Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa
File:                     bf37cd22-bd35-38e1-9b74-974b84668814.roa (raw, json)
Hash identifier:          ge6yi9JRtAYHjGiWh1ikSZjuIuxnkXBnL79j6bm17qA=
Subject key identifier:   2B:ED:FE:E6:9B:58:6E:07:FB:DC:C5:01:E6:46:27:D2:AF:6D:2C:08
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A9FF08214CDEFA4A04A4F5180
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa
Signing time:             Thu 24 Jul 2025 12:38:53 +0000
ROA not before:           Thu 24 Jul 2025 12:38:53 +0000
ROA not after:            Wed 22 Oct 2025 12:38:53 +0000
asID:                     397194
IP address blocks:        192.58.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:f0:82:14:cd:ef:a4:a0:4a:4f:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jul 24 12:38:53 2025 GMT
            Not After : Oct 22 12:38:53 2025 GMT
        Subject: CN=ca7d659d-34e9-4f9b-957f-a915b2ee4733
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:33:55:8d:70:77:76:a9:75:4b:76:94:c6:e2:
                    31:a6:3a:65:c2:6a:ce:a2:86:71:3f:5f:51:a3:52:
                    89:35:06:54:6e:1e:a4:96:c6:98:6b:2a:e9:d5:a8:
                    00:69:c9:44:f3:e4:23:cd:88:7b:92:25:8e:a8:59:
                    b6:dc:11:de:fc:38:6a:2a:08:18:b5:fa:ea:42:32:
                    ab:3a:2b:73:68:53:93:5d:64:8a:3c:c8:7d:f0:d5:
                    e1:3e:11:74:ce:11:16:61:c5:07:a7:96:3b:7d:ab:
                    8f:81:12:10:15:8b:3b:dd:15:f4:ef:df:d0:d0:0f:
                    a2:0d:02:25:8f:bd:d4:5e:7a:f7:f1:e2:ee:9d:37:
                    f1:de:21:20:3a:51:17:a8:74:5e:58:7a:51:62:83:
                    5e:85:d1:a9:75:15:83:f1:59:3a:32:9f:c7:85:1e:
                    31:fe:0e:16:bf:9b:1b:6b:cd:2b:be:ca:f6:f0:6a:
                    ad:f7:07:83:db:8b:25:83:7c:ae:de:be:83:a8:ae:
                    52:a2:0c:97:4d:5d:35:fe:88:8e:f5:c9:74:47:98:
                    b3:98:dd:a5:3a:3c:66:75:89:15:3b:0d:8d:07:88:
                    e7:1f:c7:c1:3d:b0:e8:8a:24:90:29:45:92:cb:7a:
                    9d:57:07:60:e9:4f:9f:b3:6f:34:6c:ee:5d:7d:21:
                    1c:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:ED:FE:E6:9B:58:6E:07:FB:DC:C5:01:E6:46:27:D2:AF:6D:2C:08
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/bf37cd22-bd35-38e1-9b74-974b84668814.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:93:8e:f5:6d:c2:7b:9c:ad:36:77:01:80:8b:1d:d0:f0:91:
         5c:7a:bd:fe:94:a2:cb:22:71:96:5a:57:92:9a:2b:75:9b:48:
         f6:75:4e:d2:cf:3d:c3:a2:65:8d:90:3d:1d:da:b9:c2:52:44:
         08:5d:f8:46:bc:82:47:1d:39:ef:61:05:b7:02:11:32:2f:1b:
         35:a0:ce:77:6f:6c:41:b2:70:ec:e2:54:39:c7:22:bf:aa:64:
         75:d8:2e:d7:df:e2:10:9f:38:cf:f6:bd:0e:3c:5b:92:89:18:
         bc:63:36:fe:f5:40:29:26:8f:d2:35:02:98:e8:4b:b2:8b:cc:
         d1:58:37:7f:45:7b:08:fb:15:63:7e:ba:06:48:53:ec:33:cc:
         9e:4f:48:c2:e8:a7:8d:3f:a3:0e:19:f1:e9:7b:ad:d7:80:3c:
         df:c5:c2:55:d8:7a:5f:87:42:7c:09:b9:93:e9:ac:61:50:a7:
         fe:f3:5a:61:42:b0:c3:65:ed:96:12:15:64:8a:bf:79:63:ee:
         34:9a:5c:1b:fa:64:e8:33:a4:bb:4a:dd:3f:ed:eb:c0:84:98:
         24:72:75:a5:5c:0b:ff:6e:9d:3d:4b:70:7d:1a:09:b9:1e:f3:
         79:d5:d9:7e:b2:34:ba:0c:94:fa:18:b5:bf:b9:4c:1c:26:f6:
         45:d2:9d:6f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqf8IIUze+koEpPUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDcyNDEyMzg1M1oXDTI1MTAyMjEyMzg1M1owLzEtMCsGA1UEAxMk
Y2E3ZDY1OWQtMzRlOS00ZjliLTk1N2YtYTkxNWIyZWU0NzMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAozNVjXB3dql1S3aUxuIxpjplwmrOooZxP19R
o1KJNQZUbh6klsaYayrp1agAaclE8+QjzYh7kiWOqFm23BHe/DhqKggYtfrqQjKr
OitzaFOTXWSKPMh98NXhPhF0zhEWYcUHp5Y7fauPgRIQFYs73RX079/Q0A+iDQIl
j73UXnr38eLunTfx3iEgOlEXqHReWHpRYoNehdGpdRWD8Vk6Mp/HhR4x/g4Wv5sb
a80rvsr28Gqt9weD24slg3yu3r6DqK5SogyXTV01/oiO9cl0R5izmN2lOjxmdYkV
Ow2NB4jnH8fBPbDoiiSQKUWSy3qdVwdg6U+fs280bO5dfSEccwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCvt/uabWG4H+9zFAeZGJ9KvbSwIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYmYzN2NkMjItYmQzNS0z
OGUxLTliNzQtOTc0Yjg0NjY4ODE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDqAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6TjvVtwnucrTZ3AYCLHdDwkVx6vf6UossicZZaV5KaK3WbSPZ1TtLP
PcOiZY2QPR3aucJSRAhd+Ea8gkcdOe9hBbcCETIvGzWgzndvbEGycOziVDnHIr+q
ZHXYLtff4hCfOM/2vQ48W5KJGLxjNv71QCkmj9I1ApjoS7KLzNFYN39Fewj7FWN+
ugZIU+wzzJ5PSMLop40/ow4Z8el7rdeAPN/FwlXYel+HQnwJuZPprGFQp/7zWmFC
sMNl7ZYSFWSKv3lj7jSaXBv6ZOgzpLtK3T/t68CEmCRydaVcC/9unT1LcH0aCbke
83nV2X6yNLoMlPoYtb+5TBwm9kXSnW8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:35:49 2025 by rpki-client