Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
File:                     5a8aa138-b40a-3f8d-8630-d273b7a86699.roa (raw, json)
Hash identifier:          CCJHyF29/MWZgmUTfN71PLPw+nDCfjsRTElEtKLmgaY=
Subject key identifier:   BC:67:1F:33:34:C4:BB:9A:DB:8F:94:FD:BC:EA:93:46:49:4E:88:07
Certificate issuer:       /CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
Certificate serial:       010D0C9F4328584A2ABADF9235AE3D4709436500
Authority key identifier: 54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     19782
IP address blocks:        192.200.128.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:df:92:35:ae:3d:47:09:43:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5421ffd8-36e6-4a6b-9034-4671592c5a4f
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=03a7f665-4cce-4093-bab7-f82edb20e10b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:bc:da:b1:ae:c1:7a:18:8c:e3:bc:ad:0b:19:
                    22:15:90:71:4a:26:4b:a5:13:03:eb:0e:2c:f4:bd:
                    20:01:ba:dd:3e:05:90:cc:39:cb:21:a9:df:c2:93:
                    52:d6:00:40:2d:e9:ac:7a:7a:37:e4:4e:89:6e:66:
                    5f:8a:f5:54:a0:40:a0:58:f0:fb:ee:7c:b1:b0:78:
                    dd:3b:41:14:5b:85:c1:9c:cd:cd:de:26:d7:75:79:
                    ff:99:56:9a:84:a0:bb:df:f1:aa:1b:fa:04:74:c3:
                    7a:13:b6:72:fd:62:60:b6:04:7c:32:f5:56:5e:5b:
                    8e:3a:8d:d2:08:ba:23:47:73:ad:35:65:87:f9:55:
                    ab:13:d4:3d:91:01:1f:f2:15:f9:fb:64:65:d6:42:
                    39:f8:68:1e:c0:9a:8d:d8:83:0e:7a:36:6c:61:3d:
                    28:9d:ff:37:db:3a:d4:ac:88:55:0a:74:33:5c:8a:
                    a2:42:5f:e8:e8:48:c9:d6:91:bb:58:6b:2e:51:b7:
                    bd:ac:7e:43:02:a2:3b:ec:32:eb:47:db:85:d5:4c:
                    3b:c4:44:17:6a:6e:4e:7f:87:87:54:16:86:2b:2c:
                    46:78:1b:a5:13:4a:9c:1e:7a:d0:97:99:ef:31:6e:
                    a6:45:37:dc:36:71:25:4c:a4:72:87:33:6c:d7:24:
                    65:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:67:1F:33:34:C4:BB:9A:DB:8F:94:FD:BC:EA:93:46:49:4E:88:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5a8aa138-b40a-3f8d-8630-d273b7a86699.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f/5421ffd8-36e6-4a6b-9034-4671592c5a4f.crl

            X509v3 Authority Key Identifier:
                keyid:54:12:93:3A:81:E6:20:23:BD:E8:0B:99:C2:45:54:DD:59:11:66:6E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/5421ffd8-36e6-4a6b-9034-4671592c5a4f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.200.128.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:35:2d:cd:4c:e2:84:df:ca:4e:a8:90:84:a0:c1:43:2d:85:
         4b:18:90:a5:8e:48:b7:ac:14:10:63:00:05:7d:94:d9:93:9e:
         a6:39:05:f6:93:51:f5:47:58:b4:f9:8d:38:18:d1:e2:ee:94:
         12:34:ed:e3:fd:ee:89:be:a0:6f:06:c0:7a:b6:bb:c9:bd:bf:
         36:f5:ac:ff:79:8e:a0:71:1e:7d:f7:ff:62:10:2c:18:0b:06:
         8a:c1:75:d2:85:27:b5:74:1c:63:c8:d3:c8:95:c6:e5:c2:9e:
         cc:07:96:84:c9:b1:16:ae:4e:e5:f5:9d:6a:5b:a6:48:78:e0:
         f8:4f:3d:1a:52:8d:f8:2c:aa:0b:02:61:3b:30:36:d5:22:d6:
         af:eb:37:4f:19:7c:e7:0e:a0:43:67:c6:ae:66:63:ba:14:77:
         59:3e:b8:6a:0d:be:f8:4e:41:2d:44:f7:01:79:40:9a:2e:c6:
         ab:32:a8:6a:4b:c3:11:45:24:aa:10:b2:17:19:64:3f:36:67:
         43:66:37:4a:3c:14:47:0f:99:c1:67:6b:3e:85:b7:00:e5:6a:
         04:c4:6b:17:8f:95:8c:13:c3:94:f9:1c:ef:b2:b2:18:ff:8c:
         f9:a5:ae:de:c7:9c:75:cc:0b:db:7a:df:ad:ef:2a:43:35:39:
         22:d0:9b:83
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoqut+SNa49RwlDZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTQyMWZmZDgtMzZlNi00YTZiLTkwMzQtNDY3MTU5MmM1
YTRmMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MDNhN2Y2NjUtNGNjZS00MDkzLWJhYjctZjgyZWRiMjBlMTBiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLzasa7BehiM47ytCxkiFZBxSiZLpRMD6w4s
9L0gAbrdPgWQzDnLIanfwpNS1gBALemseno35E6JbmZfivVUoECgWPD77nyxsHjd
O0EUW4XBnM3N3ibXdXn/mVaahKC73/GqG/oEdMN6E7Zy/WJgtgR8MvVWXluOOo3S
CLojR3OtNWWH+VWrE9Q9kQEf8hX5+2Rl1kI5+GgewJqN2IMOejZsYT0onf832zrU
rIhVCnQzXIqiQl/o6EjJ1pG7WGsuUbe9rH5DAqI77DLrR9uF1Uw7xEQXam5Of4eH
VBaGKyxGeBulE0qcHnrQl5nvMW6mRTfcNnElTKRyhzNs1yRlEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLxnHzM0xLua24+U/bzqk0ZJTogHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS81NDIx
ZmZkOC0zNmU2LTRhNmItOTAzNC00NjcxNTkyYzVhNGYvNWE4YWExMzgtYjQwYS0z
ZjhkLTg2MzAtZDI3M2I3YTg2Njk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNTQyMWZmZDgtMzZlNi00YTZiLTkw
MzQtNDY3MTU5MmM1YTRmLzU0MjFmZmQ4LTM2ZTYtNGE2Yi05MDM0LTQ2NzE1OTJj
NWE0Zi5jcmwwHwYDVR0jBBgwFoAUVBKTOoHmICO96AuZwkVU3VkRZm4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS81NDIxZmZkOC0zNmU2LTRhNmItOTAzNC00Njcx
NTkyYzVhNGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwMiAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABA1Lc1M4oTfyk6okISgwUMthUsYkKWOSLesFBBjAAV9lNmTnqY5BfaT
UfVHWLT5jTgY0eLulBI07eP97om+oG8GwHq2u8m9vzb1rP95jqBxHn33/2IQLBgL
BorBddKFJ7V0HGPI08iVxuXCnswHloTJsRauTuX1nWpbpkh44PhPPRpSjfgsqgsC
YTswNtUi1q/rN08ZfOcOoENnxq5mY7oUd1k+uGoNvvhOQS1E9wF5QJouxqsyqGpL
wxFFJKoQshcZZD82Z0NmN0o8FEcPmcFnaz6FtwDlagTEaxePlYwTw5T5HO+yshj/
jPmlrt7HnHXMC9t6363vKkM1OSLQm4M=
-----END CERTIFICATE-----
Generated at Thu Jun 19 04:32:35 2025 by rpki-client