Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa
File:                     84e603bf-8d7c-3709-a741-e124d8eda2f5.roa (raw, json)
Hash identifier:          CxtLY3xDbJlp+iimwBJKfAFSghi3xVFqv6d6+y6dPPE=
Subject key identifier:   7D:8A:9B:75:90:C3:AC:74:8B:60:A3:0A:F9:39:FE:5B:78:AC:F3:A6
Certificate issuer:       /CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
Certificate serial:       010D0C9F4328584A6DBB466F6899E6A5E890D2C0
Authority key identifier: 40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     0
IP address blocks:        192.74.210.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:46:6f:68:99:e6:a5:e8:90:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eb16ef8a-f8aa-4a14-8e30-b02633103fc5
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=0ef2e830-4392-40ae-b8b1-2e3116e5c922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:47:15:87:87:70:ba:9c:c3:66:b1:1a:c3:5b:
                    5b:3b:49:bf:e3:a4:46:37:d4:a1:ff:93:33:f1:d0:
                    87:71:fd:78:9f:e5:1f:eb:07:f4:69:e3:91:1e:03:
                    7f:b3:b7:97:96:c5:6b:a5:ef:91:6e:79:19:cd:eb:
                    31:9f:96:51:1e:af:0a:34:f3:72:88:32:ce:68:79:
                    21:39:63:1b:00:d0:d0:8e:27:98:51:0e:cb:41:f2:
                    a3:49:8e:c0:b9:ac:a8:40:25:82:a4:8f:4a:7b:37:
                    09:5c:7d:6d:56:73:c4:c9:8f:a6:5d:2f:de:87:da:
                    b4:cf:3a:02:d7:03:6c:ad:c8:65:0a:27:12:09:17:
                    49:a7:f3:b7:61:54:ad:4e:c1:f2:fd:30:d2:2c:65:
                    94:78:e2:3f:ca:40:14:3e:f9:4f:bc:bd:c5:df:00:
                    a4:44:cb:1e:86:05:dd:73:5a:b1:2d:81:dd:d1:e1:
                    7e:d4:75:60:b1:b1:c5:5f:33:0d:e5:2b:7d:5b:f9:
                    0e:2e:f2:fa:7b:6e:04:e5:1f:5c:49:c6:13:a1:9e:
                    1b:ca:b2:e1:a4:8a:60:76:63:f8:84:7f:76:5f:fe:
                    f1:79:8c:89:5b:d1:06:de:7b:cb:f6:00:bb:70:6a:
                    21:7e:81:9c:c8:91:16:bd:46:ff:58:0a:2c:53:96:
                    3c:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:8A:9B:75:90:C3:AC:74:8B:60:A3:0A:F9:39:FE:5B:78:AC:F3:A6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/84e603bf-8d7c-3709-a741-e124d8eda2f5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.crl

            X509v3 Authority Key Identifier:
                keyid:40:CE:2E:B0:74:D8:73:53:D6:4B:C7:F3:7D:3A:6C:4A:64:46:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/eb16ef8a-f8aa-4a14-8e30-b02633103fc5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.74.210.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         94:86:f0:31:8a:47:a1:cb:fc:1b:de:d8:f4:5e:56:95:a7:31:
         98:e8:c4:72:e8:58:ab:2b:b9:a6:b7:a0:ee:90:c7:64:c3:8c:
         6d:ae:b4:9c:ff:07:ce:56:93:5d:f6:d0:24:cb:84:1d:f4:67:
         5d:f0:45:62:a8:81:19:3b:27:ad:42:6e:65:fa:31:67:44:cb:
         b7:2f:db:40:ae:f6:13:fe:86:4e:58:6c:5d:c9:f3:cb:02:e5:
         4c:9a:cc:54:d9:7c:65:65:be:ed:59:86:8d:3a:74:5c:b5:49:
         01:f1:36:fb:16:fb:4b:04:ee:24:f2:35:2b:25:09:4f:c8:e1:
         6e:31:70:3b:fd:e7:62:e8:96:12:e3:11:84:70:49:71:8d:1a:
         e7:0e:72:44:5d:04:49:be:34:45:f4:66:f3:7d:ee:d5:b6:2c:
         2f:e9:6a:85:5d:0a:e0:19:5b:b4:e2:fa:5c:ec:46:de:f5:5a:
         56:ba:90:e3:a2:b5:fe:dc:e2:4d:08:d5:ac:f4:30:b9:8c:1c:
         53:ec:78:6e:1e:f9:bc:c5:f8:6f:d3:9f:27:68:d0:5d:8b:41:
         2b:47:b6:e0:cd:5e:f3:78:ac:68:1c:9e:7f:97:9c:25:d5:8b:
         3d:48:bf:95:b8:9d:e9:06:28:ff:d5:e3:d7:86:20:52:5c:45:
         bb:ca:4d:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEptu0ZvaJnmpeiQ0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWIxNmVmOGEtZjhhYS00YTE0LThlMzAtYjAyNjMzMTAz
ZmM1MB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
MGVmMmU4MzAtNDM5Mi00MGFlLWI4YjEtMmUzMTE2ZTVjOTIyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0cVh4dwupzDZrEaw1tbO0m/46RGN9Sh/5Mz
8dCHcf14n+Uf6wf0aeORHgN/s7eXlsVrpe+RbnkZzesxn5ZRHq8KNPNyiDLOaHkh
OWMbANDQjieYUQ7LQfKjSY7AuayoQCWCpI9KezcJXH1tVnPEyY+mXS/eh9q0zzoC
1wNsrchlCicSCRdJp/O3YVStTsHy/TDSLGWUeOI/ykAUPvlPvL3F3wCkRMsehgXd
c1qxLYHd0eF+1HVgsbHFXzMN5St9W/kOLvL6e24E5R9cScYToZ4byrLhpIpgdmP4
hH92X/7xeYyJW9EG3nvL9gC7cGohfoGcyJEWvUb/WAosU5Y8swIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFH2Km3WQw6x0i2CjCvk5/lt4rPOmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2
ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2MzMxMDNmYzUvODRlNjAzYmYtOGQ3Yy0z
NzA5LWE3NDEtZTEyNGQ4ZWRhMmY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZWIxNmVmOGEtZjhhYS00YTE0LThl
MzAtYjAyNjMzMTAzZmM1L2ViMTZlZjhhLWY4YWEtNGExNC04ZTMwLWIwMjYzMzEw
M2ZjNS5jcmwwHwYDVR0jBBgwFoAUQM4usHTYc1PWS8fzfTpsSmRGxSQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9lYjE2ZWY4YS1mOGFhLTRhMTQtOGUzMC1iMDI2
MzMxMDNmYzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwErSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJSG8DGKR6HL/Bve2PReVpWnMZjoxHLoWKsruaa3oO6Qx2TDjG2utJz/
B85Wk1320CTLhB30Z13wRWKogRk7J61CbmX6MWdEy7cv20Cu9hP+hk5YbF3J88sC
5UyazFTZfGVlvu1Zho06dFy1SQHxNvsW+0sE7iTyNSslCU/I4W4xcDv952LolhLj
EYRwSXGNGucOckRdBEm+NEX0ZvN97tW2LC/paoVdCuAZW7Ti+lzsRt71Wla6kOOi
tf7c4k0I1az0MLmMHFPseG4e+bzF+G/Tnydo0F2LQStHtuDNXvN4rGgcnn+XnCXV
iz1Iv5W4nekGKP/V49eGIFJcRbvKTRg=
-----END CERTIFICATE-----
Generated at Wed Jul 9 22:39:19 2025 by rpki-client