Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b201a9c8-8d48-324a-91af-7a1150bb844d.roa
File:                     b201a9c8-8d48-324a-91af-7a1150bb844d.roa (raw, json)
Hash identifier:          cHeSTEbzaSspr5VzSS2N4Wi6cxC7gy4GF2aaOdOaLtg=
Subject key identifier:   D2:74:32:5D:E4:2A:E1:DB:75:19:C8:CF:1E:31:07:64:A6:9F:A3:83
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F4328584ABD4B93AF0B2DB4EB8034D840
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b201a9c8-8d48-324a-91af-7a1150bb844d.roa
Signing time:             Mon 04 Aug 2025 01:00:32 +0000
ROA not before:           Mon 04 Aug 2025 01:00:32 +0000
ROA not after:            Sun 02 Nov 2025 01:00:32 +0000
asID:                     16696
IP address blocks:        161.38.31.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:bd:4b:93:af:0b:2d:b4:eb:80:34:d8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: Aug  4 01:00:32 2025 GMT
            Not After : Nov  2 01:00:32 2025 GMT
        Subject: CN=a59e0505-b772-4596-ae36-da76bf52202a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a9:8b:1c:cf:b5:bc:bf:4b:df:80:ce:64:d0:
                    ea:73:85:13:89:21:24:a4:58:ac:23:9f:0d:91:b4:
                    d0:01:ea:09:bf:e8:e9:86:5c:ff:e0:20:30:42:f9:
                    c6:de:af:bf:fd:16:38:b7:4a:d6:de:aa:5b:fc:cc:
                    95:fd:d8:09:c5:56:82:73:dd:49:a1:51:8f:3e:3b:
                    cc:df:c1:02:67:7c:4f:36:d2:72:c4:4f:f2:00:3e:
                    f9:8b:53:3d:f0:a4:fc:4d:39:eb:5d:7c:b0:13:ee:
                    2a:9f:8b:07:56:90:09:f0:ab:51:ab:59:d6:2d:09:
                    4d:ce:46:a3:10:e3:cb:a5:88:d0:a9:60:73:d7:15:
                    83:d0:af:d1:50:17:51:58:9c:8b:57:48:69:3a:aa:
                    e3:34:ab:7b:e1:7f:d8:48:e0:c5:fa:56:7e:d5:54:
                    80:37:2c:9f:e3:fc:4c:c0:45:cc:ee:b1:92:a7:32:
                    14:54:6b:fc:3a:a4:35:73:f0:af:9d:15:73:bf:f0:
                    aa:c0:c8:8f:b5:34:f1:4f:43:cf:a4:91:ae:09:52:
                    75:10:ba:06:3c:3d:d6:fc:16:94:11:75:7e:4d:3f:
                    88:e9:99:e3:90:69:95:06:b7:f5:96:e8:4a:8f:4b:
                    f1:9f:0f:0d:a1:6e:da:7f:75:f3:89:bf:76:69:ff:
                    ab:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:74:32:5D:E4:2A:E1:DB:75:19:C8:CF:1E:31:07:64:A6:9F:A3:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/b201a9c8-8d48-324a-91af-7a1150bb844d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.38.31.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         50:01:39:88:9a:f0:28:46:d7:60:b0:ea:dc:25:50:ae:a7:73:
         c3:0c:cf:2a:bf:39:d3:e0:1b:a5:55:c6:d8:55:c5:75:e9:75:
         7b:d1:96:1e:3e:f4:98:97:0d:42:d9:38:31:c4:62:9b:af:0a:
         13:9b:80:93:35:c4:73:fc:c3:66:a2:4a:f8:af:f9:8a:48:c9:
         55:bb:f4:94:cf:02:c0:e5:14:93:0c:87:2f:e3:5a:13:be:fe:
         40:2d:ff:13:fb:85:ac:b4:c2:db:9f:e4:e1:c5:57:af:c0:73:
         80:68:5b:e1:0f:49:04:0a:e3:76:61:ff:0c:0e:d2:51:ca:21:
         92:4d:43:d8:fb:ee:1a:b0:fe:50:d0:10:ca:21:6c:2c:68:26:
         42:9e:08:86:eb:a8:04:63:fd:1a:91:22:5f:8b:ed:0f:e1:58:
         4b:9b:32:12:cf:76:95:70:a5:6b:ba:d8:8a:20:e0:12:62:88:
         26:24:1d:fd:3b:e3:b8:de:bc:91:56:9f:99:8d:ec:13:fe:3b:
         60:78:b4:a4:4c:75:23:5e:d7:fc:9c:75:b2:0b:87:e0:1f:f3:
         ae:2f:52:31:90:f7:c6:f4:ba:da:5d:51:01:df:fc:71:0c:8d:
         93:0d:8c:33:49:07:17:69:dd:83:58:2c:81:46:5e:e4:19:6e:
         17:cd:fb:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq9S5OvCy2064A02EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDgwNDAxMDAzMloXDTI1MTEwMjAxMDAzMlowLzEtMCsGA1UEAxMk
YTU5ZTA1MDUtYjc3Mi00NTk2LWFlMzYtZGE3NmJmNTIyMDJhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6mLHM+1vL9L34DOZNDqc4UTiSEkpFisI58N
kbTQAeoJv+jphlz/4CAwQvnG3q+//RY4t0rW3qpb/MyV/dgJxVaCc91JoVGPPjvM
38ECZ3xPNtJyxE/yAD75i1M98KT8TTnrXXywE+4qn4sHVpAJ8KtRq1nWLQlNzkaj
EOPLpYjQqWBz1xWD0K/RUBdRWJyLV0hpOqrjNKt74X/YSODF+lZ+1VSANyyf4/xM
wEXM7rGSpzIUVGv8OqQ1c/CvnRVzv/CqwMiPtTTxT0PPpJGuCVJ1ELoGPD3W/BaU
EXV+TT+I6ZnjkGmVBrf1luhKj0vxnw8NoW7af3Xzib92af+rfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJ0Ml3kKuHbdRnIzx4xB2Smn6ODMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvYjIwMWE5YzgtOGQ0OC0z
MjRhLTkxYWYtN2ExMTUwYmI4NDRkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoSYfMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFABOYia8ChG12Cw6twlUK6nc8MMzyq/OdPgG6VVxthVxXXpdXvRlh4+
9JiXDULZODHEYpuvChObgJM1xHP8w2aiSviv+YpIyVW79JTPAsDlFJMMhy/jWhO+
/kAt/xP7hay0wtuf5OHFV6/Ac4BoW+EPSQQK43Zh/wwO0lHKIZJNQ9j77hqw/lDQ
EMohbCxoJkKeCIbrqARj/RqRIl+L7Q/hWEubMhLPdpVwpWu62Iog4BJiiCYkHf07
47jevJFWn5mN7BP+O2B4tKRMdSNe1/ycdbILh+Af864vUjGQ98b0utpdUQHf/HEM
jZMNjDNJBxdp3YNYLIFGXuQZbhfN+4I=
-----END CERTIFICATE-----
Generated at Wed Aug 6 06:06:28 2025 by rpki-client