Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa
File:                     5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa (raw, json)
Hash identifier:          GzMprriYKHK3Sn43mz+iQK7VaIV6I+TLkcpDXngR5u0=
Subject key identifier:   7B:E5:EC:4A:6D:52:7E:9D:26:BC:8F:9A:1F:99:DF:6D:DA:EE:A2:FD
Certificate issuer:       /CN=564c92f5-eb04-448d-8939-379434b228b3
Certificate serial:       010D0C9F4328584AB650F2684787B495B9AE4A40
Authority key identifier: DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     399844
IP address blocks:        207.195.114.0/24 maxlen: 24
                          207.195.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 10:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:50:f2:68:47:87:b4:95:b9:ae:4a:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=564c92f5-eb04-448d-8939-379434b228b3
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=883a9f88-f66b-40de-9880-308949302239
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:30:46:7a:71:06:b4:68:34:45:22:8a:7e:ca:
                    7f:74:26:e4:3d:23:f5:14:08:70:82:82:06:2c:49:
                    e9:5a:a1:91:86:0d:8e:c3:63:b7:7f:16:98:74:08:
                    8e:67:e9:e9:b8:d0:91:fc:b9:dd:79:cf:21:d5:a2:
                    23:c3:95:0d:c2:e9:cd:87:68:75:19:4c:12:63:16:
                    0c:0b:e0:14:a9:1d:d7:17:b5:78:46:02:6d:74:0f:
                    b4:98:6c:a8:81:20:88:bd:8b:32:10:8b:3a:02:a5:
                    77:b0:50:2b:1b:2a:ea:26:c5:fb:c3:7d:ef:19:d3:
                    45:76:98:2f:b5:35:50:db:66:c0:3f:57:80:c4:d8:
                    dc:e9:47:eb:2e:21:13:b9:4b:a1:a0:59:80:45:0a:
                    f3:3b:dc:07:f7:eb:36:cc:40:95:2f:8b:16:ec:da:
                    5d:fd:ed:2a:34:3c:2e:7a:97:9d:b2:f5:d7:04:5c:
                    9a:c3:29:f3:03:1c:72:0f:1b:cc:50:f3:de:06:8b:
                    ad:63:a7:bd:3c:51:8e:a0:a4:9a:44:7e:ac:55:7b:
                    57:fa:00:47:d3:ce:36:99:0e:bc:b2:1f:0f:82:40:
                    c2:08:72:2c:43:ea:e8:10:a7:77:c7:6b:c9:29:4d:
                    88:27:99:65:cc:5d:2c:34:3e:73:c2:8c:a1:a9:ba:
                    34:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:E5:EC:4A:6D:52:7E:9D:26:BC:8F:9A:1F:99:DF:6D:DA:EE:A2:FD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/5a3f55b8-fb47-3774-b6cb-f37dbe4d0072.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3/564c92f5-eb04-448d-8939-379434b228b3.crl

            X509v3 Authority Key Identifier:
                keyid:DD:76:6F:E2:66:97:A5:93:62:11:A4:58:3C:E4:D5:C9:E1:59:D4:80

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/564c92f5-eb04-448d-8939-379434b228b3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.195.114.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:86:7f:b6:1a:ca:07:62:b8:1f:96:d4:2f:b5:04:08:97:79:
         ee:1e:cc:17:d4:fe:81:37:c9:4c:e0:84:60:33:13:66:18:5c:
         97:0e:72:05:03:5c:d1:b2:9b:b1:2e:4a:73:ad:0b:19:92:7b:
         bc:e9:a8:d6:9f:d8:8c:b9:31:1b:66:31:9c:3c:28:bc:37:b5:
         3e:e2:d3:47:63:4e:c0:21:77:bc:28:c0:35:6e:1c:af:6e:e1:
         67:85:1e:2e:91:73:aa:57:71:a9:74:8f:9b:dc:0a:63:b1:94:
         9c:4c:de:36:90:26:08:a9:94:ea:dd:a5:76:a5:d8:fb:e2:38:
         84:3b:69:70:87:3b:63:74:0b:57:a0:f7:34:ee:30:ca:1f:5c:
         5c:cc:89:04:fa:9c:be:ef:1c:b0:9b:35:df:f5:f2:5f:bb:62:
         b3:57:1b:1b:68:da:55:bf:a2:c1:64:32:fa:e1:35:d3:49:44:
         8a:2e:a7:dd:b4:02:01:ea:d5:0f:bf:2f:5e:52:63:0b:31:ca:
         48:9b:00:75:81:f7:40:a6:71:67:1c:52:28:5d:1c:26:9d:56:
         87:fd:22:04:bd:87:fc:f7:cb:81:41:02:34:23:c6:d0:ad:14:
         db:0c:9f:26:60:c7:f5:fa:2e:70:4e:db:31:f6:09:6a:13:52:
         c3:ce:6d:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UPJoR4e0lbmuSkAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTY0YzkyZjUtZWIwNC00NDhkLTg5MzktMzc5NDM0YjIy
OGIzMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
ODgzYTlmODgtZjY2Yi00MGRlLTk4ODAtMzA4OTQ5MzAyMjM5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnzBGenEGtGg0RSKKfsp/dCbkPSP1FAhwgoIG
LEnpWqGRhg2Ow2O3fxaYdAiOZ+npuNCR/Lndec8h1aIjw5UNwunNh2h1GUwSYxYM
C+AUqR3XF7V4RgJtdA+0mGyogSCIvYsyEIs6AqV3sFArGyrqJsX7w33vGdNFdpgv
tTVQ22bAP1eAxNjc6UfrLiETuUuhoFmARQrzO9wH9+s2zECVL4sW7Npd/e0qNDwu
epedsvXXBFyawynzAxxyDxvMUPPeBoutY6e9PFGOoKSaRH6sVXtX+gBH0842mQ68
sh8PgkDCCHIsQ+roEKd3x2vJKU2IJ5llzF0sND5zwoyhqbo0MwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHvl7EptUn6dJryPmh+Z323a7qL9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NjRj
OTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0MzRiMjI4YjMvNWEzZjU1YjgtZmI0Ny0z
Nzc0LWI2Y2ItZjM3ZGJlNGQwMDcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTY0YzkyZjUtZWIwNC00NDhkLTg5
MzktMzc5NDM0YjIyOGIzLzU2NGM5MmY1LWViMDQtNDQ4ZC04OTM5LTM3OTQzNGIy
MjhiMy5jcmwwHwYDVR0jBBgwFoAU3XZv4maXpZNiEaRYPOTVyeFZ1IAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NjRjOTJmNS1lYjA0LTQ0OGQtODkzOS0zNzk0
MzRiMjI4YjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBz8NyMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJuGf7YaygdiuB+W1C+1BAiXee4ezBfU/oE3yUzghGAzE2YYXJcOcgUD
XNGym7EuSnOtCxmSe7zpqNaf2Iy5MRtmMZw8KLw3tT7i00djTsAhd7wowDVuHK9u
4WeFHi6Rc6pXcal0j5vcCmOxlJxM3jaQJgiplOrdpXal2PviOIQ7aXCHO2N0C1eg
9zTuMMofXFzMiQT6nL7vHLCbNd/18l+7YrNXGxto2lW/osFkMvrhNdNJRIoup920
AgHq1Q+/L15SYwsxykibAHWB90CmcWccUihdHCadVof9IgS9h/z3y4FBAjQjxtCt
FNsMnyZgx/X6LnBO2zH2CWoTUsPObUg=
-----END CERTIFICATE-----
Generated at Thu Aug 7 00:39:52 2025 by rpki-client