Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa
File:                     8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa (raw, json)
Hash identifier:          EkLaxIva2VbNnvIXlXI9Sz+hFW3UXTHIxQ1WeDgWfTw=
Subject key identifier:   C5:29:DF:1C:AF:8C:F6:5A:3B:51:6A:76:B2:5C:6C:A4:49:EA:36:4A
Certificate issuer:       /CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
Certificate serial:       010D0C9F4328584AB91B8505FAE886F55426B3F0
Authority key identifier: BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa
Signing time:             Sat 02 Aug 2025 13:00:41 +0000
ROA not before:           Sat 02 Aug 2025 13:00:41 +0000
ROA not after:            Fri 31 Oct 2025 13:00:41 +0000
asID:                     1280
IP address blocks:        204.152.186.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b9:1b:85:05:fa:e8:86:f5:54:26:b3:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d40b8476-f48a-4cf2-abcf-f4fa1df28510
        Validity
            Not Before: Aug  2 13:00:41 2025 GMT
            Not After : Oct 31 13:00:41 2025 GMT
        Subject: CN=afba9740-0ed3-4e2a-94ae-028f346d2cd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:ca:cf:36:bf:98:5a:90:95:8f:67:91:9c:a0:
                    5f:85:a8:06:c5:44:27:07:2e:f0:65:50:a2:26:4b:
                    65:25:91:07:c8:ed:8f:30:ec:c5:57:13:20:9a:eb:
                    21:3d:0d:66:8e:6b:16:f5:e8:0c:a6:a3:c1:c0:ac:
                    8b:01:97:39:9a:03:da:3a:6e:ce:c8:7c:a3:e8:9f:
                    c6:57:a5:cd:f8:48:eb:15:7c:8c:0d:01:a7:0a:71:
                    d1:37:c6:d7:30:82:c6:29:9f:00:67:91:72:27:ca:
                    44:e4:67:19:8f:12:d5:81:14:52:32:ec:26:04:17:
                    4d:9c:c8:43:9c:c9:51:4f:b6:41:1f:5a:a1:7a:61:
                    aa:8b:ba:30:8c:81:f9:af:06:9b:21:f7:e8:f3:d5:
                    38:cc:af:b1:92:6a:cb:d9:f0:81:89:bc:2a:d7:7d:
                    7c:ce:78:12:6e:4d:7a:66:4c:b2:e5:3e:62:94:53:
                    bc:8a:2c:19:0c:70:83:b8:34:5a:8b:50:36:57:4a:
                    f6:f5:f7:cf:74:78:4f:1c:ac:76:69:0d:6a:bf:47:
                    46:a2:fe:56:e4:a0:80:30:37:0a:a6:d4:c9:2f:83:
                    e1:3f:f1:c3:7d:f3:7d:f4:50:26:8c:af:00:17:3e:
                    dc:ab:11:c7:b9:ea:76:c6:ba:6c:7e:b5:39:0a:f6:
                    8d:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:29:DF:1C:AF:8C:F6:5A:3B:51:6A:76:B2:5C:6C:A4:49:EA:36:4A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/8f380b5a-d821-3cd0-9d3b-c3c360b3844c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510/d40b8476-f48a-4cf2-abcf-f4fa1df28510.crl

            X509v3 Authority Key Identifier:
                keyid:BA:8C:31:27:F0:7B:68:59:0E:09:84:67:EA:9B:A4:54:84:82:F5:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/d40b8476-f48a-4cf2-abcf-f4fa1df28510.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.186.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:3a:b9:09:e7:09:a0:c9:98:7b:2a:86:6b:9c:17:7a:76:db:
         37:8f:70:49:2c:82:5e:34:69:95:24:b2:27:c1:da:a1:0f:a7:
         65:42:b7:6c:a4:62:ba:a8:36:97:f4:53:f3:62:b6:5b:b7:fe:
         e7:08:85:c5:b4:d7:9c:ef:af:64:b4:ae:e3:e0:5e:fe:96:2e:
         3e:42:2c:2f:ec:3c:01:40:76:b5:c1:9c:50:1a:d1:b5:03:e4:
         11:f4:4e:c6:d7:05:b8:05:23:85:45:58:56:4c:6c:f2:10:85:
         8a:e8:8b:1c:95:9d:84:8d:e9:01:76:af:ac:17:e1:48:3e:37:
         3a:a0:7c:45:bd:fa:5e:15:86:8f:96:e1:4b:f5:c1:d7:4e:c4:
         3e:d1:c9:3f:07:b3:05:8e:c3:ad:a5:9e:32:3f:33:36:5d:71:
         3a:62:ea:b0:d9:c3:16:28:94:5e:fb:06:e8:7c:2b:cd:cd:2e:
         51:e5:4c:78:38:29:f3:6b:5d:eb:8c:93:4b:2a:32:6f:00:3f:
         93:9b:8d:76:08:ff:d6:3d:f6:1e:b2:56:44:2d:52:eb:58:55:
         49:38:36:e6:74:f5:44:1e:b0:08:89:8e:8d:8a:3c:de:0a:2c:
         f2:ce:ce:30:7a:92:06:9d:19:da:48:45:9c:ba:89:5d:fd:12:
         f8:44:09:f1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq5G4UF+uiG9VQms/AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDQwYjg0NzYtZjQ4YS00Y2YyLWFiY2YtZjRmYTFkZjI4
NTEwMB4XDTI1MDgwMjEzMDA0MVoXDTI1MTAzMTEzMDA0MVowLzEtMCsGA1UEAxMk
YWZiYTk3NDAtMGVkMy00ZTJhLTk0YWUtMDI4ZjM0NmQyY2QxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhMrPNr+YWpCVj2eRnKBfhagGxUQnBy7wZVCi
JktlJZEHyO2PMOzFVxMgmushPQ1mjmsW9egMpqPBwKyLAZc5mgPaOm7OyHyj6J/G
V6XN+EjrFXyMDQGnCnHRN8bXMILGKZ8AZ5FyJ8pE5GcZjxLVgRRSMuwmBBdNnMhD
nMlRT7ZBH1qhemGqi7owjIH5rwabIffo89U4zK+xkmrL2fCBibwq1318zngSbk16
Zkyy5T5ilFO8iiwZDHCDuDRai1A2V0r29ffPdHhPHKx2aQ1qv0dGov5W5KCAMDcK
ptTJL4PhP/HDffN99FAmjK8AFz7cqxHHuep2xrpsfrU5CvaNTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMUp3xyvjPZaO1FqdrJcbKRJ6jZKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBi
ODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZhMWRmMjg1MTAvOGYzODBiNWEtZDgyMS0z
Y2QwLTlkM2ItYzNjMzYwYjM4NDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZDQwYjg0NzYtZjQ4YS00Y2YyLWFi
Y2YtZjRmYTFkZjI4NTEwL2Q0MGI4NDc2LWY0OGEtNGNmMi1hYmNmLWY0ZmExZGYy
ODUxMC5jcmwwHwYDVR0jBBgwFoAUuowxJ/B7aFkOCYRn6pukVISC9Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9kNDBiODQ3Ni1mNDhhLTRjZjItYWJjZi1mNGZh
MWRmMjg1MTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzJi6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ46uQnnCaDJmHsqhmucF3p22zePcEksgl40aZUksifB2qEPp2VCt2yk
YrqoNpf0U/Nitlu3/ucIhcW015zvr2S0ruPgXv6WLj5CLC/sPAFAdrXBnFAa0bUD
5BH0TsbXBbgFI4VFWFZMbPIQhYroixyVnYSN6QF2r6wX4Ug+NzqgfEW9+l4Vho+W
4Uv1wddOxD7RyT8HswWOw62lnjI/MzZdcTpi6rDZwxYolF77Buh8K83NLlHlTHg4
KfNrXeuMk0sqMm8AP5ObjXYI/9Y99h6yVkQtUutYVUk4NuZ09UQesAiJjo2KPN4K
LPLOzjB6kgadGdpIRZy6iV39EvhECfE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 19:04:10 2025 by rpki-client