Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c638e8a5-af28-3d9c-ad5f-347353fa917b.roa
File:                     c638e8a5-af28-3d9c-ad5f-347353fa917b.roa (raw, json)
Hash identifier:          cMT57yQZc78zJ6jd3Dtjp8P/OK992h9BC9G/tXmN96g=
Subject key identifier:   96:FA:A1:53:9D:06:8D:92:81:A0:B5:7E:6A:52:DB:A0:36:F4:A9:EE
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AA6F6238FE33E92627EF1AA1D
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c638e8a5-af28-3d9c-ad5f-347353fa917b.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     199527
IP address blocks:        72.249.194.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:23:8f:e3:3e:92:62:7e:f1:aa:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=96f48a74-01d5-4d20-816d-09d64e23b001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a4:3c:55:91:e1:64:34:6f:a8:9d:42:10:b0:
                    48:8d:2e:7b:f4:a5:64:ab:75:59:80:a6:92:34:47:
                    9d:cd:83:5e:27:a2:c9:f8:f7:44:1e:cd:7a:23:6d:
                    9e:6d:05:6f:9e:26:55:0f:f4:07:cc:97:90:be:2c:
                    b3:9e:3b:32:09:85:b3:b1:5c:4e:41:95:48:d2:7f:
                    06:30:b5:6f:22:8f:4b:fd:48:80:bf:b9:1c:ba:69:
                    66:d2:32:5c:b5:f9:9f:a1:6b:98:ea:31:76:93:12:
                    40:29:cf:e4:a3:82:08:39:ee:d8:e4:64:7c:75:29:
                    57:15:86:39:6b:f5:c6:6b:c1:43:98:9c:1d:0a:71:
                    58:65:90:25:26:01:dc:79:71:d5:0f:66:4c:97:00:
                    20:0b:fd:5d:cc:23:60:21:6a:ff:c6:c7:58:7b:69:
                    e5:47:b2:94:5e:c8:53:ff:8f:57:6e:ac:c3:83:e2:
                    7b:66:c8:25:7b:90:b3:ee:3c:e0:e0:dc:fb:8e:a6:
                    74:c8:75:21:b2:a6:23:2d:2b:79:1f:1d:dd:a6:85:
                    88:b9:01:5c:63:76:37:90:01:cc:22:27:21:74:55:
                    67:03:3e:24:25:e8:28:a0:1e:98:33:a9:c8:3d:a5:
                    56:e1:17:6c:e3:b6:c5:73:de:59:63:c7:d6:3c:55:
                    56:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:FA:A1:53:9D:06:8D:92:81:A0:B5:7E:6A:52:DB:A0:36:F4:A9:EE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/c638e8a5-af28-3d9c-ad5f-347353fa917b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  72.249.194.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:6b:61:64:70:52:54:41:83:68:45:a9:b8:04:48:ac:0a:ed:
         29:5e:78:8c:30:40:94:22:ac:d4:f1:ad:70:cd:c6:01:c0:aa:
         f9:2e:74:81:de:80:8c:16:2e:5b:55:4a:40:d4:52:49:e2:fa:
         69:8a:83:e8:3e:de:ac:a3:18:d7:e9:54:b5:da:74:8c:62:ec:
         ac:7b:6b:a0:ef:af:da:0a:c9:66:a1:98:58:b6:07:09:a0:21:
         e2:10:e4:7a:8b:8a:7c:6b:17:ad:9f:fe:31:16:1e:9d:8d:7a:
         43:36:dc:03:86:44:19:4e:4c:50:01:3d:b3:84:03:5c:71:f0:
         71:84:f5:48:29:47:61:ab:2f:bd:b3:4f:ce:11:cd:45:92:2e:
         fe:05:b3:4e:2a:9c:05:5a:1a:9a:01:62:59:30:8b:bd:04:aa:
         49:6b:db:6f:85:38:11:0e:c7:9b:6e:01:c2:41:e3:e8:b7:65:
         02:c1:5c:08:2b:84:f1:3a:3a:9b:d0:a9:ae:05:88:44:aa:3d:
         4e:b0:71:fa:c0:06:d6:31:80:0f:07:49:b7:4e:42:b5:13:db:
         18:98:9e:93:40:98:4c:76:6f:9e:9b:f8:63:1e:b7:1c:9f:d5:
         35:fb:33:d0:79:c3:61:45:7e:b4:16:c1:b7:54:54:8b:e4:70:
         17:45:ad:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqm9iOP4z6SYn7xqh0wDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
OTZmNDhhNzQtMDFkNS00ZDIwLTgxNmQtMDlkNjRlMjNiMDAxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA16Q8VZHhZDRvqJ1CELBIjS579KVkq3VZgKaS
NEedzYNeJ6LJ+PdEHs16I22ebQVvniZVD/QHzJeQviyznjsyCYWzsVxOQZVI0n8G
MLVvIo9L/UiAv7kcumlm0jJctfmfoWuY6jF2kxJAKc/ko4IIOe7Y5GR8dSlXFYY5
a/XGa8FDmJwdCnFYZZAlJgHceXHVD2ZMlwAgC/1dzCNgIWr/xsdYe2nlR7KUXshT
/49XbqzDg+J7Zsgle5Cz7jzg4Nz7jqZ0yHUhsqYjLSt5Hx3dpoWIuQFcY3Y3kAHM
IichdFVnAz4kJegooB6YM6nIPaVW4Rds47bFc95ZY8fWPFVWiQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJb6oVOdBo2SgaC1fmpS26A29KnuMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvYzYzOGU4YTUtYWYyOC0z
ZDljLWFkNWYtMzQ3MzUzZmE5MTdiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQASPnCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE1rYWRwUlRBg2hFqbgESKwK7SleeIwwQJQirNTxrXDNxgHAqvkudIHe
gIwWLltVSkDUUkni+mmKg+g+3qyjGNfpVLXadIxi7Kx7a6Dvr9oKyWahmFi2Bwmg
IeIQ5HqLinxrF62f/jEWHp2NekM23AOGRBlOTFABPbOEA1xx8HGE9UgpR2GrL72z
T84RzUWSLv4Fs04qnAVaGpoBYlkwi70Eqklr22+FOBEOx5tuAcJB4+i3ZQLBXAgr
hPE6OpvQqa4FiESqPU6wcfrABtYxgA8HSbdOQrUT2xiYnpNAmEx2b56b+GMetxyf
1TX7M9B5w2FFfrQWwbdUVIvkcBdFrWk=
-----END CERTIFICATE-----
Generated at Thu Aug 7 02:05:17 2025 by rpki-client