Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa
File:                     a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa (raw, json)
Hash identifier:          v7yEKY7v7B3I5yf/DefIqulFH53f3G4wgsARlownWDQ=
Subject key identifier:   A3:8B:26:A7:72:CC:2A:43:91:C0:10:CD:78:14:E1:93:4E:C7:2D:A9
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584A18954824AD65F86E538D4700
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa
Signing time:             Fri 06 Jun 2025 01:00:50 +0000
ROA not before:           Fri 06 Jun 2025 01:00:50 +0000
ROA not after:            Thu 04 Sep 2025 01:00:50 +0000
asID:                     30133
IP address blocks:        199.6.12.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:18:95:48:24:ad:65:f8:6e:53:8d:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Jun  6 01:00:50 2025 GMT
            Not After : Sep  4 01:00:50 2025 GMT
        Subject: CN=c9282bc8-d0b3-4f19-8df9-5ee11a2e1312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:8d:f0:82:a5:43:c2:80:66:7b:97:76:f3:35:
                    0f:bd:12:5c:50:1d:47:e0:ad:e3:b3:c9:85:da:9f:
                    cc:61:56:b1:ff:cd:fa:07:35:eb:08:b7:25:d8:ee:
                    6d:fd:2d:3c:14:0c:7a:96:c0:6d:3d:fe:48:e7:3c:
                    b0:87:34:0c:09:9b:95:b9:5e:52:2f:9c:5c:c2:33:
                    03:8c:47:24:23:69:80:a1:9c:97:75:5c:c1:cf:50:
                    0b:12:d0:23:d2:4c:fa:c7:80:64:3d:06:59:8e:54:
                    df:85:59:f3:e9:19:e9:13:39:ca:83:92:f2:f8:2a:
                    ff:e5:a2:14:83:7e:d2:3e:78:7b:c2:30:6e:09:9b:
                    06:dd:3e:9a:a9:db:78:29:c8:af:05:50:23:1f:9a:
                    83:55:61:7a:51:c2:15:45:48:4b:18:96:98:f3:44:
                    e2:b8:97:38:ae:39:cb:58:c3:90:8d:0e:c4:90:49:
                    51:7c:39:bc:5a:14:8b:24:52:f8:0c:59:dc:27:b2:
                    06:c3:1c:d9:cf:82:fe:39:aa:ab:c7:91:3f:9c:f6:
                    0a:d6:4a:1d:7d:e9:58:0b:79:25:dc:e7:2b:2c:e7:
                    0d:9e:8b:35:c6:f1:75:4c:d8:3c:ad:3c:d1:03:20:
                    f5:40:cd:6a:ce:17:6c:12:54:df:a6:66:8d:9c:87:
                    82:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:8B:26:A7:72:CC:2A:43:91:C0:10:CD:78:14:E1:93:4E:C7:2D:A9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/a7841916-f8e7-35fe-a2fe-db9febfc3a2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.12.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:83:3e:23:11:b3:c7:ea:5b:96:7f:11:a2:e0:f4:39:4c:cb:
         b0:ff:12:ce:e3:67:a2:c8:04:4d:89:78:48:4b:e4:69:fe:c7:
         4c:ec:8e:06:42:6f:3d:22:44:ef:db:dd:c0:bf:a0:4f:3c:95:
         ce:11:79:15:37:a3:e6:7d:53:b4:db:17:0b:9f:08:1d:d7:d8:
         ba:b4:1a:36:2d:b1:1b:53:4f:23:b0:e4:b8:8f:d0:39:99:32:
         5e:8e:70:40:7b:b9:ea:2e:88:e8:dd:1e:32:1b:44:28:58:f2:
         18:92:5a:92:ff:6b:ff:25:27:37:07:57:60:75:af:60:87:24:
         5b:c2:4e:bd:e4:a1:5c:6b:c3:51:d7:e9:00:9c:0e:d5:43:b5:
         27:92:bf:c5:cc:28:99:17:cf:46:6f:f0:0c:14:5c:41:06:f7:
         c7:cb:c5:41:68:46:5b:f1:7d:81:d6:76:64:1f:7e:bb:2f:47:
         22:85:7a:9d:86:8e:12:47:66:b5:b8:ed:38:f6:b0:df:e7:1d:
         0f:0c:14:3e:9d:b8:7f:ad:33:f3:7b:63:d8:93:ae:e0:ad:2c:
         92:5a:bc:56:b9:c8:a3:de:b9:26:e1:cf:bb:14:ca:34:72:d4:
         b9:f0:6f:85:1f:2d:88:79:59:13:6d:04:01:10:71:8b:fe:1d:
         fa:0f:b6:ee
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoYlUgkrWX4blONRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDYwNjAxMDA1MFoXDTI1MDkwNDAxMDA1MFowLzEtMCsGA1UEAxMk
YzkyODJiYzgtZDBiMy00ZjE5LThkZjktNWVlMTFhMmUxMzEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh43wgqVDwoBme5d28zUPvRJcUB1H4K3js8mF
2p/MYVax/836BzXrCLcl2O5t/S08FAx6lsBtPf5I5zywhzQMCZuVuV5SL5xcwjMD
jEckI2mAoZyXdVzBz1ALEtAj0kz6x4BkPQZZjlTfhVnz6RnpEznKg5Ly+Cr/5aIU
g37SPnh7wjBuCZsG3T6aqdt4KcivBVAjH5qDVWF6UcIVRUhLGJaY80TiuJc4rjnL
WMOQjQ7EkElRfDm8WhSLJFL4DFncJ7IGwxzZz4L+Oaqrx5E/nPYK1kodfelYC3kl
3OcrLOcNnos1xvF1TNg8rTzRAyD1QM1qzhdsElTfpmaNnIeCHQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKOLJqdyzCpDkcAQzXgU4ZNOxy2pMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvYTc4NDE5MTYtZjhlNy0z
NWZlLWEyZmUtZGI5ZmViZmMzYTJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwYMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE+DPiMRs8fqW5Z/EaLg9DlMy7D/Es7jZ6LIBE2JeEhL5Gn+x0zsjgZC
bz0iRO/b3cC/oE88lc4ReRU3o+Z9U7TbFwufCB3X2Lq0GjYtsRtTTyOw5LiP0DmZ
Ml6OcEB7ueouiOjdHjIbRChY8hiSWpL/a/8lJzcHV2B1r2CHJFvCTr3koVxrw1HX
6QCcDtVDtSeSv8XMKJkXz0Zv8AwUXEEG98fLxUFoRlvxfYHWdmQffrsvRyKFep2G
jhJHZrW47Tj2sN/nHQ8MFD6duH+tM/N7Y9iTruCtLJJavFa5yKPeuSbhz7sUyjRy
1Lnwb4UfLYh5WRNtBAEQcYv+HfoPtu4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:47:15 2025 by rpki-client