Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa
File:                     2a211500-b808-300b-9927-2076eca3b396.roa (raw, json)
Hash identifier:          Ipzrec/yDOJte3ah2Xp6jsvjAouC6eWu7vi0GF/e6hc=
Subject key identifier:   3E:EB:97:66:CD:96:0C:63:0A:F6:2A:F4:FF:10:30:CC:19:F1:F0:71
Certificate issuer:       /CN=112c6636-0b34-4e47-95cc-29a6b53a3388
Certificate serial:       010D0C9F4328584A90A0B5D8A1C1F21F54375E00
Authority key identifier: E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     397641
IP address blocks:        161.195.196.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b5:d8:a1:c1:f2:1f:54:37:5e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=112c6636-0b34-4e47-95cc-29a6b53a3388
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=5099b993-743b-4195-8796-568a83fe6d7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:ac:50:78:e1:14:14:20:e7:d4:43:bb:d0:08:
                    0d:af:60:56:88:41:5d:4c:30:66:6a:83:82:48:a2:
                    b0:66:1c:6f:1c:71:62:38:f0:7c:db:f7:42:8b:8b:
                    af:cf:01:9d:8a:13:76:a6:8f:12:e9:26:bc:9b:34:
                    1d:bf:fc:c3:36:78:12:55:a3:92:bb:30:b0:5e:d6:
                    52:2a:3c:b9:94:f5:d0:e1:20:d0:4f:27:65:16:57:
                    ef:d1:1a:26:21:c1:61:db:d7:b5:39:36:29:b8:d8:
                    f4:88:60:73:03:b3:44:a6:51:5b:80:b2:fd:2f:ca:
                    cb:dc:c4:f4:0d:e1:8d:38:b2:b6:ea:02:35:93:24:
                    ce:a7:b6:a2:63:dd:3d:be:b8:5c:ef:0b:a9:61:57:
                    de:6e:01:8b:d6:a1:32:6b:c2:75:07:ca:fd:f7:f3:
                    dd:64:63:07:65:b5:66:e7:d2:0f:bc:09:cd:a1:54:
                    f5:08:48:67:66:d8:90:c6:31:e5:dd:72:df:e0:16:
                    6a:cd:80:32:37:c3:cc:39:6d:cb:3e:13:2d:ec:6c:
                    f2:7d:58:3f:44:c6:ce:80:74:b8:d5:c7:69:72:4b:
                    63:94:be:16:af:20:80:c2:a2:e4:ed:5d:4c:75:49:
                    5e:45:37:b2:02:b2:ec:1e:03:47:1c:f6:24:58:d1:
                    a8:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:EB:97:66:CD:96:0C:63:0A:F6:2A:F4:FF:10:30:CC:19:F1:F0:71
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/2a211500-b808-300b-9927-2076eca3b396.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388/112c6636-0b34-4e47-95cc-29a6b53a3388.crl

            X509v3 Authority Key Identifier:
                keyid:E5:26:64:A3:77:43:CC:BD:49:D5:1E:16:43:82:15:8F:D7:87:BA:EC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/112c6636-0b34-4e47-95cc-29a6b53a3388.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.195.196.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:1b:a2:fa:2a:de:92:dc:88:e9:01:29:69:18:f0:c8:ae:9b:
         6b:f9:f0:45:3e:9d:c2:c6:db:52:89:8a:44:5f:ed:af:1a:34:
         41:a1:ce:63:28:81:dc:ba:f4:91:ae:0f:04:ed:12:2d:75:2a:
         46:d0:7f:61:43:d3:7e:cb:d8:f4:2e:72:4d:7c:49:aa:a0:e4:
         a8:90:10:35:c3:ca:f8:14:ec:82:55:d6:62:a1:97:fc:84:32:
         77:b6:58:8c:31:37:f2:b8:60:f1:88:5f:70:02:0c:ed:b1:f2:
         c3:25:ef:5e:2f:a1:5f:d8:d5:ba:2d:78:d1:3d:ff:a1:46:1e:
         25:f7:a3:b0:e5:ce:73:96:b2:68:e8:04:b4:b7:e6:f9:e9:e7:
         04:9d:fa:83:92:7b:58:96:06:c0:a8:06:c2:c4:5e:48:93:eb:
         0b:ba:ea:43:1f:c2:1c:ca:bb:b4:37:d6:5f:73:51:30:10:68:
         ed:09:58:65:39:55:0a:20:95:a3:f6:86:69:0e:55:be:6c:4c:
         e2:c8:1a:ed:8f:6f:23:2c:a3:ff:54:e9:68:49:97:8a:8a:59:
         cd:80:7a:70:7b:f4:aa:29:4d:3f:f9:34:6a:80:d6:4f:09:c0:
         2f:a8:bd:79:ea:e1:e6:ad:72:0e:ea:af:de:12:87:35:98:ad:
         68:4d:31:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLXYocHyH1Q3XgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTEyYzY2MzYtMGIzNC00ZTQ3LTk1Y2MtMjlhNmI1M2Ez
Mzg4MB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NTA5OWI5OTMtNzQzYi00MTk1LTg3OTYtNTY4YTgzZmU2ZDdkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk6xQeOEUFCDn1EO70AgNr2BWiEFdTDBmaoOC
SKKwZhxvHHFiOPB82/dCi4uvzwGdihN2po8S6Sa8mzQdv/zDNngSVaOSuzCwXtZS
Kjy5lPXQ4SDQTydlFlfv0RomIcFh29e1OTYpuNj0iGBzA7NEplFbgLL9L8rL3MT0
DeGNOLK26gI1kyTOp7aiY909vrhc7wupYVfebgGL1qEya8J1B8r99/PdZGMHZbVm
59IPvAnNoVT1CEhnZtiQxjHl3XLf4BZqzYAyN8PMOW3LPhMt7GzyfVg/RMbOgHS4
1cdpcktjlL4WryCAwqLk7V1MdUleRTeyArLsHgNHHPYkWNGo8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7rl2bNlgxjCvYq9P8QMMwZ8fBxMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJj
NjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2YjUzYTMzODgvMmEyMTE1MDAtYjgwOC0z
MDBiLTk5MjctMjA3NmVjYTNiMzk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvMTEyYzY2MzYtMGIzNC00ZTQ3LTk1
Y2MtMjlhNmI1M2EzMzg4LzExMmM2NjM2LTBiMzQtNGU0Ny05NWNjLTI5YTZiNTNh
MzM4OC5jcmwwHwYDVR0jBBgwFoAU5SZko3dDzL1J1R4WQ4IVj9eHuuwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi8xMTJjNjYzNi0wYjM0LTRlNDctOTVjYy0yOWE2
YjUzYTMzODguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCocPEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF0bovoq3pLciOkBKWkY8Mium2v58EU+ncLG21KJikRf7a8aNEGhzmMo
gdy69JGuDwTtEi11KkbQf2FD037L2PQuck18Saqg5KiQEDXDyvgU7IJV1mKhl/yE
Mne2WIwxN/K4YPGIX3ACDO2x8sMl714voV/Y1boteNE9/6FGHiX3o7DlznOWsmjo
BLS35vnp5wSd+oOSe1iWBsCoBsLEXkiT6wu66kMfwhzKu7Q31l9zUTAQaO0JWGU5
VQoglaP2hmkOVb5sTOLIGu2PbyMso/9U6WhJl4qKWc2AenB79KopTT/5NGqA1k8J
wC+ovXnq4eatcg7qr94ShzWYrWhNMco=
-----END CERTIFICATE-----
Generated at Thu Aug 7 05:11:26 2025 by rpki-client