Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
File:                     7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa (raw, json)
Hash identifier:          7i7N1WybZbZyeQkuHz9/kM090v/gKHqwkPrgXsrHwuI=
Subject key identifier:   F1:40:C2:14:2E:05:3D:2E:EA:45:2F:1B:5D:D0:08:F5:11:A9:4C:AD
Certificate issuer:       /CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
Certificate serial:       010D0C9F43285849E91FA49BF4BC62FA13578480
Authority key identifier: D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa
Signing time:             Tue 20 May 2025 01:00:49 +0000
ROA not before:           Tue 20 May 2025 01:00:49 +0000
ROA not after:            Mon 18 Aug 2025 01:00:49 +0000
asID:                     7018
IP address blocks:        141.195.114.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e9:1f:a4:9b:f4:bc:62:fa:13:57:84:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ae91928-35cf-46ed-bf87-92d9bfd629ec
        Validity
            Not Before: May 20 01:00:49 2025 GMT
            Not After : Aug 18 01:00:49 2025 GMT
        Subject: CN=22142c74-7380-46d0-8a7c-7f26e25c0ca9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:3f:c1:db:e7:b6:e7:5d:f4:c2:47:4f:5b:e3:
                    a3:65:49:76:bf:d8:0a:7f:c0:da:60:4f:61:66:22:
                    06:05:30:ac:35:ad:2e:fc:1e:3c:e2:15:85:16:b9:
                    16:05:f4:61:7c:d9:a7:e0:cd:ae:53:b5:0a:1d:eb:
                    e0:a1:b3:0f:82:c6:ca:80:f0:48:fe:ed:ab:4b:cd:
                    3c:cd:23:c5:93:bf:e4:7f:fb:e7:2d:36:fe:b2:8f:
                    3a:14:97:b4:0a:32:58:8d:3f:17:3c:c5:52:a9:34:
                    6b:a3:88:55:84:fc:9d:48:14:ec:3a:0c:e4:4c:28:
                    ce:52:d7:44:e3:d7:98:0e:cd:f7:85:88:74:da:0a:
                    96:81:3e:c9:70:47:60:b3:30:ac:b5:93:dd:ae:cf:
                    18:0e:20:de:df:d4:17:a4:e1:4a:1e:91:e7:5a:ba:
                    22:3a:f0:6c:32:5d:2f:05:72:91:92:b8:e3:10:4a:
                    ea:66:e2:04:de:45:20:3b:40:35:9d:3b:5f:c1:5d:
                    ef:7e:37:18:dd:dc:c0:b2:47:59:cd:08:d5:52:6c:
                    6a:a4:b7:9c:0b:a7:9f:2d:bb:5e:45:46:98:a3:db:
                    39:16:5e:fa:e9:b0:38:b2:34:08:31:8e:91:60:07:
                    ff:05:76:ec:3e:91:b2:36:99:07:3a:0b:74:b8:ab:
                    82:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:40:C2:14:2E:05:3D:2E:EA:45:2F:1B:5D:D0:08:F5:11:A9:4C:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/7c68f1ee-79ff-30aa-b0e8-e90fb0af3db8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec/8ae91928-35cf-46ed-bf87-92d9bfd629ec.crl

            X509v3 Authority Key Identifier:
                keyid:D9:34:11:C0:B3:C5:A4:40:65:64:01:E3:04:98:DC:8B:32:D7:97:E5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ae91928-35cf-46ed-bf87-92d9bfd629ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  141.195.114.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:3a:34:d6:0e:59:a4:d0:d8:cf:f2:e9:9b:2e:c4:2b:e5:af:
         c4:48:4e:a5:d3:15:df:ac:eb:45:19:41:ed:f0:de:2f:6f:fd:
         00:f9:73:62:8b:6b:a9:8e:2d:57:12:e8:54:ac:9d:ed:80:93:
         d6:9c:96:36:6a:2c:f5:5b:79:67:b8:28:8a:58:16:c8:16:61:
         be:50:44:37:d5:17:8b:b9:18:03:91:1c:ca:37:18:f1:69:86:
         78:2c:e5:2f:b8:00:9f:c8:9e:28:b6:f3:4e:57:d6:4d:e9:c6:
         68:89:78:60:a6:f6:1f:1e:78:84:34:d3:9a:61:fb:a6:89:a4:
         65:07:33:09:2f:85:b2:80:cb:87:db:cc:b7:e4:da:09:57:a2:
         6b:87:68:9c:1a:43:10:d4:89:39:9d:5b:dc:4c:18:75:6e:a7:
         a1:47:9e:90:d2:26:65:90:8d:92:c0:36:1b:3b:d3:16:e4:de:
         08:db:f4:92:97:70:71:6d:fd:51:e9:ea:a1:ad:64:2e:cd:86:
         8f:a6:f1:8d:69:93:bf:d3:75:e6:c2:07:9d:75:b8:a5:b4:bc:
         52:b7:8a:40:c9:58:55:ea:d9:83:a6:8c:6a:2e:c6:d8:58:5a:
         b6:ea:e9:25:8e:9c:1c:58:55:e6:38:89:b7:d3:67:d7:f8:f6:
         6e:cc:28:c9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnpH6Sb9Lxi+hNXhIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFlOTE5MjgtMzVjZi00NmVkLWJmODctOTJkOWJmZDYy
OWVjMB4XDTI1MDUyMDAxMDA0OVoXDTI1MDgxODAxMDA0OVowLzEtMCsGA1UEAxMk
MjIxNDJjNzQtNzM4MC00NmQwLThhN2MtN2YyNmUyNWMwY2E5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0T/B2+e25130wkdPW+OjZUl2v9gKf8DaYE9h
ZiIGBTCsNa0u/B484hWFFrkWBfRhfNmn4M2uU7UKHevgobMPgsbKgPBI/u2rS808
zSPFk7/kf/vnLTb+so86FJe0CjJYjT8XPMVSqTRro4hVhPydSBTsOgzkTCjOUtdE
49eYDs33hYh02gqWgT7JcEdgszCstZPdrs8YDiDe39QXpOFKHpHnWroiOvBsMl0v
BXKRkrjjEErqZuIE3kUgO0A1nTtfwV3vfjcY3dzAskdZzQjVUmxqpLecC6efLbte
RUaYo9s5Fl766bA4sjQIMY6RYAf/BXbsPpGyNpkHOgt0uKuCwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPFAwhQuBT0u6kUvG13QCPURqUytMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWU5
MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5YmZkNjI5ZWMvN2M2OGYxZWUtNzlmZi0z
MGFhLWIwZTgtZTkwZmIwYWYzZGI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFlOTE5MjgtMzVjZi00NmVkLWJm
ODctOTJkOWJmZDYyOWVjLzhhZTkxOTI4LTM1Y2YtNDZlZC1iZjg3LTkyZDliZmQ2
MjllYy5jcmwwHwYDVR0jBBgwFoAU2TQRwLPFpEBlZAHjBJjcizLXl+UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWU5MTkyOC0zNWNmLTQ2ZWQtYmY4Ny05MmQ5
YmZkNjI5ZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjcNyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF06NNYOWaTQ2M/y6ZsuxCvlr8RITqXTFd+s60UZQe3w3i9v/QD5c2KL
a6mOLVcS6FSsne2Ak9acljZqLPVbeWe4KIpYFsgWYb5QRDfVF4u5GAORHMo3GPFp
hngs5S+4AJ/Inii2805X1k3pxmiJeGCm9h8eeIQ005ph+6aJpGUHMwkvhbKAy4fb
zLfk2glXomuHaJwaQxDUiTmdW9xMGHVup6FHnpDSJmWQjZLANhs70xbk3gjb9JKX
cHFt/VHp6qGtZC7Nho+m8Y1pk7/TdebCB511uKW0vFK3ikDJWFXq2YOmjGouxthY
Wrbq6SWOnBxYVeY4ibfTZ9f49m7MKMk=
-----END CERTIFICATE-----
Generated at Sun Jun 15 13:17:20 2025 by rpki-client