Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/91fd536e-e4f0-3faf-8e96-a640b19892ab.roa
File:                     91fd536e-e4f0-3faf-8e96-a640b19892ab.roa (raw, json)
Hash identifier:          PQcgpGlxb3kI4OFcEB2/1EPMt/w/XfnoBlUjMn4gPCk=
Subject key identifier:   2C:6E:2C:5D:1F:54:56:0B:2F:4B:48:CF:A4:AE:97:CE:37:98:1B:B2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A0C057A26B20C8777CD17F880
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/91fd536e-e4f0-3faf-8e96-a640b19892ab.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     376
IP address blocks:        207.162.87.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:7a:26:b2:0c:87:77:cd:17:f8:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=e05b028e-b7e0-4f55-a34d-900e499f3d97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:89:85:6f:c4:13:e0:60:d7:cd:81:e5:f8:05:
                    51:4f:3a:2d:7e:df:2e:2d:da:73:c4:94:55:90:ef:
                    df:d0:3c:8a:d8:79:25:f4:66:31:3e:1a:c7:9d:55:
                    97:03:8f:59:06:13:b4:1f:cf:27:92:08:22:58:62:
                    be:f9:9c:07:f8:ee:85:4f:b4:ef:06:76:d8:d5:a4:
                    61:ba:3c:1e:51:4e:47:01:5c:53:db:87:25:b8:aa:
                    72:6c:c3:98:a2:99:6f:2d:e9:03:e7:41:6f:61:c8:
                    76:b1:a8:85:dc:bf:82:70:bb:98:2c:32:aa:d8:62:
                    ab:83:65:f3:b2:cc:2d:10:ec:86:21:90:77:29:ec:
                    b4:0e:14:d7:9d:3a:ba:14:93:05:e1:4d:d5:d8:32:
                    0d:a4:1a:09:ff:ec:21:54:eb:11:cf:de:6c:be:d1:
                    63:ce:67:e2:43:ec:90:f9:04:26:cd:81:d0:b4:6b:
                    bd:09:d8:4d:56:cb:eb:b2:af:d9:10:63:75:e9:45:
                    9f:2c:24:5d:61:0e:44:af:6c:12:37:21:f1:74:32:
                    a0:d4:d5:93:2f:36:3c:ec:15:66:4f:fd:eb:1d:9b:
                    37:e2:0c:e3:a5:de:91:fb:7a:f5:92:4f:00:2e:1f:
                    43:06:c4:ea:c5:c4:19:db:c3:b4:bf:92:0f:f3:4e:
                    3a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6E:2C:5D:1F:54:56:0B:2F:4B:48:CF:A4:AE:97:CE:37:98:1B:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/91fd536e-e4f0-3faf-8e96-a640b19892ab.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.87.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         45:2e:48:2d:24:b1:f6:94:d8:ac:bb:28:de:4b:4e:4d:13:e3:
         ee:f3:cc:73:26:bf:1a:3c:96:cb:a7:62:19:7f:81:72:1d:80:
         85:36:41:06:fb:d0:67:fd:5b:45:c5:79:96:a1:71:cb:92:3d:
         22:31:a6:9d:87:69:ab:f5:27:10:8c:ad:c7:99:cc:b3:08:41:
         2b:a1:b8:21:33:ea:74:f4:6f:cb:9e:ba:51:ee:32:b3:9a:80:
         21:7d:ec:7e:b8:0b:60:70:ad:77:d9:53:2c:1d:05:f8:53:33:
         da:58:12:65:19:fc:8e:f5:87:6a:d3:e5:ef:38:8d:1d:a1:e8:
         58:83:b8:e0:76:8d:dd:b0:42:9f:af:dd:2c:29:a9:ab:ee:34:
         e9:c2:c5:50:f3:30:6d:47:44:67:0b:15:cb:2f:b7:3e:bd:3c:
         65:38:d5:92:87:e5:77:c1:95:a4:25:be:95:a8:ed:51:1c:12:
         99:b8:36:8e:f3:df:61:5d:7b:c4:af:5d:45:59:d2:9f:ec:3c:
         77:48:26:a2:7a:a5:74:11:b1:d3:c3:43:a2:c2:74:27:16:5e:
         ef:43:3c:65:0a:20:07:a8:f7:f7:f9:69:3e:de:f3:4c:40:2b:
         b8:c0:d4:b6:9f:40:be:2c:96:a2:96:64:e1:86:db:85:ad:e7:
         77:ca:5a:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXomsgyHd80X+IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
ZTA1YjAyOGUtYjdlMC00ZjU1LWEzNGQtOTAwZTQ5OWYzZDk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4mFb8QT4GDXzYHl+AVRTzotft8uLdpzxJRV
kO/f0DyK2Hkl9GYxPhrHnVWXA49ZBhO0H88nkggiWGK++ZwH+O6FT7TvBnbY1aRh
ujweUU5HAVxT24cluKpybMOYoplvLekD50FvYch2saiF3L+CcLuYLDKq2GKrg2Xz
sswtEOyGIZB3Key0DhTXnTq6FJMF4U3V2DINpBoJ/+whVOsRz95svtFjzmfiQ+yQ
+QQmzYHQtGu9CdhNVsvrsq/ZEGN16UWfLCRdYQ5Er2wSNyHxdDKg1NWTLzY87BVm
T/3rHZs34gzjpd6R+3r1kk8ALh9DBsTqxcQZ28O0v5IP8046zQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCxuLF0fVFYLL0tIz6Sul843mBuyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvOTFmZDUzNmUtZTRmMC0z
ZmFmLThlOTYtYTY0MGIxOTg5MmFiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6JXMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEUuSC0ksfaU2Ky7KN5LTk0T4+7zzHMmvxo8lsunYhl/gXIdgIU2QQb7
0Gf9W0XFeZahccuSPSIxpp2Haav1JxCMrceZzLMIQSuhuCEz6nT0b8ueulHuMrOa
gCF97H64C2BwrXfZUywdBfhTM9pYEmUZ/I71h2rT5e84jR2h6FiDuOB2jd2wQp+v
3SwpqavuNOnCxVDzMG1HRGcLFcsvtz69PGU41ZKH5XfBlaQlvpWo7VEcEpm4No7z
32Fde8SvXUVZ0p/sPHdIJqJ6pXQRsdPDQ6LCdCcWXu9DPGUKIAeo9/f5aT7e80xA
K7jA1LafQL4slqKWZOGG24Wt53fKWoI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:57:34 2025 by rpki-client