Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
File:                     2591496d-2f46-3cc4-9079-475ca3a87c7e.roa (raw, json)
Hash identifier:          eWXRsAFIKyY2+5ysixkHpEmKdtdB2Ayj9Zm88Lyt4Wc=
Subject key identifier:   5B:92:15:17:B9:2E:E7:BE:53:3F:8A:03:44:53:E2:ED:60:16:AB:CC
Certificate issuer:       /CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
Certificate serial:       010D0C9F4328584A14656D4398ECBFFCB0237000
Authority key identifier: 61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     396905
IP address blocks:        192.105.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6d:43:98:ec:bf:fc:b0:23:70:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fb430428-a25a-4e8b-acc0-f9f5cc044175
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=417d074d-5d4b-49db-ac1c-79ce60487da4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:5a:e0:c7:53:c2:f7:e4:a0:84:41:a4:8b:cb:
                    48:3b:24:b0:18:9a:2b:00:82:6a:fc:1b:87:da:6b:
                    f6:80:f6:13:01:ae:93:ac:d0:6b:90:dd:f8:ff:61:
                    e1:ca:38:b0:55:51:fc:c5:3d:ea:19:ab:b1:2e:f9:
                    bc:32:94:0b:43:fe:a6:77:f2:53:fe:00:48:49:61:
                    9b:33:30:90:61:8b:e1:a2:35:90:0f:6e:69:d3:af:
                    48:8f:d1:fe:0f:88:c5:0b:73:4f:d5:fe:33:6a:16:
                    2b:93:d0:2f:e3:c6:30:81:a8:c8:2c:7a:a7:85:41:
                    fb:ff:34:3d:31:80:fc:cf:4d:ee:92:30:42:c8:64:
                    a7:2d:3a:53:e8:c7:fb:fb:84:a5:8c:28:8c:eb:ae:
                    bd:f7:c5:f8:b5:14:d4:ec:7b:2b:e9:65:16:7d:01:
                    e1:cd:01:4a:20:f8:16:b7:1b:4c:8b:61:9e:66:0f:
                    7f:77:f0:26:e9:cd:91:80:4a:35:ce:05:a6:0f:f9:
                    66:85:43:d6:36:b8:43:95:c6:9d:54:08:4d:55:42:
                    c7:89:b9:e1:7c:77:6b:aa:05:10:fe:4a:82:e7:a7:
                    be:17:bb:3d:a0:15:68:6f:a7:5b:26:da:0b:92:4b:
                    63:ad:a1:90:f4:e2:71:e5:f6:c7:38:fb:ef:f4:75:
                    49:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:92:15:17:B9:2E:E7:BE:53:3F:8A:03:44:53:E2:ED:60:16:AB:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/2591496d-2f46-3cc4-9079-475ca3a87c7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175/fb430428-a25a-4e8b-acc0-f9f5cc044175.crl

            X509v3 Authority Key Identifier:
                keyid:61:DE:9D:C8:BF:6F:78:09:E7:1F:19:48:E5:34:CB:14:4F:D7:DD:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/fb430428-a25a-4e8b-acc0-f9f5cc044175.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.105.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         e3:07:44:fb:18:7e:4d:f8:d3:46:3e:fc:5e:8e:7a:6d:b2:c8:
         25:07:1e:2c:c1:d5:8e:6c:07:34:4a:b9:6d:e6:b7:ea:92:6f:
         6f:27:97:f0:87:1b:30:83:18:3f:32:6d:d5:d8:58:14:f1:2c:
         19:76:bd:90:c7:69:6f:89:2d:ec:bc:94:b8:b4:a2:b2:0e:72:
         ff:ee:03:ac:52:7e:b8:59:e7:a1:a6:cd:08:e5:77:b8:2f:34:
         2a:1e:7c:f9:fd:0e:3c:a0:55:30:1b:01:ee:5b:27:d7:b8:a3:
         f3:31:84:9f:8a:73:48:ce:8f:f8:09:2a:4b:37:d4:3a:94:32:
         fa:d5:2f:65:ec:e2:a4:72:fb:d5:27:c3:ea:bc:fc:6a:9a:f3:
         24:25:23:b2:a3:09:e9:8a:9b:f1:7c:af:40:c4:b3:8e:42:4c:
         74:11:37:98:4c:9d:9a:1f:ae:84:c0:ea:83:9b:0f:f1:05:55:
         ed:da:06:04:2e:21:9d:47:34:c5:17:65:c7:e0:7c:bd:dd:42:
         e9:39:6b:06:e6:21:d8:cb:2e:13:cf:ef:8e:1a:13:23:eb:7b:
         28:f7:3d:69:8c:3e:93:e3:a8:2a:19:e3:93:3f:b6:ed:96:66:
         7d:2b:dd:af:22:25:95:cc:f9:0b:a8:70:97:95:9f:c3:ff:19:
         fa:1d:00:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZW1DmOy//LAjcAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmI0MzA0MjgtYTI1YS00ZThiLWFjYzAtZjlmNWNjMDQ0
MTc1MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
NDE3ZDA3NGQtNWQ0Yi00OWRiLWFjMWMtNzljZTYwNDg3ZGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiVrgx1PC9+SghEGki8tIOySwGJorAIJq/BuH
2mv2gPYTAa6TrNBrkN34/2HhyjiwVVH8xT3qGauxLvm8MpQLQ/6md/JT/gBISWGb
MzCQYYvhojWQD25p069Ij9H+D4jFC3NP1f4zahYrk9Av48YwgajILHqnhUH7/zQ9
MYD8z03ukjBCyGSnLTpT6Mf7+4SljCiM666998X4tRTU7Hsr6WUWfQHhzQFKIPgW
txtMi2GeZg9/d/Am6c2RgEo1zgWmD/lmhUPWNrhDlcadVAhNVULHibnhfHdrqgUQ
/kqC56e+F7s9oBVob6dbJtoLkktjraGQ9OJx5fbHOPvv9HVJmwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFuSFRe5Lue+Uz+KA0RT4u1gFqvMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mYjQz
MDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1Y2MwNDQxNzUvMjU5MTQ5NmQtMmY0Ni0z
Y2M0LTkwNzktNDc1Y2EzYTg3YzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZmI0MzA0MjgtYTI1YS00ZThiLWFj
YzAtZjlmNWNjMDQ0MTc1L2ZiNDMwNDI4LWEyNWEtNGU4Yi1hY2MwLWY5ZjVjYzA0
NDE3NS5jcmwwHwYDVR0jBBgwFoAUYd6dyL9veAnnHxlI5TTLFE/X3bowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mYjQzMDQyOC1hMjVhLTRlOGItYWNjMC1mOWY1
Y2MwNDQxNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwGmwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAOMHRPsYfk3400Y+/F6Oem2yyCUHHizB1Y5sBzRKuW3mt+qSb28nl/CH
GzCDGD8ybdXYWBTxLBl2vZDHaW+JLey8lLi0orIOcv/uA6xSfrhZ56GmzQjld7gv
NCoefPn9DjygVTAbAe5bJ9e4o/MxhJ+Kc0jOj/gJKks31DqUMvrVL2Xs4qRy+9Un
w+q8/Gqa8yQlI7KjCemKm/F8r0DEs45CTHQRN5hMnZofroTA6oObD/EFVe3aBgQu
IZ1HNMUXZcfgfL3dQuk5awbmIdjLLhPP744aEyPreyj3PWmMPpPjqCoZ45M/tu2W
Zn0r3a8iJZXM+QuocJeVn8P/GfodACA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:34:49 2025 by rpki-client