Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa
File:                     69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa (raw, json)
Hash identifier:          4p1cOAiKYupGPlpXzZHfQfHzejaVne5vAQ3TvZMbaBo=
Subject key identifier:   DE:98:D6:7C:26:C8:0E:17:FF:61:37:14:D7:0B:E2:E5:1E:2F:48:B5
Certificate issuer:       /CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
Certificate serial:       010D0C9F4328584A0D6A891EF3EB0227CDF47680
Authority key identifier: 61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     394161
IP address blocks:        199.43.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 10 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:89:1e:f3:eb:02:27:cd:f4:76:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c727dab7-c852-4d24-82ff-cf171b24f2f9
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=6b950e1c-2c6a-428f-a2fd-79639c78cb94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4e:01:47:1b:6c:be:b2:2a:f6:c5:36:83:7b:
                    3a:27:23:10:fc:57:9a:55:17:18:9d:a6:61:23:24:
                    08:37:f7:5b:ef:21:29:1c:47:07:ff:2a:2d:2a:ff:
                    55:5e:12:5e:ba:18:dd:25:d1:16:16:95:a0:62:1a:
                    04:9a:b9:8a:61:08:ec:57:50:b4:0e:46:f2:7d:ec:
                    95:0c:29:a6:4a:6e:c4:14:53:60:dc:47:e7:8b:e5:
                    be:b1:70:99:00:3e:bf:1a:b2:87:46:8b:b2:f1:73:
                    dc:ec:d6:80:33:21:b9:48:0f:71:0b:a5:fe:e9:b3:
                    1b:a8:1b:16:92:76:ac:66:8f:5f:cb:a8:3e:d0:8a:
                    02:b0:ce:56:20:62:ae:01:49:4b:f4:9f:92:c8:64:
                    19:54:17:5d:9d:ad:2c:d1:ff:ba:6a:bc:83:2e:95:
                    d5:cd:f0:cb:83:32:bf:3d:8a:9f:06:04:1f:5a:5c:
                    62:2b:e3:d0:85:c7:4d:be:06:19:31:d4:88:e0:cd:
                    9d:cb:c7:9a:49:c4:27:26:d5:0e:b3:66:30:9f:95:
                    e3:1a:c8:a7:e8:0b:9f:7e:2e:0e:94:fd:db:92:8b:
                    c7:49:89:a3:c3:dd:ef:0e:9d:2d:77:84:31:0d:84:
                    ab:bf:f5:b7:49:15:12:6e:58:a9:ea:16:d3:22:a8:
                    cc:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:98:D6:7C:26:C8:0E:17:FF:61:37:14:D7:0B:E2:E5:1E:2F:48:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/69684b64-0c9e-3e32-93a1-8e77d96c41b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9/c727dab7-c852-4d24-82ff-cf171b24f2f9.crl

            X509v3 Authority Key Identifier:
                keyid:61:1F:5A:5F:17:55:FD:D5:D0:A3:4E:20:8D:D4:8C:CC:1D:AF:69:1A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/c727dab7-c852-4d24-82ff-cf171b24f2f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.43.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9d:b4:5d:d1:85:b2:96:3b:e7:5b:7e:a2:c7:fd:79:48:24:70:
         99:7d:0d:fd:36:8f:e5:1c:40:e4:83:47:a4:53:10:d6:a2:68:
         a5:e0:17:b3:11:97:15:59:a1:6f:4a:d1:06:c1:1d:bc:86:33:
         82:90:c7:ff:bd:e6:60:ca:b1:fe:26:e2:8e:44:d7:ab:f8:6e:
         64:d5:41:89:6b:73:d0:de:8e:fa:81:6d:31:4a:4b:9f:1c:45:
         f6:fb:5f:e8:03:7a:13:d1:93:c2:11:32:eb:50:dd:c2:91:42:
         13:4b:e1:20:27:33:6f:c5:cd:9f:06:0a:ae:50:d6:de:01:96:
         9a:28:b8:44:63:2f:54:c4:d3:c6:62:b4:bb:35:c6:77:d4:4f:
         85:74:4d:e4:b1:54:91:19:c5:58:90:81:60:f8:22:9f:c2:36:
         96:95:f2:80:1e:86:9f:1a:90:22:25:52:8f:5c:90:e8:55:d4:
         09:f4:8d:dd:71:b6:b0:4c:6e:96:de:76:eb:d4:ed:70:b9:b2:
         9a:b0:92:70:e2:c6:d4:67:f0:39:de:2c:6d:3e:ab:68:d4:0c:
         59:76:84:36:f0:60:34:e1:16:d0:1f:fb:61:7e:58:1b:d2:92:
         b7:dc:e3:6c:d0:52:3e:22:e0:ae:77:2b:b9:77:ea:05:97:9a:
         bd:11:65:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNaoke8+sCJ830doAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzcyN2RhYjctYzg1Mi00ZDI0LTgyZmYtY2YxNzFiMjRm
MmY5MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
NmI5NTBlMWMtMmM2YS00MjhmLWEyZmQtNzk2MzljNzhjYjk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4U4BRxtsvrIq9sU2g3s6JyMQ/FeaVRcYnaZh
IyQIN/db7yEpHEcH/yotKv9VXhJeuhjdJdEWFpWgYhoEmrmKYQjsV1C0DkbyfeyV
DCmmSm7EFFNg3Efni+W+sXCZAD6/GrKHRouy8XPc7NaAMyG5SA9xC6X+6bMbqBsW
knasZo9fy6g+0IoCsM5WIGKuAUlL9J+SyGQZVBddna0s0f+6aryDLpXVzfDLgzK/
PYqfBgQfWlxiK+PQhcdNvgYZMdSI4M2dy8eaScQnJtUOs2Ywn5XjGsin6Auffi4O
lP3bkovHSYmjw93vDp0td4QxDYSrv/W3SRUSblip6hbTIqjMwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN6Y1nwmyA4X/2E3FNcL4uUeL0i1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3
ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3MWIyNGYyZjkvNjk2ODRiNjQtMGM5ZS0z
ZTMyLTkzYTEtOGU3N2Q5NmM0MWIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYzcyN2RhYjctYzg1Mi00ZDI0LTgy
ZmYtY2YxNzFiMjRmMmY5L2M3MjdkYWI3LWM4NTItNGQyNC04MmZmLWNmMTcxYjI0
ZjJmOS5jcmwwHwYDVR0jBBgwFoAUYR9aXxdV/dXQo04gjdSMzB2vaRowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9jNzI3ZGFiNy1jODUyLTRkMjQtODJmZi1jZjE3
MWIyNGYyZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxyv/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ20XdGFspY751t+osf9eUgkcJl9Df02j+UcQOSDR6RTENaiaKXgF7MR
lxVZoW9K0QbBHbyGM4KQx/+95mDKsf4m4o5E16v4bmTVQYlrc9DejvqBbTFKS58c
Rfb7X+gDehPRk8IRMutQ3cKRQhNL4SAnM2/FzZ8GCq5Q1t4BlpoouERjL1TE08Zi
tLs1xnfUT4V0TeSxVJEZxViQgWD4Ip/CNpaV8oAehp8akCIlUo9ckOhV1An0jd1x
trBMbpbeduvU7XC5spqwknDixtRn8DneLG0+q2jUDFl2hDbwYDThFtAf+2F+WBvS
krfc42zQUj4i4K53K7l36gWXmr0RZTE=
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:59:59 2025 by rpki-client