Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa
File:                     617324fd-eefc-3037-b0c3-cbee81d5849a.roa (raw, json)
Hash identifier:          sz0OxKTSo6BJfUsJBdNlnqK0uvJJFkMG2gQGS1orv5U=
Subject key identifier:   0C:0D:30:9E:22:6B:D0:AE:8F:1A:26:28:A9:9D:DC:28:A6:22:9D:C0
Certificate issuer:       /CN=946cb195-9b9a-4836-9152-b97e9e831144
Certificate serial:       010D0C9F4328584AA42B8161C81D85E124F18D80
Authority key identifier: D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        142.54.38.0/24 maxlen: 24
                          142.54.39.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 08:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:81:61:c8:1d:85:e1:24:f1:8d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=946cb195-9b9a-4836-9152-b97e9e831144
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=e503a0c2-80a7-4461-b1b5-439c9d98dd3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:66:ce:34:a9:76:3f:bc:5a:bc:81:24:2d:e9:
                    2a:d9:c9:0f:17:80:38:c5:31:8b:66:71:95:70:fc:
                    19:86:b5:f4:2d:15:11:cd:b3:36:da:69:3d:65:c6:
                    34:7d:32:c5:e0:f3:cd:ba:41:01:81:f4:5d:9c:95:
                    4a:b2:bb:ba:71:67:6a:af:b7:d6:59:75:98:c5:01:
                    fb:8e:68:51:e2:16:45:fd:8f:50:01:3f:88:11:36:
                    5a:b2:db:8d:b5:e1:3a:fc:6c:0c:15:53:ca:fa:10:
                    7a:2b:0e:79:c6:9c:a3:08:9d:30:b8:35:25:77:37:
                    25:2e:13:62:97:26:52:b2:26:ca:52:a0:15:ba:1e:
                    7d:77:61:13:2b:83:0b:ec:60:e0:fa:71:72:63:12:
                    66:fe:10:02:fd:47:3d:33:85:10:5d:f5:df:0f:fc:
                    25:48:7b:72:c0:1b:99:89:01:62:02:3d:4f:23:7a:
                    66:e1:63:f3:4f:ef:af:f3:6d:10:e2:fe:77:c9:6c:
                    ff:01:c6:98:4a:06:6e:1c:c9:ed:97:0c:78:2c:02:
                    14:95:32:64:d8:c5:64:65:4a:0f:7d:f5:3b:b4:e3:
                    ed:b8:dd:d9:9e:d5:7e:ae:bb:20:10:76:70:a9:75:
                    14:38:b6:eb:bf:86:1e:9a:42:4f:84:4b:f5:c2:23:
                    9e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0D:30:9E:22:6B:D0:AE:8F:1A:26:28:A9:9D:DC:28:A6:22:9D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/617324fd-eefc-3037-b0c3-cbee81d5849a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144/946cb195-9b9a-4836-9152-b97e9e831144.crl

            X509v3 Authority Key Identifier:
                keyid:D5:60:F3:5E:86:F4:DA:77:6D:B8:C5:DA:CD:F1:D1:63:9B:E5:34:3D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/946cb195-9b9a-4836-9152-b97e9e831144.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.38.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         79:6e:cc:2c:40:2a:6d:31:54:54:aa:36:9c:3c:15:0c:50:a1:
         72:6c:c6:50:3b:1d:b3:53:cf:ce:b1:0d:65:64:01:11:e8:86:
         68:5d:55:ab:fd:76:1e:78:4b:f9:63:bb:46:68:35:94:e9:ea:
         04:55:08:e2:11:71:cc:af:82:4b:b7:37:78:8d:4e:03:65:58:
         be:72:ee:7c:c9:9e:35:db:49:f5:ca:52:93:a2:ef:55:9c:d8:
         83:27:ee:87:5a:d4:e3:40:7e:c0:0d:22:78:87:00:24:d2:57:
         d7:c6:b0:31:ab:16:3d:14:d9:03:0e:54:5c:0b:e6:b1:0c:74:
         6a:f6:e7:79:7e:57:e8:eb:b1:9f:07:7e:30:03:0c:f8:29:8e:
         ff:13:c6:48:0b:af:00:3c:be:3e:bc:45:b3:68:5b:e6:c1:4c:
         e0:3b:de:ab:fe:0e:e4:e7:b4:77:37:04:d5:e5:53:01:a4:6a:
         be:88:fe:26:3d:09:32:5c:68:08:cf:50:c7:2b:e8:4e:a1:6b:
         5b:ae:5a:1b:12:ae:81:51:30:b9:4f:fd:77:84:7a:d0:99:04:
         70:3d:01:90:00:02:b0:b1:32:7d:b1:61:4e:79:63:05:71:b1:
         2e:a9:ba:21:cf:1e:2f:76:8e:5a:09:c5:82:c6:e2:7f:c8:81:
         4a:56:2a:80
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK4FhyB2F4STxjYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ2Y2IxOTUtOWI5YS00ODM2LTkxNTItYjk3ZTllODMx
MTQ0MB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZTUwM2EwYzItODBhNy00NDYxLWIxYjUtNDM5YzlkOThkZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgGbONKl2P7xavIEkLekq2ckPF4A4xTGLZnGV
cPwZhrX0LRURzbM22mk9ZcY0fTLF4PPNukEBgfRdnJVKsru6cWdqr7fWWXWYxQH7
jmhR4hZF/Y9QAT+IETZastuNteE6/GwMFVPK+hB6Kw55xpyjCJ0wuDUldzclLhNi
lyZSsibKUqAVuh59d2ETK4ML7GDg+nFyYxJm/hAC/Uc9M4UQXfXfD/wlSHtywBuZ
iQFiAj1PI3pm4WPzT++v820Q4v53yWz/AcaYSgZuHMntlwx4LAIUlTJk2MVkZUoP
ffU7tOPtuN3ZntV+rrsgEHZwqXUUOLbrv4YemkJPhEv1wiOeEwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAwNMJ4ia9CujxomKKmd3CimIp3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZj
YjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdlOWU4MzExNDQvNjE3MzI0ZmQtZWVmYy0z
MDM3LWIwYzMtY2JlZTgxZDU4NDlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvOTQ2Y2IxOTUtOWI5YS00ODM2LTkx
NTItYjk3ZTllODMxMTQ0Lzk0NmNiMTk1LTliOWEtNDgzNi05MTUyLWI5N2U5ZTgz
MTE0NC5jcmwwHwYDVR0jBBgwFoAU1WDzXob02ndtuMXazfHRY5vlND0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi85NDZjYjE5NS05YjlhLTQ4MzYtOTE1Mi1iOTdl
OWU4MzExNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBjjYmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHluzCxAKm0xVFSqNpw8FQxQoXJsxlA7HbNTz86xDWVkARHohmhdVav9
dh54S/lju0ZoNZTp6gRVCOIRccyvgku3N3iNTgNlWL5y7nzJnjXbSfXKUpOi71Wc
2IMn7oda1ONAfsANIniHACTSV9fGsDGrFj0U2QMOVFwL5rEMdGr253l+V+jrsZ8H
fjADDPgpjv8TxkgLrwA8vj68RbNoW+bBTOA73qv+DuTntHc3BNXlUwGkar6I/iY9
CTJcaAjPUMcr6E6ha1uuWhsSroFRMLlP/XeEetCZBHA9AZAAArCxMn2xYU55YwVx
sS6puiHPHi92jloJxYLG4n/IgUpWKoA=
-----END CERTIFICATE-----
Generated at Sat Aug 9 05:41:19 2025 by rpki-client