Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
File:                     7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa (raw, json)
Hash identifier:          pxZ90iF3EOLFO5wWWmc1JnLshcoxDySoCPIwW89cbz8=
Subject key identifier:   72:80:4C:D2:4A:AA:33:F0:4A:63:DC:FE:8C:9C:8B:62:9B:A3:A2:BF
Certificate issuer:       /CN=835152c2-2ed8-4151-8f82-ac9407335b2c
Certificate serial:       010D0C9F4328584A9D30DDF66C02DF436CCBA800
Authority key identifier: 8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     137443
IP address blocks:        192.185.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:dd:f6:6c:02:df:43:6c:cb:a8:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=835152c2-2ed8-4151-8f82-ac9407335b2c
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=24b71ec1-fe2a-4e7d-a080-ffd0d92e540f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:39:e7:cb:3a:cd:13:68:24:55:19:1a:92:49:
                    4b:6e:9e:61:17:b3:24:04:9b:bb:10:62:53:fd:10:
                    b2:93:09:01:6c:9a:32:a3:24:dd:4a:cf:da:f6:43:
                    24:f1:38:95:0e:f0:4b:41:25:d1:72:07:8d:81:dd:
                    a5:78:4c:04:02:bf:51:2b:ca:e9:0b:ba:b2:02:7f:
                    27:5c:4e:ce:08:4c:4e:72:2a:15:0b:15:29:8a:27:
                    63:9b:af:58:85:44:df:90:56:9b:bd:69:fa:9b:2f:
                    dc:44:00:6d:47:88:cb:87:19:db:18:82:66:93:47:
                    4d:3f:87:b5:bd:14:01:7b:88:4a:01:1f:f4:05:4a:
                    73:da:7c:e2:6b:11:6c:5d:0f:8f:dd:34:dd:8c:9b:
                    70:c0:c0:81:f9:ca:32:4c:ca:47:33:09:bb:0b:0f:
                    50:bd:05:42:84:95:7b:14:be:a9:2b:3c:92:d3:c3:
                    27:4e:11:0f:c5:d8:a4:56:0b:56:a7:df:20:47:69:
                    78:fb:70:39:03:d2:f9:a3:26:f1:f2:05:cf:7c:0c:
                    3d:28:09:2d:e6:84:34:d1:a5:ea:97:69:c6:fa:8e:
                    20:b1:ee:e1:e1:96:2c:0e:91:89:0c:41:87:d3:ce:
                    d3:12:a8:4b:0c:79:e3:c1:8d:59:33:cc:40:68:a8:
                    a5:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:80:4C:D2:4A:AA:33:F0:4A:63:DC:FE:8C:9C:8B:62:9B:A3:A2:BF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/7f47260d-5749-3d36-8e8a-d6c0a9e20298.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c/835152c2-2ed8-4151-8f82-ac9407335b2c.crl

            X509v3 Authority Key Identifier:
                keyid:8A:9F:74:D9:4C:B7:63:05:30:36:8F:0F:EC:45:9A:B7:E6:69:75:DE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/835152c2-2ed8-4151-8f82-ac9407335b2c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.185.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3c:7f:e9:67:d5:85:36:65:ce:d3:8c:6e:47:a1:6a:25:c3:
         2d:d2:5d:52:be:15:98:eb:f5:b9:1f:31:62:12:79:c7:f1:dd:
         6f:d2:c2:b2:83:db:74:b7:7d:80:9b:67:b1:61:db:3a:54:9e:
         6e:20:28:a9:34:0f:23:b5:4f:b8:80:8e:a4:9b:56:9b:1c:2e:
         02:c9:98:5a:66:45:72:7e:84:3f:5f:66:ce:df:a1:57:77:17:
         51:43:6a:1c:81:c6:e0:97:54:2a:51:12:f4:a7:ef:a7:28:f1:
         c7:69:a8:26:67:4f:dc:54:b5:bd:f4:0b:ae:0d:15:0b:65:31:
         3b:33:af:30:57:71:9a:90:30:c3:af:5b:b6:9e:96:e8:9a:fe:
         8d:d9:31:78:9d:9a:0a:f6:8b:83:7b:7b:6e:26:b0:1d:e3:6f:
         9c:34:3b:ba:dc:ba:04:9b:2c:5c:17:83:c8:43:d5:b6:d6:e1:
         72:79:d8:c7:58:df:1a:b6:cc:11:29:83:d5:e5:24:be:6e:f6:
         a0:39:a9:91:3d:9d:24:a1:85:eb:d3:13:97:cf:2d:48:39:03:
         8c:f5:41:98:f0:0e:37:1c:e8:82:2c:5e:a0:0c:b1:07:f1:a6:
         f6:75:dd:a5:eb:7f:c5:e4:93:f5:25:06:e7:7a:ea:fc:4a:e3:
         31:ba:95:d1
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqdMN32bALfQ2zLqAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODM1MTUyYzItMmVkOC00MTUxLThmODItYWM5NDA3MzM1
YjJjMB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
MjRiNzFlYzEtZmUyYS00ZTdkLWEwODAtZmZkMGQ5MmU1NDBmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjnnyzrNE2gkVRkakklLbp5hF7MkBJu7EGJT
/RCykwkBbJoyoyTdSs/a9kMk8TiVDvBLQSXRcgeNgd2leEwEAr9RK8rpC7qyAn8n
XE7OCExOcioVCxUpiidjm69YhUTfkFabvWn6my/cRABtR4jLhxnbGIJmk0dNP4e1
vRQBe4hKAR/0BUpz2nziaxFsXQ+P3TTdjJtwwMCB+coyTMpHMwm7Cw9QvQVChJV7
FL6pKzyS08MnThEPxdikVgtWp98gR2l4+3A5A9L5oybx8gXPfAw9KAkt5oQ00aXq
l2nG+o4gse7h4ZYsDpGJDEGH087TEqhLDHnjwY1ZM8xAaKil9QIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFHKATNJKqjPwSmPc/oyci2Kbo6K/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy84MzUx
NTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0MDczMzViMmMvN2Y0NzI2MGQtNTc0OS0z
ZDM2LThlOGEtZDZjMGE5ZTIwMjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvODM1MTUyYzItMmVkOC00MTUxLThm
ODItYWM5NDA3MzM1YjJjLzgzNTE1MmMyLTJlZDgtNDE1MS04ZjgyLWFjOTQwNzMz
NWIyYy5jcmwwHwYDVR0jBBgwFoAUip902Uy3YwUwNo8P7EWat+Zpdd4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy84MzUxNTJjMi0yZWQ4LTQxNTEtOGY4Mi1hYzk0
MDczMzViMmMuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAwLkwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAXTx/6WfVhTZlztOMbkehaiXDLdJdUr4VmOv1uR8xYhJ5x/Hdb9LCsoPb
dLd9gJtnsWHbOlSebiAoqTQPI7VPuICOpJtWmxwuAsmYWmZFcn6EP19mzt+hV3cX
UUNqHIHG4JdUKlES9Kfvpyjxx2moJmdP3FS1vfQLrg0VC2UxOzOvMFdxmpAww69b
tp6W6Jr+jdkxeJ2aCvaLg3t7biawHeNvnDQ7uty6BJssXBeDyEPVttbhcnnYx1jf
GrbMESmD1eUkvm72oDmpkT2dJKGF69MTl88tSDkDjPVBmPAONxzogixeoAyxB/Gm
9nXdpet/xeST9SUG53rq/ErjMbqV0Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:35:11 2025 by rpki-client