Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5bfd507f-1eaf-3b4f-bd94-613a6359340d.roa
File:                     5bfd507f-1eaf-3b4f-bd94-613a6359340d.roa (raw, json)
Hash identifier:          KsryEHR5FQ1/nhtFobR2vRT8mK0oG5n/L7MefxP0eNI=
Subject key identifier:   09:AD:33:61:FB:AA:FD:DE:8B:F5:70:D0:26:4D:B9:B2:27:68:38:A5
Certificate issuer:       /CN=122205c9-95b1-4c68-a830-5ad63089c7d5
Certificate serial:       010D0C9F4328584AA85BB5A571AA037C0EEF2300
Authority key identifier: 37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5bfd507f-1eaf-3b4f-bd94-613a6359340d.roa
Signing time:             Sun 27 Jul 2025 13:01:04 +0000
ROA not before:           Sun 27 Jul 2025 13:01:04 +0000
ROA not after:            Sat 25 Oct 2025 13:01:04 +0000
asID:                     18938
IP address blocks:        204.13.92.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a8:5b:b5:a5:71:aa:03:7c:0e:ef:23:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=122205c9-95b1-4c68-a830-5ad63089c7d5
        Validity
            Not Before: Jul 27 13:01:04 2025 GMT
            Not After : Oct 25 13:01:04 2025 GMT
        Subject: CN=fe93487d-6604-475c-b5fb-2e3e33ba9ce7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:10:b4:00:3f:37:a9:bc:1e:de:66:57:cf:e0:
                    77:b3:ef:e6:00:7e:1b:eb:40:7c:5b:81:45:57:43:
                    99:82:f7:2e:79:08:7f:e4:b9:c6:19:2d:d6:48:c7:
                    92:c7:e2:eb:c6:bd:f7:b6:c3:f6:1a:a9:c3:c0:38:
                    9d:f7:60:13:da:6d:99:24:c7:59:bc:62:6f:3a:39:
                    76:90:8d:f7:4c:79:8c:63:20:6f:9c:27:d2:b8:09:
                    dc:90:a9:23:0c:5d:65:87:bb:d0:a7:65:d6:29:df:
                    90:b4:3b:9b:4d:ec:6f:1a:54:a0:3f:27:09:9e:dc:
                    ad:ed:34:26:ca:b4:25:54:1e:1c:d1:a9:90:75:45:
                    d9:ae:cc:92:ca:1a:28:2e:1a:98:43:b4:4c:de:bf:
                    23:bd:a9:1b:b7:33:da:3f:af:00:6f:88:ca:f0:e5:
                    5c:3b:93:d5:a4:5d:41:0d:53:26:a9:72:3b:5c:f9:
                    fc:7b:ff:ad:9b:e7:84:44:d6:be:e8:7d:94:bc:74:
                    73:c5:4f:7c:24:78:b7:4c:c7:da:c1:ae:ac:5c:de:
                    83:8b:dd:fa:d7:eb:e5:7c:c1:74:77:7a:6a:35:97:
                    e3:fc:de:45:40:5b:92:e3:43:69:fd:ec:b2:d5:53:
                    5e:8c:b4:31:56:75:25:0a:39:92:f8:fc:9d:09:a1:
                    a4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:AD:33:61:FB:AA:FD:DE:8B:F5:70:D0:26:4D:B9:B2:27:68:38:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/5bfd507f-1eaf-3b4f-bd94-613a6359340d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5/122205c9-95b1-4c68-a830-5ad63089c7d5.crl

            X509v3 Authority Key Identifier:
                keyid:37:DA:89:13:D8:D8:B8:74:25:85:15:39:14:2D:AC:35:CD:B7:4C:BB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/122205c9-95b1-4c68-a830-5ad63089c7d5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.13.92.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:24:54:fe:5f:b2:a9:3d:d2:8b:7a:25:31:85:da:aa:c7:c7:
         44:62:2c:94:99:48:e6:12:32:58:30:4c:db:6a:c5:04:13:b5:
         1f:1b:93:6c:2e:0b:1f:22:e7:8d:aa:39:51:c3:a8:dc:fc:bd:
         85:6b:5e:df:7b:be:5c:2b:8a:96:b7:6c:ee:01:48:42:26:0b:
         0b:11:61:a6:c0:b2:52:2a:ad:7e:2f:a2:84:82:59:38:3a:e4:
         94:1f:24:f5:fb:ff:c1:d3:7e:cc:f8:1f:52:6d:2d:d8:4a:3b:
         f8:b5:c6:42:85:f2:21:3c:79:19:14:52:e7:3d:e4:53:e0:e5:
         ef:75:d3:d9:7e:05:48:6e:f6:e5:b9:8f:66:cf:14:1a:bb:7b:
         97:f9:a8:c5:e8:e9:9d:ef:67:44:d5:7c:cd:e2:b6:46:70:c8:
         d4:85:53:d0:27:eb:b0:79:6c:40:40:44:52:78:42:ad:ba:68:
         30:19:e5:52:ee:2e:50:39:49:7d:66:36:f7:d8:92:7b:68:52:
         1a:30:85:0e:06:47:f6:9a:1d:75:dc:41:63:42:90:82:6d:8a:
         47:1a:b8:68:cd:08:4a:73:b6:dd:5f:b8:29:17:47:c5:25:47:
         5b:ca:10:c4:38:56:57:cb:7b:f6:53:56:58:0f:92:74:6e:a1:
         47:38:f0:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqoW7WlcaoDfA7vIwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTIyMjA1YzktOTViMS00YzY4LWE4MzAtNWFkNjMwODlj
N2Q1MB4XDTI1MDcyNzEzMDEwNFoXDTI1MTAyNTEzMDEwNFowLzEtMCsGA1UEAxMk
ZmU5MzQ4N2QtNjYwNC00NzVjLWI1ZmItMmUzZTMzYmE5Y2U3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmRC0AD83qbwe3mZXz+B3s+/mAH4b60B8W4FF
V0OZgvcueQh/5LnGGS3WSMeSx+Lrxr33tsP2GqnDwDid92AT2m2ZJMdZvGJvOjl2
kI33THmMYyBvnCfSuAnckKkjDF1lh7vQp2XWKd+QtDubTexvGlSgPycJntyt7TQm
yrQlVB4c0amQdUXZrsySyhooLhqYQ7RM3r8jvakbtzPaP68Ab4jK8OVcO5PVpF1B
DVMmqXI7XPn8e/+tm+eERNa+6H2UvHRzxU98JHi3TMfawa6sXN6Di9361+vlfMF0
d3pqNZfj/N5FQFuS40Np/eyy1VNejLQxVnUlCjmS+PydCaGkmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAmtM2H7qv3ei/Vw0CZNubInaDilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8xMjIy
MDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2MzA4OWM3ZDUvNWJmZDUwN2YtMWVhZi0z
YjRmLWJkOTQtNjEzYTYzNTkzNDBkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMTIyMjA1YzktOTViMS00YzY4LWE4
MzAtNWFkNjMwODljN2Q1LzEyMjIwNWM5LTk1YjEtNGM2OC1hODMwLTVhZDYzMDg5
YzdkNS5jcmwwHwYDVR0jBBgwFoAUN9qJE9jYuHQlhRU5FC2sNc23TLswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8xMjIyMDVjOS05NWIxLTRjNjgtYTgzMC01YWQ2
MzA4OWM3ZDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA1cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ4kVP5fsqk90ot6JTGF2qrHx0RiLJSZSOYSMlgwTNtqxQQTtR8bk2wu
Cx8i542qOVHDqNz8vYVrXt97vlwripa3bO4BSEImCwsRYabAslIqrX4vooSCWTg6
5JQfJPX7/8HTfsz4H1JtLdhKO/i1xkKF8iE8eRkUUuc95FPg5e9109l+BUhu9uW5
j2bPFBq7e5f5qMXo6Z3vZ0TVfM3itkZwyNSFU9An67B5bEBARFJ4Qq26aDAZ5VLu
LlA5SX1mNvfYkntoUhowhQ4GR/aaHXXcQWNCkIJtikcauGjNCEpztt1fuCkXR8Ul
R1vKEMQ4VlfLe/ZTVlgPknRuoUc48J0=
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:26:47 2025 by rpki-client