Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/b52d05dc-5b82-3357-aae2-2192c9e4527d.roa
File:                     b52d05dc-5b82-3357-aae2-2192c9e4527d.roa (raw, json)
Hash identifier:          RyWI/CszqoppoUNy7NN4lRXGu6x7PD64QoOuftYUIB8=
Subject key identifier:   7A:85:3F:FA:90:E6:5B:8E:42:DE:F4:76:7E:15:1D:36:28:C5:6F:F6
Certificate issuer:       /CN=48b02ed2-f897-45be-b9fb-346294418ecb
Certificate serial:       010D0C9F43285849D85F863BC28B970519A07280
Authority key identifier: F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/b52d05dc-5b82-3357-aae2-2192c9e4527d.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     19331
IP address blocks:        192.80.204.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 11 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:86:3b:c2:8b:97:05:19:a0:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=48b02ed2-f897-45be-b9fb-346294418ecb
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=597d7991-a085-457f-851c-cf0aa56547e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:07:a6:ad:01:7e:75:b8:89:33:32:f8:1d:e4:
                    56:0c:85:c2:47:e4:f8:d5:6a:1b:96:e1:84:03:9c:
                    00:ad:3b:64:48:7f:78:a7:e3:e5:9d:b0:73:37:c6:
                    c4:6e:dc:09:1d:cb:4b:a9:1a:17:f0:ad:90:c7:a4:
                    75:1d:14:b1:e4:d8:9d:a6:e0:a0:ed:e7:da:c0:fa:
                    2b:db:cb:4b:5c:8c:2d:94:49:57:30:d9:5d:8e:a8:
                    92:af:9f:99:48:e6:47:44:3a:c5:d6:ef:93:da:19:
                    91:56:06:6c:d8:87:26:a4:54:0f:91:09:0c:6e:b6:
                    de:22:a9:80:23:eb:47:49:9e:f9:22:44:27:cd:0a:
                    40:ab:1e:50:4a:da:35:b1:f8:c4:66:ba:c1:bd:50:
                    45:da:cc:e8:a9:da:71:44:0c:6f:69:ad:33:d3:55:
                    db:5a:b1:50:32:37:4f:01:52:d3:56:ef:e7:86:e4:
                    2f:19:39:9e:97:7c:a4:46:a8:06:1c:0e:f0:27:2c:
                    7f:95:a0:ff:0b:c2:eb:ef:ec:92:e7:0a:88:c5:3d:
                    a1:4d:ab:c5:3b:7d:ff:77:4f:59:43:e6:53:1b:84:
                    e8:eb:ae:61:95:f3:60:9d:d8:e1:f1:fa:21:5d:3a:
                    44:cb:6f:44:27:51:82:0f:03:ef:ba:b3:34:72:a2:
                    8e:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:85:3F:FA:90:E6:5B:8E:42:DE:F4:76:7E:15:1D:36:28:C5:6F:F6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/b52d05dc-5b82-3357-aae2-2192c9e4527d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb/48b02ed2-f897-45be-b9fb-346294418ecb.crl

            X509v3 Authority Key Identifier:
                keyid:F1:28:43:67:33:74:AE:F1:64:92:07:BD:AD:45:63:79:C0:A8:82:F0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/48b02ed2-f897-45be-b9fb-346294418ecb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.204.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8a:ec:48:8e:56:a0:d7:bd:f7:29:fe:13:a9:7f:ff:c1:7d:2a:
         ae:f0:d8:f2:e3:67:a8:12:6d:42:6a:ac:47:74:ed:ce:ae:8d:
         2f:f2:6b:67:38:02:09:09:4e:6f:0a:36:16:87:83:50:6f:81:
         a2:b6:d0:96:8c:09:79:db:71:10:0d:49:69:42:e7:43:05:5b:
         41:03:68:46:76:a4:d7:f8:86:e9:da:5e:8b:02:a1:f9:b5:f9:
         9f:32:8a:87:0c:92:36:b4:5b:52:69:75:35:84:34:96:b7:53:
         ba:5b:d1:89:f5:f5:b3:15:f7:aa:51:f1:bf:e0:ff:d2:03:dc:
         bf:af:b0:e8:18:54:eb:00:c1:d2:0f:ab:94:23:f3:8f:0e:2e:
         b8:14:00:cf:18:93:07:68:ab:3b:8a:21:8c:db:9a:43:cb:cf:
         ae:89:04:a0:aa:bb:4e:48:1f:56:bc:cf:2e:c7:c5:a8:65:7d:
         fd:ba:0c:38:5b:82:8d:0d:6f:16:11:95:21:01:b3:f8:34:04:
         f4:47:37:2e:a3:3c:f1:e9:ff:96:d6:9d:fd:f0:cd:4d:90:8d:
         e4:18:a9:0c:e1:21:52:3e:e5:fa:a7:35:7b:03:d7:cd:99:2a:
         1a:51:04:ea:d9:02:f5:96:75:36:d0:bd:34:db:06:c3:bc:32:
         4b:40:9d:d5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX4Y7wouXBRmgcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDhiMDJlZDItZjg5Ny00NWJlLWI5ZmItMzQ2Mjk0NDE4
ZWNiMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NTk3ZDc5OTEtYTA4NS00NTdmLTg1MWMtY2YwYWE1NjU0N2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQemrQF+dbiJMzL4HeRWDIXCR+T41WobluGE
A5wArTtkSH94p+PlnbBzN8bEbtwJHctLqRoX8K2Qx6R1HRSx5NidpuCg7efawPor
28tLXIwtlElXMNldjqiSr5+ZSOZHRDrF1u+T2hmRVgZs2IcmpFQPkQkMbrbeIqmA
I+tHSZ75IkQnzQpAqx5QSto1sfjEZrrBvVBF2szoqdpxRAxvaa0z01XbWrFQMjdP
AVLTVu/nhuQvGTmel3ykRqgGHA7wJyx/laD/C8Lr7+yS5wqIxT2hTavFO33/d09Z
Q+ZTG4To665hlfNgndjh8fohXTpEy29EJ1GCDwPvurM0cqKOaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHqFP/qQ5luOQt70dn4VHTYoxW/2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80OGIw
MmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYyOTQ0MThlY2IvYjUyZDA1ZGMtNWI4Mi0z
MzU3LWFhZTItMjE5MmM5ZTQ1MjdkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDhiMDJlZDItZjg5Ny00NWJlLWI5
ZmItMzQ2Mjk0NDE4ZWNiLzQ4YjAyZWQyLWY4OTctNDViZS1iOWZiLTM0NjI5NDQx
OGVjYi5jcmwwHwYDVR0jBBgwFoAU8ShDZzN0rvFkkge9rUVjecCogvAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80OGIwMmVkMi1mODk3LTQ1YmUtYjlmYi0zNDYy
OTQ0MThlY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwFDMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIrsSI5WoNe99yn+E6l//8F9Kq7w2PLjZ6gSbUJqrEd07c6ujS/ya2c4
AgkJTm8KNhaHg1BvgaK20JaMCXnbcRANSWlC50MFW0EDaEZ2pNf4hunaXosCofm1
+Z8yiocMkja0W1JpdTWENJa3U7pb0Yn19bMV96pR8b/g/9ID3L+vsOgYVOsAwdIP
q5Qj848OLrgUAM8YkwdoqzuKIYzbmkPLz66JBKCqu05IH1a8zy7Hxahlff26DDhb
go0NbxYRlSEBs/g0BPRHNy6jPPHp/5bWnf3wzU2QjeQYqQzhIVI+5fqnNXsD182Z
KhpRBOrZAvWWdTbQvTTbBsO8MktAndU=
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:05:10 2025 by rpki-client