Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
File:                     05532e03-b3a1-3527-bf6a-64d41fa06e14.roa (raw, json)
Hash identifier:          j230Q5j6KxW6R5jojzLxB/Vqf9f/6xUXH/+xV9dUe8Y=
Subject key identifier:   D1:0E:09:FE:70:4A:47:B3:2E:0F:80:FF:96:97:40:04:C2:3B:27:43
Certificate issuer:       /CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
Certificate serial:       010D0C9F43285849E654F2987FF3BC16792894A0
Authority key identifier: 1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa
Signing time:             Mon 19 May 2025 01:00:48 +0000
ROA not before:           Mon 19 May 2025 01:00:48 +0000
ROA not after:            Sun 17 Aug 2025 01:00:48 +0000
asID:                     16509
IP address blocks:        198.202.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e6:54:f2:98:7f:f3:bc:16:79:28:94:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a9d1aa7d-7229-416d-9a39-f6403c48ccc2
        Validity
            Not Before: May 19 01:00:48 2025 GMT
            Not After : Aug 17 01:00:48 2025 GMT
        Subject: CN=ef76866b-674c-40ff-b6e5-a82ce0a16055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:da:41:e1:1e:36:20:c0:32:a5:07:a4:a3:98:
                    c8:01:a2:c0:d7:45:a9:bf:0c:53:b5:d5:ab:ad:a7:
                    46:a4:b3:ab:54:33:a3:93:26:8f:a4:07:3e:7c:4a:
                    dc:c1:e1:2a:b1:10:6f:05:5d:b8:03:b9:1d:2b:43:
                    2a:2f:e7:a9:6a:4e:f5:1b:94:53:c7:5d:a3:fe:54:
                    1a:8d:52:85:66:a2:f6:50:30:21:fd:3b:b1:ed:13:
                    bb:7c:47:57:90:7e:f0:dc:7c:f9:3c:e0:78:d2:5b:
                    5a:17:03:ae:5c:6f:e7:0d:40:80:5f:55:56:19:74:
                    d0:c4:fe:94:29:a4:c9:f8:a7:87:fd:14:4f:82:df:
                    93:46:55:35:cf:39:cb:1a:bc:6b:5c:88:aa:8d:2b:
                    ec:e9:3b:b7:b1:7d:57:e9:33:92:9e:b7:e6:37:bd:
                    3e:f4:b7:cd:3a:3d:f5:79:52:ae:b6:1f:d1:60:1d:
                    35:6f:52:48:c9:5d:e9:7c:6d:18:70:51:01:90:b2:
                    7a:74:9d:0c:f5:37:ee:ff:0a:38:da:d6:eb:9d:af:
                    7f:89:c3:b5:c5:45:21:36:5b:20:7a:d7:6a:c7:f0:
                    49:4e:ec:d8:0e:3a:d6:bf:53:e6:22:11:ee:f1:db:
                    c0:76:b4:68:77:75:5b:4c:fa:87:92:66:1c:34:62:
                    51:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:0E:09:FE:70:4A:47:B3:2E:0F:80:FF:96:97:40:04:C2:3B:27:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/05532e03-b3a1-3527-bf6a-64d41fa06e14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F4:2A:89:4A:59:CA:55:E9:A0:4B:D2:42:19:39:B3:96:4D:FD:2F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/a9d1aa7d-7229-416d-9a39-f6403c48ccc2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:7a:21:66:66:d3:9f:a1:b8:82:d1:f7:fe:b5:81:e6:86:93:
         5d:3c:dc:17:c0:f0:64:e5:30:3b:94:8f:ee:54:f1:4a:5a:f6:
         1d:16:3c:b3:7f:b3:dc:5b:c4:f8:71:dd:5b:b1:3f:27:d0:c2:
         76:4e:fa:e9:c9:13:ee:4d:22:96:26:c7:a1:e9:52:9f:74:23:
         82:58:0f:fc:20:e8:0f:f2:31:06:00:15:4c:7e:ab:54:27:01:
         aa:ad:fd:1a:4f:5b:da:aa:e1:7c:44:73:4a:5e:d1:09:8a:d0:
         d1:b8:df:71:dc:04:4e:3a:78:5c:53:a7:52:7e:6c:49:0c:0a:
         57:74:0a:76:fa:1c:5e:3d:a8:b8:ec:a8:a0:e4:4f:61:ae:66:
         4c:66:be:21:e7:bc:f9:01:ef:b0:2f:52:d1:a5:12:c7:5d:9d:
         fe:3e:ce:66:1d:03:72:a4:b3:08:da:18:d1:f6:1e:a7:91:4e:
         93:14:41:a3:ed:d8:a1:4b:21:0f:09:28:92:11:10:22:82:c5:
         11:06:dc:5b:4b:61:40:f1:f0:29:a8:5c:1a:1e:f7:7f:c5:b8:
         7d:39:81:5a:94:4e:77:67:81:4b:17:26:6f:af:c9:bd:e2:b7:
         41:d9:ad:0a:04:47:ad:1c:5c:91:e7:25:80:28:48:4f:04:a3:
         8f:58:f6:9d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnmVPKYf/O8FnkolKAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTlkMWFhN2QtNzIyOS00MTZkLTlhMzktZjY0MDNjNDhj
Y2MyMB4XDTI1MDUxOTAxMDA0OFoXDTI1MDgxNzAxMDA0OFowLzEtMCsGA1UEAxMk
ZWY3Njg2NmItNjc0Yy00MGZmLWI2ZTUtYTgyY2UwYTE2MDU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAudpB4R42IMAypQeko5jIAaLA10WpvwxTtdWr
radGpLOrVDOjkyaPpAc+fErcweEqsRBvBV24A7kdK0MqL+epak71G5RTx12j/lQa
jVKFZqL2UDAh/Tux7RO7fEdXkH7w3Hz5POB40ltaFwOuXG/nDUCAX1VWGXTQxP6U
KaTJ+KeH/RRPgt+TRlU1zznLGrxrXIiqjSvs6Tu3sX1X6TOSnrfmN70+9LfNOj31
eVKuth/RYB01b1JIyV3pfG0YcFEBkLJ6dJ0M9Tfu/wo42tbrna9/icO1xUUhNlsg
etdqx/BJTuzYDjrWv1PmIhHu8dvAdrRod3VbTPqHkmYcNGJRcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNEOCf5wSkezLg+A/5aXQATCOydDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9hOWQx
YWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQwM2M0OGNjYzIvMDU1MzJlMDMtYjNhMS0z
NTI3LWJmNmEtNjRkNDFmYTA2ZTE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYTlkMWFhN2QtNzIyOS00MTZkLTlh
MzktZjY0MDNjNDhjY2MyL2E5ZDFhYTdkLTcyMjktNDE2ZC05YTM5LWY2NDAzYzQ4
Y2NjMi5jcmwwHwYDVR0jBBgwFoAUHfQqiUpZylXpoEvSQhk5s5ZN/S8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9hOWQxYWE3ZC03MjI5LTQxNmQtOWEzOS1mNjQw
M2M0OGNjYzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsrQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGl6IWZm05+huILR9/61geaGk1083BfA8GTlMDuUj+5U8Upa9h0WPLN/
s9xbxPhx3VuxPyfQwnZO+unJE+5NIpYmx6HpUp90I4JYD/wg6A/yMQYAFUx+q1Qn
Aaqt/RpPW9qq4XxEc0pe0QmK0NG433HcBE46eFxTp1J+bEkMCld0Cnb6HF49qLjs
qKDkT2GuZkxmviHnvPkB77AvUtGlEsddnf4+zmYdA3KkswjaGNH2HqeRTpMUQaPt
2KFLIQ8JKJIRECKCxREG3FtLYUDx8CmoXBoe93/FuH05gVqUTndngUsXJm+vyb3i
t0HZrQoER60cXJHnJYAoSE8Eo49Y9p0=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:18:23 2025 by rpki-client