Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
File:                     e003425d-3460-3b54-b4cb-c53aee15bc2b.roa (raw, json)
Hash identifier:          nfNE3tDPQ8YF0nAmANSIO3TRq5If1LK2nNFGF4iswbA=
Subject key identifier:   22:9B:FC:B6:52:D6:49:69:F4:F6:AA:29:F6:39:A8:1E:90:7B:37:61
Certificate issuer:       /CN=367e4bfe-b165-41fa-ab22-3f78555490cf
Certificate serial:       010D0C9F4328584AA160D00B3A7FA07A28688D00
Authority key identifier: DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        192.161.151.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:60:d0:0b:3a:7f:a0:7a:28:68:8d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=367e4bfe-b165-41fa-ab22-3f78555490cf
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=fc40e494-f818-4a7c-b4d3-90e4c1c73df6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ab:1f:29:bf:94:28:ae:a2:bf:88:58:6a:a5:
                    60:ca:74:ad:81:ea:24:3f:fb:76:75:0c:e2:89:8f:
                    5b:bb:81:bb:5d:a4:5a:0e:19:55:bb:9c:13:b2:22:
                    f5:23:d2:16:fd:ae:0a:29:28:fe:e3:8f:98:0d:c8:
                    33:2e:75:4d:8b:4b:e7:f0:f7:18:b1:e9:d5:47:be:
                    81:fd:c8:90:73:4f:1f:5d:22:63:5e:79:b0:be:dc:
                    d2:17:8b:00:88:fe:89:3c:6a:d1:4b:78:01:a4:10:
                    68:2f:a6:db:25:96:9f:aa:70:44:45:fc:d1:b7:1a:
                    08:fd:35:54:7d:00:3b:c3:0c:7d:d9:d9:be:7b:f6:
                    36:42:4f:05:66:53:86:5e:b1:29:38:e5:d7:3f:55:
                    c4:27:dc:c4:ff:38:8b:3a:62:66:0d:da:84:43:8a:
                    cf:bc:d8:b5:b6:16:6a:f6:58:07:90:b5:68:2b:60:
                    c1:7c:c2:31:91:da:08:bc:00:55:a6:d5:40:80:3d:
                    cc:96:00:86:ec:2d:08:6e:db:15:fd:4b:29:ef:35:
                    4e:10:02:15:98:da:22:46:bb:65:21:f2:92:7c:e1:
                    65:15:e2:d9:3f:72:fe:ef:0e:9c:97:02:69:50:6f:
                    8f:37:43:9c:b7:8d:a5:e1:a2:ce:2b:7f:37:f6:53:
                    07:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:9B:FC:B6:52:D6:49:69:F4:F6:AA:29:F6:39:A8:1E:90:7B:37:61
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/e003425d-3460-3b54-b4cb-c53aee15bc2b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf/367e4bfe-b165-41fa-ab22-3f78555490cf.crl

            X509v3 Authority Key Identifier:
                keyid:DD:1A:28:ED:85:AF:BF:6A:78:0A:9C:88:E4:EE:D0:E6:DC:2C:FA:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/367e4bfe-b165-41fa-ab22-3f78555490cf.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.161.151.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         56:63:6f:80:03:fc:fa:cd:f0:60:0c:6c:db:39:b9:4a:97:61:
         52:31:0b:5d:0f:38:6c:55:f4:9e:14:21:30:eb:dd:a3:69:70:
         3f:92:01:00:9c:0c:3b:0e:02:1b:69:72:4e:d5:0d:c3:f4:b8:
         83:69:f3:0a:14:48:45:28:d4:08:31:0b:43:6c:2a:0d:86:79:
         e0:dd:58:c4:27:14:ef:cb:c7:98:30:90:6f:62:c7:27:1b:10:
         b7:23:0a:a7:36:ce:30:c1:b5:78:cc:eb:79:73:87:cd:1b:6f:
         22:68:93:37:3b:1b:ca:c2:c5:b7:07:46:7f:26:be:ef:42:20:
         6d:26:a0:89:44:4a:8b:b5:f3:58:ae:53:c7:25:d6:28:d4:d3:
         52:1c:c2:6b:1f:32:cd:e4:9c:70:3c:47:46:fd:88:c2:fd:5a:
         2e:f1:90:99:e6:2b:47:02:97:b8:f2:e1:59:34:47:23:ac:8b:
         6a:78:e5:eb:b5:a9:0b:1c:85:8a:4a:4e:9a:8d:b6:d6:df:bb:
         4f:bc:12:8c:95:45:67:10:fd:8b:9f:85:c2:fb:96:98:ae:70:
         17:45:cb:26:2f:5a:3f:f8:ad:14:94:80:38:88:b6:49:65:f7:
         9a:5a:aa:35:65:4d:e9:55:be:94:e0:01:81:a8:e2:e3:52:ce:
         2b:a5:4c:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYNALOn+geihojQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzY3ZTRiZmUtYjE2NS00MWZhLWFiMjItM2Y3ODU1NTQ5
MGNmMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
ZmM0MGU0OTQtZjgxOC00YTdjLWI0ZDMtOTBlNGMxYzczZGY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3asfKb+UKK6iv4hYaqVgynStgeokP/t2dQzi
iY9bu4G7XaRaDhlVu5wTsiL1I9IW/a4KKSj+44+YDcgzLnVNi0vn8PcYsenVR76B
/ciQc08fXSJjXnmwvtzSF4sAiP6JPGrRS3gBpBBoL6bbJZafqnBERfzRtxoI/TVU
fQA7wwx92dm+e/Y2Qk8FZlOGXrEpOOXXP1XEJ9zE/ziLOmJmDdqEQ4rPvNi1thZq
9lgHkLVoK2DBfMIxkdoIvABVptVAgD3MlgCG7C0IbtsV/Usp7zVOEAIVmNoiRrtl
IfKSfOFlFeLZP3L+7w6clwJpUG+PN0Oct42l4aLOK3839lMH8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCKb/LZS1klp9PaqKfY5qB6QezdhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdl
NGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4NTU1NDkwY2YvZTAwMzQyNWQtMzQ2MC0z
YjU0LWI0Y2ItYzUzYWVlMTViYzJiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMzY3ZTRiZmUtYjE2NS00MWZhLWFi
MjItM2Y3ODU1NTQ5MGNmLzM2N2U0YmZlLWIxNjUtNDFmYS1hYjIyLTNmNzg1NTU0
OTBjZi5jcmwwHwYDVR0jBBgwFoAU3Roo7YWvv2p4CpyI5O7Q5tws+hMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zNjdlNGJmZS1iMTY1LTQxZmEtYWIyMi0zZjc4
NTU1NDkwY2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwKGXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFZjb4AD/PrN8GAMbNs5uUqXYVIxC10POGxV9J4UITDr3aNpcD+SAQCc
DDsOAhtpck7VDcP0uINp8woUSEUo1AgxC0NsKg2GeeDdWMQnFO/Lx5gwkG9ixycb
ELcjCqc2zjDBtXjM63lzh80bbyJokzc7G8rCxbcHRn8mvu9CIG0moIlESou181iu
U8cl1ijU01IcwmsfMs3knHA8R0b9iML9Wi7xkJnmK0cCl7jy4Vk0RyOsi2p45eu1
qQschYpKTpqNttbfu0+8EoyVRWcQ/YufhcL7lpiucBdFyyYvWj/4rRSUgDiItkll
95paqjVlTelVvpTgAYGo4uNSziulTLk=
-----END CERTIFICATE-----
Generated at Wed Aug 6 14:08:47 2025 by rpki-client