Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
File:                     249ec9c1-aae0-3b16-a897-6f80b435a876.roa (raw, json)
Hash identifier:          sHqlRkMW2+e5z+xZvGPnuM7DuXw9ZPftjgl10LLqBV4=
Subject key identifier:   87:B1:00:47:56:29:BD:E2:2D:B6:2B:62:18:96:41:12:25:E4:DE:1A
Certificate issuer:       /CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
Certificate serial:       010D0C9F4328584A612B0D334271D4CDC9111C20
Authority key identifier: F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa
Signing time:             Wed 02 Jul 2025 01:00:49 +0000
ROA not before:           Wed 02 Jul 2025 01:00:49 +0000
ROA not after:            Tue 30 Sep 2025 01:00:49 +0000
asID:                     16509
IP address blocks:        192.0.55.0/24 maxlen: 24
                          192.0.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 10 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:61:2b:0d:33:42:71:d4:cd:c9:11:1c:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4018bfe9-5643-488a-a9cd-39cb78cadfa1
        Validity
            Not Before: Jul  2 01:00:49 2025 GMT
            Not After : Sep 30 01:00:49 2025 GMT
        Subject: CN=cbf52c31-7e05-4371-9f4f-04e59fd8bb00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:d5:53:95:f6:e2:04:ca:3d:0a:52:0a:89:b2:
                    e4:03:d5:70:42:59:6a:f0:91:8d:a9:2f:f2:5f:fc:
                    98:68:ba:1d:13:bd:27:57:0b:0c:a6:63:2a:e9:42:
                    8c:29:88:23:2f:12:a9:2e:24:83:d7:b3:4f:e3:5e:
                    19:6c:c5:c6:a2:67:49:9e:cc:a3:18:0a:2d:d6:58:
                    b1:e4:62:e9:ed:38:18:ee:09:bd:c7:78:a2:9d:35:
                    f5:8c:92:62:e7:b6:e1:f3:45:ee:00:21:23:97:61:
                    7f:5f:ba:9d:01:be:4d:9e:f7:bf:e6:ed:fc:fa:39:
                    1a:e3:b4:1a:06:d5:cb:06:09:a2:7f:9f:3d:0d:f6:
                    fc:db:c4:b6:bf:2d:6d:2d:cc:0d:fd:fb:e7:e0:f7:
                    fd:3d:10:39:29:41:41:04:0f:1c:73:5b:13:78:f9:
                    69:a1:bd:58:33:0a:94:65:c1:3e:f0:9a:3b:33:f8:
                    7e:aa:3f:88:18:72:5c:48:95:9f:c1:ea:c6:1c:9b:
                    70:e6:c3:b9:b6:dc:62:c9:05:3d:24:0d:d5:55:45:
                    a4:e0:b9:ac:05:8a:c9:d7:e2:85:b8:f1:62:8d:1e:
                    cb:8f:57:c6:70:40:85:76:d6:37:7c:a7:8c:f5:48:
                    ba:f3:e4:26:23:57:55:f3:8d:d4:39:5a:30:6c:b8:
                    60:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B1:00:47:56:29:BD:E2:2D:B6:2B:62:18:96:41:12:25:E4:DE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/249ec9c1-aae0-3b16-a897-6f80b435a876.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1/4018bfe9-5643-488a-a9cd-39cb78cadfa1.crl

            X509v3 Authority Key Identifier:
                keyid:F7:68:18:28:35:2F:9F:72:DC:2C:32:33:44:CB:52:88:D2:C7:1A:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/4018bfe9-5643-488a-a9cd-39cb78cadfa1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.0.55.0/24
                  192.0.62.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:e4:ab:21:05:c3:3b:80:e5:f2:11:59:01:30:e6:1c:a1:19:
         f5:de:9d:fa:9b:f0:28:39:1b:fa:32:bd:50:85:3f:ed:73:54:
         d4:13:11:4d:ab:f2:ce:cd:7c:b6:b7:10:6f:c9:e5:c4:47:e2:
         d6:17:48:8b:1e:ce:f9:c9:ee:d8:27:af:71:74:d5:4e:47:c6:
         f5:55:1e:38:71:38:74:83:15:4a:5e:44:dc:05:34:d4:4d:c7:
         95:24:62:5d:fd:b3:35:a0:59:9a:7c:ae:43:07:3e:93:71:7e:
         a4:86:b4:a2:83:7d:8a:5e:21:f4:62:2f:98:97:cc:ed:72:5d:
         fc:d8:24:f6:63:d8:ed:42:31:55:e0:23:98:c0:34:1b:ad:01:
         ee:a7:2a:3b:72:f1:8c:2b:c8:a9:dc:7f:d6:b5:83:30:20:62:
         df:d9:8a:4a:dd:ec:9f:e8:53:13:55:a8:2a:16:f1:35:f5:d8:
         63:77:ea:3d:79:09:fb:2b:3e:ee:cc:ee:ff:7f:f3:f9:c6:c7:
         42:69:c4:26:4c:df:76:89:e1:56:1f:da:2d:f6:77:67:d9:51:
         89:98:0c:5d:0d:57:0a:5c:ec:a6:91:71:49:9b:42:8d:f4:cf:
         cc:52:bd:32:47:ec:9d:e3:a3:f2:a7:1e:04:4b:89:f5:6c:9e:
         d1:dd:6d:a4
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEphKw0zQnHUzckRHCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDAxOGJmZTktNTY0My00ODhhLWE5Y2QtMzljYjc4Y2Fk
ZmExMB4XDTI1MDcwMjAxMDA0OVoXDTI1MDkzMDAxMDA0OVowLzEtMCsGA1UEAxMk
Y2JmNTJjMzEtN2UwNS00MzcxLTlmNGYtMDRlNTlmZDhiYjAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5dVTlfbiBMo9ClIKibLkA9VwQllq8JGNqS/y
X/yYaLodE70nVwsMpmMq6UKMKYgjLxKpLiSD17NP414ZbMXGomdJnsyjGAot1lix
5GLp7TgY7gm9x3iinTX1jJJi57bh80XuACEjl2F/X7qdAb5Nnve/5u38+jka47Qa
BtXLBgmif589Dfb828S2vy1tLcwN/fvn4Pf9PRA5KUFBBA8cc1sTePlpob1YMwqU
ZcE+8Jo7M/h+qj+IGHJcSJWfwerGHJtw5sO5ttxiyQU9JA3VVUWk4LmsBYrJ1+KF
uPFijR7Lj1fGcECFdtY3fKeM9Ui68+QmI1dV843UOVowbLhg3QIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFIexAEdWKb3iLbYrYhiWQRIl5N4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4
YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNiNzhjYWRmYTEvMjQ5ZWM5YzEtYWFlMC0z
YjE2LWE4OTctNmY4MGI0MzVhODc2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNDAxOGJmZTktNTY0My00ODhhLWE5
Y2QtMzljYjc4Y2FkZmExLzQwMThiZmU5LTU2NDMtNDg4YS1hOWNkLTM5Y2I3OGNh
ZGZhMS5jcmwwHwYDVR0jBBgwFoAU92gYKDUvn3LcLDIzRMtSiNLHGm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS80MDE4YmZlOS01NjQzLTQ4OGEtYTljZC0zOWNi
NzhjYWRmYTEuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAwAA3AwQA
wAA+MFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAC3kqyEFwzuA5fIRWQEw5hyhGfXenfqb8Cg5G/oyvVCFP+1z
VNQTEU2r8s7NfLa3EG/J5cRH4tYXSIsezvnJ7tgnr3F01U5HxvVVHjhxOHSDFUpe
RNwFNNRNx5UkYl39szWgWZp8rkMHPpNxfqSGtKKDfYpeIfRiL5iXzO1yXfzYJPZj
2O1CMVXgI5jANButAe6nKjty8YwryKncf9a1gzAgYt/Zikrd7J/oUxNVqCoW8TX1
2GN36j15CfsrPu7M7v9/8/nGx0JpxCZM33aJ4VYf2i32d2fZUYmYDF0NVwpc7KaR
cUmbQo30z8xSvTJH7J3jo/KnHgRLifVsntHdbaQ=
-----END CERTIFICATE-----
Generated at Wed Jul 9 15:43:29 2025 by rpki-client