Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa
File:                     d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa (raw, json)
Hash identifier:          Jur54crqc/nVpPEhg2dEkNxWBgYsgy+RZcw0BfYMx2o=
Subject key identifier:   F1:B7:B5:F6:66:57:C8:9F:02:00:E7:11:AA:C4:A6:9A:45:77:39:45
Certificate issuer:       /CN=c9a96b03-6960-4655-8e34-04473ec1768f
Certificate serial:       010D0C9F43285849D2CA237AB2A395AEF7D02C00
Authority key identifier: AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa
Signing time:             Mon 12 May 2025 01:00:47 +0000
ROA not before:           Mon 12 May 2025 01:00:47 +0000
ROA not after:            Sun 10 Aug 2025 01:00:47 +0000
asID:                     40232
IP address blocks:        192.82.32.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d2:ca:23:7a:b2:a3:95:ae:f7:d0:2c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c9a96b03-6960-4655-8e34-04473ec1768f
        Validity
            Not Before: May 12 01:00:47 2025 GMT
            Not After : Aug 10 01:00:47 2025 GMT
        Subject: CN=8b5b0907-42d4-493f-874d-d304084e4b72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:f1:19:e9:e8:38:77:84:a0:e0:89:a7:42:4f:
                    2a:fe:ea:78:33:4c:29:f1:40:00:a6:ad:a2:55:ed:
                    fb:e2:5c:e2:32:3a:89:6c:1a:f2:cf:fc:1a:52:1a:
                    c8:52:71:55:79:f4:5a:4b:72:cd:de:3c:14:74:89:
                    56:5b:4a:2c:6a:88:6b:cc:25:07:65:50:bb:11:1b:
                    ce:f1:26:ec:4d:49:97:88:2d:60:0e:51:1f:3d:35:
                    94:d5:60:e7:4c:0f:49:7f:87:6b:b6:d1:a0:ba:ca:
                    c1:01:cc:ac:09:e5:8f:d1:9b:ff:ae:70:29:fb:56:
                    cb:bf:4d:5a:a4:f9:b3:32:5f:e5:f4:66:2f:32:9c:
                    d8:ff:fb:80:a2:66:65:4e:78:fc:5c:26:f8:ff:58:
                    e1:50:07:f5:ad:23:07:09:eb:d1:40:a9:7c:10:db:
                    f0:f8:fa:c3:ec:00:ab:9f:ad:be:de:22:ce:8c:63:
                    9d:46:a8:88:34:26:ee:8e:60:0d:ab:37:4a:6a:b0:
                    32:7b:4b:51:57:31:ef:93:a9:f9:6b:e7:68:76:81:
                    41:ae:92:62:ea:1f:b4:1b:e0:a4:36:bb:44:c6:ff:
                    03:55:f8:0d:64:34:eb:86:94:f8:2e:15:13:41:57:
                    c8:7a:25:2f:e7:b4:eb:99:14:e1:06:5a:83:bb:48:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B7:B5:F6:66:57:C8:9F:02:00:E7:11:AA:C4:A6:9A:45:77:39:45
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/d8fc49c9-1432-3ad5-9a17-c3df280cc752.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f/c9a96b03-6960-4655-8e34-04473ec1768f.crl

            X509v3 Authority Key Identifier:
                keyid:AF:08:12:EB:06:70:F1:86:BD:D4:35:58:8A:D5:25:E5:CE:84:AD:53

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/c9a96b03-6960-4655-8e34-04473ec1768f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.82.32.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         15:77:70:80:b6:33:aa:e2:6a:02:29:8f:b2:0e:59:60:36:86:
         fa:5d:84:47:c8:59:cb:99:da:ec:58:26:39:96:76:97:e2:76:
         01:d5:58:63:75:97:19:66:fa:f5:ef:44:fb:0e:91:33:54:a5:
         82:ad:27:4d:86:d5:a5:06:13:d3:28:4b:21:c7:3f:68:4c:d2:
         7f:cf:81:73:c7:e9:e5:ed:fa:4b:5a:32:27:a9:58:2c:79:2d:
         f4:6e:58:a6:36:64:b9:98:27:49:10:23:62:da:1d:0f:c7:5f:
         a6:59:96:13:e6:b2:bb:42:7a:84:5b:d2:4d:bf:73:d3:c6:b8:
         10:a9:bc:94:43:0f:e8:a3:0a:9b:df:ed:30:52:c9:6b:71:71:
         8a:4a:4d:99:df:64:3a:e7:40:0e:f6:7b:fb:8e:06:91:38:c4:
         0b:d4:71:9f:7e:51:49:17:69:fb:cb:0f:83:14:54:fb:ff:e4:
         0b:ab:a6:a2:1b:2b:80:00:79:03:39:3f:2b:c2:67:70:95:3a:
         c2:e6:cd:eb:11:4d:c0:31:7c:25:2f:e1:fa:f0:e4:9d:4d:9a:
         73:f7:d2:bc:06:f6:af:0e:07:b5:33:ef:5b:c3:81:5a:83:dc:
         d6:22:79:e7:f9:c6:63:02:7a:59:74:e0:5d:71:1c:8c:5a:d5:
         ab:f1:25:55
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnSyiN6sqOVrvfQLAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzlhOTZiMDMtNjk2MC00NjU1LThlMzQtMDQ0NzNlYzE3
NjhmMB4XDTI1MDUxMjAxMDA0N1oXDTI1MDgxMDAxMDA0N1owLzEtMCsGA1UEAxMk
OGI1YjA5MDctNDJkNC00OTNmLTg3NGQtZDMwNDA4NGU0YjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAivEZ6eg4d4Sg4ImnQk8q/up4M0wp8UAApq2i
Ve374lziMjqJbBryz/waUhrIUnFVefRaS3LN3jwUdIlWW0osaohrzCUHZVC7ERvO
8SbsTUmXiC1gDlEfPTWU1WDnTA9Jf4drttGgusrBAcysCeWP0Zv/rnAp+1bLv01a
pPmzMl/l9GYvMpzY//uAomZlTnj8XCb4/1jhUAf1rSMHCevRQKl8ENvw+PrD7ACr
n62+3iLOjGOdRqiINCbujmANqzdKarAye0tRVzHvk6n5a+dodoFBrpJi6h+0G+Ck
NrtExv8DVfgNZDTrhpT4LhUTQVfIeiUv57TrmRThBlqDu0jE8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPG3tfZmV8ifAgDnEarEpppFdzlFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5
NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3M2VjMTc2OGYvZDhmYzQ5YzktMTQzMi0z
YWQ1LTlhMTctYzNkZjI4MGNjNzUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvYzlhOTZiMDMtNjk2MC00NjU1LThl
MzQtMDQ0NzNlYzE3NjhmL2M5YTk2YjAzLTY5NjAtNDY1NS04ZTM0LTA0NDczZWMx
NzY4Zi5jcmwwHwYDVR0jBBgwFoAUrwgS6wZw8Ya91DVYitUl5c6ErVMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi9jOWE5NmIwMy02OTYwLTQ2NTUtOGUzNC0wNDQ3
M2VjMTc2OGYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDwFIgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABV3cIC2M6riagIpj7IOWWA2hvpdhEfIWcuZ2uxYJjmWdpfidgHVWGN1
lxlm+vXvRPsOkTNUpYKtJ02G1aUGE9MoSyHHP2hM0n/PgXPH6eXt+ktaMiepWCx5
LfRuWKY2ZLmYJ0kQI2LaHQ/HX6ZZlhPmsrtCeoRb0k2/c9PGuBCpvJRDD+ijCpvf
7TBSyWtxcYpKTZnfZDrnQA72e/uOBpE4xAvUcZ9+UUkXafvLD4MUVPv/5AurpqIb
K4AAeQM5PyvCZ3CVOsLmzesRTcAxfCUv4frw5J1NmnP30rwG9q8OB7Uz71vDgVqD
3NYieef5xmMCell04F1xHIxa1avxJVU=
-----END CERTIFICATE-----
Generated at Sun Jun 15 23:19:40 2025 by rpki-client