Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
File:                     6cae7079-d82b-3522-9dcc-9c972fbd2758.roa (raw, json)
Hash identifier:          oi6erI4jgZn0GKBl7puQ7q02ASmH+XqlQq9Lr33vSfc=
Subject key identifier:   3C:7D:9F:0B:E9:47:41:37:20:D4:52:41:0B:03:A7:84:A8:E2:2D:5D
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584AC0162F5C6A5054655CC92180
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        192.161.152.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:2f:5c:6a:50:54:65:5c:c9:21:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=11083334-59a4-41f8-aa54-b12ec2b35cc1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:29:18:52:d9:62:19:6e:02:c2:fb:cf:dc:41:
                    41:71:61:00:88:54:7b:11:8f:54:ba:e1:fd:a2:66:
                    64:32:cb:21:a5:21:61:f5:99:4d:4f:fc:a2:bb:6d:
                    40:40:f1:71:35:67:a7:e7:d7:1a:b8:71:e1:bb:6c:
                    52:7d:f1:19:73:e4:43:cb:df:57:0b:84:10:26:d9:
                    95:a9:cd:ba:fb:60:98:c5:48:e5:a5:2c:88:5f:1b:
                    91:15:fc:ac:f6:17:9c:16:aa:10:88:91:2a:dc:c1:
                    b7:3d:33:79:67:d8:ea:48:5b:38:77:60:0d:15:d6:
                    91:e4:8a:bc:14:4c:cd:2f:d2:4a:3a:d5:84:31:0d:
                    3a:85:90:95:55:2d:ca:46:52:fe:8e:54:8d:92:24:
                    c4:e7:7b:cd:8f:d7:8b:1f:a9:fd:79:1d:bf:66:32:
                    ad:83:ec:71:b7:4d:20:b2:a3:9b:ea:2f:91:e1:e9:
                    ef:0c:ce:fb:9a:54:ac:1c:e3:4e:26:10:f5:f7:91:
                    3e:ae:5e:d5:d8:e4:d7:b4:dd:1b:7b:40:e1:8b:0f:
                    9b:51:33:06:d1:82:c8:80:d4:12:83:ce:7f:24:8c:
                    7f:3c:66:ce:86:35:aa:e3:fa:9f:ba:2b:59:37:98:
                    93:0a:83:a2:71:53:1f:10:96:be:13:34:b6:6f:6a:
                    3a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:7D:9F:0B:E9:47:41:37:20:D4:52:41:0B:03:A7:84:A8:E2:2D:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/6cae7079-d82b-3522-9dcc-9c972fbd2758.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.152.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         81:f8:f7:92:9f:a7:f9:5a:f6:48:ab:0b:74:aa:44:28:bb:b7:
         50:79:24:3d:72:45:0f:12:b2:95:01:2a:23:41:94:49:0b:b8:
         b4:78:cf:66:21:30:28:65:33:96:f7:54:ac:77:bc:00:1c:f3:
         42:5b:54:05:eb:c2:72:25:44:05:4e:87:0c:e3:60:7d:7a:25:
         29:6c:b7:f7:dd:41:28:8e:5b:3a:67:4e:cf:ce:f4:ea:2c:55:
         bf:4d:c5:af:fc:47:f3:4c:fa:91:c9:a8:ab:6f:3f:55:e6:1d:
         dc:39:70:f3:6e:13:24:3e:e6:7d:ec:a5:4f:31:94:7a:c4:b2:
         f2:e7:20:0a:40:02:d2:bf:db:68:94:bd:a3:85:8a:df:4a:87:
         c8:25:63:87:05:85:0d:92:45:fc:d9:45:1b:e6:01:57:5f:9a:
         6e:9d:dd:b7:e6:6d:fa:bd:5b:e9:4f:ba:3b:b9:23:f3:3f:55:
         ed:99:2a:2e:43:d7:a7:a9:63:e4:4f:eb:35:ad:1e:e0:28:a3:
         e0:6d:17:ff:82:41:1c:a3:16:be:3d:cd:1a:17:87:36:41:4e:
         1a:80:c8:af:30:8d:2b:9f:d7:dc:ca:99:c5:3a:e8:c6:4c:f6:
         64:75:c3:0b:31:fd:15:eb:b6:75:bd:b6:ae:b2:3e:e4:f5:2e:
         a8:5e:8e:4c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFi9calBUZVzJIYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
MTEwODMzMzQtNTlhNC00MWY4LWFhNTQtYjEyZWMyYjM1Y2MxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtykYUtliGW4CwvvP3EFBcWEAiFR7EY9UuuH9
omZkMsshpSFh9ZlNT/yiu21AQPFxNWen59cauHHhu2xSffEZc+RDy99XC4QQJtmV
qc26+2CYxUjlpSyIXxuRFfys9hecFqoQiJEq3MG3PTN5Z9jqSFs4d2ANFdaR5Iq8
FEzNL9JKOtWEMQ06hZCVVS3KRlL+jlSNkiTE53vNj9eLH6n9eR2/ZjKtg+xxt00g
sqOb6i+R4envDM77mlSsHONOJhD195E+rl7V2OTXtN0be0Dhiw+bUTMG0YLIgNQS
g85/JIx/PGbOhjWq4/qfuitZN5iTCoOicVMfEJa+EzS2b2o6cQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDx9nwvpR0E3INRSQQsDp4So4i1dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvNmNhZTcwNzktZDgyYi0z
NTIyLTlkY2MtOWM5NzJmYmQyNzU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIH495Kfp/la9kirC3SqRCi7t1B5JD1yRQ8SspUBKiNBlEkLuLR4z2Yh
MChlM5b3VKx3vAAc80JbVAXrwnIlRAVOhwzjYH16JSlst/fdQSiOWzpnTs/O9Oos
Vb9Nxa/8R/NM+pHJqKtvP1XmHdw5cPNuEyQ+5n3spU8xlHrEsvLnIApAAtK/22iU
vaOFit9Kh8glY4cFhQ2SRfzZRRvmAVdfmm6d3bfmbfq9W+lPuju5I/M/Ve2ZKi5D
16epY+RP6zWtHuAoo+BtF/+CQRyjFr49zRoXhzZBThqAyK8wjSuf19zKmcU66MZM
9mR1wwsx/RXrtnW9tq6yPuT1Lqhejkw=
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:15:38 2025 by rpki-client