Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa
File:                     f32f1adb-ac8d-316e-a686-9fe4db005333.roa (raw, json)
Hash identifier:          NrDg9zCLTqQayh3SFsdrguK34YejPYfUmIS68fan5PM=
Subject key identifier:   37:E1:FA:DE:4E:F5:CD:FE:06:91:6A:DA:4D:CD:83:46:62:39:1B:DE
Certificate issuer:       /CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
Certificate serial:       010D0C9F4328584AB220D3E6B044581643B56480
Authority key identifier: 37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa
Signing time:             Thu 31 Jul 2025 01:00:32 +0000
ROA not before:           Thu 31 Jul 2025 01:00:32 +0000
ROA not after:            Wed 29 Oct 2025 01:00:32 +0000
asID:                     834
IP address blocks:        206.162.247.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 02 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b2:20:d3:e6:b0:44:58:16:43:b5:64:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=226a13a2-fbfb-49ed-89c3-233c745ffa52
        Validity
            Not Before: Jul 31 01:00:32 2025 GMT
            Not After : Oct 29 01:00:32 2025 GMT
        Subject: CN=a6282fed-1fe3-45a6-99dd-7e540872a4e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:01:59:ee:00:aa:c1:07:32:f9:fd:93:f3:f2:
                    84:c5:df:16:20:ad:85:65:f0:2d:d3:fb:22:1d:5b:
                    53:0e:73:ce:44:b0:bb:d4:df:b1:87:a1:5d:8f:18:
                    78:fa:1b:30:ab:6e:15:40:5f:8a:dc:39:6e:89:13:
                    43:91:3a:fe:12:63:ff:81:ae:f0:bf:07:ab:71:10:
                    ff:f1:96:37:aa:9e:62:f5:3c:1c:11:d2:70:0e:b9:
                    c1:60:cd:90:b4:1c:82:5d:72:75:a6:b9:3e:ca:d7:
                    5f:c8:91:2d:1d:ec:66:77:77:36:46:2c:ca:da:b3:
                    b9:df:47:bc:65:f7:05:98:09:d5:45:dd:bc:20:88:
                    56:0e:e8:de:01:b7:7b:3a:3a:a9:96:2f:bf:e5:38:
                    8f:4e:30:28:09:dd:2b:b1:06:63:a2:8c:5e:5f:96:
                    a7:40:63:d9:7d:5b:05:92:b0:f7:c9:2f:aa:99:df:
                    57:09:03:41:18:13:80:df:c8:84:6d:fd:23:e6:54:
                    09:ee:1d:b5:f4:75:cb:65:b9:71:40:4b:6b:4c:65:
                    7f:94:c8:ae:b0:b2:98:c2:8d:12:b9:67:09:0f:47:
                    11:e9:c5:8d:49:98:2f:36:be:cb:b9:68:18:c9:aa:
                    65:5a:08:1a:0e:f5:40:e9:e4:af:f3:a6:77:ed:6f:
                    1c:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:E1:FA:DE:4E:F5:CD:FE:06:91:6A:DA:4D:CD:83:46:62:39:1B:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/f32f1adb-ac8d-316e-a686-9fe4db005333.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52/226a13a2-fbfb-49ed-89c3-233c745ffa52.crl

            X509v3 Authority Key Identifier:
                keyid:37:9E:79:D6:82:32:87:D5:50:9F:39:A3:24:5A:E1:21:94:D9:CA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/226a13a2-fbfb-49ed-89c3-233c745ffa52.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.162.247.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c0:5c:4d:ea:2a:e8:c7:9e:42:8f:e6:f4:21:bc:2b:17:52:2b:
         ad:c8:18:d3:8f:22:80:b0:22:b6:fa:8d:c4:ec:6d:ff:fb:a5:
         13:4d:1e:03:1a:b1:0e:ef:99:50:3c:ed:b6:55:7d:ec:a4:52:
         cd:60:a5:55:5f:fd:1d:10:c3:b0:52:39:10:61:cf:b9:1e:7d:
         40:6a:65:32:55:01:86:ee:67:2d:93:5f:3e:ed:81:fe:bf:63:
         fd:b3:f9:65:9b:b2:b0:99:65:ef:dc:82:7f:fe:b5:6c:43:eb:
         13:dd:81:22:94:be:88:01:4a:8b:25:bb:c3:4a:51:2b:20:5a:
         71:83:db:cb:58:c7:17:f0:0c:53:e5:3d:7a:3d:30:99:9f:6d:
         06:04:2a:a6:c6:df:68:fc:6a:3d:3e:a2:55:58:8a:21:47:45:
         88:e0:b0:25:01:2d:b5:a6:12:eb:1b:95:2f:ed:3d:29:6b:c4:
         3c:fc:81:d8:d2:b4:d8:a1:39:0b:cd:dd:9b:2a:ae:a7:8a:59:
         9b:cc:4b:c7:73:56:af:7b:3f:8d:72:8b:7b:2f:fa:72:ab:f9:
         15:81:53:0f:6d:30:4c:46:1b:7c:36:9f:fd:ae:e3:7e:c1:17:
         5b:d6:47:0e:9a:e7:cd:6e:d8:96:86:e0:e3:c7:19:06:8e:a9:
         e5:21:10:70
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqyINPmsERYFkO1ZIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjI2YTEzYTItZmJmYi00OWVkLTg5YzMtMjMzYzc0NWZm
YTUyMB4XDTI1MDczMTAxMDAzMloXDTI1MTAyOTAxMDAzMlowLzEtMCsGA1UEAxMk
YTYyODJmZWQtMWZlMy00NWE2LTk5ZGQtN2U1NDA4NzJhNGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogFZ7gCqwQcy+f2T8/KExd8WIK2FZfAt0/si
HVtTDnPORLC71N+xh6Fdjxh4+hswq24VQF+K3DluiRNDkTr+EmP/ga7wvwercRD/
8ZY3qp5i9TwcEdJwDrnBYM2QtByCXXJ1prk+ytdfyJEtHexmd3c2RizK2rO530e8
ZfcFmAnVRd28IIhWDujeAbd7Ojqpli+/5TiPTjAoCd0rsQZjooxeX5anQGPZfVsF
krD3yS+qmd9XCQNBGBOA38iEbf0j5lQJ7h219HXLZblxQEtrTGV/lMiusLKYwo0S
uWcJD0cR6cWNSZgvNr7LuWgYyaplWggaDvVA6eSv86Z37W8c3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDfh+t5O9c3+BpFq2k3Ng0ZiORveMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZh
MTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNjNzQ1ZmZhNTIvZjMyZjFhZGItYWM4ZC0z
MTZlLWE2ODYtOWZlNGRiMDA1MzMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMjI2YTEzYTItZmJmYi00OWVkLTg5
YzMtMjMzYzc0NWZmYTUyLzIyNmExM2EyLWZiZmItNDllZC04OWMzLTIzM2M3NDVm
ZmE1Mi5jcmwwHwYDVR0jBBgwFoAUN5551oIyh9VQnzmjJFrhIZTZyhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yMjZhMTNhMi1mYmZiLTQ5ZWQtODljMy0yMzNj
NzQ1ZmZhNTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqL3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMBcTeoq6MeeQo/m9CG8KxdSK63IGNOPIoCwIrb6jcTsbf/7pRNNHgMa
sQ7vmVA87bZVfeykUs1gpVVf/R0Qw7BSORBhz7kefUBqZTJVAYbuZy2TXz7tgf6/
Y/2z+WWbsrCZZe/cgn/+tWxD6xPdgSKUvogBSoslu8NKUSsgWnGD28tYxxfwDFPl
PXo9MJmfbQYEKqbG32j8aj0+olVYiiFHRYjgsCUBLbWmEusblS/tPSlrxDz8gdjS
tNihOQvN3ZsqrqeKWZvMS8dzVq97P41yi3sv+nKr+RWBUw9tMExGG3w2n/2u437B
F1vWRw6a581u2JaG4OPHGQaOqeUhEHA=
-----END CERTIFICATE-----
Generated at Thu Jul 31 23:33:48 2025 by rpki-client