Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
File:                     aa132d09-6f7c-30f0-91e8-edc325846360.roa (raw, json)
Hash identifier:          wJUW9vzhVPMOpDOeKY1dkuvYm3Kv6W3AwCYw+jGMRMo=
Subject key identifier:   71:5F:6B:2A:87:59:46:D4:B5:C6:33:63:4F:9A:1E:2D:57:51:50:3E
Certificate issuer:       /CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
Certificate serial:       010D0C9F4328584A1E2AA16077A03BFCCF594B00
Authority key identifier: A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa
Signing time:             Sun 08 Jun 2025 01:00:49 +0000
ROA not before:           Sun 08 Jun 2025 01:00:49 +0000
ROA not after:            Sat 06 Sep 2025 01:00:49 +0000
asID:                     55091
IP address blocks:        198.73.15.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1e:2a:a1:60:77:a0:3b:fc:cf:59:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56a75261-4e27-478a-8f9e-71a9915ce9b4
        Validity
            Not Before: Jun  8 01:00:49 2025 GMT
            Not After : Sep  6 01:00:49 2025 GMT
        Subject: CN=134d51a9-9cfd-45bb-9f84-0ddea140efd6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:76:d4:5f:8e:81:98:fc:d5:c2:58:c7:44:a3:
                    ed:dd:0c:d7:52:ee:93:20:31:f2:a8:b9:bc:bb:5f:
                    d4:8c:13:f4:2a:4f:12:01:ff:1b:a0:bf:2a:96:84:
                    23:a9:73:8f:ab:b3:a8:f9:c5:54:86:10:3f:4a:5d:
                    b5:ab:71:23:4f:bb:30:fe:9d:34:97:83:28:3b:4a:
                    36:dc:d5:e3:e1:df:79:77:e8:cd:12:93:08:f9:e3:
                    eb:35:97:87:c9:11:17:f1:fa:5f:d7:d5:f5:0d:94:
                    2f:de:79:d1:2f:ef:7f:cd:d0:9d:26:2a:21:ba:31:
                    c6:89:91:7e:a4:c5:00:1a:6e:02:8f:0e:7f:0b:c6:
                    3f:5c:90:f2:fc:19:74:8f:1b:70:4b:f1:16:62:c7:
                    5b:9e:46:a4:fd:ab:96:17:93:2e:e8:0c:67:88:14:
                    4e:dc:aa:78:7d:2a:76:59:18:7c:42:b8:1e:32:16:
                    d6:be:0b:68:39:ea:d9:b9:2b:59:d0:e8:ad:69:94:
                    bd:24:61:bd:41:65:6c:63:6d:e0:e9:a2:6b:9f:da:
                    41:4d:35:48:a1:7b:1b:6b:45:44:0b:20:96:33:c2:
                    13:af:5b:e1:60:c5:62:b2:93:99:3f:fa:3b:3c:94:
                    d1:a7:6f:0e:e0:33:61:d7:ea:64:97:29:d0:d4:f7:
                    35:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:5F:6B:2A:87:59:46:D4:B5:C6:33:63:4F:9A:1E:2D:57:51:50:3E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/aa132d09-6f7c-30f0-91e8-edc325846360.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4/56a75261-4e27-478a-8f9e-71a9915ce9b4.crl

            X509v3 Authority Key Identifier:
                keyid:A4:3E:16:F9:E5:FB:77:F5:09:85:40:70:E7:45:BA:62:3D:AE:1B:4C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/56a75261-4e27-478a-8f9e-71a9915ce9b4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.73.15.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:b6:af:fe:35:99:c2:b7:7b:b3:6e:c0:99:22:cc:f1:8d:cf:
         d5:8a:57:83:2c:74:8b:e0:f4:c1:72:e0:a7:c0:9b:17:aa:b7:
         84:e3:ab:ef:5d:43:48:50:ba:a0:72:53:da:4b:da:de:a6:70:
         44:cb:1e:c4:75:46:50:72:49:c0:84:4c:89:bb:ad:32:9d:66:
         0d:21:64:f5:8b:3a:5e:fd:69:1c:10:95:bf:66:96:5f:7e:d9:
         7d:d1:83:d3:f3:5f:c2:0e:4d:a5:4a:36:0f:e1:3a:57:3f:4a:
         7d:15:28:b6:29:aa:74:71:c8:c7:1c:62:0f:aa:db:68:c5:c5:
         cd:27:6d:ce:c1:24:7a:8d:20:c1:24:64:e5:6e:64:55:b0:2e:
         a9:16:8b:a0:8b:b0:64:38:1c:17:ca:dd:c2:60:10:ae:43:2d:
         9d:82:fd:6e:a5:87:aa:8b:2f:61:fc:06:df:63:b9:01:f6:20:
         46:8a:37:6f:9e:3d:05:28:63:b9:92:e6:2b:97:5d:d6:de:78:
         2f:74:e4:53:0b:4f:ad:d3:d1:ed:9b:6f:f1:c7:28:c0:b3:5f:
         a2:74:df:36:ec:cf:70:56:75:23:2a:3b:ac:fd:87:88:7c:3e:
         83:0e:c4:21:3f:12:76:d9:2e:aa:ce:ee:84:4b:f0:ef:4f:c2:
         08:ab:50:dd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoeKqFgd6A7/M9ZSwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTZhNzUyNjEtNGUyNy00NzhhLThmOWUtNzFhOTkxNWNl
OWI0MB4XDTI1MDYwODAxMDA0OVoXDTI1MDkwNjAxMDA0OVowLzEtMCsGA1UEAxMk
MTM0ZDUxYTktOWNmZC00NWJiLTlmODQtMGRkZWExNDBlZmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApXbUX46BmPzVwljHRKPt3QzXUu6TIDHyqLm8
u1/UjBP0Kk8SAf8boL8qloQjqXOPq7Oo+cVUhhA/Sl21q3EjT7sw/p00l4MoO0o2
3NXj4d95d+jNEpMI+ePrNZeHyREX8fpf19X1DZQv3nnRL+9/zdCdJiohujHGiZF+
pMUAGm4Cjw5/C8Y/XJDy/Bl0jxtwS/EWYsdbnkak/auWF5Mu6AxniBRO3Kp4fSp2
WRh8QrgeMhbWvgtoOerZuStZ0OitaZS9JGG9QWVsY23g6aJrn9pBTTVIoXsba0VE
CyCWM8ITr1vhYMVispOZP/o7PJTRp28O4DNh1+pklynQ1Pc13wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFfayqHWUbUtcYzY0+aHi1XUVA+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3
NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5OTE1Y2U5YjQvYWExMzJkMDktNmY3Yy0z
MGYwLTkxZTgtZWRjMzI1ODQ2MzYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNTZhNzUyNjEtNGUyNy00NzhhLThm
OWUtNzFhOTkxNWNlOWI0LzU2YTc1MjYxLTRlMjctNDc4YS04ZjllLTcxYTk5MTVj
ZTliNC5jcmwwHwYDVR0jBBgwFoAUpD4W+eX7d/UJhUBw50W6Yj2uG0wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi81NmE3NTI2MS00ZTI3LTQ3OGEtOGY5ZS03MWE5
OTE1Y2U5YjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxkkPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAi2r/41mcK3e7NuwJkizPGNz9WKV4MsdIvg9MFy4KfAmxeqt4Tjq+9d
Q0hQuqByU9pL2t6mcETLHsR1RlByScCETIm7rTKdZg0hZPWLOl79aRwQlb9mll9+
2X3Rg9PzX8IOTaVKNg/hOlc/Sn0VKLYpqnRxyMccYg+q22jFxc0nbc7BJHqNIMEk
ZOVuZFWwLqkWi6CLsGQ4HBfK3cJgEK5DLZ2C/W6lh6qLL2H8Bt9juQH2IEaKN2+e
PQUoY7mS5iuXXdbeeC905FMLT63T0e2bb/HHKMCzX6J03zbsz3BWdSMqO6z9h4h8
PoMOxCE/EnbZLqrO7oRL8O9PwgirUN0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:37:33 2025 by rpki-client