Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/91b0318f-27c0-3bb2-a242-f5cf20eaec9e.roa
File:                     91b0318f-27c0-3bb2-a242-f5cf20eaec9e.roa (raw, json)
Hash identifier:          laNpwjm0BpDN6/C39HlrS58//X7plKyk13BKgUJNTUc=
Subject key identifier:   CC:A5:CE:C5:9E:B3:94:87:B1:A0:BB:46:A7:39:7D:AA:C5:4A:29:43
Certificate issuer:       /CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
Certificate serial:       010D0C9F43285849BB0F71F41875FECCB629CC00
Authority key identifier: 72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/91b0318f-27c0-3bb2-a242-f5cf20eaec9e.roa
Signing time:             Sat 03 May 2025 13:01:01 +0000
ROA not before:           Sat 03 May 2025 13:01:01 +0000
ROA not after:            Fri 01 Aug 2025 13:01:01 +0000
asID:                     398399
IP address blocks:        199.185.180.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:bb:0f:71:f4:18:75:fe:cc:b6:29:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cb37a4d1-f648-421f-ac14-b83d37a0c615
        Validity
            Not Before: May  3 13:01:01 2025 GMT
            Not After : Aug  1 13:01:01 2025 GMT
        Subject: CN=498e3496-e2d8-43d9-8f1b-f8059b2b2462
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:c1:60:df:15:56:de:1c:61:ff:9d:c8:4f:ad:
                    e8:0d:2b:81:89:dd:1d:35:0e:cb:17:4b:8c:ca:fb:
                    a8:f7:22:9b:d0:ce:6a:9e:b7:f0:df:cd:58:db:b6:
                    47:d9:f1:e2:68:7f:0d:46:50:8d:cd:50:30:cc:66:
                    dd:0d:0f:98:3d:b6:4b:d9:32:cc:8b:87:51:c5:58:
                    c3:fc:f7:56:db:8b:fc:48:e7:c3:1c:ec:f6:4d:21:
                    27:02:d6:c2:96:a2:36:d5:ef:79:3c:46:08:de:51:
                    01:32:ff:c2:1a:3c:49:63:88:7f:32:dc:26:a2:da:
                    82:f1:01:21:ae:4e:0b:ea:46:25:15:17:43:62:b4:
                    e7:a4:65:6b:57:6f:dc:62:bc:31:80:42:92:d4:da:
                    bf:96:63:14:05:11:40:51:95:50:7f:24:14:95:a3:
                    94:d5:d0:6f:bf:2f:82:bd:84:b2:6f:9e:1d:cc:23:
                    94:7e:14:d9:ae:65:34:53:35:73:6d:35:13:25:82:
                    e1:64:f3:bd:ae:26:da:e5:e1:d8:48:a9:1d:2c:8a:
                    82:20:9d:30:91:18:12:97:b6:db:cf:d5:83:da:47:
                    4b:10:56:01:6a:97:06:77:8c:3a:42:1d:ac:de:78:
                    9c:c9:32:5f:7c:15:4b:6b:5f:ab:e9:d0:a6:21:03:
                    78:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:A5:CE:C5:9E:B3:94:87:B1:A0:BB:46:A7:39:7D:AA:C5:4A:29:43
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/91b0318f-27c0-3bb2-a242-f5cf20eaec9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615/cb37a4d1-f648-421f-ac14-b83d37a0c615.crl

            X509v3 Authority Key Identifier:
                keyid:72:08:4E:86:A9:1B:7D:76:23:E1:97:80:06:A1:8B:05:D9:7A:4C:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/cb37a4d1-f648-421f-ac14-b83d37a0c615.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.185.180.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:00:9e:e3:5f:c0:4b:a7:76:01:40:54:45:79:ce:47:28:87:
         f5:bf:30:db:02:c0:5e:e0:88:a1:5e:67:2e:e8:f8:b7:1f:68:
         3e:c4:65:10:f1:c9:cb:c3:e5:31:6c:6e:74:08:67:55:60:ec:
         b7:48:a0:c1:71:4b:56:5b:ff:e8:4f:36:24:09:2e:ef:89:62:
         32:72:bd:d0:b1:f6:d7:0d:8b:b1:3b:81:45:1b:07:2a:02:f6:
         0b:3d:6a:45:de:2e:a9:a3:5e:72:3c:70:e8:56:c3:c0:4d:02:
         3a:8c:f4:6f:d7:0a:d0:8a:95:fc:3f:e7:e4:45:61:51:b7:d8:
         80:2a:78:c2:c0:c8:28:98:cb:7e:95:7f:0d:31:87:87:cc:90:
         0e:89:93:d0:13:24:24:f8:0a:a6:fd:ed:6d:ed:88:32:70:74:
         e9:01:ba:f9:20:4f:17:f3:35:77:b5:e2:40:fa:0d:7a:82:a1:
         7c:1c:0c:f8:89:94:3f:9d:fa:f3:c7:09:7e:29:34:07:8e:52:
         1f:1a:91:53:de:96:38:cc:d4:ba:7c:9e:90:98:bd:a5:1a:37:
         48:67:40:13:11:8e:07:81:e6:39:83:89:32:d1:95:da:6c:c0:
         2a:0c:38:27:c9:a4:a5:95:b8:bf:d9:5d:1d:ac:57:55:f4:48:
         b7:b9:aa:a6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm7D3H0GHX+zLYpzAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2IzN2E0ZDEtZjY0OC00MjFmLWFjMTQtYjgzZDM3YTBj
NjE1MB4XDTI1MDUwMzEzMDEwMVoXDTI1MDgwMTEzMDEwMVowLzEtMCsGA1UEAxMk
NDk4ZTM0OTYtZTJkOC00M2Q5LThmMWItZjgwNTliMmIyNDYyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnMFg3xVW3hxh/53IT63oDSuBid0dNQ7LF0uM
yvuo9yKb0M5qnrfw381Y27ZH2fHiaH8NRlCNzVAwzGbdDQ+YPbZL2TLMi4dRxVjD
/PdW24v8SOfDHOz2TSEnAtbClqI21e95PEYI3lEBMv/CGjxJY4h/MtwmotqC8QEh
rk4L6kYlFRdDYrTnpGVrV2/cYrwxgEKS1Nq/lmMUBRFAUZVQfyQUlaOU1dBvvy+C
vYSyb54dzCOUfhTZrmU0UzVzbTUTJYLhZPO9riba5eHYSKkdLIqCIJ0wkRgSl7bb
z9WD2kdLEFYBapcGd4w6Qh2s3nicyTJffBVLa1+r6dCmIQN4hwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMylzsWes5SHsaC7Rqc5farFSilDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jYjM3
YTRkMS1mNjQ4LTQyMWYtYWMxNC1iODNkMzdhMGM2MTUvOTFiMDMxOGYtMjdjMC0z
YmIyLWEyNDItZjVjZjIwZWFlYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvY2IzN2E0ZDEtZjY0OC00MjFmLWFj
MTQtYjgzZDM3YTBjNjE1L2NiMzdhNGQxLWY2NDgtNDIxZi1hYzE0LWI4M2QzN2Ew
YzYxNS5jcmwwHwYDVR0jBBgwFoAUcghOhqkbfXYj4ZeABqGLBdl6TDswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jYjM3YTRkMS1mNjQ4LTQyMWYtYWMxNC1iODNk
MzdhMGM2MTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7m0MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADEAnuNfwEundgFAVEV5zkcoh/W/MNsCwF7giKFeZy7o+LcfaD7EZRDx
ycvD5TFsbnQIZ1Vg7LdIoMFxS1Zb/+hPNiQJLu+JYjJyvdCx9tcNi7E7gUUbByoC
9gs9akXeLqmjXnI8cOhWw8BNAjqM9G/XCtCKlfw/5+RFYVG32IAqeMLAyCiYy36V
fw0xh4fMkA6Jk9ATJCT4Cqb97W3tiDJwdOkBuvkgTxfzNXe14kD6DXqCoXwcDPiJ
lD+d+vPHCX4pNAeOUh8akVPeljjM1Lp8npCYvaUaN0hnQBMRjgeB5jmDiTLRldps
wCoMOCfJpKWVuL/ZXR2sV1X0SLe5qqY=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:16:21 2025 by rpki-client