Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
File:                     ad8a621a-0483-3ee0-899d-6e930c92bb98.roa (raw, json)
Hash identifier:          ohehqa2y6OirOeKDfNM3oG9HLRoNxUHNjM1SoGE58Fg=
Subject key identifier:   21:E3:78:FA:A1:F5:04:CA:41:8B:61:68:A0:31:5B:6D:B5:7F:D5:26
Certificate issuer:       /CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
Certificate serial:       010D0C9F4328584AC2E0E46939518853DB0BA180
Authority key identifier: C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        192.30.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 04:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:e4:69:39:51:88:53:db:0b:a1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9f7c12e0-8f16-4871-bb39-d6e0dc2b2938
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=ae8af1f4-c376-4930-8485-2fbeb778445c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:e6:3b:f5:ea:80:c2:63:4d:50:9d:ec:60:e4:
                    cf:cb:9b:21:b7:c4:e9:43:a1:e5:cc:40:7b:3c:58:
                    18:67:68:24:95:07:7e:dc:c5:bf:44:76:d3:8c:bb:
                    37:5c:12:7b:ac:71:fb:fd:43:a3:1e:1b:b3:1f:3e:
                    2a:94:21:12:80:00:73:41:a2:f4:37:a9:d4:31:96:
                    e9:fb:6a:2b:e4:e7:2b:ed:19:85:a9:1d:76:0c:5a:
                    c6:83:7d:2f:21:6f:e5:d9:e4:6e:8e:eb:98:a9:96:
                    2f:59:20:7f:98:13:08:c4:60:09:c5:93:7b:4d:2b:
                    07:b7:c9:e8:8f:13:0a:ca:4c:c5:24:c8:06:c8:a1:
                    c8:c5:eb:49:b5:1c:f2:a7:ef:4a:26:fe:8e:87:a0:
                    ad:fb:d5:ef:4d:d6:fa:7d:dd:55:42:70:f5:0f:08:
                    48:62:0f:04:a6:f7:88:51:f0:fa:82:aa:6c:29:de:
                    2b:df:3c:d9:30:82:2b:6c:ee:c3:66:cc:67:14:00:
                    76:25:8a:c8:d9:61:62:59:a2:01:5e:4b:1c:53:9f:
                    36:d3:a3:11:c7:b6:ee:09:99:dc:09:5e:87:e4:6b:
                    c6:95:0c:5c:7b:23:fb:e2:f9:df:95:60:1c:1b:c6:
                    4e:e2:78:fc:94:9f:75:4d:d0:3b:c8:a1:df:ae:49:
                    e5:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:E3:78:FA:A1:F5:04:CA:41:8B:61:68:A0:31:5B:6D:B5:7F:D5:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/ad8a621a-0483-3ee0-899d-6e930c92bb98.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.crl

            X509v3 Authority Key Identifier:
                keyid:C3:50:56:88:C4:22:2B:ED:27:6A:08:53:A6:B2:83:6F:7D:FB:FB:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/9f7c12e0-8f16-4871-bb39-d6e0dc2b2938.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.30.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:ab:26:54:79:04:59:e8:25:15:cd:f4:3e:ee:de:2b:36:
         c4:32:4a:32:b2:16:ab:57:c6:37:9b:91:98:26:8f:ad:b1:43:
         e9:25:21:a9:eb:cc:88:e3:c7:9e:cd:34:31:5c:07:79:3f:50:
         e5:00:f7:f4:83:21:c9:8b:fd:ed:49:46:7a:66:9d:a3:73:63:
         3b:bc:a2:3e:c0:fc:64:e6:6b:50:f4:37:ec:3c:50:29:9f:40:
         44:4d:77:79:ae:63:03:e8:8a:c8:da:80:ad:5f:4b:c9:8d:ae:
         61:f7:7c:43:25:f3:56:75:c2:6e:38:69:c3:5c:7b:37:39:d9:
         0e:92:ad:15:70:7e:40:53:11:65:d8:d1:3c:ce:e1:36:3f:c1:
         9c:9a:c9:2c:8d:4e:1d:86:13:5e:e5:7e:84:87:42:86:78:a5:
         b7:59:cb:a3:3d:6c:37:09:c0:bb:3c:e9:70:69:2f:1b:4d:e3:
         63:b6:13:53:d5:f5:2d:09:74:61:24:74:d0:6a:8a:d6:a9:8c:
         d7:72:9c:e4:b0:f0:8c:ee:12:53:e9:e7:b2:5e:80:f8:68:90:
         7d:98:95:c6:f2:2c:3f:9d:4e:44:2d:f6:7c:40:ce:c7:25:68:
         dc:cb:5e:48:26:7f:1e:e0:d3:cc:35:9c:65:ce:2b:d0:4c:7e:
         cb:7c:c7:97
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4ORpOVGIU9sLoYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWY3YzEyZTAtOGYxNi00ODcxLWJiMzktZDZlMGRjMmIy
OTM4MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
YWU4YWYxZjQtYzM3Ni00OTMwLTg0ODUtMmZiZWI3Nzg0NDVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuY79eqAwmNNUJ3sYOTPy5sht8TpQ6HlzEB7
PFgYZ2gklQd+3MW/RHbTjLs3XBJ7rHH7/UOjHhuzHz4qlCESgABzQaL0N6nUMZbp
+2or5Ocr7RmFqR12DFrGg30vIW/l2eRujuuYqZYvWSB/mBMIxGAJxZN7TSsHt8no
jxMKykzFJMgGyKHIxetJtRzyp+9KJv6Oh6Ct+9XvTdb6fd1VQnD1DwhIYg8EpveI
UfD6gqpsKd4r3zzZMIIrbO7DZsxnFAB2JYrI2WFiWaIBXkscU58206MRx7buCZnc
CV6H5GvGlQxceyP74vnflWAcG8ZO4nj8lJ91TdA7yKHfrknlhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCHjePqh9QTKQYthaKAxW221f9UmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC85Zjdj
MTJlMC04ZjE2LTQ4NzEtYmIzOS1kNmUwZGMyYjI5MzgvYWQ4YTYyMWEtMDQ4My0z
ZWUwLTg5OWQtNmU5MzBjOTJiYjk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvOWY3YzEyZTAtOGYxNi00ODcxLWJi
MzktZDZlMGRjMmIyOTM4LzlmN2MxMmUwLThmMTYtNDg3MS1iYjM5LWQ2ZTBkYzJi
MjkzOC5jcmwwHwYDVR0jBBgwFoAUw1BWiMQiK+0naghTprKDb337+34wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC85ZjdjMTJlMC04ZjE2LTQ4NzEtYmIzOS1kNmUw
ZGMyYjI5MzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwB7kMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEzqqyZUeQRZ6CUVzfQ+7t4rNsQySjKyFqtXxjebkZgmj62xQ+klIanr
zIjjx57NNDFcB3k/UOUA9/SDIcmL/e1JRnpmnaNzYzu8oj7A/GTma1D0N+w8UCmf
QERNd3muYwPoisjagK1fS8mNrmH3fEMl81Z1wm44acNcezc52Q6SrRVwfkBTEWXY
0TzO4TY/wZyaySyNTh2GE17lfoSHQoZ4pbdZy6M9bDcJwLs86XBpLxtN42O2E1PV
9S0JdGEkdNBqitapjNdynOSw8IzuElPp57JegPhokH2YlcbyLD+dTkQt9nxAzscl
aNzLXkgmfx7g08w1nGXOK9BMfst8x5c=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:08:58 2025 by rpki-client