Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa
File:                     4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa (raw, json)
Hash identifier:          ZGqrv2GKC0sdHDfkmI3rayYTMW/Fg6K3E3xXpa52joo=
Subject key identifier:   A6:B4:14:AE:0F:0B:DE:40:63:1D:93:C2:0A:68:D5:47:96:9B:2F:54
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAF02053D3EE05BC1A91A0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        199.27.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:f0:20:53:d3:ee:05:bc:1a:91:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=78977051-2e07-4c62-a034-fa6642de5542
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:6c:53:78:e0:dc:c9:f4:bd:b9:c8:68:08:c1:
                    46:40:47:4e:6f:55:c6:ad:21:f7:3a:1c:d3:4b:68:
                    b6:be:85:04:0e:c8:11:f6:ab:5c:43:5e:4b:9d:b1:
                    6c:d3:a2:69:92:07:cf:fa:08:27:de:63:1e:6d:e0:
                    9b:c8:64:e6:d4:76:56:c3:75:be:27:a7:7e:39:4c:
                    e5:ff:96:ed:99:4e:30:6f:18:ec:6e:13:e6:d3:f5:
                    c1:90:ab:e6:51:0e:13:5f:c2:96:2a:b0:57:2d:5e:
                    4f:74:62:c8:c6:42:a8:a7:10:d9:58:4c:d2:dd:47:
                    fe:a0:47:a0:8c:44:27:71:cd:f6:de:da:2f:36:a8:
                    f9:03:75:06:f2:3c:1c:10:b3:5b:b2:07:df:32:46:
                    53:09:0d:32:df:22:15:66:89:e3:a3:d7:ce:43:48:
                    15:9a:08:b7:94:bb:1e:01:78:98:23:d8:57:c7:e8:
                    5a:20:b3:b5:64:a1:d5:3a:d0:fd:e4:d6:6b:4d:a3:
                    fb:55:08:4b:16:68:cd:be:48:9b:0e:bd:fa:66:dd:
                    74:99:ed:cc:d8:89:44:ad:cf:14:12:e7:14:74:3e:
                    92:c7:d9:f6:65:8c:ac:79:71:8d:76:4e:f2:ee:5f:
                    39:9f:91:33:1a:7a:9c:50:c3:8f:cb:28:a9:14:df:
                    0d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:B4:14:AE:0F:0B:DE:40:63:1D:93:C2:0A:68:D5:47:96:9B:2F:54
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4d5c94cc-f193-3b5b-a4af-7951c6865f2a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.27.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         3a:fa:e9:7c:04:2b:41:ce:ba:f2:8c:52:8e:54:b9:74:fe:8c:
         2f:ab:73:6d:c3:2c:23:b5:4b:ed:ea:ef:dc:17:29:7c:07:b0:
         99:90:c7:3a:63:51:ec:40:28:a1:41:f1:61:6e:46:44:d5:6e:
         6e:cb:bf:94:ac:af:b2:70:78:40:e0:7a:b4:dc:d9:d8:1b:96:
         ad:82:dd:9c:0b:74:11:24:61:72:8c:19:9f:ae:ca:64:a6:df:
         70:a1:22:f7:1d:07:b6:29:7e:9e:68:a3:39:a8:a0:d1:7e:27:
         0a:c9:96:63:d7:37:2b:3b:e4:6f:54:be:06:a9:21:26:fd:d3:
         d9:65:77:37:f1:87:21:9a:f1:d4:83:01:d0:6c:37:54:0f:14:
         57:60:18:5f:20:d9:db:60:04:ed:18:16:0c:25:66:74:39:ad:
         77:74:dc:95:f8:21:80:1a:1e:d5:ff:6a:3a:94:b5:90:7f:7b:
         b6:85:a1:d7:60:90:6e:49:93:80:e1:7e:0f:a8:fa:1e:5d:6c:
         70:d4:ed:21:69:15:10:4b:82:32:ea:6e:a5:23:c0:68:e4:b7:
         3d:9d:87:b7:b5:5a:32:69:a8:20:8f:06:47:78:75:41:bf:1c:
         44:6d:22:f3:5f:1a:de:dc:e3:98:b1:fb:7a:cb:04:25:0c:b3:
         e4:20:d5:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvAgU9PuBbwakaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
Nzg5NzcwNTEtMmUwNy00YzYyLWEwMzQtZmE2NjQyZGU1NTQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2xTeODcyfS9uchoCMFGQEdOb1XGrSH3OhzT
S2i2voUEDsgR9qtcQ15LnbFs06JpkgfP+ggn3mMebeCbyGTm1HZWw3W+J6d+OUzl
/5btmU4wbxjsbhPm0/XBkKvmUQ4TX8KWKrBXLV5PdGLIxkKopxDZWEzS3Uf+oEeg
jEQncc323tovNqj5A3UG8jwcELNbsgffMkZTCQ0y3yIVZonjo9fOQ0gVmgi3lLse
AXiYI9hXx+haILO1ZKHVOtD95NZrTaP7VQhLFmjNvkibDr36Zt10me3M2IlErc8U
EucUdD6Sx9n2ZYyseXGNdk7y7l85n5EzGnqcUMOPyyipFN8NzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKa0FK4PC95AYx2Twgpo1UeWmy9UMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNGQ1Yzk0Y2MtZjE5My0z
YjViLWE0YWYtNzk1MWM2ODY1ZjJhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCxxuwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADr66XwEK0HOuvKMUo5UuXT+jC+rc23DLCO1S+3q79wXKXwHsJmQxzpj
UexAKKFB8WFuRkTVbm7Lv5Ssr7JweEDgerTc2dgblq2C3ZwLdBEkYXKMGZ+uymSm
33ChIvcdB7Ypfp5oozmooNF+JwrJlmPXNys75G9UvgapISb909lldzfxhyGa8dSD
AdBsN1QPFFdgGF8g2dtgBO0YFgwlZnQ5rXd03JX4IYAaHtX/ajqUtZB/e7aFoddg
kG5Jk4Dhfg+o+h5dbHDU7SFpFRBLgjLqbqUjwGjktz2dh7e1WjJpqCCPBkd4dUG/
HERtIvNfGt7c45ix+3rLBCUMs+Qg1Ug=
-----END CERTIFICATE-----
Generated at Sun Jun 15 11:38:00 2025 by rpki-client