Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa
File:                     cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa (raw, json)
Hash identifier:          zjDjpIN83LFCW+Bci4XHUvXljv8TNuTYYNpMgTKbXEI=
Subject key identifier:   47:0D:1C:2F:3F:E1:14:DB:CD:D1:40:ED:8E:61:2A:B3:40:54:6B:C4
Certificate issuer:       /CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
Certificate serial:       010D0C9F43285849FE0FED2119443B6EA38505AC
Authority key identifier: D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     14618
IP address blocks:        199.187.169.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 09 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:ed:21:19:44:3b:6e:a3:85:05:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1cf435c0-9d28-477a-90a9-1b4fd75cda76
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=f928eea1-a6fd-4c53-9153-de2cbc200da9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c0:12:c0:f6:55:e1:85:33:da:ac:dc:18:0e:
                    3a:10:ec:ce:3d:94:34:da:1c:4a:5b:c7:4c:e7:7f:
                    22:71:74:98:71:c0:3d:73:a1:2b:4f:05:c4:08:ce:
                    9b:85:82:3f:03:8c:d4:0c:8e:61:32:13:34:bc:fb:
                    fc:bb:90:c3:e7:bb:e3:c8:d8:60:22:34:05:e1:7b:
                    9d:26:8d:bd:e6:f6:33:89:9d:cc:aa:9f:2b:b6:f8:
                    ef:00:fb:17:d6:2b:16:1b:7e:e2:42:7b:55:d2:0a:
                    e2:a3:a4:48:d2:a6:86:6a:7d:64:9c:a3:88:49:58:
                    a8:17:43:4d:11:e9:8e:2e:62:41:e4:e6:59:5c:23:
                    e9:1d:27:da:35:ef:48:48:b6:df:bb:c0:b0:f8:78:
                    e2:49:3f:71:40:1c:30:c4:f1:de:c6:57:5e:c7:fd:
                    91:73:06:a3:0d:4a:51:6e:fe:3a:13:53:6a:ee:c9:
                    db:ee:fe:8c:e3:b5:be:dc:fb:6e:f1:f0:fd:23:8f:
                    c9:7a:17:cf:17:83:1a:b5:27:ca:83:bb:bb:0c:ae:
                    30:5a:83:22:5c:4e:44:e2:4c:5e:2c:72:7d:27:68:
                    12:dd:73:85:17:dc:95:d6:15:65:d9:9c:86:57:b4:
                    9b:f6:35:09:ed:7d:62:b5:0f:dc:9c:9c:85:2a:c7:
                    b7:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:0D:1C:2F:3F:E1:14:DB:CD:D1:40:ED:8E:61:2A:B3:40:54:6B:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/cfe8f972-b6e5-33c5-b7b5-cdf4177cd5f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76/1cf435c0-9d28-477a-90a9-1b4fd75cda76.crl

            X509v3 Authority Key Identifier:
                keyid:D5:3F:14:5F:41:53:5A:F0:41:C2:D2:BF:7D:3B:50:E6:35:32:FF:D4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/1cf435c0-9d28-477a-90a9-1b4fd75cda76.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.187.169.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:4c:37:95:9f:1a:de:4d:75:88:cf:58:db:bb:9f:b5:42:ac:
         d5:16:f7:8a:08:27:08:15:4e:7d:ad:4e:61:b5:fd:ac:3a:a6:
         10:ce:10:34:a3:04:07:ad:42:e7:4c:15:4e:6f:1b:fc:06:b9:
         9d:56:ff:37:63:d9:11:0c:05:0f:f7:07:79:c4:a8:e3:6d:32:
         3a:74:7e:29:17:77:98:f0:e8:88:f3:9c:26:60:02:ba:41:27:
         28:1a:a8:c6:c8:43:17:73:82:07:b5:48:06:90:28:92:12:4e:
         b9:f9:49:14:28:2c:c4:b3:bd:f6:ee:89:15:7c:14:af:ac:ff:
         26:4b:72:4c:01:4d:1c:1f:5e:ac:08:eb:4e:81:6d:f7:74:2b:
         b6:54:29:b4:27:9c:ca:35:59:bc:19:d4:5c:23:ce:0d:6d:1c:
         b3:88:38:40:ef:e8:54:00:27:81:0c:e5:9e:44:2d:40:c4:cb:
         6e:53:1c:22:90:ee:a8:35:df:ae:e6:cc:0f:b9:4c:46:d7:90:
         24:a0:80:6b:f8:d4:b3:3e:c4:83:5b:1f:8c:60:71:68:76:16:
         a8:da:67:60:98:72:9b:da:d1:49:fd:27:39:92:c4:eb:3e:6f:
         3a:24:f3:92:3d:ee:c6:09:48:1c:f0:43:ff:24:77:95:cf:ea:
         0f:fc:a3:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+0hGUQ7bqOFBawwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWNmNDM1YzAtOWQyOC00NzdhLTkwYTktMWI0ZmQ3NWNk
YTc2MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
ZjkyOGVlYTEtYTZmZC00YzUzLTkxNTMtZGUyY2JjMjAwZGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjsASwPZV4YUz2qzcGA46EOzOPZQ02hxKW8dM
538icXSYccA9c6ErTwXECM6bhYI/A4zUDI5hMhM0vPv8u5DD57vjyNhgIjQF4Xud
Jo295vYziZ3Mqp8rtvjvAPsX1isWG37iQntV0grio6RI0qaGan1knKOISVioF0NN
EemOLmJB5OZZXCPpHSfaNe9ISLbfu8Cw+HjiST9xQBwwxPHexldex/2RcwajDUpR
bv46E1Nq7snb7v6M47W+3Ptu8fD9I4/JehfPF4MatSfKg7u7DK4wWoMiXE5E4kxe
LHJ9J2gS3XOFF9yV1hVl2ZyGV7Sb9jUJ7X1itQ/cnJyFKse3HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEcNHC8/4RTbzdFA7Y5hKrNAVGvEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0
MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRmZDc1Y2RhNzYvY2ZlOGY5NzItYjZlNS0z
M2M1LWI3YjUtY2RmNDE3N2NkNWY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMWNmNDM1YzAtOWQyOC00NzdhLTkw
YTktMWI0ZmQ3NWNkYTc2LzFjZjQzNWMwLTlkMjgtNDc3YS05MGE5LTFiNGZkNzVj
ZGE3Ni5jcmwwHwYDVR0jBBgwFoAU1T8UX0FTWvBBwtK/fTtQ5jUy/9QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8xY2Y0MzVjMC05ZDI4LTQ3N2EtOTBhOS0xYjRm
ZDc1Y2RhNzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7upMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADpMN5WfGt5NdYjPWNu7n7VCrNUW94oIJwgVTn2tTmG1/aw6phDOEDSj
BAetQudMFU5vG/wGuZ1W/zdj2REMBQ/3B3nEqONtMjp0fikXd5jw6IjznCZgArpB
JygaqMbIQxdzgge1SAaQKJISTrn5SRQoLMSzvfbuiRV8FK+s/yZLckwBTRwfXqwI
606Bbfd0K7ZUKbQnnMo1WbwZ1Fwjzg1tHLOIOEDv6FQAJ4EM5Z5ELUDEy25THCKQ
7qg1367mzA+5TEbXkCSggGv41LM+xINbH4xgcWh2FqjaZ2CYcpva0Un9JzmSxOs+
bzok85I97sYJSBzwQ/8kd5XP6g/8o+4=
-----END CERTIFICATE-----
Generated at Fri Jun 6 17:46:24 2025 by rpki-client