Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/9f5fb26b-c81a-38bf-9e83-f011251fc06d.roa
File:                     9f5fb26b-c81a-38bf-9e83-f011251fc06d.roa (raw, json)
Hash identifier:          EtW6K9vsJnkW7v19tkX/v1oVnTuCmOJdS8fanczniGQ=
Subject key identifier:   37:F5:A3:2A:B9:8C:96:C9:EC:4C:A5:E2:C4:A8:75:87:91:BA:5A:2D
Certificate issuer:       /CN=1226980a-2c43-43da-83fd-198696a9b02e
Certificate serial:       010D0C9F4328584A0C0562A787E8361E78F312C0
Authority key identifier: E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/9f5fb26b-c81a-38bf-9e83-f011251fc06d.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        207.110.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 12 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:62:a7:87:e8:36:1e:78:f3:12:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1226980a-2c43-43da-83fd-198696a9b02e
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=151c92a7-70cb-4de8-b827-8697b94ce470
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:71:c7:65:07:52:ea:65:d1:4c:9b:c9:58:e6:
                    03:7f:93:71:66:1f:d7:ff:33:52:68:15:7d:55:82:
                    47:a9:1e:bc:9e:63:75:ed:44:25:63:78:6c:55:dd:
                    7f:1b:89:46:15:cc:c8:49:b7:87:0e:02:e3:dd:ce:
                    2d:15:d5:ca:7e:b2:42:e5:12:5d:1d:1d:88:f7:e1:
                    94:90:47:64:d2:fa:36:3e:9c:c1:8a:de:21:80:6e:
                    4e:43:32:67:55:7a:c4:3c:db:db:71:1a:a9:ab:9c:
                    a1:83:e7:bd:51:57:1b:a8:cd:3e:93:09:7b:72:81:
                    dc:61:b8:4c:65:c0:7f:66:00:2c:45:2a:ee:63:ff:
                    64:b1:1b:fa:b3:e8:ae:7b:f4:2f:0b:8b:08:40:a3:
                    e5:3d:ec:41:4e:7d:09:ae:b8:54:28:90:55:a1:41:
                    04:8a:3b:cf:71:a5:99:5f:9b:d9:69:6b:89:45:dc:
                    b0:fc:41:00:be:82:69:0f:c2:85:25:df:f1:25:29:
                    b9:3f:ad:4c:38:fd:37:de:71:76:97:8e:50:ac:9b:
                    1f:97:96:d6:71:bd:0d:f2:66:a3:6b:9b:88:58:13:
                    83:14:67:8d:f3:e6:8b:0c:13:e2:22:42:f5:5a:d2:
                    b6:0f:e4:cb:f3:26:10:3b:f9:e1:ba:0a:8f:c8:f4:
                    11:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:F5:A3:2A:B9:8C:96:C9:EC:4C:A5:E2:C4:A8:75:87:91:BA:5A:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/9f5fb26b-c81a-38bf-9e83-f011251fc06d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e/1226980a-2c43-43da-83fd-198696a9b02e.crl

            X509v3 Authority Key Identifier:
                keyid:E8:73:DD:6F:FA:D7:67:3A:F2:9A:83:1C:E0:12:63:99:41:57:9E:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/1226980a-2c43-43da-83fd-198696a9b02e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.110.139.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         39:06:4a:7c:dd:e4:58:3f:b7:44:1c:6f:41:2c:6f:d5:fc:51:
         00:7c:2a:00:61:06:98:c0:3d:45:b3:03:b6:b6:6d:59:a7:a2:
         b3:6d:f5:17:3f:63:91:54:a9:84:64:e5:07:59:91:83:f8:a0:
         81:8c:3f:5e:0e:9c:98:91:91:e1:7d:16:8d:da:58:b7:89:8c:
         6e:a1:fd:5b:90:28:5b:27:27:a5:fe:76:47:89:ef:ff:5b:f1:
         a3:84:18:bb:fc:bc:ff:56:57:3f:4a:ba:67:f2:6e:6e:7c:2f:
         bb:f8:5e:e3:2b:de:f4:e1:ee:9d:9d:ee:c6:12:00:f2:3c:18:
         40:0c:af:ed:62:fb:7b:c2:26:f9:3b:70:4e:b6:2e:02:67:0b:
         e8:e6:ea:3c:83:75:0c:ea:a3:74:18:84:c4:19:53:92:a1:31:
         d9:2a:22:99:e1:f2:70:ed:45:79:7a:26:3b:a5:df:fd:27:36:
         b9:14:a2:f7:d5:30:49:f9:eb:e7:b9:f1:78:06:7d:1f:1e:f9:
         f5:04:28:df:5a:10:70:4c:ac:47:50:89:54:46:f4:7a:4c:c8:
         b4:11:55:90:41:ae:47:90:d8:d9:ca:60:33:fc:d4:3d:b6:7e:
         e7:50:6f:0e:98:48:d1:ff:80:c7:a1:cb:bf:2d:be:8b:55:b5:
         69:02:46:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBWKnh+g2HnjzEsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIyNjk4MGEtMmM0My00M2RhLTgzZmQtMTk4Njk2YTli
MDJlMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
MTUxYzkyYTctNzBjYi00ZGU4LWI4MjctODY5N2I5NGNlNDcwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuHHHZQdS6mXRTJvJWOYDf5NxZh/X/zNSaBV9
VYJHqR68nmN17UQlY3hsVd1/G4lGFczISbeHDgLj3c4tFdXKfrJC5RJdHR2I9+GU
kEdk0vo2PpzBit4hgG5OQzJnVXrEPNvbcRqpq5yhg+e9UVcbqM0+kwl7coHcYbhM
ZcB/ZgAsRSruY/9ksRv6s+iue/QvC4sIQKPlPexBTn0JrrhUKJBVoUEEijvPcaWZ
X5vZaWuJRdyw/EEAvoJpD8KFJd/xJSm5P61MOP033nF2l45QrJsfl5bWcb0N8maj
a5uIWBODFGeN8+aLDBPiIkL1WtK2D+TL8yYQO/nhugqPyPQRKwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDf1oyq5jJbJ7Eyl4sSodYeRulotMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2
OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2OTZhOWIwMmUvOWY1ZmIyNmItYzgxYS0z
OGJmLTllODMtZjAxMTI1MWZjMDZkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMTIyNjk4MGEtMmM0My00M2RhLTgz
ZmQtMTk4Njk2YTliMDJlLzEyMjY5ODBhLTJjNDMtNDNkYS04M2ZkLTE5ODY5NmE5
YjAyZS5jcmwwHwYDVR0jBBgwFoAU6HPdb/rXZzrymoMc4BJjmUFXnsUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8xMjI2OTgwYS0yYzQzLTQzZGEtODNmZC0xOTg2
OTZhOWIwMmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz26LMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADkGSnzd5Fg/t0Qcb0Esb9X8UQB8KgBhBpjAPUWzA7a2bVmnorNt9Rc/
Y5FUqYRk5QdZkYP4oIGMP14OnJiRkeF9Fo3aWLeJjG6h/VuQKFsnJ6X+dkeJ7/9b
8aOEGLv8vP9WVz9Kumfybm58L7v4XuMr3vTh7p2d7sYSAPI8GEAMr+1i+3vCJvk7
cE62LgJnC+jm6jyDdQzqo3QYhMQZU5KhMdkqIpnh8nDtRXl6Jjul3/0nNrkUovfV
MEn56+e58XgGfR8e+fUEKN9aEHBMrEdQiVRG9HpMyLQRVZBBrkeQ2NnKYDP81D22
fudQbw6YSNH/gMehy78tvotVtWkCRtQ=
-----END CERTIFICATE-----
Generated at Fri Jul 11 06:11:31 2025 by rpki-client