Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
File:                     b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa (raw, json)
Hash identifier:          l6J22UeY8XOqxshi5WmyiSDLtUJrTWjjkJi00URFGkQ=
Subject key identifier:   A5:B8:1E:E0:73:39:6B:D9:4E:C3:8E:7B:49:1F:00:8D:5E:00:84:3B
Certificate issuer:       /CN=08e01c34-608c-4615-9e00-7b09e447bf4c
Certificate serial:       010D0C9F4328584AA85BBA9FEF7BA7D482024080
Authority key identifier: 4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     15116
IP address blocks:        198.49.82.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:ba:9f:ef:7b:a7:d4:82:02:40:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08e01c34-608c-4615-9e00-7b09e447bf4c
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=768c0010-628c-4f38-84f5-41d89d72ebf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5a:0f:cc:6b:9e:40:6b:be:73:95:5d:91:87:
                    66:06:e3:5e:42:8b:97:98:f1:4b:0d:37:2e:e9:07:
                    17:40:0f:82:6d:35:e3:45:cb:c2:e2:01:a0:5e:3f:
                    98:5c:c7:c6:6c:e7:d2:67:09:da:41:8f:41:ab:fa:
                    54:cb:69:bd:88:66:cd:b3:5f:b5:51:48:e5:4b:01:
                    08:12:47:0f:27:99:39:f4:a6:86:4f:9e:25:c6:d9:
                    78:b4:d7:4f:fa:e2:62:7d:b0:51:d6:b2:b8:ab:84:
                    02:66:e7:06:40:d2:94:5a:5a:b4:f8:a2:c2:ab:28:
                    61:cf:50:1c:9a:3c:4e:9f:e9:fb:d6:7d:34:3e:7c:
                    42:d8:65:ba:be:70:66:19:61:b1:9c:a2:61:d1:d7:
                    65:e1:b2:3b:7c:25:fc:b1:76:61:6d:d8:c9:9c:d3:
                    b7:16:a1:dc:ba:66:f9:5b:15:aa:e4:41:7a:60:16:
                    b6:c9:c9:78:b0:b3:0d:f2:6d:cb:24:38:12:fb:95:
                    cf:1c:b1:78:7e:26:6a:ee:37:f1:62:ad:8a:d1:55:
                    c9:83:ea:cd:18:63:10:a1:02:24:1a:d0:ae:f8:9b:
                    d2:8e:0a:99:68:f2:3e:e9:81:65:f8:ba:50:35:c3:
                    db:95:66:8a:f7:47:15:8f:28:1b:63:d7:3b:6c:b1:
                    9e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:B8:1E:E0:73:39:6B:D9:4E:C3:8E:7B:49:1F:00:8D:5E:00:84:3B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/b2b645d6-c809-3af8-b0d7-60aacb9a34e2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c/08e01c34-608c-4615-9e00-7b09e447bf4c.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D7:EC:EF:A2:E3:3A:75:01:61:29:F9:45:D5:37:CF:54:EE:63:74

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/08e01c34-608c-4615-9e00-7b09e447bf4c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.49.82.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5a:96:6a:03:d0:56:a4:ab:4a:62:42:57:da:c6:5f:92:f5:b5:
         f6:cc:dd:78:fd:dd:aa:ba:d6:61:85:bd:39:e3:d5:a2:a6:5a:
         9e:dc:b1:63:2b:0f:18:43:ae:b3:bd:98:fa:22:77:a2:a7:2f:
         6a:66:05:7e:02:21:6e:fb:20:f3:ad:a4:7e:09:b7:9e:93:bb:
         de:75:73:f0:ce:30:39:d5:06:fe:72:6c:1d:70:61:13:91:70:
         2a:36:22:f8:01:0a:04:eb:ed:33:8a:b8:ed:90:e2:e7:a8:6b:
         a9:ad:2a:4e:4c:e8:39:98:2c:73:36:98:e4:68:65:2b:36:f2:
         01:33:20:8f:d3:77:05:51:32:2b:98:19:c0:1b:b1:d3:da:fd:
         3e:7f:f7:67:36:a2:65:be:74:8f:7f:93:78:77:dc:44:23:9a:
         6e:1c:4e:8c:78:08:d5:51:f4:6b:b2:eb:07:8d:8d:7e:10:dd:
         37:8b:da:1d:bf:00:57:18:64:7b:67:6e:d0:d6:2f:d0:aa:99:
         63:80:17:66:d6:f2:72:38:27:a7:fe:ad:0e:f7:6f:00:d6:d5:
         9d:4a:46:ca:10:33:fa:9d:dc:2b:ef:3b:e0:ca:6d:b7:1d:61:
         9a:f5:fd:d6:f9:d0:cf:98:b9:b5:54:6c:5f:b2:04:15:31:ef:
         7b:5a:d8:fc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7qf73un1IICQIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDhlMDFjMzQtNjA4Yy00NjE1LTllMDAtN2IwOWU0NDdi
ZjRjMB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
NzY4YzAwMTAtNjI4Yy00ZjM4LTg0ZjUtNDFkODlkNzJlYmY0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmFoPzGueQGu+c5VdkYdmBuNeQouXmPFLDTcu
6QcXQA+CbTXjRcvC4gGgXj+YXMfGbOfSZwnaQY9Bq/pUy2m9iGbNs1+1UUjlSwEI
EkcPJ5k59KaGT54lxtl4tNdP+uJifbBR1rK4q4QCZucGQNKUWlq0+KLCqyhhz1Ac
mjxOn+n71n00PnxC2GW6vnBmGWGxnKJh0ddl4bI7fCX8sXZhbdjJnNO3FqHcumb5
WxWq5EF6YBa2ycl4sLMN8m3LJDgS+5XPHLF4fiZq7jfxYq2K0VXJg+rNGGMQoQIk
GtCu+JvSjgqZaPI+6YFl+LpQNcPblWaK90cVjygbY9c7bLGeFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKW4HuBzOWvZTsOOe0kfAI1eAIQ7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOGUw
MWMzNC02MDhjLTQ2MTUtOWUwMC03YjA5ZTQ0N2JmNGMvYjJiNjQ1ZDYtYzgwOS0z
YWY4LWIwZDctNjBhYWNiOWEzNGUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDhlMDFjMzQtNjA4Yy00NjE1LTll
MDAtN2IwOWU0NDdiZjRjLzA4ZTAxYzM0LTYwOGMtNDYxNS05ZTAwLTdiMDllNDQ3
YmY0Yy5jcmwwHwYDVR0jBBgwFoAUT9fs76LjOnUBYSn5RdU3z1TuY3QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOGUwMWMzNC02MDhjLTQ2MTUtOWUwMC03YjA5
ZTQ0N2JmNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxjFSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFqWagPQVqSrSmJCV9rGX5L1tfbM3Xj93aq61mGFvTnj1aKmWp7csWMr
DxhDrrO9mPoid6KnL2pmBX4CIW77IPOtpH4Jt56Tu951c/DOMDnVBv5ybB1wYROR
cCo2IvgBCgTr7TOKuO2Q4ueoa6mtKk5M6DmYLHM2mORoZSs28gEzII/TdwVRMiuY
GcAbsdPa/T5/92c2omW+dI9/k3h33EQjmm4cTox4CNVR9Guy6weNjX4Q3TeL2h2/
AFcYZHtnbtDWL9CqmWOAF2bW8nI4J6f+rQ73bwDW1Z1KRsoQM/qd3CvvO+DKbbcd
YZr1/db50M+YubVUbF+yBBUx73ta2Pw=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:09 2025 by rpki-client