Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa
File:                     a572488a-72c8-3bec-b84b-dab0319da2f0.roa (raw, json)
Hash identifier:          huer1NAz3EN2mhxskTNmN2FYDrJ69ifW+MTI9NqOuqY=
Subject key identifier:   03:BE:58:52:48:87:17:A7:BD:40:11:CD:28:65:44:DF:C5:08:69:34
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584A9FFBA57D0FAEE16D902F1700
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     11641
IP address blocks:        206.225.192.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:a5:7d:0f:ae:e1:6d:90:2f:17:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=d0dad4cd-e2f5-48f1-a3d8-4b8a99e8eef7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a6:c6:7b:a9:da:c0:71:3f:10:94:a4:9b:8e:
                    a1:16:8d:38:de:bd:3e:d9:ac:3d:67:df:84:22:3e:
                    9e:59:1a:71:14:44:b6:e8:a8:c4:36:83:66:64:98:
                    ab:c0:9d:86:0d:93:10:a9:67:dc:36:5e:35:f0:aa:
                    0e:4c:d2:3a:e4:5f:d7:76:67:22:3a:db:8d:11:6e:
                    8e:f9:52:ee:7f:61:52:cf:33:fd:50:7f:b7:a6:73:
                    66:06:0b:c3:35:c9:00:2c:51:5a:b9:b6:4a:cb:a1:
                    54:01:8e:60:7a:b7:61:3d:25:75:9e:22:15:4c:d2:
                    a5:49:05:34:d2:30:21:a1:92:35:c9:89:0b:3f:d4:
                    dd:42:75:35:49:ab:0a:04:93:89:65:15:23:05:bb:
                    21:72:e2:15:e3:3d:91:49:53:f7:2b:66:e4:88:c7:
                    d6:2e:ae:45:32:f8:e4:02:c2:b4:57:53:ed:2b:3f:
                    95:9c:3b:f3:2c:0b:6a:0f:d4:26:b2:50:97:9e:0e:
                    9f:17:00:65:d8:76:ee:29:f3:b1:23:76:7e:e9:2d:
                    50:86:99:bc:3c:a1:84:80:46:51:4f:aa:06:71:e8:
                    43:8b:ec:55:a1:6a:38:e7:2a:d0:cc:eb:e0:2f:6f:
                    9a:bf:08:c3:7b:34:0f:fd:9d:72:4a:f3:d5:c7:e7:
                    52:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:BE:58:52:48:87:17:A7:BD:40:11:CD:28:65:44:DF:C5:08:69:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/a572488a-72c8-3bec-b84b-dab0319da2f0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.192.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:9f:a6:20:05:d2:85:02:b3:59:86:6f:b4:e7:4d:a9:75:20:
         39:26:11:1f:57:fd:78:85:5c:54:e8:3a:3a:3c:ce:90:5a:5e:
         17:9e:bd:f7:5f:b1:cd:a5:6c:e9:cd:85:ef:ee:2b:9a:37:74:
         ae:93:6c:d5:68:3f:a6:31:3d:5d:38:29:73:4e:cb:d5:71:26:
         31:97:a2:21:ff:77:55:07:7d:a6:a3:70:b4:7a:e9:56:dd:b8:
         d3:43:97:c8:bd:e7:5d:7d:51:81:a9:80:fc:bd:c4:61:ed:3f:
         20:16:58:e1:7b:d8:df:9f:da:69:cf:dc:e2:83:b7:b9:4b:c6:
         f7:cc:c3:a1:24:c5:46:db:c9:75:64:d1:dc:d2:50:9e:ca:c3:
         50:41:a1:11:4e:da:05:74:23:8a:b0:0d:f5:bc:a4:6c:c4:15:
         9e:96:94:64:28:40:f1:2b:8f:7d:f2:1e:26:e1:67:02:c4:8e:
         60:7f:dd:c9:39:5e:80:e6:cf:1b:63:76:8b:f4:38:5d:1e:4f:
         e0:34:79:4b:32:ae:07:63:b1:f5:f7:af:7f:a6:2e:da:59:0c:
         d1:bb:ab:f1:57:8e:f1:55:bb:9b:ee:8b:b1:14:86:b3:5c:3b:
         f0:b8:50:72:06:36:91:84:1e:dc:65:a0:32:0c:47:bf:7a:26:
         5a:8f:a3:67
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf+6V9D67hbZAvFwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZDBkYWQ0Y2QtZTJmNS00OGYxLWEzZDgtNGI4YTk5ZThlZWY3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKbGe6nawHE/EJSkm46hFo043r0+2aw9Z9+E
Ij6eWRpxFES26KjENoNmZJirwJ2GDZMQqWfcNl418KoOTNI65F/XdmciOtuNEW6O
+VLuf2FSzzP9UH+3pnNmBgvDNckALFFaubZKy6FUAY5gerdhPSV1niIVTNKlSQU0
0jAhoZI1yYkLP9TdQnU1SasKBJOJZRUjBbshcuIV4z2RSVP3K2bkiMfWLq5FMvjk
AsK0V1PtKz+VnDvzLAtqD9QmslCXng6fFwBl2HbuKfOxI3Z+6S1Qhpm8PKGEgEZR
T6oGcehDi+xVoWo45yrQzOvgL2+avwjDezQP/Z1ySvPVx+dSlwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAO+WFJIhxenvUARzShlRN/FCGk0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvYTU3MjQ4OGEtNzJjOC0z
YmVjLWI4NGItZGFiMDMxOWRhMmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFzuHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC2fpiAF0oUCs1mGb7TnTal1IDkmER9X/XiFXFToOjo8zpBaXheevfdf
sc2lbOnNhe/uK5o3dK6TbNVoP6YxPV04KXNOy9VxJjGXoiH/d1UHfaajcLR66Vbd
uNNDl8i95119UYGpgPy9xGHtPyAWWOF72N+f2mnP3OKDt7lLxvfMw6EkxUbbyXVk
0dzSUJ7Kw1BBoRFO2gV0I4qwDfW8pGzEFZ6WlGQoQPErj33yHibhZwLEjmB/3ck5
XoDmzxtjdov0OF0eT+A0eUsyrgdjsfX3r3+mLtpZDNG7q/FXjvFVu5vui7EUhrNc
O/C4UHIGNpGEHtxloDIMR796JlqPo2c=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:21:21 2025 by rpki-client