6b:
                    43:69:97:9d:04:59:03:46:5d:ed:75:c1:56:aa:71:
                    58:a4:18:a6:60:29:83:17:7f:72:af:42:97:59:09:
                    02:ea:5f:c6:44:9a:84:2f:1f:6e:57:67:c2:d0:29:
                    91:a8:53:76:ca:7d:f6:27:c0:73:bd:e4:95:b3:ea:
                    5d:d2:62:63:84:99:7f:37:21:63:b2:7f:e5:d2:22:
                    09:57:69:33:ad:1c:19:58:8b:99:38:24:03:90:88:
                    d2:07:df:90:b4:7b:e8:ac:6b:58:cc:83:51:b6:46:
                    dd:f4:ff:93:76:07:f0:8f:fb:34:57:a2:6d:50:02:
                    82:9e:b3:3e:74:33:ed:14:21:24:e5:13:3d:fc:00:
                    2d:d6:96:af:16:99:93:2f:55:8a:4c:a0:11:67:e1:
                    e0:a9:65:5e:4f:2b:4d:72:39:8b:18:ce:96:76:2e:
                    ef:60:ec:07:6d:27:c0:77:e4:15:dd:02:66:69:7f:
                    13:ae:1e:95:9e:62:cb:0c:6e:89:40:1d:1a:8c:c8:
                    83:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:05:71:E6:85:19:CD:D9:EB:5E:20:94:83:7F:86:76:32:9D:F8:E7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/01949cb6-dbef-38e7-b253-ca7fee6dea68.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.255.40.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         36:2f:88:83:fd:18:24:44:82:e2:ef:20:eb:d7:f3:fe:f9:d2:
         f9:2f:c0:61:5b:9a:41:a7:50:43:db:88:41:5d:10:84:08:56:
         c7:74:a4:fb:9b:8b:68:db:ba:d3:71:71:4f:44:ae:b6:5d:d3:
         57:75:cc:dc:18:2d:a2:71:e8:f3:36:98:a7:69:99:a1:c7:bf:
         f3:7d:7a:16:24:77:5e:d4:a9:27:35:c5:00:16:b5:ab:60:6f:
         d5:f5:b8:2f:93:fe:98:44:b2:c6:7b:27:ee:70:a8:08:c2:1c:
         ff:e6:51:7c:c3:d8:b2:10:ca:7c:64:57:21:f6:95:a0:18:f1:
         af:da:fe:58:82:a8:fc:67:9e:f6:81:a4:a2:b6:17:a1:64:56:
         b0:49:57:ae:80:07:61:b7:e1:85:32:fe:bf:6f:b2:f9:56:fa:
         d8:11:94:c6:8c:39:80:34:8f:b7:59:76:42:f8:3f:1a:5c:38:
         0b:5a:6b:0a:12:44:05:60:2e:94:41:dc:e1:d9:8e:73:f1:fe:
         8e:6d:74:e5:04:e7:f6:cd:84:51:06:45:78:6d:c9:df:57:66:
         13:17:2a:95:ca:bb:38:f6:3a:76:da:2b:7c:d8:3e:74:8c:73:
         8b:fa:d4:f4:e1:e5:08:91:bb:91:17:d2:5a:67:27:a8:bc:13:
         c3:38:1d:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpj9bl84+rMDTgbTwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDcwMzAxMDA0OFoXDTI1MTAwMTAxMDA0OFowLzEtMCsGA1UEAxMk
NTNiYzcyOTYtMDYwMC00OGQzLWEyMjgtYzdlNDI0ZTlkNzIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi2NyK1sHe2FBJliqbRC35mJPEXLcbQJQtzxF
0khcw8vdQD5gZiGG9O37FUMjUN5G+EW6/HgIZq+262tDaZedBFkDRl3tdcFWqnFY
pBimYCmDF39yr0KXWQkC6l/GRJqELx9uV2fC0CmRqFN2yn32J8BzveSVs+pd0mJj
hJl/NyFjsn/l0iIJV2kzrRwZWIuZOCQDkIjSB9+QtHvorGtYzINRtkbd9P+Tdgfw
j/s0V6JtUAKCnrM+dDPtFCEk5RM9/AAt1pavFpmTL1WKTKARZ+HgqWVeTytNcjmL
GM6Wdi7vYOwHbSfAd+QV3QJmaX8Trh6VnmLLDG6JQB0ajMiDxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC4FceaFGc3Z614glIN/hnYynfjnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvMDE5NDljYjYtZGJlZi0z
OGU3LWIyNTMtY2E3ZmVlNmRlYTY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBov8oMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADYviIP9GCREguLvIOvX8/750vkvwGFbmkGnUEPbiEFdEIQIVsd0pPub
i2jbutNxcU9ErrZd01d1zNwYLaJx6PM2mKdpmaHHv/N9ehYkd17UqSc1xQAWtatg
b9X1uC+T/phEssZ7J+5wqAjCHP/mUXzD2LIQynxkVyH2laAY8a/a/liCqPxnnvaB
pKK2F6FkVrBJV66AB2G34YUy/r9vsvlW+tgRlMaMOYA0j7dZdkL4PxpcOAtaawoS
RAVgLpRB3OHZjnPx/o5tdOUE5/bNhFEGRXhtyd9XZhMXKpXKuzj2OnbaK3zYPnSM
c4v61PTh5QiRu5EX0lpnJ6i8E8M4HUI=
-----END CERTIFICATE-----
Generated at Wed Jul 9 14:43:07 2025 by rpki-client