Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/831b9fb5-ba14-331b-9b51-c1643bbf2ec3.roa
File:                     831b9fb5-ba14-331b-9b51-c1643bbf2ec3.roa (raw, json)
Hash identifier:          dGl7bZJ5/HVxFWnatPhHKouy5+eWEsIIuu5Fspk4/W4=
Subject key identifier:   03:5E:78:1A:DA:75:D9:CE:57:62:7F:0A:61:6A:D5:6C:FD:FF:48:4F
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A9E961F3E6920467B68F62280
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/831b9fb5-ba14-331b-9b51-c1643bbf2ec3.roa
Signing time:             Thu 24 Jul 2025 01:00:50 +0000
ROA not before:           Thu 24 Jul 2025 01:00:50 +0000
ROA not after:            Wed 22 Oct 2025 01:00:50 +0000
asID:                     0
IP address blocks:        204.62.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9e:96:1f:3e:69:20:46:7b:68:f6:22:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jul 24 01:00:50 2025 GMT
            Not After : Oct 22 01:00:50 2025 GMT
        Subject: CN=4d3215e3-9dc3-4a78-bde6-1835dba4d1f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f7:18:ea:d5:69:f5:58:2d:1e:e3:11:b8:20:
                    8b:32:9e:8a:d3:e6:79:32:e6:f3:41:ac:40:37:3e:
                    a4:df:e8:b3:47:61:6c:23:ea:89:7d:df:f0:d4:59:
                    b5:df:df:d9:e9:ab:d4:72:37:db:bc:c1:6d:d8:35:
                    4a:a4:d2:23:52:18:03:d2:08:66:c1:a4:fe:ef:90:
                    14:6e:2b:49:26:67:fa:70:b9:a5:46:eb:a5:f9:c5:
                    90:46:3d:da:aa:7e:45:d3:55:06:c4:39:90:bf:cf:
                    53:6a:77:c1:2d:22:8f:1c:60:6c:bf:aa:b2:a7:f9:
                    d6:ae:18:18:94:3b:06:2e:b2:6b:96:31:33:1c:ae:
                    e4:a9:da:cd:51:43:2c:5d:68:75:7a:f9:9f:4a:3f:
                    9a:a0:52:8c:98:c6:f2:25:7e:e4:3e:d4:8f:e7:df:
                    a2:5a:65:be:d5:00:8f:87:0b:35:e2:56:e5:28:9d:
                    c1:f3:d0:40:11:0d:63:92:f0:29:c0:7f:a0:49:a0:
                    ba:2c:2a:64:07:92:41:7b:0e:00:42:72:c4:e9:9b:
                    b3:73:46:a2:7c:b3:d8:53:bf:cd:50:dd:0f:07:36:
                    17:74:59:ee:45:fb:57:a0:60:f6:f9:a4:db:93:13:
                    53:d5:79:da:cd:3a:86:25:3c:f0:c3:21:49:ba:d8:
                    71:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:5E:78:1A:DA:75:D9:CE:57:62:7F:0A:61:6A:D5:6C:FD:FF:48:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/831b9fb5-ba14-331b-9b51-c1643bbf2ec3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.62.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         57:28:1b:b0:19:bd:3c:f0:7b:24:52:6b:7a:21:7e:7a:6a:51:
         f2:fa:9b:35:9d:dd:00:f2:bb:3b:40:2b:ec:ab:3f:27:58:6b:
         e3:1c:3d:28:d9:7e:b3:c7:3c:3d:d9:3b:14:fd:0a:a7:0c:2e:
         44:65:75:74:df:65:4e:42:60:69:3c:f3:3b:14:6b:d9:9b:58:
         73:3e:cd:bf:81:be:e8:e8:03:18:cc:70:99:49:49:5d:df:0a:
         76:ab:4d:a5:e5:9e:ad:f7:cc:00:ea:d4:8b:7d:28:46:7e:af:
         a0:4f:4e:35:f0:10:a5:1d:2c:b7:81:6a:da:c3:1f:75:1c:23:
         0c:8a:9e:cb:52:3b:c3:b1:85:47:67:2e:33:6a:3e:b8:59:be:
         7e:5b:ef:11:80:85:4f:b8:48:6f:8e:0e:70:03:da:ed:4a:1e:
         cd:14:3f:97:ab:bc:e6:61:ac:a2:2b:06:1a:16:fc:cf:43:b4:
         35:58:4b:8d:4f:85:59:d6:20:bf:af:09:84:c5:d8:24:af:fe:
         96:bc:7b:68:1c:9b:49:79:44:e8:eb:f0:04:88:c3:6f:d1:b3:
         28:3a:78:10:66:f5:a4:03:e1:d4:ef:df:3f:dd:ae:4a:b6:d1:
         6d:a7:2f:5c:88:48:80:1e:30:3c:96:c7:75:59:6d:6a:81:a9:
         ac:22:56:96
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqelh8+aSBGe2j2IoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDcyNDAxMDA1MFoXDTI1MTAyMjAxMDA1MFowLzEtMCsGA1UEAxMk
NGQzMjE1ZTMtOWRjMy00YTc4LWJkZTYtMTgzNWRiYTRkMWYxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPcY6tVp9VgtHuMRuCCLMp6K0+Z5MubzQaxA
Nz6k3+izR2FsI+qJfd/w1Fm139/Z6avUcjfbvMFt2DVKpNIjUhgD0ghmwaT+75AU
bitJJmf6cLmlRuul+cWQRj3aqn5F01UGxDmQv89TanfBLSKPHGBsv6qyp/nWrhgY
lDsGLrJrljEzHK7kqdrNUUMsXWh1evmfSj+aoFKMmMbyJX7kPtSP59+iWmW+1QCP
hws14lblKJ3B89BAEQ1jkvApwH+gSaC6LCpkB5JBew4AQnLE6Zuzc0aifLPYU7/N
UN0PBzYXdFnuRftXoGD2+aTbkxNT1XnazTqGJTzwwyFJuthxxQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFANeeBraddnOV2J/CmFq1Wz9/0hPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvODMxYjlmYjUtYmExNC0z
MzFiLTliNTEtYzE2NDNiYmYyZWMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzD77MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFcoG7AZvTzweyRSa3ohfnpqUfL6mzWd3QDyuztAK+yrPydYa+McPSjZ
frPHPD3ZOxT9CqcMLkRldXTfZU5CYGk88zsUa9mbWHM+zb+BvujoAxjMcJlJSV3f
CnarTaXlnq33zADq1It9KEZ+r6BPTjXwEKUdLLeBatrDH3UcIwyKnstSO8OxhUdn
LjNqPrhZvn5b7xGAhU+4SG+ODnAD2u1KHs0UP5ervOZhrKIrBhoW/M9DtDVYS41P
hVnWIL+vCYTF2CSv/pa8e2gcm0l5ROjr8ASIw2/Rsyg6eBBm9aQD4dTv3z/drkq2
0W2nL1yISIAeMDyWx3VZbWqBqawiVpY=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:00:08 2025 by rpki-client