Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
File:                     fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa (raw, json)
Hash identifier:          nGcpTwSKxUOev+eF8u9h1HVMxTAAd4WeQmHzTlWvcXA=
Subject key identifier:   D9:EB:9D:53:C2:7A:EC:AB:92:70:10:E4:67:DB:A0:C1:33:B5:DD:06
Certificate issuer:       /CN=687c869a-fd9c-4db9-8dab-54b737103513
Certificate serial:       010D0C9F4328584A173005F04D99AF4444483180
Authority key identifier: E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     36511
IP address blocks:        199.101.191.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:05:f0:4d:99:af:44:44:48:31:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687c869a-fd9c-4db9-8dab-54b737103513
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=b3099635-cdce-4267-8864-1474bf18b05f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b1:65:e8:8d:a9:02:1b:61:b0:60:14:8a:86:
                    68:1c:58:88:63:ec:46:1f:ed:2f:17:6a:9d:a1:94:
                    69:e5:a5:26:ae:1f:18:be:73:fa:3b:73:3d:96:59:
                    de:1a:47:71:f6:7e:62:d5:5d:98:da:38:10:94:c1:
                    a8:e1:5e:1d:9d:62:6e:a9:07:80:a3:49:48:47:6b:
                    b2:a0:e5:d2:42:e5:13:0a:7e:f8:6c:49:4a:e4:18:
                    33:1a:83:f7:4e:7e:01:6a:64:42:82:1a:00:99:26:
                    97:2b:34:2a:2c:62:9a:9d:22:1a:59:58:40:d8:be:
                    f6:49:47:5c:08:d4:6f:d8:9c:20:e0:7a:4f:d5:87:
                    1d:83:d8:71:18:91:e5:fb:45:7f:a0:3f:9b:92:a8:
                    89:b2:9c:07:44:4f:6f:bc:c8:a6:05:84:4a:59:c2:
                    06:74:59:da:a5:9f:e6:79:58:0a:55:9b:d5:bf:ab:
                    0a:f0:e9:7c:7e:13:93:f0:32:aa:ed:12:e6:aa:42:
                    9b:59:b8:8a:9c:e6:ac:83:40:af:94:aa:52:c1:e4:
                    e1:68:72:db:a2:49:98:01:3d:fe:14:f6:2b:6b:92:
                    ea:e1:34:8b:f1:c9:6f:7e:40:9b:85:76:1f:83:85:
                    5b:40:84:09:de:1a:7d:78:95:68:30:8b:af:c4:43:
                    d6:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:EB:9D:53:C2:7A:EC:AB:92:70:10:E4:67:DB:A0:C1:33:B5:DD:06
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/fbe85ee6-2ece-3892-8d7e-72ac921695cf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513/687c869a-fd9c-4db9-8dab-54b737103513.crl

            X509v3 Authority Key Identifier:
                keyid:E2:E8:8D:09:45:CD:AE:02:95:34:DB:6E:B0:B2:01:38:22:F7:1E:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/687c869a-fd9c-4db9-8dab-54b737103513.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.101.191.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:5d:67:9f:05:50:1b:13:e2:2c:cb:1f:24:b7:cd:01:f7:5e:
         2b:64:62:93:92:49:72:fe:cb:47:06:dc:70:1f:b5:92:eb:ff:
         2d:4b:b6:d1:31:dc:b0:44:b8:93:7e:03:5f:52:53:42:e0:fe:
         c6:e1:b0:c2:47:16:78:b9:8c:bf:5d:89:9d:7b:e0:b7:66:8d:
         4c:f3:f6:41:33:ac:7b:ea:c6:2a:2f:e4:e1:61:2e:be:f7:af:
         ad:26:7e:1d:46:42:1c:b3:fb:0f:6f:38:8f:68:31:56:f3:8d:
         c3:d6:cc:83:bb:bd:f4:e4:67:5c:e5:dd:ff:0c:4f:ab:e5:e0:
         a0:50:c9:f6:0a:2b:86:1f:bd:1b:7c:68:a3:cb:74:42:70:01:
         e1:3d:f4:37:d2:41:c4:4b:83:c0:5a:cc:0e:ad:10:f3:7c:b9:
         c6:4f:e5:95:d8:03:4b:7a:d8:95:c4:82:f8:d9:63:f6:a7:ed:
         f0:d4:5a:4b:d3:c2:01:5d:bc:ff:2b:9c:4a:86:31:7c:61:19:
         f3:73:69:9d:53:ca:fa:c5:53:94:21:80:1a:70:7d:e6:60:56:
         8c:65:4f:cc:35:4d:32:fc:31:db:84:f3:45:64:3e:13:22:e5:
         26:b8:d4:62:e7:63:58:a9:ae:86:02:ba:8e:64:c5:7f:25:83:
         33:ba:bc:bd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAXwTZmvRERIMYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjg3Yzg2OWEtZmQ5Yy00ZGI5LThkYWItNTRiNzM3MTAz
NTEzMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
YjMwOTk2MzUtY2RjZS00MjY3LTg4NjQtMTQ3NGJmMThiMDVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0LFl6I2pAhthsGAUioZoHFiIY+xGH+0vF2qd
oZRp5aUmrh8YvnP6O3M9llneGkdx9n5i1V2Y2jgQlMGo4V4dnWJuqQeAo0lIR2uy
oOXSQuUTCn74bElK5BgzGoP3Tn4BamRCghoAmSaXKzQqLGKanSIaWVhA2L72SUdc
CNRv2Jwg4HpP1Ycdg9hxGJHl+0V/oD+bkqiJspwHRE9vvMimBYRKWcIGdFnapZ/m
eVgKVZvVv6sK8Ol8fhOT8DKq7RLmqkKbWbiKnOasg0CvlKpSweThaHLbokmYAT3+
FPYra5Lq4TSL8clvfkCbhXYfg4VbQIQJ3hp9eJVoMIuvxEPWfwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNnrnVPCeuyrknAQ5GfboMEztd0GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC82ODdj
ODY5YS1mZDljLTRkYjktOGRhYi01NGI3MzcxMDM1MTMvZmJlODVlZTYtMmVjZS0z
ODkyLThkN2UtNzJhYzkyMTY5NWNmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNjg3Yzg2OWEtZmQ5Yy00ZGI5LThk
YWItNTRiNzM3MTAzNTEzLzY4N2M4NjlhLWZkOWMtNGRiOS04ZGFiLTU0YjczNzEw
MzUxMy5jcmwwHwYDVR0jBBgwFoAU4uiNCUXNrgKVNNtusLIBOCL3Hl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC82ODdjODY5YS1mZDljLTRkYjktOGRhYi01NGI3
MzcxMDM1MTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx2W/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACddZ58FUBsT4izLHyS3zQH3XitkYpOSSXL+y0cG3HAftZLr/y1LttEx
3LBEuJN+A19SU0Lg/sbhsMJHFni5jL9diZ174LdmjUzz9kEzrHvqxiov5OFhLr73
r60mfh1GQhyz+w9vOI9oMVbzjcPWzIO7vfTkZ1zl3f8MT6vl4KBQyfYKK4YfvRt8
aKPLdEJwAeE99DfSQcRLg8BazA6tEPN8ucZP5ZXYA0t62JXEgvjZY/an7fDUWkvT
wgFdvP8rnEqGMXxhGfNzaZ1TyvrFU5QhgBpwfeZgVoxlT8w1TTL8MduE80VkPhMi
5Sa41GLnY1iproYCuo5kxX8lgzO6vL0=
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:46:44 2025 by rpki-client