Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa
File:                     f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa (raw, json)
Hash identifier:          +NLZmgNFlpmq8aAcIa/laYyuE/XIzKixn14K8GY9R3U=
Subject key identifier:   3F:61:CA:FD:0D:8E:5C:67:84:44:C8:C7:8A:F2:1C:59:F9:E5:13:5C
Certificate issuer:       /CN=b927dc15-9316-467a-b50d-d6b361478436
Certificate serial:       010D0C9F4328584A119AB19D148478BDA8B76B80
Authority key identifier: 9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     397535
IP address blocks:        198.187.251.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b1:9d:14:84:78:bd:a8:b7:6b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b927dc15-9316-467a-b50d-d6b361478436
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=fcf910b9-63ed-4bf4-a61c-3e15b39ed8fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f9:1e:79:2d:b1:cd:64:c3:60:fe:7d:14:8d:
                    23:42:86:01:7f:b5:2a:fb:05:b9:29:32:0b:92:8d:
                    e2:a8:09:e1:a7:44:2b:2b:79:26:f7:fc:d2:6e:43:
                    bd:5b:02:6b:cf:ee:67:de:12:03:ad:f6:72:3a:ab:
                    7f:ce:99:c1:a7:b1:d2:29:fc:4d:91:1e:e1:6d:2a:
                    2c:55:ac:02:71:eb:84:35:5e:3c:f0:e6:8f:7d:c6:
                    6b:42:8f:16:4b:48:26:cf:d3:fa:1a:d8:12:62:e4:
                    4d:36:71:0a:65:df:62:29:f1:63:6c:14:c7:e2:02:
                    5c:56:39:0c:2e:eb:b0:c1:89:00:0f:d6:01:1c:e9:
                    1a:94:bc:cd:45:2e:5b:e4:98:89:67:45:a3:6e:74:
                    2c:92:20:1f:88:9d:c1:30:a8:d5:7d:23:0a:81:97:
                    2f:a2:27:1a:70:32:fd:cc:cf:32:e1:49:2d:f7:c2:
                    5b:46:66:d4:93:8b:5d:ff:43:cf:15:c3:21:9d:59:
                    7b:8c:bb:9d:6c:bc:00:2f:fe:52:2b:8d:9f:f7:41:
                    fd:0c:56:10:6e:67:cc:20:b2:24:99:6f:51:7c:8f:
                    7d:5c:6b:2a:d4:ca:b4:98:01:97:82:17:05:4d:31:
                    2f:eb:3f:58:f0:ac:b0:6e:85:6c:ec:5a:76:c7:c9:
                    2b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:61:CA:FD:0D:8E:5C:67:84:44:C8:C7:8A:F2:1C:59:F9:E5:13:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/f10d82da-3bc7-3d1c-9293-6dbb7eb5b5c8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436/b927dc15-9316-467a-b50d-d6b361478436.crl

            X509v3 Authority Key Identifier:
                keyid:9A:5B:82:A8:00:DF:D6:23:2A:45:9E:7A:4B:55:17:F4:18:E5:83:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/b927dc15-9316-467a-b50d-d6b361478436.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.187.251.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1a:ca:d5:d2:cb:9f:3b:e9:7c:01:28:bb:0a:61:6c:25:1e:d7:
         c6:e5:46:8a:4d:f3:85:35:11:58:e2:8b:37:0a:f5:68:f7:4c:
         d8:3f:fa:af:bd:02:f2:88:72:05:c6:0d:01:81:03:c8:4a:88:
         2d:26:27:ed:7d:55:9c:84:9f:aa:62:02:f1:e4:e7:0f:94:19:
         88:ad:b5:74:a3:df:f2:2a:e0:4c:47:6b:24:b2:1c:cf:52:51:
         03:46:da:16:37:db:14:f7:f9:84:ce:ea:0c:b4:a8:97:6f:1e:
         29:c4:d1:d5:08:64:ce:01:f8:34:59:1a:b8:2a:b9:57:54:1a:
         52:bf:4f:22:18:66:9c:bb:62:fe:a8:70:ae:e4:cd:00:a3:3e:
         51:35:20:48:08:60:4f:a3:2a:3a:53:0d:0e:33:89:de:04:68:
         aa:fb:c9:70:75:03:bc:05:fa:0c:6a:85:7a:31:b9:ce:cf:e8:
         9a:0f:bd:bf:c5:67:0f:90:a3:08:36:15:ad:ac:ec:f9:35:d5:
         0e:56:cb:9e:b5:af:c3:4b:e3:f6:ef:72:89:7e:28:87:d1:da:
         54:a7:db:c0:b6:5a:1c:58:38:a8:de:b7:0a:96:3e:6e:46:65:
         83:32:3e:78:2f:dd:14:08:85:d7:0e:d4:0d:06:17:f1:84:93:
         4a:09:7b:f3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrGdFIR4vai3a4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjkyN2RjMTUtOTMxNi00NjdhLWI1MGQtZDZiMzYxNDc4
NDM2MB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZmNmOTEwYjktNjNlZC00YmY0LWE2MWMtM2UxNWIzOWVkOGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAofkeeS2xzWTDYP59FI0jQoYBf7Uq+wW5KTIL
ko3iqAnhp0QrK3km9/zSbkO9WwJrz+5n3hIDrfZyOqt/zpnBp7HSKfxNkR7hbSos
VawCceuENV488OaPfcZrQo8WS0gmz9P6GtgSYuRNNnEKZd9iKfFjbBTH4gJcVjkM
LuuwwYkAD9YBHOkalLzNRS5b5JiJZ0WjbnQskiAfiJ3BMKjVfSMKgZcvoicacDL9
zM8y4Ukt98JbRmbUk4td/0PPFcMhnVl7jLudbLwAL/5SK42f90H9DFYQbmfMILIk
mW9RfI99XGsq1Mq0mAGXghcFTTEv6z9Y8KywboVs7Fp2x8krXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD9hyv0NjlxnhETIx4ryHFn55RNcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3
ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIzNjE0Nzg0MzYvZjEwZDgyZGEtM2JjNy0z
ZDFjLTkyOTMtNmRiYjdlYjViNWM4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYjkyN2RjMTUtOTMxNi00NjdhLWI1
MGQtZDZiMzYxNDc4NDM2L2I5MjdkYzE1LTkzMTYtNDY3YS1iNTBkLWQ2YjM2MTQ3
ODQzNi5jcmwwHwYDVR0jBBgwFoAUmluCqADf1iMqRZ56S1UX9Bjlg+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9iOTI3ZGMxNS05MzE2LTQ2N2EtYjUwZC1kNmIz
NjE0Nzg0MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrv7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABrK1dLLnzvpfAEouwphbCUe18blRopN84U1EVjiizcK9Wj3TNg/+q+9
AvKIcgXGDQGBA8hKiC0mJ+19VZyEn6piAvHk5w+UGYittXSj3/Iq4ExHaySyHM9S
UQNG2hY32xT3+YTO6gy0qJdvHinE0dUIZM4B+DRZGrgquVdUGlK/TyIYZpy7Yv6o
cK7kzQCjPlE1IEgIYE+jKjpTDQ4zid4EaKr7yXB1A7wF+gxqhXoxuc7P6JoPvb/F
Zw+Qowg2Fa2s7Pk11Q5Wy561r8NL4/bvcol+KIfR2lSn28C2WhxYOKjetwqWPm5G
ZYMyPngv3RQIhdcO1A0GF/GEk0oJe/M=
-----END CERTIFICATE-----
Generated at Wed Jun 18 05:33:28 2025 by rpki-client