Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
File:                     2d512d2b-840f-30cb-88f8-f79128126588.roa (raw, json)
Hash identifier:          ZSR2diuYipgL9pB65CzRs24INQV/bHcH5qjtDTkjz6A=
Subject key identifier:   DF:D3:B9:76:3C:2C:EF:38:1D:2C:9E:D5:AF:3F:15:02:D2:C2:53:FE
Certificate issuer:       /CN=d3bf28f7-eba5-4254-a572-761a872427b5
Certificate serial:       010D0C9F4328584A17300380E05BF032380C4D80
Authority key identifier: 05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        192.103.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:03:80:e0:5b:f0:32:38:0c:4d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d3bf28f7-eba5-4254-a572-761a872427b5
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=bd48abdb-02b5-447d-ad72-c51cdc73f0a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:84:d6:6f:f7:e6:87:be:66:c1:a7:72:5f:34:
                    67:5b:cb:7c:9f:39:90:e2:b0:22:c5:e0:38:56:b0:
                    8b:84:2a:ad:59:f3:84:1a:d0:a5:5e:e5:08:88:c7:
                    25:3d:6a:c3:94:e0:34:a3:85:26:78:d6:76:eb:a5:
                    a3:af:2c:81:27:71:1a:12:3f:59:b3:f9:5a:cb:87:
                    45:57:14:c2:e1:21:72:8b:e2:51:7d:2e:8f:fb:7a:
                    af:da:a2:db:4d:e6:c9:ec:97:0a:72:a5:c5:11:bb:
                    24:07:89:fe:be:b6:d3:f5:e3:fc:c0:28:2a:48:f0:
                    58:d6:f7:9a:14:ee:f3:c9:1d:58:c8:79:fe:9b:a2:
                    75:52:f0:6b:f3:af:34:32:8c:6e:bb:e7:95:23:96:
                    e7:8e:f0:ab:d0:47:a9:0a:c6:d9:90:08:d9:42:94:
                    c5:8c:45:10:89:24:58:cd:41:12:30:f1:f8:10:2d:
                    32:91:84:85:ab:12:91:a1:87:41:f2:fc:e1:5b:3b:
                    98:d8:fb:9c:8f:7a:16:2c:93:00:25:dd:f4:00:ff:
                    99:f9:ed:c4:e7:c5:6d:5b:c2:84:25:01:f5:3d:09:
                    80:cc:cc:df:4d:ce:26:93:fd:e2:0a:9a:d0:34:f1:
                    26:51:c6:1e:43:06:f7:66:a8:de:e8:85:24:9f:df:
                    2f:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:D3:B9:76:3C:2C:EF:38:1D:2C:9E:D5:AF:3F:15:02:D2:C2:53:FE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/2d512d2b-840f-30cb-88f8-f79128126588.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5/d3bf28f7-eba5-4254-a572-761a872427b5.crl

            X509v3 Authority Key Identifier:
                keyid:05:83:BF:45:04:55:C8:8C:9C:6C:F8:A0:5B:76:31:FE:F7:6A:8C:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d3bf28f7-eba5-4254-a572-761a872427b5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.103.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         88:dd:ec:ef:f3:01:26:74:b1:37:12:fb:a9:68:bc:e9:29:7e:
         e6:10:c9:6a:aa:6f:8a:ae:82:1c:bb:dd:42:0f:3a:62:e4:44:
         8d:f1:d6:c3:28:4f:34:bc:b2:fa:61:90:fe:2d:27:89:ea:c8:
         11:03:6e:d9:9e:4c:12:12:b3:16:69:d4:60:99:e2:8c:da:8e:
         20:03:ba:c4:34:55:df:26:c0:99:16:64:dc:36:94:0e:d5:d4:
         4b:e2:b8:95:69:57:0a:c8:b6:e2:0e:0c:c8:27:e0:76:17:47:
         7d:2d:21:c1:7a:68:b1:11:b6:17:04:25:5c:3f:62:df:f7:03:
         58:e4:36:b5:1f:3e:2a:4a:b6:f7:36:ab:57:e4:f6:b8:bd:3a:
         bb:84:74:79:90:79:51:f0:d7:dd:49:a6:eb:3f:5f:57:07:35:
         1d:ae:64:32:87:96:5b:af:d2:70:36:8b:c7:84:fe:8d:f0:fe:
         e1:1e:83:18:1c:ca:ef:50:cc:cd:fc:f6:02:04:18:3d:3a:5d:
         ac:8f:ed:ea:55:7e:80:24:66:bd:f6:e8:eb:8d:06:0f:f1:cd:
         9d:5c:db:29:56:0b:d5:45:e0:34:80:9f:c3:20:f2:30:28:d9:
         58:bc:96:77:a2:10:ed:36:bc:90:2b:c0:0b:de:e2:d9:e9:00:
         11:9d:26:a9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAOA4FvwMjgMTYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDNiZjI4ZjctZWJhNS00MjU0LWE1NzItNzYxYTg3MjQy
N2I1MB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
YmQ0OGFiZGItMDJiNS00NDdkLWFkNzItYzUxY2RjNzNmMGE5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiITWb/fmh75mwadyXzRnW8t8nzmQ4rAixeA4
VrCLhCqtWfOEGtClXuUIiMclPWrDlOA0o4UmeNZ266WjryyBJ3EaEj9Zs/lay4dF
VxTC4SFyi+JRfS6P+3qv2qLbTebJ7JcKcqXFEbskB4n+vrbT9eP8wCgqSPBY1vea
FO7zyR1YyHn+m6J1UvBr8680Moxuu+eVI5bnjvCr0EepCsbZkAjZQpTFjEUQiSRY
zUESMPH4EC0ykYSFqxKRoYdB8vzhWzuY2Pucj3oWLJMAJd30AP+Z+e3E58VtW8KE
JQH1PQmAzMzfTc4mk/3iCprQNPEmUcYeQwb3Zqje6IUkn98vVQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN/TuXY8LO84HSye1a8/FQLSwlP+MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kM2Jm
MjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFhODcyNDI3YjUvMmQ1MTJkMmItODQwZi0z
MGNiLTg4ZjgtZjc5MTI4MTI2NTg4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDNiZjI4ZjctZWJhNS00MjU0LWE1
NzItNzYxYTg3MjQyN2I1L2QzYmYyOGY3LWViYTUtNDI1NC1hNTcyLTc2MWE4NzI0
MjdiNS5jcmwwHwYDVR0jBBgwFoAUBYO/RQRVyIycbPigW3Yx/vdqjBkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kM2JmMjhmNy1lYmE1LTQyNTQtYTU3Mi03NjFh
ODcyNDI3YjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwGf/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIjd7O/zASZ0sTcS+6lovOkpfuYQyWqqb4qughy73UIPOmLkRI3x1sMo
TzS8svphkP4tJ4nqyBEDbtmeTBISsxZp1GCZ4ozajiADusQ0Vd8mwJkWZNw2lA7V
1EviuJVpVwrItuIODMgn4HYXR30tIcF6aLERthcEJVw/Yt/3A1jkNrUfPipKtvc2
q1fk9ri9OruEdHmQeVHw191Jpus/X1cHNR2uZDKHlluv0nA2i8eE/o3w/uEegxgc
yu9QzM389gIEGD06XayP7epVfoAkZr326OuNBg/xzZ1c2ylWC9VF4DSAn8Mg8jAo
2Vi8lneiEO02vJArwAve4tnpABGdJqk=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:33:14 2025 by rpki-client