Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
File:                     f4637f85-f045-3611-b433-908584a54b6e.roa (raw, json)
Hash identifier:          E0767RlT/wG/F1t/xrbju3Ksc3S9z/g1qk9V7oPa1f0=
Subject key identifier:   16:D3:85:17:B4:B0:61:D8:8A:31:88:33:1B:74:77:18:8D:0D:70:F1
Certificate issuer:       /CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
Certificate serial:       010D0C9F4328584A6DBB488220FB12AF0F363A00
Authority key identifier: 49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     40194
IP address blocks:        192.152.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:48:82:20:fb:12:af:0f:36:3a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cbd9e34f-e30d-4184-956a-7e3e22cee6c8
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=28ca9c7e-8705-4256-961e-fd3a382ab143
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:31:6b:a4:69:da:ce:e5:b5:66:7d:cd:aa:0d:
                    d6:e9:14:9b:91:c9:c9:43:71:56:c7:74:fa:33:9a:
                    46:e2:12:8c:05:af:97:0d:49:6d:8a:a1:6f:4a:1a:
                    7c:f2:be:ee:9a:fe:8c:e0:5b:44:9e:25:06:46:d4:
                    9c:89:e9:d0:39:be:09:37:74:3f:2c:1d:77:ed:c8:
                    e5:e8:75:7d:21:20:04:35:b4:fe:f4:b1:e0:c7:04:
                    a3:bb:52:47:3e:72:08:c2:33:b3:3c:de:c8:f4:94:
                    00:39:55:28:8f:c6:37:7f:8c:d8:9c:a2:34:02:5b:
                    27:52:c1:83:af:b2:a7:32:97:9b:0e:74:c4:d5:d6:
                    01:54:bd:b1:d5:3b:f1:03:81:21:08:02:db:8b:f1:
                    d5:3e:1a:c3:cc:b3:e9:e2:50:46:c7:d0:03:0d:9f:
                    7f:db:13:d2:b1:a5:82:8f:88:e1:ae:d3:8a:67:84:
                    00:c8:1d:e6:24:39:01:ae:30:28:71:20:67:b5:74:
                    19:42:fd:a9:d9:d9:c2:7e:18:9d:a7:48:64:af:42:
                    46:0e:d1:49:7d:2e:f1:f4:65:99:e7:0c:b7:e7:06:
                    fc:8a:50:6b:e7:71:95:9f:72:ec:d5:31:62:bf:70:
                    ed:49:31:81:89:30:9d:fe:d9:5d:6e:94:04:7e:c2:
                    3c:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:D3:85:17:B4:B0:61:D8:8A:31:88:33:1B:74:77:18:8D:0D:70:F1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/f4637f85-f045-3611-b433-908584a54b6e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.crl

            X509v3 Authority Key Identifier:
                keyid:49:1F:DD:76:03:A8:16:E0:CB:8A:CD:84:54:17:72:60:4D:85:56:BE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/cbd9e34f-e30d-4184-956a-7e3e22cee6c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.152.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2e:65:78:c2:bb:30:13:d4:c3:fe:ea:bc:46:94:1a:d5:a1:24:
         39:50:b9:5c:3a:ee:fc:5d:e0:a7:8b:f0:4d:cf:7f:6e:5c:7f:
         e7:09:9c:cb:23:9f:1b:97:71:25:03:51:78:31:f6:a8:8b:fb:
         8d:8b:b3:01:86:a9:b4:64:5f:76:f7:80:10:45:31:bd:4d:8c:
         ed:32:8e:c2:fa:fc:32:59:36:b3:99:26:52:07:0a:cf:b7:f5:
         38:77:0f:15:f7:1e:f5:a3:31:22:b5:74:e6:8a:ab:23:f1:05:
         5e:62:2d:ba:b8:21:80:0a:ea:4e:71:1e:83:3c:12:fc:73:15:
         be:c9:6b:23:77:61:0a:0c:16:96:5b:af:20:f0:7e:f6:5e:7f:
         3a:df:34:e4:95:29:02:f6:ad:ef:fc:99:8f:7e:ed:6e:29:bb:
         cf:ef:4f:84:95:e0:26:e4:c5:f5:3a:dc:b5:1e:17:94:1a:98:
         b6:71:73:cf:93:5e:95:ef:ea:0a:90:a6:19:3d:6f:99:17:f7:
         12:b1:05:4a:0a:40:1a:02:3c:a0:fc:92:71:8a:cf:49:7a:f6:
         be:19:d3:fc:2a:01:a6:56:68:ae:47:d2:65:cf:02:d5:61:2a:
         1c:6c:94:6c:1d:b0:35:ee:f5:bb:ee:30:c3:1a:f9:dd:04:8d:
         1d:e4:32:b0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0iCIPsSrw82OgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2JkOWUzNGYtZTMwZC00MTg0LTk1NmEtN2UzZTIyY2Vl
NmM4MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
MjhjYTljN2UtODcwNS00MjU2LTk2MWUtZmQzYTM4MmFiMTQzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjDFrpGnazuW1Zn3Nqg3W6RSbkcnJQ3FWx3T6
M5pG4hKMBa+XDUltiqFvShp88r7umv6M4FtEniUGRtScienQOb4JN3Q/LB137cjl
6HV9ISAENbT+9LHgxwSju1JHPnIIwjOzPN7I9JQAOVUoj8Y3f4zYnKI0AlsnUsGD
r7KnMpebDnTE1dYBVL2x1TvxA4EhCALbi/HVPhrDzLPp4lBGx9ADDZ9/2xPSsaWC
j4jhrtOKZ4QAyB3mJDkBrjAocSBntXQZQv2p2dnCfhidp0hkr0JGDtFJfS7x9GWZ
5wy35wb8ilBr53GVn3Ls1TFiv3DtSTGBiTCd/tldbpQEfsI8QQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbThRe0sGHYijGIMxt0dxiNDXDxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9jYmQ5
ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNlMjJjZWU2YzgvZjQ2MzdmODUtZjA0NS0z
NjExLWI0MzMtOTA4NTg0YTU0YjZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvY2JkOWUzNGYtZTMwZC00MTg0LTk1
NmEtN2UzZTIyY2VlNmM4L2NiZDllMzRmLWUzMGQtNDE4NC05NTZhLTdlM2UyMmNl
ZTZjOC5jcmwwHwYDVR0jBBgwFoAUSR/ddgOoFuDLis2EVBdyYE2FVr4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9jYmQ5ZTM0Zi1lMzBkLTQxODQtOTU2YS03ZTNl
MjJjZWU2YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJh2MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC5leMK7MBPUw/7qvEaUGtWhJDlQuVw67vxd4KeL8E3Pf25cf+cJnMsj
nxuXcSUDUXgx9qiL+42LswGGqbRkX3b3gBBFMb1NjO0yjsL6/DJZNrOZJlIHCs+3
9Th3DxX3HvWjMSK1dOaKqyPxBV5iLbq4IYAK6k5xHoM8EvxzFb7JayN3YQoMFpZb
ryDwfvZefzrfNOSVKQL2re/8mY9+7W4pu8/vT4SV4CbkxfU63LUeF5QamLZxc8+T
XpXv6gqQphk9b5kX9xKxBUoKQBoCPKD8knGKz0l69r4Z0/wqAaZWaK5H0mXPAtVh
KhxslGwdsDXu9bvuMMMa+d0EjR3kMrA=
-----END CERTIFICATE-----
Generated at Wed Jul 9 19:58:35 2025 by rpki-client