Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
File:                     3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa (raw, json)
Hash identifier:          0NXqGZqJhLCIlfJHYjjtWbAo7/0uuM7xc1aPXpb3Kzs=
Subject key identifier:   2F:C8:8B:4E:51:C9:16:B2:55:81:E3:05:2D:27:61:8D:1E:CA:35:D3
Certificate issuer:       /CN=219f6136-3599-4e41-920e-eccbe6592210
Certificate serial:       010D0C9F4328584A9900B9CD665FF67143A65440
Authority key identifier: CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa
Signing time:             Tue 22 Jul 2025 01:00:50 +0000
ROA not before:           Tue 22 Jul 2025 01:00:50 +0000
ROA not after:            Mon 20 Oct 2025 01:00:50 +0000
asID:                     17001
IP address blocks:        140.193.0.0/16 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:99:00:b9:cd:66:5f:f6:71:43:a6:54:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=219f6136-3599-4e41-920e-eccbe6592210
        Validity
            Not Before: Jul 22 01:00:50 2025 GMT
            Not After : Oct 20 01:00:50 2025 GMT
        Subject: CN=18abcb89-7b2e-4d51-b066-c376ca5a6f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:8e:77:66:7b:17:b7:7e:55:66:b0:22:fd:26:
                    f3:a4:25:27:55:02:f3:40:fa:12:28:c3:f9:d0:3f:
                    8c:67:f9:1f:4a:60:0b:f0:f5:c7:01:28:7e:b3:0a:
                    2c:97:63:fe:06:d1:9c:3f:2c:b4:c8:94:6c:55:0b:
                    11:e3:be:bb:5b:a7:34:d6:75:a7:72:79:2c:30:c5:
                    6a:c9:bb:35:96:f2:3c:9f:89:d3:1d:33:f2:da:8a:
                    e3:50:36:c9:c5:3c:1f:ee:f8:80:02:c5:d1:5e:05:
                    38:0e:88:00:d1:3d:97:70:16:36:4e:5d:ea:88:ed:
                    e6:6f:ce:60:eb:88:be:bb:71:b9:34:ce:f4:79:eb:
                    54:cd:8e:ba:bb:bf:fb:53:bb:58:6f:c0:74:19:b3:
                    70:46:7f:2a:c7:6a:de:1f:a9:4e:6d:fe:7e:ff:59:
                    ab:bc:b1:42:3e:e7:e1:7c:de:e9:6d:86:ee:ed:a8:
                    1f:f4:5d:a8:fc:ac:73:e3:95:4d:05:09:24:2d:d8:
                    b0:fb:82:e8:5b:b0:8e:9f:e5:12:02:4f:ad:8f:28:
                    82:0d:e8:44:6f:c8:0b:07:f0:0b:30:f0:6b:b2:84:
                    eb:18:26:e9:80:f9:81:38:6c:92:1f:07:3c:15:ee:
                    a2:06:4b:4f:06:26:4e:a7:cf:20:8d:ef:89:44:07:
                    9a:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:C8:8B:4E:51:C9:16:B2:55:81:E3:05:2D:27:61:8D:1E:CA:35:D3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/3d45397b-6ad7-3cfd-a45d-815ac66fd5df.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210/219f6136-3599-4e41-920e-eccbe6592210.crl

            X509v3 Authority Key Identifier:
                keyid:CA:17:52:0D:8C:6C:0E:05:CA:71:2C:B1:E2:49:6D:FD:F0:71:44:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/219f6136-3599-4e41-920e-eccbe6592210.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.193.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         32:81:cd:cc:28:71:46:87:bf:c5:7a:4e:ed:f0:96:d1:29:bf:
         8d:ee:32:0f:96:c8:9e:c8:86:b2:b8:6a:26:a0:b7:39:7c:a7:
         e3:4b:ae:37:86:37:ff:7c:e7:11:20:8d:55:c7:41:6b:bf:f9:
         5f:48:5e:fb:6b:5b:06:71:7d:d9:bb:70:be:20:ec:3d:ed:33:
         15:11:d1:b5:49:c1:b9:53:28:d7:6a:59:c6:49:00:81:c7:21:
         65:dc:cb:56:3a:a0:8d:b2:6e:5b:ea:11:fb:fb:7f:df:ee:a7:
         32:b9:b9:41:c2:82:26:3a:0d:06:c3:ff:a7:38:fc:c4:cf:a9:
         71:69:18:8a:37:bd:69:b5:d5:0d:ff:3b:ce:6a:55:f7:f1:ae:
         9a:0e:7e:7d:e9:2c:44:90:12:06:76:4c:50:be:cf:85:29:21:
         6a:86:e9:14:c5:ba:0a:2a:ad:d9:7d:f3:68:14:de:44:51:d9:
         57:97:b2:e2:e3:6d:bc:98:5f:4d:9c:59:17:04:bb:6a:e5:7e:
         91:6c:f9:9a:e0:c7:43:bb:1f:87:8e:3b:0c:c0:03:ac:1f:dc:
         e7:30:8f:07:1a:17:a6:71:19:54:ef:88:ab:32:93:a5:7e:7a:
         ad:03:59:43:95:14:48:9a:b1:70:cb:63:67:bf:64:a6:17:a1:
         5c:da:cb:72
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEqZALnNZl/2cUOmVEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjE5ZjYxMzYtMzU5OS00ZTQxLTkyMGUtZWNjYmU2NTky
MjEwMB4XDTI1MDcyMjAxMDA1MFoXDTI1MTAyMDAxMDA1MFowLzEtMCsGA1UEAxMk
MThhYmNiODktN2IyZS00ZDUxLWIwNjYtYzM3NmNhNWE2ZjhkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlY53ZnsXt35VZrAi/SbzpCUnVQLzQPoSKMP5
0D+MZ/kfSmAL8PXHASh+swosl2P+BtGcPyy0yJRsVQsR4767W6c01nWncnksMMVq
ybs1lvI8n4nTHTPy2orjUDbJxTwf7viAAsXRXgU4DogA0T2XcBY2Tl3qiO3mb85g
64i+u3G5NM70eetUzY66u7/7U7tYb8B0GbNwRn8qx2reH6lObf5+/1mrvLFCPufh
fN7pbYbu7agf9F2o/Kxz45VNBQkkLdiw+4LoW7COn+USAk+tjyiCDehEb8gLB/AL
MPBrsoTrGCbpgPmBOGySHwc8Fe6iBktPBiZOp88gje+JRAeaMQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFC/Ii05RyRayVYHjBS0nYY0eyjXTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi8yMTlm
NjEzNi0zNTk5LTRlNDEtOTIwZS1lY2NiZTY1OTIyMTAvM2Q0NTM5N2ItNmFkNy0z
Y2ZkLWE0NWQtODE1YWM2NmZkNWRmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvMjE5ZjYxMzYtMzU5OS00ZTQxLTky
MGUtZWNjYmU2NTkyMjEwLzIxOWY2MTM2LTM1OTktNGU0MS05MjBlLWVjY2JlNjU5
MjIxMC5jcmwwHwYDVR0jBBgwFoAUyhdSDYxsDgXKcSyx4klt/fBxRK0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi8yMTlmNjEzNi0zNTk5LTRlNDEtOTIwZS1lY2Ni
ZTY1OTIyMTAuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjMEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAMoHNzChxRoe/xXpO7fCW0Sm/je4yD5bInsiGsrhqJqC3OXyn40uuN4Y3
/3znESCNVcdBa7/5X0he+2tbBnF92btwviDsPe0zFRHRtUnBuVMo12pZxkkAgcch
ZdzLVjqgjbJuW+oR+/t/3+6nMrm5QcKCJjoNBsP/pzj8xM+pcWkYije9abXVDf87
zmpV9/Gumg5+feksRJASBnZMUL7PhSkhaobpFMW6Ciqt2X3zaBTeRFHZV5ey4uNt
vJhfTZxZFwS7auV+kWz5muDHQ7sfh447DMADrB/c5zCPBxoXpnEZVO+IqzKTpX56
rQNZQ5UUSJqxcMtjZ79kphehXNrLcg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:23 2025 by rpki-client