Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa
File:                     d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa (raw, json)
Hash identifier:          oX4c40+SEZAdmhS2GbLTkib9C/rqLaxUm3BayhvNgOA=
Subject key identifier:   9D:1A:61:00:9E:FC:4A:DF:F8:F6:35:A2:5B:7B:1B:91:A4:39:AE:82
Certificate issuer:       /CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
Certificate serial:       010D0C9F4328584A78DCCF91DA9115C04DD774E0
Authority key identifier: 74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa
Signing time:             Thu 10 Jul 2025 12:42:40 +0000
ROA not before:           Thu 10 Jul 2025 12:42:40 +0000
ROA not after:            Wed 08 Oct 2025 12:42:40 +0000
asID:                     396545
IP address blocks:        198.41.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:78:dc:cf:91:da:91:15:c0:4d:d7:74:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e237e82-06d1-40e8-8e29-fd5ab7fd3c45
        Validity
            Not Before: Jul 10 12:42:40 2025 GMT
            Not After : Oct  8 12:42:40 2025 GMT
        Subject: CN=e9f8aeb6-207e-4ebc-bd3f-09de53015bf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:88:b1:80:cd:7d:8f:41:15:47:2f:18:e6:
                    59:45:0c:f8:60:12:0d:b7:61:7f:1d:95:e5:40:90:
                    2d:6d:3a:8b:72:05:a0:95:26:20:37:6d:0f:66:9e:
                    84:12:03:76:30:38:21:d5:a6:d4:91:6c:0d:5f:4d:
                    12:c3:02:48:01:c0:1b:ac:6e:73:07:65:5e:1e:1f:
                    0c:1d:11:97:3d:ac:68:fb:b8:be:c8:9b:ea:da:91:
                    80:c3:c2:27:71:fe:e2:86:e6:92:72:78:36:c5:d3:
                    e8:e8:f0:2c:03:3c:7b:0a:e9:a1:9a:5d:2d:70:6e:
                    e4:11:cf:dc:fe:a1:bc:f5:bf:bb:1c:2e:d0:ad:cb:
                    f2:dd:7b:c7:45:c0:b9:d4:1d:c1:c0:b6:1a:58:b0:
                    a0:b4:f9:9a:6b:2c:9f:1e:9b:7b:de:e8:cf:7a:53:
                    bd:a5:4c:b4:f4:48:17:4c:7d:19:2c:4f:2c:e1:04:
                    36:96:90:1d:7e:cf:6e:85:4f:f0:1f:1c:59:29:3f:
                    83:55:4f:7a:4e:f2:b8:46:dc:e3:7d:1b:4b:a0:2f:
                    e2:2e:39:82:d9:a4:6c:80:5e:95:67:ff:b9:f5:dc:
                    9e:e7:dd:7a:1f:56:88:2e:13:3c:1f:28:e5:4f:18:
                    ca:13:e1:ee:90:af:17:c5:2f:ff:7f:77:67:11:09:
                    6b:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1A:61:00:9E:FC:4A:DF:F8:F6:35:A2:5B:7B:1B:91:A4:39:AE:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/d055f989-959c-3cdc-b1dd-bf8decfdf5e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.crl

            X509v3 Authority Key Identifier:
                keyid:74:7C:EC:83:3A:7A:9C:7C:2C:2C:6B:50:3B:BE:C2:F1:E3:CC:79:A8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/4e237e82-06d1-40e8-8e29-fd5ab7fd3c45.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:cc:e8:d9:5a:16:a6:58:96:8b:fb:d2:80:67:6e:71:81:cc:
         bb:31:0f:d2:e5:1f:e8:9d:f5:29:1e:dd:dc:52:9d:00:39:c4:
         5d:04:c7:91:ca:46:a3:fa:ed:5b:a4:49:23:58:f4:8b:c5:1c:
         da:59:ef:01:6c:43:2a:c1:50:e9:c6:42:bb:6a:fe:35:29:33:
         b5:82:e9:ab:73:f9:31:25:80:46:9b:af:12:5e:ec:ff:6a:10:
         cd:a2:03:69:18:b7:45:60:ce:f6:82:c9:52:6f:7e:a6:8d:1a:
         c5:94:55:0d:8e:e0:51:c8:5e:b7:64:91:ab:a5:fb:4d:3a:ca:
         d8:65:57:e7:d3:04:b8:0d:a2:81:60:ca:f2:00:63:55:31:20:
         a6:0c:52:01:ab:0d:84:0d:08:19:fc:6b:7c:dd:08:6b:21:2d:
         b4:1a:d8:5f:b3:eb:4b:b1:1d:bb:c2:40:6f:ec:36:1b:10:f9:
         b4:11:22:e8:1e:00:cc:1e:12:2a:cb:70:7f:33:7b:c6:8b:d8:
         af:f8:b5:18:97:46:b7:69:fa:c5:7f:9e:9a:9c:76:fc:4b:04:
         3f:81:e5:9a:be:71:cd:b5:e1:f6:34:6f:b1:d9:dc:1a:a4:17:
         8b:07:b4:eb:a5:4b:71:7f:63:7d:de:f5:58:8e:43:c7:3e:9d:
         fa:fa:08:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp43M+R2pEVwE3XdOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUyMzdlODItMDZkMS00MGU4LThlMjktZmQ1YWI3ZmQz
YzQ1MB4XDTI1MDcxMDEyNDI0MFoXDTI1MTAwODEyNDI0MFowLzEtMCsGA1UEAxMk
ZTlmOGFlYjYtMjA3ZS00ZWJjLWJkM2YtMDlkZTUzMDE1YmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmy6IsYDNfY9BFUcvGOZZRQz4YBINt2F/HZXl
QJAtbTqLcgWglSYgN20PZp6EEgN2MDgh1abUkWwNX00SwwJIAcAbrG5zB2VeHh8M
HRGXPaxo+7i+yJvq2pGAw8Incf7ihuaScng2xdPo6PAsAzx7Cumhml0tcG7kEc/c
/qG89b+7HC7Qrcvy3XvHRcC51B3BwLYaWLCgtPmaayyfHpt73ujPelO9pUy09EgX
TH0ZLE8s4QQ2lpAdfs9uhU/wHxxZKT+DVU96TvK4RtzjfRtLoC/iLjmC2aRsgF6V
Z/+59dye5916H1aILhM8HyjlTxjKE+HukK8XxS//f3dnEQlrqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ0aYQCe/Erf+PY1olt7G5GkOa6CMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIz
N2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVhYjdmZDNjNDUvZDA1NWY5ODktOTU5Yy0z
Y2RjLWIxZGQtYmY4ZGVjZmRmNWUwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvNGUyMzdlODItMDZkMS00MGU4LThl
MjktZmQ1YWI3ZmQzYzQ1LzRlMjM3ZTgyLTA2ZDEtNDBlOC04ZTI5LWZkNWFiN2Zk
M2M0NS5jcmwwHwYDVR0jBBgwFoAUdHzsgzp6nHwsLGtQO77C8ePMeagwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy80ZTIzN2U4Mi0wNmQxLTQwZTgtOGUyOS1mZDVh
YjdmZDNjNDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxikAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjM6NlaFqZYlov70oBnbnGBzLsxD9LlH+id9Ske3dxSnQA5xF0Ex5HK
RqP67VukSSNY9IvFHNpZ7wFsQyrBUOnGQrtq/jUpM7WC6atz+TElgEabrxJe7P9q
EM2iA2kYt0VgzvaCyVJvfqaNGsWUVQ2O4FHIXrdkkaul+006ythlV+fTBLgNooFg
yvIAY1UxIKYMUgGrDYQNCBn8a3zdCGshLbQa2F+z60uxHbvCQG/sNhsQ+bQRIuge
AMweEirLcH8ze8aL2K/4tRiXRrdp+sV/npqcdvxLBD+B5Zq+cc214fY0b7HZ3Bqk
F4sHtOulS3F/Y33e9ViOQ8c+nfr6CEk=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:58:09 2025 by rpki-client