Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa
File:                     52db2717-1b9b-3731-b7ef-694372415cef.roa (raw, json)
Hash identifier:          3clgTgY2G8j36MMXP7vWUXsl6L66d3nDq/DJzkSlFVo=
Subject key identifier:   64:DF:6B:99:72:6A:89:A4:05:58:83:32:FA:3D:73:1E:B9:83:BD:DD
Certificate issuer:       /CN=3104c204-288d-4f87-83c2-99a30908dea3
Certificate serial:       010D0C9F4328584AAB2659D60D9BBECD8B1B6180
Authority key identifier: 76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     394353
IP address blocks:        192.228.79.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:59:d6:0d:9b:be:cd:8b:1b:61:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3104c204-288d-4f87-83c2-99a30908dea3
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=aee65f8e-3f8b-403e-8a7e-b2fd60474ff6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:c9:28:40:b6:43:f5:88:05:1c:c1:89:a9:76:
                    32:e0:07:bc:41:b9:72:d1:6c:6f:70:eb:4b:9b:71:
                    86:72:48:de:ec:8e:6e:e4:04:13:9c:48:08:06:6a:
                    45:3f:6e:6f:4d:38:1f:c3:64:05:fc:44:28:8c:08:
                    cb:0c:00:ef:48:75:08:6f:e7:c7:59:f4:70:44:78:
                    4a:c3:0d:38:3d:73:a2:ec:90:4c:6a:cc:e3:a4:de:
                    4a:ff:d6:d5:27:1b:a5:c6:b0:c1:81:87:80:19:1c:
                    0c:4c:19:2e:39:7a:25:31:30:77:b0:a1:69:cf:c8:
                    6a:af:36:13:92:66:7f:8e:70:7e:60:58:c7:d7:00:
                    c1:84:da:a7:a0:fe:4a:c2:4f:1a:0a:34:f6:f6:1f:
                    b9:7c:29:36:1b:10:59:08:7d:19:09:97:c4:84:b3:
                    d8:fb:90:e9:ec:1b:9c:6f:d3:86:90:f1:4c:07:f4:
                    77:01:f8:f4:c9:e8:ed:e3:37:1e:73:60:de:3c:99:
                    f6:76:86:89:38:52:2d:1a:f7:05:88:d6:d5:43:0e:
                    21:69:64:95:82:bc:3f:eb:a9:f2:d7:5e:05:0d:c4:
                    a2:ae:9b:32:e9:ef:8a:32:38:8e:16:6d:53:c6:d1:
                    78:c1:3f:6c:0a:f9:8f:21:d4:21:29:e0:7a:84:ed:
                    c6:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:DF:6B:99:72:6A:89:A4:05:58:83:32:FA:3D:73:1E:B9:83:BD:DD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/52db2717-1b9b-3731-b7ef-694372415cef.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3/3104c204-288d-4f87-83c2-99a30908dea3.crl

            X509v3 Authority Key Identifier:
                keyid:76:5D:F9:3D:47:4A:CF:23:F0:20:E6:87:70:AC:2B:98:99:2F:03:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3104c204-288d-4f87-83c2-99a30908dea3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.228.79.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:49:a2:66:e1:e7:9d:77:94:d3:05:5c:42:1e:cd:1a:29:16:
         95:61:7a:ab:84:d9:c3:fa:78:05:90:ad:d8:a9:c8:01:38:20:
         4f:85:51:7b:cd:81:70:31:3b:bc:58:0e:2b:31:91:eb:de:58:
         4f:ba:f9:d2:c5:31:1e:53:c4:7f:47:96:59:0c:18:a6:0e:15:
         c4:9d:68:e6:17:84:be:7c:66:e1:cb:7b:ee:f3:8d:be:77:ff:
         72:14:2e:35:37:d0:f8:8d:21:7e:cf:f0:34:5d:63:96:b2:b5:
         a0:1a:95:39:ca:c0:24:a9:85:7e:c8:3f:91:23:dc:ac:f1:57:
         33:be:03:90:f5:10:0b:a3:a5:22:25:ea:dd:73:00:d5:b9:c2:
         94:44:da:b3:ed:66:a2:82:91:02:8f:bf:56:43:98:97:68:60:
         be:41:7e:2c:47:48:99:6e:39:14:75:5a:af:eb:96:c5:f2:c3:
         0b:ac:39:b9:8f:83:4b:fb:6c:26:88:fe:11:d6:45:45:de:fe:
         9a:35:1e:6e:78:a3:fa:ce:aa:db:a1:26:2c:b0:5a:9b:cb:19:
         98:f4:c9:bb:f2:ff:eb:09:65:8b:99:6f:a0:7f:56:dc:fa:7a:
         25:d0:de:66:9d:d8:48:58:1c:6d:4a:53:7a:41:1a:65:61:88:
         b2:b1:63:66
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlnWDZu+zYsbYYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzEwNGMyMDQtMjg4ZC00Zjg3LTgzYzItOTlhMzA5MDhk
ZWEzMB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
YWVlNjVmOGUtM2Y4Yi00MDNlLThhN2UtYjJmZDYwNDc0ZmY2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMkoQLZD9YgFHMGJqXYy4Ae8Qbly0WxvcOtL
m3GGckje7I5u5AQTnEgIBmpFP25vTTgfw2QF/EQojAjLDADvSHUIb+fHWfRwRHhK
ww04PXOi7JBMaszjpN5K/9bVJxulxrDBgYeAGRwMTBkuOXolMTB3sKFpz8hqrzYT
kmZ/jnB+YFjH1wDBhNqnoP5Kwk8aCjT29h+5fCk2GxBZCH0ZCZfEhLPY+5Dp7Buc
b9OGkPFMB/R3Afj0yejt4zcec2DePJn2doaJOFItGvcFiNbVQw4haWSVgrw/66ny
114FDcSirpsy6e+KMjiOFm1TxtF4wT9sCvmPIdQhKeB6hO3GJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGTfa5lyaomkBViDMvo9cx65g73dMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0
YzIwNC0yODhkLTRmODctODNjMi05OWEzMDkwOGRlYTMvNTJkYjI3MTctMWI5Yi0z
NzMxLWI3ZWYtNjk0MzcyNDE1Y2VmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMzEwNGMyMDQtMjg4ZC00Zjg3LTgz
YzItOTlhMzA5MDhkZWEzLzMxMDRjMjA0LTI4OGQtNGY4Ny04M2MyLTk5YTMwOTA4
ZGVhMy5jcmwwHwYDVR0jBBgwFoAUdl35PUdKzyPwIOaHcKwrmJkvA+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zMTA0YzIwNC0yODhkLTRmODctODNjMi05OWEz
MDkwOGRlYTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwORPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH1Jombh5513lNMFXEIezRopFpVhequE2cP6eAWQrdipyAE4IE+FUXvN
gXAxO7xYDisxkeveWE+6+dLFMR5TxH9HllkMGKYOFcSdaOYXhL58ZuHLe+7zjb53
/3IULjU30PiNIX7P8DRdY5aytaAalTnKwCSphX7IP5Ej3KzxVzO+A5D1EAujpSIl
6t1zANW5wpRE2rPtZqKCkQKPv1ZDmJdoYL5BfixHSJluORR1Wq/rlsXywwusObmP
g0v7bCaI/hHWRUXe/po1Hm54o/rOqtuhJiywWpvLGZj0ybvy/+sJZYuZb6B/Vtz6
eiXQ3mad2EhYHG1KU3pBGmVhiLKxY2Y=
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:20:17 2025 by rpki-client