Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
File:                     0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa (raw, json)
Hash identifier:          faDNMGqzRvLdXsBpA+sBhBNBzDkSH4Fc3gGAl/vWiD0=
Subject key identifier:   98:EC:48:A7:6A:8A:AA:7B:6E:FA:AA:6F:7B:9D:B3:D2:FE:7F:FB:E0
Certificate issuer:       /CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
Certificate serial:       010D0C9F4328584A6826097ACC532857BF658528
Authority key identifier: 98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     26356
IP address blocks:        91.106.220.0/22 maxlen: 24
                          204.52.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 12 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:09:7a:cc:53:28:57:bf:65:85:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c178d21b-9bf0-4172-9ece-4a4d84fc66e7
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=27e71c49-dcb2-436e-8beb-dac24a86cc93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:43:0d:0c:5e:51:e8:bb:61:a8:5a:5a:d9:ab:
                    cd:e9:a0:1f:5e:38:27:18:96:8a:09:0e:99:7c:3c:
                    94:2d:93:05:c7:a5:b8:66:a8:f9:a3:2e:21:a0:df:
                    94:01:8a:c0:fc:2a:db:78:72:07:5b:b9:9d:7a:67:
                    d4:2e:b4:54:61:f5:38:5c:41:ff:eb:78:41:69:67:
                    ef:22:a5:79:64:64:85:5e:a3:31:cf:d5:70:47:5b:
                    68:15:4a:af:d4:53:64:c6:c3:33:97:68:83:a8:b8:
                    93:4b:f7:a0:b2:13:3e:21:ba:93:58:63:ac:e5:02:
                    fa:0b:08:63:02:1f:c5:e9:85:ed:2e:a1:3c:0b:72:
                    84:39:c2:1e:ff:7f:fd:57:4b:80:07:cc:22:ff:a3:
                    16:23:ce:9e:7b:af:f0:87:d8:85:10:dd:3c:f9:80:
                    07:fa:ff:90:62:85:d3:6d:93:42:c2:16:20:f1:94:
                    5a:a2:56:bf:29:3d:ec:6d:53:c2:a9:31:9f:ac:30:
                    57:0f:0b:f7:9d:c1:e0:ed:02:71:ec:6a:55:85:99:
                    f4:d8:87:7d:bc:49:30:19:0c:0e:40:5a:86:4f:9a:
                    44:31:32:00:3f:53:2c:57:db:69:dd:12:f8:e4:51:
                    00:b4:17:84:39:d3:a7:bf:fa:cb:15:2b:91:44:01:
                    85:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:EC:48:A7:6A:8A:AA:7B:6E:FA:AA:6F:7B:9D:B3:D2:FE:7F:FB:E0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/0fbbad58-17ff-3478-b4f4-425fe9d4c0c0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.crl

            X509v3 Authority Key Identifier:
                keyid:98:1B:22:24:7B:4C:CC:8D:BA:0F:59:A9:01:99:8A:D9:CF:BE:CF:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/c178d21b-9bf0-4172-9ece-4a4d84fc66e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  91.106.220.0/22
                  204.52.16.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:d8:da:76:ae:e3:60:56:b1:00:f2:d4:9c:7e:6a:d9:9e:7a:
         77:cb:36:0d:ed:4f:07:5f:ac:33:f0:92:12:fe:cc:9a:db:88:
         88:f5:f3:7f:f0:97:fa:4d:be:20:a5:71:28:0a:1e:07:a7:20:
         c6:53:bc:97:d5:fe:07:6b:63:0b:d7:f9:f9:5a:2d:e7:11:1b:
         5c:45:6a:d4:2a:65:95:c8:61:b3:cb:db:f8:1c:31:ac:8b:54:
         c2:a0:7b:83:b2:31:03:80:34:b0:54:85:50:a9:a5:ed:0e:07:
         cf:d0:fd:a6:c3:79:f9:45:8d:84:bf:b8:64:e0:f2:c9:a6:b4:
         42:9b:fa:d7:20:c4:c0:8a:be:1d:77:a3:15:83:67:d0:6c:be:
         34:21:05:cb:38:13:5f:a0:c3:1a:09:66:34:cc:aa:f5:62:f4:
         40:24:09:2d:1a:da:31:f4:26:fe:7d:59:d2:c3:37:f2:19:7b:
         0d:d9:f3:9c:29:92:79:9b:f4:92:7f:f0:f5:8b:1b:d4:dc:8c:
         77:a2:c8:b7:0a:88:60:00:65:df:ea:83:25:13:39:7f:47:1a:
         27:41:c3:26:47:a3:1d:a7:5d:30:ea:31:37:0d:49:e5:20:14:
         86:05:3c:42:68:74:e9:fc:c6:e3:e5:e5:95:ea:aa:ae:4f:52:
         b8:8a:d0:47
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEpoJgl6zFMoV79lhSgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzE3OGQyMWItOWJmMC00MTcyLTllY2UtNGE0ZDg0ZmM2
NmU3MB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MjdlNzFjNDktZGNiMi00MzZlLThiZWItZGFjMjRhODZjYzkzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh0MNDF5R6LthqFpa2avN6aAfXjgnGJaKCQ6Z
fDyULZMFx6W4Zqj5oy4hoN+UAYrA/CrbeHIHW7mdemfULrRUYfU4XEH/63hBaWfv
IqV5ZGSFXqMxz9VwR1toFUqv1FNkxsMzl2iDqLiTS/egshM+IbqTWGOs5QL6Cwhj
Ah/F6YXtLqE8C3KEOcIe/3/9V0uAB8wi/6MWI86ee6/wh9iFEN08+YAH+v+QYoXT
bZNCwhYg8ZRaola/KT3sbVPCqTGfrDBXDwv3ncHg7QJx7GpVhZn02Id9vEkwGQwO
QFqGT5pEMTIAP1MsV9tp3RL45FEAtBeEOdOnv/rLFSuRRAGFwQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFJjsSKdqiqp7bvqqb3uds9L+f/vgMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4
ZDIxYi05YmYwLTQxNzItOWVjZS00YTRkODRmYzY2ZTcvMGZiYmFkNTgtMTdmZi0z
NDc4LWI0ZjQtNDI1ZmU5ZDRjMGMwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvYzE3OGQyMWItOWJmMC00MTcyLTll
Y2UtNGE0ZDg0ZmM2NmU3L2MxNzhkMjFiLTliZjAtNDE3Mi05ZWNlLTRhNGQ4NGZj
NjZlNy5jcmwwHwYDVR0jBBgwFoAUmBsiJHtMzI26D1mpAZmK2c++z4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jMTc4ZDIxYi05YmYwLTQxNzItOWVjZS00YTRk
ODRmYzY2ZTcuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCW2rcAwQE
zDQQMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBACfY2nau42BWsQDy1Jx+atmeenfLNg3tTwdfrDPwkhL+zJrb
iIj183/wl/pNviClcSgKHgenIMZTvJfV/gdrYwvX+flaLecRG1xFatQqZZXIYbPL
2/gcMayLVMKge4OyMQOANLBUhVCppe0OB8/Q/abDeflFjYS/uGTg8smmtEKb+tcg
xMCKvh13oxWDZ9BsvjQhBcs4E1+gwxoJZjTMqvVi9EAkCS0a2jH0Jv59WdLDN/IZ
ew3Z85wpknmb9JJ/8PWLG9TcjHeiyLcKiGAAZd/qgyUTOX9HGidBwyZHox2nXTDq
MTcNSeUgFIYFPEJodOn8xuPl5ZXqqq5PUriK0Ec=
-----END CERTIFICATE-----
Generated at Sun Aug 10 18:13:53 2025 by rpki-client