Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa
File:                     00a37318-afa8-384f-b4e4-90f8dd8523ea.roa (raw, json)
Hash identifier:          1qMZ7UZ/zJHSQUseAegKo6E5/CGOsswYHdkNpAPwBV0=
Subject key identifier:   00:DD:F9:EC:90:9F:53:54:42:1E:B7:1E:C8:3E:E3:51:B5:89:DB:CC
Certificate issuer:       /CN=44bc2b87-223c-4280-a9b3-634e66111eeb
Certificate serial:       010D0C9F4328584A6C55E27853353088C9933E00
Authority key identifier: 3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa
Signing time:             Sun 06 Jul 2025 01:00:49 +0000
ROA not before:           Sun 06 Jul 2025 01:00:49 +0000
ROA not after:            Sat 04 Oct 2025 01:00:49 +0000
asID:                     397373
IP address blocks:        192.154.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 11 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6c:55:e2:78:53:35:30:88:c9:93:3e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=44bc2b87-223c-4280-a9b3-634e66111eeb
        Validity
            Not Before: Jul  6 01:00:49 2025 GMT
            Not After : Oct  4 01:00:49 2025 GMT
        Subject: CN=d2d07f78-f345-4184-bfc0-518ab2ad5900
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:82:71:5b:dc:f7:f4:ab:7e:09:ee:fb:55:a3:
                    1f:c1:e5:fa:bb:e3:a1:4f:d5:fe:88:eb:25:f8:06:
                    13:e5:9f:61:b2:e9:2a:16:3c:3d:67:99:46:d0:a8:
                    d0:72:75:50:9f:83:7f:44:9a:2e:1f:11:76:05:53:
                    d8:06:61:a3:c8:42:1a:a4:96:29:74:eb:d4:15:0b:
                    86:7c:77:4c:f6:5d:55:01:6b:c8:a9:51:78:4f:72:
                    a5:45:e8:bc:b6:b8:8d:89:0e:65:36:69:25:5f:e1:
                    61:17:3b:a5:02:99:d8:50:f6:83:94:a5:57:24:ae:
                    df:3d:25:0d:8c:c2:ec:31:38:43:a3:27:a0:02:92:
                    5d:1d:49:42:47:5c:31:77:28:bd:70:98:6d:7a:e9:
                    8b:32:7e:5c:09:a5:1d:fd:a9:9d:14:32:8f:d0:51:
                    c4:81:2a:f7:23:d7:9e:73:f6:08:3f:84:33:3d:04:
                    d3:5b:20:2c:9a:7b:7b:8f:b1:2b:53:42:60:fe:4d:
                    cb:70:7d:a4:83:96:10:c9:27:bf:ca:e6:bc:2f:2b:
                    07:99:c7:bb:a5:e4:bf:45:6c:5d:e1:52:34:58:c5:
                    d8:65:a6:75:c9:ea:ce:c8:aa:bd:e3:bd:a4:24:db:
                    91:81:55:d7:9b:d0:e2:03:c7:2c:19:ff:d5:95:72:
                    3b:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:DD:F9:EC:90:9F:53:54:42:1E:B7:1E:C8:3E:E3:51:B5:89:DB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/00a37318-afa8-384f-b4e4-90f8dd8523ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb/44bc2b87-223c-4280-a9b3-634e66111eeb.crl

            X509v3 Authority Key Identifier:
                keyid:3F:18:D6:D5:4B:8C:63:68:AE:0E:D9:F7:7E:98:10:94:E5:E0:ED:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/44bc2b87-223c-4280-a9b3-634e66111eeb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.154.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6f:5e:2a:51:c7:9f:75:d0:ec:67:1e:3f:ff:90:d5:db:39:6e:
         29:c4:29:f2:cd:1f:ea:90:0d:17:36:9e:cc:96:eb:33:5e:5e:
         ef:af:e9:29:5d:3f:e3:fa:3b:f1:08:f4:a1:19:18:96:cf:99:
         42:f2:88:88:28:a3:2c:df:8b:3a:45:14:52:9e:30:dd:3a:08:
         10:a1:92:67:0a:40:69:22:48:0c:b2:49:47:2f:4e:2b:2b:12:
         d4:00:63:e8:aa:ed:5d:d1:0c:39:55:6b:46:c4:c1:fe:b4:19:
         96:50:a5:c6:89:b5:11:5a:a3:60:b0:55:b5:6a:39:d1:c3:75:
         1e:ac:9f:ca:1b:ce:4d:d5:bc:ec:89:27:4f:52:88:7d:3a:ce:
         ec:3a:76:b8:17:b7:38:60:22:b5:ea:e0:61:99:d3:fd:63:8b:
         7c:b7:42:b9:6b:b4:29:b5:00:5d:23:25:75:52:c3:f4:66:c9:
         16:87:3e:d5:9c:00:49:4a:c8:54:c6:06:91:41:bb:72:39:49:
         00:fc:9c:1b:72:ab:03:cc:d4:62:46:3f:2b:2d:8a:28:68:75:
         a1:9f:ee:2c:dc:d2:9a:2d:25:76:0a:d6:69:99:8b:e8:6a:a8:
         af:c6:fd:01:75:2b:a3:41:c3:68:91:47:cb:92:a0:7c:3b:68:
         3a:c4:43:9e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpsVeJ4UzUwiMmTPgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDRiYzJiODctMjIzYy00MjgwLWE5YjMtNjM0ZTY2MTEx
ZWViMB4XDTI1MDcwNjAxMDA0OVoXDTI1MTAwNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZDJkMDdmNzgtZjM0NS00MTg0LWJmYzAtNTE4YWIyYWQ1OTAwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIJxW9z39Kt+Ce77VaMfweX6u+OhT9X+iOsl
+AYT5Z9hsukqFjw9Z5lG0KjQcnVQn4N/RJouHxF2BVPYBmGjyEIapJYpdOvUFQuG
fHdM9l1VAWvIqVF4T3KlRei8triNiQ5lNmklX+FhFzulApnYUPaDlKVXJK7fPSUN
jMLsMThDoyegApJdHUlCR1wxdyi9cJhteumLMn5cCaUd/amdFDKP0FHEgSr3I9ee
c/YIP4QzPQTTWyAsmnt7j7ErU0Jg/k3LcH2kg5YQySe/yua8LysHmce7peS/RWxd
4VI0WMXYZaZ1yerOyKq9472kJNuRgVXXm9DiA8csGf/VlXI7fwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFADd+eyQn1NUQh63Hsg+41G1idvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS80NGJj
MmI4Ny0yMjNjLTQyODAtYTliMy02MzRlNjYxMTFlZWIvMDBhMzczMTgtYWZhOC0z
ODRmLWI0ZTQtOTBmOGRkODUyM2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNDRiYzJiODctMjIzYy00MjgwLWE5
YjMtNjM0ZTY2MTExZWViLzQ0YmMyYjg3LTIyM2MtNDI4MC1hOWIzLTYzNGU2NjEx
MWVlYi5jcmwwHwYDVR0jBBgwFoAUPxjW1UuMY2iuDtn3fpgQlOXg7XowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS80NGJjMmI4Ny0yMjNjLTQyODAtYTliMy02MzRl
NjYxMTFlZWIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwJrxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG9eKlHHn3XQ7GceP/+Q1ds5binEKfLNH+qQDRc2nsyW6zNeXu+v6Sld
P+P6O/EI9KEZGJbPmULyiIgooyzfizpFFFKeMN06CBChkmcKQGkiSAyySUcvTisr
EtQAY+iq7V3RDDlVa0bEwf60GZZQpcaJtRFao2CwVbVqOdHDdR6sn8obzk3VvOyJ
J09SiH06zuw6drgXtzhgIrXq4GGZ0/1ji3y3QrlrtCm1AF0jJXVSw/RmyRaHPtWc
AElKyFTGBpFBu3I5SQD8nBtyqwPM1GJGPystiihodaGf7izc0potJXYK1mmZi+hq
qK/G/QF1K6NBw2iRR8uSoHw7aDrEQ54=
-----END CERTIFICATE-----
Generated at Thu Jul 10 14:02:18 2025 by rpki-client