Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2e7432d-7a33-3987-8d31-b49c17c5bda0.roa
File:                     b2e7432d-7a33-3987-8d31-b49c17c5bda0.roa (raw, json)
Hash identifier:          nDQAOUDZjlLeYjgsxR0B88abKNOYj4uKQMV+M50Aems=
Subject key identifier:   B7:7D:F4:A5:B1:58:C2:E6:F2:5F:71:88:1F:B2:7B:5A:38:B7:14:C3
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A0727CD2189306D9D864F89C0
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2e7432d-7a33-3987-8d31-b49c17c5bda0.roa
Signing time:             Fri 30 May 2025 19:11:37 +0000
ROA not before:           Fri 30 May 2025 19:11:37 +0000
ROA not after:            Thu 28 Aug 2025 19:11:37 +0000
asID:                     81
IP address blocks:        192.154.58.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 08 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:07:27:cd:21:89:30:6d:9d:86:4f:89:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: May 30 19:11:37 2025 GMT
            Not After : Aug 28 19:11:37 2025 GMT
        Subject: CN=da40d56b-fba3-4e5e-9f84-8b5b411429da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:df:31:3d:50:d7:24:b9:63:eb:e2:db:89:96:
                    a0:c6:cb:53:af:c6:da:02:96:76:3e:12:83:a7:1c:
                    4a:78:b3:de:02:64:24:23:0a:3f:66:bc:c3:39:d4:
                    25:af:d7:14:53:cd:6d:44:ad:35:d9:a3:60:6d:10:
                    bf:fb:ff:68:36:8c:5e:8f:1c:fd:7b:e5:09:fc:18:
                    99:c1:f4:70:3f:8d:6a:ef:35:59:af:04:9a:6e:10:
                    c9:fe:ef:92:2b:89:e3:ba:b7:dd:af:f8:1b:f7:60:
                    07:85:95:01:61:3e:22:0e:8b:24:7d:3b:a8:de:18:
                    68:b2:5d:71:bf:6b:ed:62:8f:46:d9:ad:e0:dd:d8:
                    72:cf:e3:a1:bb:34:dd:d9:84:df:aa:b0:b5:a7:0e:
                    f0:db:11:ec:8d:f9:05:4f:7a:30:f6:28:e7:03:5b:
                    db:22:99:fe:26:0e:af:99:3a:aa:af:7f:ec:c7:62:
                    01:47:76:4f:56:80:99:72:c7:71:cb:5f:4b:15:19:
                    f3:84:9b:41:92:7e:f3:96:dc:db:34:00:68:d8:14:
                    bf:5e:4d:69:bd:17:42:ce:ab:1f:80:29:72:6a:04:
                    54:72:16:60:b3:c7:cb:33:7a:3f:2c:8d:77:00:6a:
                    e2:c9:a0:b9:c5:cd:ea:28:9c:ba:ac:8e:1e:27:e5:
                    14:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:7D:F4:A5:B1:58:C2:E6:F2:5F:71:88:1F:B2:7B:5A:38:B7:14:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/b2e7432d-7a33-3987-8d31-b49c17c5bda0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.58.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:3d:f0:c5:ff:79:03:74:5e:55:1e:1c:11:8f:30:00:0b:48:
         e9:f2:b9:d3:29:91:df:6e:7d:51:09:b9:44:2a:81:34:fd:6a:
         e2:ff:76:f6:cc:4e:23:77:4b:a9:fe:58:f3:a3:22:b6:46:32:
         66:35:41:f4:de:c5:b8:9d:56:8d:77:5f:a3:ac:c2:18:b5:6c:
         8a:66:92:5f:61:11:d2:e0:d5:c8:04:81:bf:be:ce:64:20:8b:
         d2:7a:95:9e:e8:bf:f8:83:b9:86:a9:9f:3d:c7:8a:8d:df:78:
         da:3c:03:c2:b7:78:a4:54:43:32:e3:dd:15:3b:1f:ee:cb:f7:
         8c:9e:90:4e:93:66:f4:71:e2:72:b0:5f:74:ae:81:bd:df:6c:
         b4:e4:dc:93:28:41:49:24:1e:7d:63:13:f6:ce:65:bb:91:f3:
         0a:73:6a:0b:9a:88:2b:af:20:58:8d:a1:17:1e:c3:84:25:eb:
         91:db:c9:68:fc:07:a6:1f:59:42:3f:42:17:74:f9:52:21:09:
         fd:0b:54:c7:ab:f5:05:c1:94:67:43:cb:a7:13:be:37:43:72:
         83:b8:3f:a1:e7:5a:1c:56:f5:e9:15:0c:6e:3e:ed:5e:31:c4:
         e9:35:06:a7:44:39:9a:b7:52:15:f0:5a:fe:03:fa:2a:87:39:
         ac:35:74:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoHJ80hiTBtnYZPicAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDUzMDE5MTEzN1oXDTI1MDgyODE5MTEzN1owLzEtMCsGA1UEAxMk
ZGE0MGQ1NmItZmJhMy00ZTVlLTlmODQtOGI1YjQxMTQyOWRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgt8xPVDXJLlj6+LbiZagxstTr8baApZ2PhKD
pxxKeLPeAmQkIwo/ZrzDOdQlr9cUU81tRK012aNgbRC/+/9oNoxejxz9e+UJ/BiZ
wfRwP41q7zVZrwSabhDJ/u+SK4njurfdr/gb92AHhZUBYT4iDoskfTuo3hhosl1x
v2vtYo9G2a3g3dhyz+OhuzTd2YTfqrC1pw7w2xHsjfkFT3ow9ijnA1vbIpn+Jg6v
mTqqr3/sx2IBR3ZPVoCZcsdxy19LFRnzhJtBkn7zltzbNABo2BS/Xk1pvRdCzqsf
gClyagRUchZgs8fLM3o/LI13AGriyaC5xc3qKJy6rI4eJ+UUEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLd99KWxWMLm8l9xiB+ye1o4txTDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvYjJlNzQzMmQtN2EzMy0z
OTg3LThkMzEtYjQ5YzE3YzViZGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJo6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB898MX/eQN0XlUeHBGPMAALSOnyudMpkd9ufVEJuUQqgTT9auL/dvbM
TiN3S6n+WPOjIrZGMmY1QfTexbidVo13X6Oswhi1bIpmkl9hEdLg1cgEgb++zmQg
i9J6lZ7ov/iDuYapnz3Hio3feNo8A8K3eKRUQzLj3RU7H+7L94yekE6TZvRx4nKw
X3Sugb3fbLTk3JMoQUkkHn1jE/bOZbuR8wpzaguaiCuvIFiNoRcew4Ql65HbyWj8
B6YfWUI/Qhd0+VIhCf0LVMer9QXBlGdDy6cTvjdDcoO4P6HnWhxW9ekVDG4+7V4x
xOk1BqdEOZq3UhXwWv4D+iqHOaw1dH4=
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:28:06 2025 by rpki-client