Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/27209b16-2429-3284-a631-e333fd9b4a58.roa
File:                     27209b16-2429-3284-a631-e333fd9b4a58.roa (raw, json)
Hash identifier:          z5V1We9rcXQEWXXA7r+7JeQQDBthW+O8zUgEQOXcRA8=
Subject key identifier:   F9:5C:00:94:52:AB:03:87:33:C6:02:70:AE:B2:C2:D2:6A:CE:E3:DE
Certificate issuer:       /CN=14d1bd8d-4fff-40aa-9c72-f77defe848fd
Certificate serial:       010D0C9F4328584AADF10D9F33C54B9C0D121630
Authority key identifier: 4F:D9:23:0F:6A:24:58:71:9B:60:36:F5:57:33:6E:0B:EE:6A:42:28
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/27209b16-2429-3284-a631-e333fd9b4a58.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     398243
IP address blocks:        192.52.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/14d1bd8d-4fff-40aa-9c72-f77defe848fd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/14d1bd8d-4fff-40aa-9c72-f77defe848fd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0d:9f:33:c5:4b:9c:0d:12:16:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14d1bd8d-4fff-40aa-9c72-f77defe848fd
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4346839e-b2a3-49a7-9eb1-1db959e99fb5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:55:db:20:d8:6f:54:b5:bf:12:55:1d:59:13:
                    53:1c:1a:54:18:81:20:f2:61:76:f2:bb:b5:9a:55:
                    89:bd:d5:9c:80:6e:79:c5:88:3a:42:fd:f8:c0:91:
                    ad:cb:da:5c:67:1a:99:5e:cb:7a:d5:98:05:01:b9:
                    bb:5f:ee:7a:ea:5e:18:03:5f:5e:6f:06:39:ef:24:
                    b5:2c:8e:74:25:20:16:51:14:75:de:34:51:f3:c4:
                    27:a4:4b:a4:fc:77:6d:cb:98:73:0c:e1:4e:9e:12:
                    a3:02:89:2a:be:bc:3f:b5:12:60:91:d3:8a:8b:d9:
                    01:f6:c3:c4:01:19:ec:5e:79:f8:03:56:5b:4e:f3:
                    ea:4f:f3:86:3c:b7:6e:61:49:73:c0:f4:c1:8c:54:
                    97:b1:59:cc:cd:4f:ba:b6:92:c3:d7:c2:4d:af:65:
                    eb:ab:e9:0f:b4:b8:b2:52:e5:ca:f4:34:c1:00:13:
                    a5:33:7f:21:75:66:26:6e:0d:70:fe:13:a4:b7:42:
                    77:21:b5:e3:49:36:74:c8:a0:0a:9d:e4:ee:cd:2b:
                    d1:4a:35:3c:ef:01:6f:b4:ae:2d:17:e1:1e:34:dc:
                    c3:ae:7a:8c:4c:62:09:8f:90:ed:e1:d4:7d:55:3e:
                    1c:de:ab:80:98:00:a1:90:fd:38:a1:84:af:e9:50:
                    a0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5C:00:94:52:AB:03:87:33:C6:02:70:AE:B2:C2:D2:6A:CE:E3:DE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/27209b16-2429-3284-a631-e333fd9b4a58.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd/14d1bd8d-4fff-40aa-9c72-f77defe848fd.crl

            X509v3 Authority Key Identifier:
                keyid:4F:D9:23:0F:6A:24:58:71:9B:60:36:F5:57:33:6E:0B:EE:6A:42:28

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/14d1bd8d-4fff-40aa-9c72-f77defe848fd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.52.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         23:b6:37:4c:66:5f:3f:c3:b0:a8:47:97:d9:5e:77:76:1b:0e:
         87:f4:66:90:07:6f:84:69:f7:d9:4b:c7:f1:d1:30:be:bc:ba:
         49:3a:bf:86:ab:91:ea:49:1b:dc:b3:74:f4:a3:fc:d0:20:91:
         cb:32:03:9c:ca:7f:27:38:36:6f:f4:6a:2e:7e:47:43:e1:0e:
         52:79:78:d7:cb:5a:97:e8:e4:ab:08:88:eb:3f:88:70:ec:ae:
         b3:3c:a2:da:9c:d2:37:21:f1:e9:d0:1c:bb:cd:fa:37:ee:ae:
         2f:d6:30:b9:f8:b3:7d:e6:ab:56:fa:ff:8e:66:ef:f8:d9:e1:
         22:52:b4:b7:f6:62:21:fa:f1:9b:06:3d:a7:f4:ee:7f:d3:d4:
         a8:18:37:28:cf:06:63:ae:3d:e7:35:54:9c:1a:13:3a:2b:c8:
         f0:f6:5c:c5:f4:e0:78:2c:f0:a7:13:17:10:93:f8:18:3c:23:
         d3:d8:52:3e:e7:a2:57:1f:c0:2d:80:39:36:64:c3:9e:bd:2c:
         2a:d3:22:24:be:f8:c8:c0:ec:34:f3:39:43:5b:2c:8c:c3:b8:
         7c:73:90:cc:02:6f:4a:30:39:98:66:0f:c1:97:ae:5e:55:8f:
         58:5b:fb:61:7c:c0:98:85:35:9d:b4:85:e4:00:e7:7b:90:e7:
         26:68:42:82
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8Q2fM8VLnA0SFjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTRkMWJkOGQtNGZmZi00MGFhLTljNzItZjc3ZGVmZTg0
OGZkMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NDM0NjgzOWUtYjJhMy00OWE3LTllYjEtMWRiOTU5ZTk5ZmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvVXbINhvVLW/ElUdWRNTHBpUGIEg8mF28ru1
mlWJvdWcgG55xYg6Qv34wJGty9pcZxqZXst61ZgFAbm7X+566l4YA19ebwY57yS1
LI50JSAWURR13jRR88QnpEuk/Hdty5hzDOFOnhKjAokqvrw/tRJgkdOKi9kB9sPE
ARnsXnn4A1ZbTvPqT/OGPLduYUlzwPTBjFSXsVnMzU+6tpLD18JNr2Xrq+kPtLiy
UuXK9DTBABOlM38hdWYmbg1w/hOkt0J3IbXjSTZ0yKAKneTuzSvRSjU87wFvtK4t
F+EeNNzDrnqMTGIJj5Dt4dR9VT4c3quAmAChkP04oYSv6VCgaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPlcAJRSqwOHM8YCcK6ywtJqzuPeMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8xNGQx
YmQ4ZC00ZmZmLTQwYWEtOWM3Mi1mNzdkZWZlODQ4ZmQvMjcyMDliMTYtMjQyOS0z
Mjg0LWE2MzEtZTMzM2ZkOWI0YTU4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMTRkMWJkOGQtNGZmZi00MGFhLTlj
NzItZjc3ZGVmZTg0OGZkLzE0ZDFiZDhkLTRmZmYtNDBhYS05YzcyLWY3N2RlZmU4
NDhmZC5jcmwwHwYDVR0jBBgwFoAUT9kjD2okWHGbYDb1VzNuC+5qQigwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8xNGQxYmQ4ZC00ZmZmLTQwYWEtOWM3Mi1mNzdk
ZWZlODQ4ZmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDTAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACO2N0xmXz/DsKhHl9led3YbDof0ZpAHb4Rp99lLx/HRML68ukk6v4ar
kepJG9yzdPSj/NAgkcsyA5zKfyc4Nm/0ai5+R0PhDlJ5eNfLWpfo5KsIiOs/iHDs
rrM8otqc0jch8enQHLvN+jfuri/WMLn4s33mq1b6/45m7/jZ4SJStLf2YiH68ZsG
Paf07n/T1KgYNyjPBmOuPec1VJwaEzoryPD2XMX04Hgs8KcTFxCT+Bg8I9PYUj7n
olcfwC2AOTZkw569LCrTIiS++MjA7DTzOUNbLIzDuHxzkMwCb0owOZhmD8GXrl5V
j1hb+2F8wJiFNZ20heQA53uQ5yZoQoI=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:13:14 2025 by rpki-client