Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa
File:                     6c07d824-e2ca-3b76-8b60-54abdb48488a.roa (raw, json)
Hash identifier:          s4P35Vb6xKwW8zdGNxdN9hiwz7M5PoVBb6pAl5KIjRU=
Subject key identifier:   A6:56:B6:4B:35:0B:DC:B6:65:D8:D2:3B:DE:6E:71:83:85:01:EE:E1
Certificate issuer:       /CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
Certificate serial:       010D0C9F4328584ABB7CDF1E88483ED104C37FA0
Authority key identifier: B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa
Signing time:             Sun 03 Aug 2025 09:28:31 +0000
ROA not before:           Sun 03 Aug 2025 09:28:31 +0000
ROA not after:            Sat 01 Nov 2025 09:28:31 +0000
asID:                     28931
IP address blocks:        199.180.195.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bb:7c:df:1e:88:48:3e:d1:04:c3:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42ce9d16-dc85-4007-a59d-6c18d1a42aa2
        Validity
            Not Before: Aug  3 09:28:31 2025 GMT
            Not After : Nov  1 09:28:31 2025 GMT
        Subject: CN=4bf1018b-e6b3-472e-8bd6-b79a758692e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:05:ca:51:c2:1e:81:2f:6b:77:d3:b3:d3:47:
                    d8:35:68:7a:65:51:24:6b:6f:80:2d:54:b3:6a:17:
                    d5:61:fc:d1:fe:c3:80:0a:64:ed:52:67:5f:7a:37:
                    99:b0:6e:5e:92:84:89:f1:05:e9:5c:7d:38:9b:62:
                    3c:c7:0b:2c:46:5e:17:b7:fb:85:29:d7:f6:97:32:
                    96:40:7f:56:a6:75:f9:ba:73:0a:10:e4:cc:73:c2:
                    48:ee:4e:f3:2d:4f:2a:57:6c:4d:61:a6:6f:45:4d:
                    ab:79:8c:37:44:da:ef:24:65:df:44:07:a6:b4:4f:
                    02:a6:21:75:2f:7f:a1:bd:e0:ac:f2:4d:2a:c2:a9:
                    68:16:e4:cf:e9:88:66:cc:cd:0c:d2:4c:73:e2:74:
                    8c:e1:ac:db:fb:2c:f7:12:13:c9:eb:53:8d:94:6e:
                    14:b2:09:15:f3:4d:f0:ef:3a:3c:44:6c:f4:61:02:
                    b7:ee:5e:13:47:d9:ea:5a:9a:a5:ca:4c:fa:3a:cd:
                    8d:3b:14:23:29:af:9e:f4:00:73:a6:81:a4:53:b0:
                    b3:2c:1b:d8:28:b1:b0:52:61:a8:8a:3a:f1:2d:1b:
                    e3:50:e2:df:62:49:9c:4d:50:7b:45:0f:b1:d0:ef:
                    09:63:cf:5c:f9:7d:97:6c:6e:a5:29:0b:55:05:c9:
                    33:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:56:B6:4B:35:0B:DC:B6:65:D8:D2:3B:DE:6E:71:83:85:01:EE:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/6c07d824-e2ca-3b76-8b60-54abdb48488a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.crl

            X509v3 Authority Key Identifier:
                keyid:B6:6F:B4:68:9E:4A:59:AD:81:FA:69:34:12:82:04:39:33:1F:58:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/42ce9d16-dc85-4007-a59d-6c18d1a42aa2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.180.195.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:50:89:d8:8d:5d:bf:e1:81:46:34:bf:b5:fc:1c:8b:39:
         55:51:f4:c4:38:5e:6a:af:91:f2:9c:43:37:51:9f:4e:cb:05:
         2a:c1:44:02:63:5b:99:30:8e:ae:b1:a0:9d:39:d3:b6:37:bb:
         85:47:6d:18:a9:72:de:78:3f:ac:63:a1:14:34:8a:29:88:01:
         86:1e:95:56:31:00:15:fa:10:0a:ae:4c:4b:ce:65:56:fd:fb:
         37:44:5d:5e:4c:3e:0a:68:55:0e:a8:df:7f:32:68:28:d4:26:
         90:ab:50:9b:94:6b:33:5e:b9:43:71:74:91:88:4e:66:58:b5:
         56:f0:c6:77:6a:a6:3f:7f:17:10:d9:4e:88:70:ff:76:2e:77:
         85:ce:63:27:fc:25:22:95:cf:7f:6c:51:18:e2:20:47:86:b2:
         37:bd:dd:f2:6b:90:52:8b:bc:92:8b:2b:da:ad:cf:0c:3f:87:
         d8:92:99:d2:6b:61:78:6c:4f:2e:28:0b:c0:a1:3c:fb:b3:d5:
         f9:de:b0:1c:4e:f2:48:4b:98:51:38:41:cc:97:c0:71:09:12:
         38:ed:ba:52:10:d8:7b:29:1c:54:36:91:76:4f:ca:ea:91:43:
         71:72:fe:e4:18:50:1a:11:2f:42:61:48:53:84:84:f6:ad:f4:
         ef:5c:33:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq7fN8eiEg+0QTDf6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDJjZTlkMTYtZGM4NS00MDA3LWE1OWQtNmMxOGQxYTQy
YWEyMB4XDTI1MDgwMzA5MjgzMVoXDTI1MTEwMTA5MjgzMVowLzEtMCsGA1UEAxMk
NGJmMTAxOGItZTZiMy00NzJlLThiZDYtYjc5YTc1ODY5MmU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAXKUcIegS9rd9Oz00fYNWh6ZVEka2+ALVSz
ahfVYfzR/sOACmTtUmdfejeZsG5ekoSJ8QXpXH04m2I8xwssRl4Xt/uFKdf2lzKW
QH9WpnX5unMKEOTMc8JI7k7zLU8qV2xNYaZvRU2reYw3RNrvJGXfRAemtE8CpiF1
L3+hveCs8k0qwqloFuTP6YhmzM0M0kxz4nSM4azb+yz3EhPJ61ONlG4UsgkV803w
7zo8RGz0YQK37l4TR9nqWpqlykz6Os2NOxQjKa+e9ABzpoGkU7CzLBvYKLGwUmGo
ijrxLRvjUOLfYkmcTVB7RQ+x0O8JY89c+X2XbG6lKQtVBckzhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKZWtks1C9y2ZdjSO95ucYOFAe7hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNl
OWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4ZDFhNDJhYTIvNmMwN2Q4MjQtZTJjYS0z
Yjc2LThiNjAtNTRhYmRiNDg0ODhhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNDJjZTlkMTYtZGM4NS00MDA3LWE1
OWQtNmMxOGQxYTQyYWEyLzQyY2U5ZDE2LWRjODUtNDAwNy1hNTlkLTZjMThkMWE0
MmFhMi5jcmwwHwYDVR0jBBgwFoAUtm+0aJ5KWa2B+mk0EoIEOTMfWPwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80MmNlOWQxNi1kYzg1LTQwMDctYTU5ZC02YzE4
ZDFhNDJhYTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7TDMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHZUInYjV2/4YFGNL+1/ByLOVVR9MQ4XmqvkfKcQzdRn07LBSrBRAJj
W5kwjq6xoJ0507Y3u4VHbRipct54P6xjoRQ0iimIAYYelVYxABX6EAquTEvOZVb9
+zdEXV5MPgpoVQ6o338yaCjUJpCrUJuUazNeuUNxdJGITmZYtVbwxndqpj9/FxDZ
Tohw/3Yud4XOYyf8JSKVz39sURjiIEeGsje93fJrkFKLvJKLK9qtzww/h9iSmdJr
YXhsTy4oC8ChPPuz1fnesBxO8khLmFE4QcyXwHEJEjjtulIQ2HspHFQ2kXZPyuqR
Q3Fy/uQYUBoRL0JhSFOEhPat9O9cM4A=
-----END CERTIFICATE-----
Generated at Thu Aug 7 14:44:37 2025 by rpki-client