Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
File:                     8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa (raw, json)
Hash identifier:          4paMJw5TEwCjRzsTnCGkcw6sb14FNyWq8ziPjn2PAFo=
Subject key identifier:   D6:B2:59:AE:1E:E6:10:B9:DD:52:B3:2E:B9:C8:08:17:94:36:7B:14
Certificate issuer:       /CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
Certificate serial:       010D0C9F4328584A8840998F195E78689691F580
Authority key identifier: 37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa
Signing time:             Wed 16 Jul 2025 01:00:49 +0000
ROA not before:           Wed 16 Jul 2025 01:00:49 +0000
ROA not after:            Tue 14 Oct 2025 01:00:49 +0000
asID:                     683
IP address blocks:        192.5.201.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:88:40:99:8f:19:5e:78:68:96:91:f5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0e43d693-397f-4f90-96eb-2da9e8465ff5
        Validity
            Not Before: Jul 16 01:00:49 2025 GMT
            Not After : Oct 14 01:00:49 2025 GMT
        Subject: CN=1a4c8754-19df-4a0e-bb37-abe4e17d7b21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:81:53:4d:c5:98:34:91:70:65:ec:c9:b0:f5:
                    fa:5b:c9:86:4c:a0:66:f4:14:b2:3f:35:65:d1:80:
                    7c:0f:4d:ce:04:ae:07:85:03:1c:e7:0a:0d:44:f0:
                    dc:42:a6:3b:77:1d:b7:0d:7a:5c:17:4a:26:6e:9f:
                    8d:27:04:7a:71:9d:6f:dc:11:5a:4a:7d:18:dd:66:
                    97:da:59:31:28:10:80:ad:a6:1a:95:cd:1b:a8:3c:
                    26:fc:9d:72:2a:a5:cd:e5:6b:e9:f1:a1:81:fc:30:
                    fe:b7:1c:5d:a0:a7:bf:cd:ab:bb:cc:ef:d7:62:65:
                    f2:b0:fb:73:f6:97:b9:80:ba:ef:c0:64:02:3d:5f:
                    eb:3d:5c:8f:3e:3a:18:a0:f4:6c:a4:38:9a:52:06:
                    db:45:cb:3f:61:5a:f6:bf:7d:0d:c5:7a:43:4b:dc:
                    95:31:96:29:cf:fb:ae:cc:98:c6:51:fb:f8:f5:ba:
                    28:35:39:11:bb:5d:55:d0:ea:db:d3:f7:9c:69:51:
                    2c:1e:2b:08:12:4f:e5:64:c2:f2:7d:97:a2:79:c6:
                    7b:aa:45:fa:02:8f:f6:12:ef:83:f7:35:ca:73:80:
                    28:08:00:f8:14:9a:cd:23:55:d0:ae:59:3b:66:c8:
                    3b:dd:a7:58:48:73:96:7e:25:75:06:25:f6:72:af:
                    ba:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:B2:59:AE:1E:E6:10:B9:DD:52:B3:2E:B9:C8:08:17:94:36:7B:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/8cd6c4bc-98ad-3773-974d-ca7a1c031ee5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5/0e43d693-397f-4f90-96eb-2da9e8465ff5.crl

            X509v3 Authority Key Identifier:
                keyid:37:4E:28:F4:25:E9:8C:D0:70:89:FF:49:3B:6B:73:FD:62:15:BE:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0e43d693-397f-4f90-96eb-2da9e8465ff5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.5.201.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8b:f0:be:43:a0:63:3a:67:27:af:51:b8:32:bc:6d:fe:8b:95:
         94:d8:0f:67:fb:29:a5:c3:f6:70:5a:06:d7:da:6d:16:6e:bf:
         56:ed:7a:7c:4c:b1:39:a5:d1:e9:b0:20:53:0e:83:7b:23:00:
         3c:2f:b6:08:0a:e9:eb:54:23:33:72:8b:6d:a8:b3:e7:ed:5b:
         bc:ac:38:54:19:2a:db:bf:ee:98:19:8c:90:5b:b8:17:28:21:
         82:d8:c1:b3:3e:05:85:20:73:a2:6f:97:83:39:e2:0b:7e:f8:
         df:89:9a:45:02:f3:21:fc:fc:f3:cb:7f:f5:a5:f2:e5:d2:42:
         aa:40:57:e1:72:3a:07:cb:cb:34:29:22:5e:b2:e4:54:d0:da:
         ad:57:fa:7d:39:c1:12:73:c8:f1:9a:8a:74:27:3c:26:f8:da:
         9a:ab:c5:39:0f:f6:dd:a1:c6:c7:15:8b:b2:f8:21:13:b6:1a:
         00:e7:df:f7:4e:c7:32:26:b4:7e:36:be:9c:3c:07:fd:a1:6a:
         b2:ac:25:12:85:74:05:7f:a9:ea:e9:cc:91:c1:9a:d2:ef:52:
         75:87:d7:f6:c5:d8:4b:e0:e1:68:7b:0c:5e:51:32:ff:11:7d:
         d6:1c:00:8b:bf:1c:12:86:46:31:ff:e5:48:2e:60:3d:2f:bb:
         13:ae:93:0f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqIQJmPGV54aJaR9YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2ZWItMmRhOWU4NDY1
ZmY1MB4XDTI1MDcxNjAxMDA0OVoXDTI1MTAxNDAxMDA0OVowLzEtMCsGA1UEAxMk
MWE0Yzg3NTQtMTlkZi00YTBlLWJiMzctYWJlNGUxN2Q3YjIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmIFTTcWYNJFwZezJsPX6W8mGTKBm9BSyPzVl
0YB8D03OBK4HhQMc5woNRPDcQqY7dx23DXpcF0ombp+NJwR6cZ1v3BFaSn0Y3WaX
2lkxKBCAraYalc0bqDwm/J1yKqXN5Wvp8aGB/DD+txxdoKe/zau7zO/XYmXysPtz
9pe5gLrvwGQCPV/rPVyPPjoYoPRspDiaUgbbRcs/YVr2v30NxXpDS9yVMZYpz/uu
zJjGUfv49booNTkRu11V0Orb0/ecaVEsHisIEk/lZMLyfZeiecZ7qkX6Ao/2Eu+D
9zXKc4AoCAD4FJrNI1XQrlk7Zsg73adYSHOWfiV1BiX2cq+6awIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNayWa4e5hC53VKzLrnICBeUNnsUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQz
ZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5ZTg0NjVmZjUvOGNkNmM0YmMtOThhZC0z
NzczLTk3NGQtY2E3YTFjMDMxZWU1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGU0M2Q2OTMtMzk3Zi00ZjkwLTk2
ZWItMmRhOWU4NDY1ZmY1LzBlNDNkNjkzLTM5N2YtNGY5MC05NmViLTJkYTllODQ2
NWZmNS5jcmwwHwYDVR0jBBgwFoAUN04o9CXpjNBwif9JO2tz/WIVviYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wZTQzZDY5My0zOTdmLTRmOTAtOTZlYi0yZGE5
ZTg0NjVmZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwAXJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIvwvkOgYzpnJ69RuDK8bf6LlZTYD2f7KaXD9nBaBtfabRZuv1btenxM
sTml0emwIFMOg3sjADwvtggK6etUIzNyi22os+ftW7ysOFQZKtu/7pgZjJBbuBco
IYLYwbM+BYUgc6Jvl4M54gt++N+JmkUC8yH8/PPLf/Wl8uXSQqpAV+FyOgfLyzQp
Il6y5FTQ2q1X+n05wRJzyPGainQnPCb42pqrxTkP9t2hxscVi7L4IRO2GgDn3/dO
xzImtH42vpw8B/2harKsJRKFdAV/qerpzJHBmtLvUnWH1/bF2Evg4Wh7DF5RMv8R
fdYcAIu/HBKGRjH/5UguYD0vuxOukw8=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:10:41 2025 by rpki-client