Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d4f677d8-b376-3b4b-b363-6d642ce6e6ea.roa
File:                     d4f677d8-b376-3b4b-b363-6d642ce6e6ea.roa (raw, json)
Hash identifier:          pSoAd3NElc53FgrPDWnmWSlPjaPcSxgqBjCqI8A7+x0=
Subject key identifier:   E4:69:D4:B7:8F:28:29:32:A1:EE:EC:6E:54:52:C2:0B:34:4F:DF:A7
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A03A553D7ED68E20C16B06A20
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d4f677d8-b376-3b4b-b363-6d642ce6e6ea.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     7018
IP address blocks:        199.250.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:53:d7:ed:68:e2:0c:16:b0:6a:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=f8fa103a-62f2-4c4a-8736-20203f4d2411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:38:94:1d:0d:3c:66:64:06:9a:71:d7:7a:cf:
                    ff:81:e5:f3:cc:d2:10:28:6d:db:c1:b3:25:8a:d4:
                    8e:72:ba:96:1a:93:4e:95:79:96:d7:64:6c:f2:65:
                    77:d6:87:91:80:ba:bc:fd:f0:2d:b1:ba:73:65:5f:
                    dd:18:05:b5:19:b0:73:b8:2f:9b:c6:63:ac:4f:7a:
                    72:04:6a:78:9e:19:60:6a:19:8d:92:a0:2c:76:64:
                    38:8a:6f:c6:0a:3a:c4:fe:b4:dc:9c:90:90:2d:2d:
                    df:c2:53:b0:e7:6a:09:4b:4a:94:5e:dd:fc:44:42:
                    3d:7e:ec:53:a8:11:48:b4:f4:91:41:7d:75:9e:ea:
                    b4:1f:f3:40:ec:77:01:31:6e:e7:b3:7f:ff:de:75:
                    d0:08:13:92:05:2a:ca:bd:96:49:f8:ad:a1:f1:5e:
                    93:35:7a:0f:1a:e0:ae:97:3d:92:68:df:af:59:ac:
                    ff:f7:e3:b3:12:e6:86:a8:14:c4:fb:05:78:71:63:
                    e5:61:33:12:0f:4f:c8:71:b1:75:b2:a4:54:b3:77:
                    96:f1:57:d3:51:c9:01:de:f2:e1:a5:22:28:80:90:
                    9b:89:52:0f:d5:c3:7e:27:fd:d1:f0:1b:e3:83:01:
                    41:26:d3:03:c9:02:d1:f9:b5:79:24:4a:0b:6a:95:
                    89:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:69:D4:B7:8F:28:29:32:A1:EE:EC:6E:54:52:C2:0B:34:4F:DF:A7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/d4f677d8-b376-3b4b-b363-6d642ce6e6ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.250.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         db:02:ca:0e:cf:cb:98:d5:7b:64:1c:db:d3:a3:8c:07:e2:86:
         a4:85:5d:e2:ec:22:d0:da:47:db:2a:8b:04:b2:c2:d5:71:28:
         82:96:44:65:60:2a:f1:2e:6a:31:0e:9e:7f:c8:76:f3:ec:ce:
         71:8c:66:7a:e3:12:7d:63:41:f9:23:5f:0b:96:04:d9:b4:7a:
         b1:6a:41:44:3c:80:04:6a:e2:05:b3:a6:af:b8:2b:f7:4e:ea:
         ea:e8:a1:63:fe:0c:0d:7a:5e:81:d3:75:5f:48:39:76:b4:70:
         8a:77:2d:69:08:d2:98:78:80:76:e0:4e:fa:2e:5b:f5:43:b4:
         77:11:8e:af:be:dc:21:06:7f:50:93:dc:cf:d8:ed:10:08:d6:
         7e:9d:d4:c7:05:6f:c4:9e:97:8d:dc:d8:39:0c:6f:d9:b4:78:
         28:01:68:cc:a0:39:43:a9:65:d0:83:58:e8:dc:ef:04:38:a6:
         bf:ae:00:ca:71:a4:c7:46:ee:47:2e:5d:a6:6f:34:d7:ca:bd:
         31:8e:e4:bc:c3:6a:d9:32:cb:65:23:c4:a5:73:87:8b:15:7e:
         a0:ce:61:2b:17:07:f1:e4:21:83:70:44:3a:22:b9:ab:2d:f3:
         d0:d2:b7:49:3d:50:8d:c9:dc:8a:f3:25:cc:66:b2:01:8a:77:
         b0:62:33:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpVPX7WjiDBawaiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
ZjhmYTEwM2EtNjJmMi00YzRhLTg3MzYtMjAyMDNmNGQyNDExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0DiUHQ08ZmQGmnHXes//geXzzNIQKG3bwbMl
itSOcrqWGpNOlXmW12Rs8mV31oeRgLq8/fAtsbpzZV/dGAW1GbBzuC+bxmOsT3py
BGp4nhlgahmNkqAsdmQ4im/GCjrE/rTcnJCQLS3fwlOw52oJS0qUXt38REI9fuxT
qBFItPSRQX11nuq0H/NA7HcBMW7ns3//3nXQCBOSBSrKvZZJ+K2h8V6TNXoPGuCu
lz2SaN+vWaz/9+OzEuaGqBTE+wV4cWPlYTMSD0/IcbF1sqRUs3eW8VfTUckB3vLh
pSIogJCbiVIP1cN+J/3R8BvjgwFBJtMDyQLR+bV5JEoLapWJhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFORp1LePKCkyoe7sblRSwgs0T9+nMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvZDRmNjc3ZDgtYjM3Ni0z
YjRiLWIzNjMtNmQ2NDJjZTZlNmVhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx/q8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBANsCyg7Py5jVe2Qc29OjjAfihqSFXeLsItDaR9sqiwSywtVxKIKWRGVg
KvEuajEOnn/IdvPsznGMZnrjEn1jQfkjXwuWBNm0erFqQUQ8gARq4gWzpq+4K/dO
6urooWP+DA16XoHTdV9IOXa0cIp3LWkI0ph4gHbgTvouW/VDtHcRjq++3CEGf1CT
3M/Y7RAI1n6d1McFb8Sel43c2DkMb9m0eCgBaMygOUOpZdCDWOjc7wQ4pr+uAMpx
pMdG7kcuXaZvNNfKvTGO5LzDatkyy2UjxKVzh4sVfqDOYSsXB/HkIYNwRDoiuast
89DSt0k9UI3J3IrzJcxmsgGKd7BiM1M=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:52:03 2025 by rpki-client