Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa
File:                     a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa (raw, json)
Hash identifier:          he18/V+VKwbMbrIbEYfjJb4GMP75HWA3Q1owohXYRLk=
Subject key identifier:   98:F2:47:7D:58:C9:8D:FB:30:8B:6C:FA:C7:CF:93:36:C9:56:B2:E2
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F4328584A0D6A8F0BBFD59F68A4CE7B80
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa
Signing time:             Mon 02 Jun 2025 01:00:49 +0000
ROA not before:           Mon 02 Jun 2025 01:00:49 +0000
ROA not after:            Sun 31 Aug 2025 01:00:49 +0000
asID:                     376
IP address blocks:        207.162.75.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0d:6a:8f:0b:bf:d5:9f:68:a4:ce:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: Jun  2 01:00:49 2025 GMT
            Not After : Aug 31 01:00:49 2025 GMT
        Subject: CN=99ffb2ea-23d9-48e8-89df-e22cdfe0637f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d0:d2:99:5c:91:43:ec:5e:3c:b2:fe:4d:d2:
                    d4:4b:25:10:3f:e9:1c:4e:16:bd:09:65:2d:24:1e:
                    74:fc:6d:b2:ef:47:2e:8f:db:c3:14:bd:6e:28:28:
                    04:85:dd:48:3b:5d:f5:07:83:4f:53:0c:4c:5e:67:
                    20:de:cd:b9:9d:39:5a:9c:60:0b:a6:7c:10:8e:3c:
                    b4:c7:e5:48:17:34:16:d3:d5:98:e7:37:58:15:8e:
                    de:16:7d:89:bd:1c:3e:e1:96:63:2a:15:84:ed:46:
                    04:be:e5:27:2f:73:d5:ad:6f:ab:89:93:1b:32:56:
                    00:58:a5:aa:31:6d:2e:0b:1d:5d:de:09:db:5a:f7:
                    63:21:55:94:8e:79:4f:a6:9c:17:b5:99:51:7f:d0:
                    82:57:ed:d0:ab:6d:77:7c:b9:54:37:1c:d5:b8:60:
                    80:d1:2e:2e:7f:b9:26:1c:71:02:10:22:d3:1c:fd:
                    29:a9:23:f8:ed:70:0e:a0:ac:5d:d0:01:b0:16:0c:
                    14:7f:18:6d:76:0c:1e:d5:53:65:b6:c6:74:67:61:
                    2c:75:79:5c:d6:39:7e:c3:7c:ed:93:60:2f:a0:c0:
                    2d:68:ef:23:c8:c8:1e:b5:24:f1:2c:c0:05:df:8f:
                    06:85:41:7f:78:f9:35:5f:53:aa:f7:bd:6d:bb:93:
                    c4:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:F2:47:7D:58:C9:8D:FB:30:8B:6C:FA:C7:CF:93:36:C9:56:B2:E2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/a88bbfd6-30aa-30a7-9ef1-97d6bf564df5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.162.75.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         77:99:fc:f8:14:33:09:f2:e9:4f:45:2d:07:8c:84:6a:9e:c0:
         67:c2:72:dc:92:fb:7e:a5:fe:2b:df:fa:69:6b:d1:8e:5f:04:
         f9:d0:10:79:33:96:03:07:7a:f6:1a:29:01:45:0e:18:e8:c6:
         df:8e:dd:44:8c:ca:95:b1:a2:2a:3d:6e:88:33:2a:01:01:57:
         0f:89:f7:7a:a4:f7:b5:71:5e:14:ef:1b:3c:28:b4:c9:0c:ae:
         63:46:40:11:23:23:62:eb:26:7f:6a:74:cd:5c:63:8f:ff:a9:
         63:1c:07:9a:7e:e8:a5:96:ea:26:2d:42:57:c4:42:31:9d:77:
         55:ec:1f:1e:6e:ea:bf:3a:2e:f8:df:6b:78:0e:c0:77:ff:c0:
         57:f0:0b:fa:17:63:21:c7:a2:31:ff:28:05:61:1f:d1:5a:47:
         01:26:ba:4f:c7:64:d8:fd:3f:78:cc:64:ee:29:b7:8b:f0:5c:
         e9:0a:e4:23:f4:62:11:3a:b3:22:66:a3:9c:6e:28:7c:8d:3e:
         ea:39:1a:d8:d5:ee:4d:c0:82:18:29:46:cd:5a:b0:f6:e8:9e:
         25:6d:c3:5f:2d:5d:a3:42:e8:a8:c9:59:61:1f:7a:0e:b2:94:
         3c:e7:ba:55:d4:17:9a:3c:ea:07:d5:3a:07:14:9e:17:b4:12:
         e2:fe:1c:64
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoNao8Lv9WfaKTOe4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDYwMjAxMDA0OVoXDTI1MDgzMTAxMDA0OVowLzEtMCsGA1UEAxMk
OTlmZmIyZWEtMjNkOS00OGU4LTg5ZGYtZTIyY2RmZTA2MzdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtDSmVyRQ+xePLL+TdLUSyUQP+kcTha9CWUt
JB50/G2y70cuj9vDFL1uKCgEhd1IO131B4NPUwxMXmcg3s25nTlanGALpnwQjjy0
x+VIFzQW09WY5zdYFY7eFn2JvRw+4ZZjKhWE7UYEvuUnL3PVrW+riZMbMlYAWKWq
MW0uCx1d3gnbWvdjIVWUjnlPppwXtZlRf9CCV+3Qq213fLlUNxzVuGCA0S4uf7km
HHECECLTHP0pqSP47XAOoKxd0AGwFgwUfxhtdgwe1VNltsZ0Z2EsdXlc1jl+w3zt
k2AvoMAtaO8jyMgetSTxLMAF348GhUF/ePk1X1Oq971tu5PE1QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJjyR31YyY37MIts+sfPkzbJVrLiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvYTg4YmJmZDYtMzBhYS0z
MGE3LTllZjEtOTdkNmJmNTY0ZGY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz6JLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHeZ/PgUMwny6U9FLQeMhGqewGfCctyS+36l/ivf+mlr0Y5fBPnQEHkz
lgMHevYaKQFFDhjoxt+O3USMypWxoio9bogzKgEBVw+J93qk97VxXhTvGzwotMkM
rmNGQBEjI2LrJn9qdM1cY4//qWMcB5p+6KWW6iYtQlfEQjGdd1XsHx5u6r86Lvjf
a3gOwHf/wFfwC/oXYyHHojH/KAVhH9FaRwEmuk/HZNj9P3jMZO4pt4vwXOkK5CP0
YhE6syJmo5xuKHyNPuo5GtjV7k3AghgpRs1asPboniVtw18tXaNC6KjJWWEfeg6y
lDznulXUF5o86gfVOgcUnhe0EuL+HGQ=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:25:50 2025 by rpki-client