Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
File:                     536a1a59-e74e-326e-909f-14a772e3d7fe.roa (raw, json)
Hash identifier:          0v25STK6xbh4zwQrqxRbg8/mQZJVdWNuNVxWarUP3CY=
Subject key identifier:   6C:B5:E8:A4:BD:E1:2A:B4:1B:02:C3:A5:C2:4A:76:AB:3A:C3:F2:E6
Certificate issuer:       /CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
Certificate serial:       010D0C9F4328584AC016271B454FF6E4D4BE4D9C
Authority key identifier: 1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     16509
IP address blocks:        161.199.128.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:27:1b:45:4f:f6:e4:d4:be:4d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b9b79447-da88-4528-8ff7-0d367d2d76e8
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=e91a523a-7b11-41d4-beae-a67a21c6cb11
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:70:69:da:43:e5:c4:52:0a:fa:44:0c:cc:29:
                    8d:d7:9f:16:1f:14:e0:f8:8e:78:18:f5:e3:be:bc:
                    a0:d2:5a:f4:90:d3:29:81:2a:bf:41:6c:28:b8:7b:
                    bc:05:b6:16:22:67:67:ed:99:d7:86:ab:e3:de:62:
                    b0:dc:34:63:6d:66:e6:4f:e8:00:b3:cb:b0:ee:91:
                    fc:4c:42:c1:a5:8c:80:69:eb:76:02:2e:ab:bb:8b:
                    bb:b4:12:8c:09:7d:4d:7f:1f:67:2a:3a:3b:0e:24:
                    37:f6:06:b8:25:df:2d:2c:64:eb:b1:c3:3c:28:f3:
                    57:57:2f:bf:a2:05:38:de:51:60:da:c8:8b:14:84:
                    cd:40:c9:bf:ff:b0:64:c7:ac:db:76:18:e1:8f:81:
                    5a:9a:28:e1:7d:44:81:f4:eb:39:3a:94:62:81:d0:
                    49:75:12:f3:8d:d0:f7:91:46:13:96:ca:97:58:aa:
                    bd:b4:ce:aa:cb:35:ff:9e:cf:06:d9:32:7f:75:c8:
                    b7:67:f1:9e:b9:2b:1a:be:e0:34:60:14:b4:50:48:
                    46:bc:40:6c:4e:35:8b:45:1b:af:ca:20:52:c1:fd:
                    21:1f:26:86:49:76:cd:dc:bb:b8:9e:a5:e0:00:a6:
                    97:92:b2:90:5e:bd:39:50:04:e8:c2:3c:83:77:65:
                    ee:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:B5:E8:A4:BD:E1:2A:B4:1B:02:C3:A5:C2:4A:76:AB:3A:C3:F2:E6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/536a1a59-e74e-326e-909f-14a772e3d7fe.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8/b9b79447-da88-4528-8ff7-0d367d2d76e8.crl

            X509v3 Authority Key Identifier:
                keyid:1E:2C:24:33:D9:4C:A6:44:5A:03:F3:4E:47:4E:C3:40:ED:8B:22:82

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b9b79447-da88-4528-8ff7-0d367d2d76e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.199.128.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0f:77:a3:84:34:36:ba:fd:74:82:aa:16:65:53:b4:39:08:61:
         66:45:e8:ba:cf:d7:68:22:03:75:67:f8:6c:07:d1:90:a0:23:
         5d:88:34:9c:b2:31:86:93:c8:2d:d0:cd:a3:f1:81:fc:d4:ef:
         dd:c7:f6:c2:78:67:06:a1:cd:b4:9b:64:ff:23:c3:18:8e:4e:
         44:28:a0:a6:3c:ac:90:b0:0d:16:09:78:da:72:1a:c1:f6:2d:
         62:5f:61:49:71:fc:c3:83:1b:8d:19:b0:6b:08:9c:ee:e1:d5:
         2f:86:79:37:a4:77:2f:ba:a4:cd:d6:1f:e0:ba:c1:19:e1:22:
         d2:0f:8d:85:b8:15:93:2f:9c:27:e2:99:58:a7:64:d9:73:dc:
         d2:fa:b2:c1:4e:d3:0b:3f:04:ab:78:0a:7e:51:c5:35:2a:51:
         fd:bc:45:47:2c:28:fb:52:13:fc:6d:eb:c0:de:fc:5b:ae:e1:
         b4:73:5b:14:1a:30:4d:74:94:0a:44:bb:dd:54:70:1f:af:1b:
         a0:45:a0:fb:a6:70:f9:ab:d0:e2:db:db:c1:e1:82:0b:21:5e:
         30:9a:5c:83:60:c9:3f:35:01:a2:b4:a0:cb:99:e3:6a:02:92:
         c8:48:2c:2b:8b:50:40:4f:81:58:15:53:6e:34:6e:f6:90:25:
         4d:b3:ef:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFicbRU/25NS+TZwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjliNzk0NDctZGE4OC00NTI4LThmZjctMGQzNjdkMmQ3
NmU4MB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
ZTkxYTUyM2EtN2IxMS00MWQ0LWJlYWUtYTY3YTIxYzZjYjExMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgXBp2kPlxFIK+kQMzCmN158WHxTg+I54GPXj
vryg0lr0kNMpgSq/QWwouHu8BbYWImdn7ZnXhqvj3mKw3DRjbWbmT+gAs8uw7pH8
TELBpYyAaet2Ai6ru4u7tBKMCX1Nfx9nKjo7DiQ39ga4Jd8tLGTrscM8KPNXVy+/
ogU43lFg2siLFITNQMm//7Bkx6zbdhjhj4FamijhfUSB9Os5OpRigdBJdRLzjdD3
kUYTlsqXWKq9tM6qyzX/ns8G2TJ/dci3Z/GeuSsavuA0YBS0UEhGvEBsTjWLRRuv
yiBSwf0hHyaGSXbN3Lu4nqXgAKaXkrKQXr05UATowjyDd2XuZQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGy16KS94Sq0GwLDpcJKdqs6w/LmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3
OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2N2QyZDc2ZTgvNTM2YTFhNTktZTc0ZS0z
MjZlLTkwOWYtMTRhNzcyZTNkN2ZlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjliNzk0NDctZGE4OC00NTI4LThm
ZjctMGQzNjdkMmQ3NmU4L2I5Yjc5NDQ3LWRhODgtNDUyOC04ZmY3LTBkMzY3ZDJk
NzZlOC5jcmwwHwYDVR0jBBgwFoAUHiwkM9lMpkRaA/NOR07DQO2LIoIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iOWI3OTQ0Ny1kYTg4LTQ1MjgtOGZmNy0wZDM2
N2QyZDc2ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoceAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA93o4Q0Nrr9dIKqFmVTtDkIYWZF6LrP12giA3Vn+GwH0ZCgI12INJyy
MYaTyC3QzaPxgfzU793H9sJ4ZwahzbSbZP8jwxiOTkQooKY8rJCwDRYJeNpyGsH2
LWJfYUlx/MODG40ZsGsInO7h1S+GeTekdy+6pM3WH+C6wRnhItIPjYW4FZMvnCfi
mVinZNlz3NL6ssFO0ws/BKt4Cn5RxTUqUf28RUcsKPtSE/xt68De/Fuu4bRzWxQa
ME10lApEu91UcB+vG6BFoPumcPmr0OLb28HhggshXjCaXINgyT81AaK0oMuZ42oC
kshILCuLUEBPgVgVU240bvaQJU2z704=
-----END CERTIFICATE-----
Generated at Wed Aug 6 00:39:57 2025 by rpki-client