Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa
File:                     628a58af-0c8e-38fb-8989-731626c867dc.roa (raw, json)
Hash identifier:          +Zx02J00Z4f12nsc6ItBTeE0SV0wQQWtU4r6c9X8B0A=
Subject key identifier:   AC:35:AD:1A:5A:62:FD:48:95:E3:BB:C6:C0:63:2D:2E:73:FF:06:50
Certificate issuer:       /CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
Certificate serial:       010D0C9F4328584A94D0DAD3669CBA8022B06680
Authority key identifier: 92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa
Signing time:             Sun 20 Jul 2025 13:01:04 +0000
ROA not before:           Sun 20 Jul 2025 13:01:04 +0000
ROA not after:            Sat 18 Oct 2025 13:01:04 +0000
asID:                     36829
IP address blocks:        141.195.99.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:94:d0:da:d3:66:9c:ba:80:22:b0:66:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73c38a7d-2b5c-432c-9da0-79bcf96780c3
        Validity
            Not Before: Jul 20 13:01:04 2025 GMT
            Not After : Oct 18 13:01:04 2025 GMT
        Subject: CN=1b840fbd-70f8-4957-a987-43f5b2ba6577
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:d3:8a:ad:00:1d:7b:47:1a:aa:b2:01:3e:ca:
                    93:02:4e:84:ce:3b:41:92:b1:34:26:7c:cb:c9:b8:
                    ed:dd:b3:58:24:c0:d7:3a:46:27:c8:af:41:09:5e:
                    b9:e9:11:fc:4d:9b:63:7d:34:40:4d:3e:ba:aa:45:
                    12:ab:63:52:29:73:95:c4:84:bf:f5:0d:20:86:cb:
                    20:93:10:03:93:24:5d:14:7c:31:c4:5f:59:1e:3c:
                    d7:0a:8d:5a:d3:aa:15:c9:4f:b3:2e:8d:ff:b5:e9:
                    34:1b:f3:93:43:64:15:5e:3a:5f:7f:ed:e3:b4:10:
                    6c:30:ae:2f:d4:6a:d5:a5:40:eb:ce:5d:d9:6c:6c:
                    be:28:de:9f:90:c8:c6:8e:e4:54:fc:51:b2:f1:8e:
                    b0:5e:fe:14:c7:f9:7c:87:cd:7c:6d:5c:8d:77:02:
                    e9:94:d3:d0:6d:04:df:35:5c:b7:99:38:19:4b:16:
                    74:79:fe:2d:57:a0:2d:74:1b:a8:d1:8a:ad:4a:2d:
                    aa:fb:9f:c1:a7:f3:5a:18:61:9d:83:3a:91:27:9c:
                    41:5d:06:4c:1e:a0:5f:78:7c:f9:01:7c:52:e0:e4:
                    ed:35:5c:b3:71:02:6b:42:c7:d4:9b:20:74:41:4c:
                    35:fa:ae:c0:61:da:3e:9e:29:28:3a:0f:42:76:e3:
                    cf:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:35:AD:1A:5A:62:FD:48:95:E3:BB:C6:C0:63:2D:2E:73:FF:06:50
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/628a58af-0c8e-38fb-8989-731626c867dc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3/73c38a7d-2b5c-432c-9da0-79bcf96780c3.crl

            X509v3 Authority Key Identifier:
                keyid:92:6D:02:56:A1:1D:28:99:4E:BB:2C:91:8B:9D:BD:F0:34:78:CC:31

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/73c38a7d-2b5c-432c-9da0-79bcf96780c3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.99.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:f5:04:0a:1a:d2:90:23:16:24:58:0b:0d:b4:a6:7f:55:d8:
         90:6b:d6:45:32:b9:85:d5:f2:9b:73:9a:c4:69:3d:d0:c1:83:
         15:f1:2f:4c:70:46:e7:2d:57:15:e3:3f:de:ad:80:09:bf:d3:
         39:95:6d:6d:6f:0d:9a:1c:17:d8:fa:23:44:d3:9f:dc:e9:f0:
         84:6b:ef:05:14:6a:31:03:3c:4e:f4:e9:22:e2:22:9b:2f:6b:
         1a:77:89:68:7d:39:13:e1:bc:36:31:a0:c5:d6:cf:fc:19:8b:
         c6:76:31:06:cf:25:58:1f:64:45:86:5d:9e:6d:c1:d4:80:2a:
         ae:6e:16:80:03:d6:ba:e2:e7:4c:38:f3:53:d0:4a:54:01:95:
         62:21:b5:7d:e7:17:aa:17:79:f1:77:42:7e:bf:ff:36:c6:09:
         76:90:e4:e6:9a:df:ac:45:17:40:1c:60:a8:72:b8:c4:6d:62:
         57:7b:76:b7:2a:33:56:a9:1a:fb:07:de:ff:be:3f:70:fe:cb:
         aa:e7:66:be:24:9c:0f:4b:fa:9f:03:89:a9:bb:bb:44:fc:be:
         57:6a:99:c5:c5:46:94:1d:cd:e0:39:ba:7a:7c:2a:3b:1f:dc:
         6f:19:0c:e0:fb:3f:7d:0e:e3:28:25:c2:99:52:24:78:86:b0:
         d5:0c:8a:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqU0NrTZpy6gCKwZoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNjMzhhN2QtMmI1Yy00MzJjLTlkYTAtNzliY2Y5Njc4
MGMzMB4XDTI1MDcyMDEzMDEwNFoXDTI1MTAxODEzMDEwNFowLzEtMCsGA1UEAxMk
MWI4NDBmYmQtNzBmOC00OTU3LWE5ODctNDNmNWIyYmE2NTc3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA79OKrQAde0caqrIBPsqTAk6EzjtBkrE0JnzL
ybjt3bNYJMDXOkYnyK9BCV656RH8TZtjfTRATT66qkUSq2NSKXOVxIS/9Q0ghssg
kxADkyRdFHwxxF9ZHjzXCo1a06oVyU+zLo3/tek0G/OTQ2QVXjpff+3jtBBsMK4v
1GrVpUDrzl3ZbGy+KN6fkMjGjuRU/FGy8Y6wXv4Ux/l8h818bVyNdwLplNPQbQTf
NVy3mTgZSxZ0ef4tV6AtdBuo0YqtSi2q+5/Bp/NaGGGdgzqRJ5xBXQZMHqBfeHz5
AXxS4OTtNVyzcQJrQsfUmyB0QUw1+q7AYdo+nikoOg9CduPPJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKw1rRpaYv1IleO7xsBjLS5z/wZQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83M2Mz
OGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJjZjk2NzgwYzMvNjI4YTU4YWYtMGM4ZS0z
OGZiLTg5ODktNzMxNjI2Yzg2N2RjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNzNjMzhhN2QtMmI1Yy00MzJjLTlk
YTAtNzliY2Y5Njc4MGMzLzczYzM4YTdkLTJiNWMtNDMyYy05ZGEwLTc5YmNmOTY3
ODBjMy5jcmwwHwYDVR0jBBgwFoAUkm0CVqEdKJlOuyyRi5298DR4zDEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83M2MzOGE3ZC0yYjVjLTQzMmMtOWRhMC03OWJj
Zjk2NzgwYzMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNjMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACv1BAoa0pAjFiRYCw20pn9V2JBr1kUyuYXV8ptzmsRpPdDBgxXxL0xw
RuctVxXjP96tgAm/0zmVbW1vDZocF9j6I0TTn9zp8IRr7wUUajEDPE706SLiIpsv
axp3iWh9ORPhvDYxoMXWz/wZi8Z2MQbPJVgfZEWGXZ5twdSAKq5uFoAD1rri50w4
81PQSlQBlWIhtX3nF6oXefF3Qn6//zbGCXaQ5Oaa36xFF0AcYKhyuMRtYld7drcq
M1apGvsH3v++P3D+y6rnZr4knA9L+p8Diam7u0T8vldqmcXFRpQdzeA5unp8Kjsf
3G8ZDOD7P30O4yglwplSJHiGsNUMiv0=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:18 2025 by rpki-client