Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51014965-25d8-3193-9062-c3cdcb4f1ccd.roa
File:                     51014965-25d8-3193-9062-c3cdcb4f1ccd.roa (raw, json)
Hash identifier:          Lt8WuJfryVK0Jgpb27hFpNa0zZ3XnypBFViJ/zww9o0=
Subject key identifier:   27:5B:2F:4B:99:EF:2A:AB:DA:F1:E3:BE:F0:00:99:22:BE:CC:E6:49
Certificate issuer:       /CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
Certificate serial:       010D0C9F4328584A331ADD4D3160FB87C38EF780
Authority key identifier: 86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51014965-25d8-3193-9062-c3cdcb4f1ccd.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     32787
IP address blocks:        209.200.188.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:dd:4d:31:60:fb:87:c3:8e:f7:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5d9c9ef5-b960-412d-af5e-2df18c21f809
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=af38ad71-e36d-475c-8a23-3e1607b6d2cc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:08:72:d9:42:43:60:a6:47:4d:5f:ef:6c:39:
                    41:86:e2:b7:c1:46:bd:d6:27:dd:bb:40:f9:c7:41:
                    80:44:ee:dc:75:3c:bd:54:d7:15:82:da:a2:70:90:
                    41:42:63:fa:ed:03:22:d1:08:18:d7:02:70:3c:1b:
                    4b:df:c5:7b:2d:ef:01:39:80:b2:94:cc:67:d5:ab:
                    cc:8a:e7:79:b2:95:71:50:80:cd:42:b7:e5:0b:f0:
                    43:d6:89:24:bf:76:56:b3:46:ee:4d:07:7e:ae:6c:
                    ed:3d:20:96:23:ad:55:79:e6:57:57:13:c0:78:0d:
                    4c:0a:77:6f:fd:8b:35:ff:f7:2d:dd:10:63:f3:a4:
                    58:c3:8b:ad:e2:a4:45:26:1c:d4:8b:7c:19:1d:ac:
                    4e:1f:e0:6d:20:32:2c:2a:32:21:6b:8b:a6:ee:32:
                    ac:19:dc:e5:ec:6e:94:6b:d1:3b:4f:a3:77:6c:af:
                    27:c4:1b:c9:bb:4a:fa:62:2a:1e:1f:92:95:ec:d3:
                    63:e2:fa:84:f3:03:25:cd:15:b3:3f:88:9c:ed:22:
                    40:d7:ae:47:fa:23:68:bd:8c:a3:fb:47:48:08:c4:
                    c4:70:41:e1:b0:26:8c:75:03:6a:68:14:f8:e3:bc:
                    3b:6f:24:19:cc:fa:16:8a:3b:9e:53:b6:5b:07:4e:
                    d7:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5B:2F:4B:99:EF:2A:AB:DA:F1:E3:BE:F0:00:99:22:BE:CC:E6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/51014965-25d8-3193-9062-c3cdcb4f1ccd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809/5d9c9ef5-b960-412d-af5e-2df18c21f809.crl

            X509v3 Authority Key Identifier:
                keyid:86:A4:37:D4:6D:BA:92:7A:E6:8D:9D:6A:F3:35:C6:46:9A:DD:17:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5d9c9ef5-b960-412d-af5e-2df18c21f809.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.200.188.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:43:05:19:e7:0b:12:66:5f:e9:70:ad:57:31:25:48:95:b5:
         f1:49:1b:af:f8:f6:32:99:f5:5c:2c:27:40:95:0f:10:32:1c:
         e0:fb:22:f3:5e:e2:88:59:6d:e7:9e:f1:25:98:46:68:19:ba:
         6a:0e:82:61:a3:ca:ac:c4:b6:1d:28:93:6a:50:bd:d1:0b:2b:
         f9:ba:7a:ba:e1:4f:7b:d9:a5:b6:88:72:91:64:e6:dc:2c:17:
         98:21:0c:67:1e:ed:1a:12:93:bf:8a:5e:07:6a:c3:7a:cf:60:
         51:3d:7a:ee:91:7e:73:92:fc:5e:36:c4:97:da:c7:5c:e4:95:
         84:ea:cc:56:a7:69:cd:05:77:48:99:70:43:ac:db:36:ed:79:
         9b:50:a7:f5:69:cb:63:6c:f2:b8:86:9f:27:dd:87:a0:4c:3f:
         3c:52:90:1d:68:00:10:66:e4:7b:38:61:e8:b7:09:0e:04:78:
         93:5c:f3:1f:68:ef:a1:5c:82:f5:d4:c1:92:81:de:e8:d7:3c:
         19:3f:cd:71:63:81:4a:c1:21:d1:84:37:c1:81:1b:f3:e9:5b:
         ce:f3:ac:9f:4b:49:93:38:ff:fd:de:49:9b:3a:c4:25:de:0c:
         c9:af:23:29:de:1c:9e:f6:16:98:a3:cb:08:a1:5b:3a:7e:c4:
         2f:67:6f:f9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGt1NMWD7h8OO94AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWQ5YzllZjUtYjk2MC00MTJkLWFmNWUtMmRmMThjMjFm
ODA5MB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
YWYzOGFkNzEtZTM2ZC00NzVjLThhMjMtM2UxNjA3YjZkMmNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjAhy2UJDYKZHTV/vbDlBhuK3wUa91ifdu0D5
x0GARO7cdTy9VNcVgtqicJBBQmP67QMi0QgY1wJwPBtL38V7Le8BOYCylMxn1avM
iud5spVxUIDNQrflC/BD1okkv3ZWs0buTQd+rmztPSCWI61VeeZXVxPAeA1MCndv
/Ys1//ct3RBj86RYw4ut4qRFJhzUi3wZHaxOH+BtIDIsKjIha4um7jKsGdzl7G6U
a9E7T6N3bK8nxBvJu0r6YioeH5KV7NNj4vqE8wMlzRWzP4ic7SJA165H+iNovYyj
+0dICMTEcEHhsCaMdQNqaBT447w7byQZzPoWijueU7ZbB07XDQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCdbL0uZ7yqr2vHjvvAAmSK+zOZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZDlj
OWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYxOGMyMWY4MDkvNTEwMTQ5NjUtMjVkOC0z
MTkzLTkwNjItYzNjZGNiNGYxY2NkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWQ5YzllZjUtYjk2MC00MTJkLWFm
NWUtMmRmMThjMjFmODA5LzVkOWM5ZWY1LWI5NjAtNDEyZC1hZjVlLTJkZjE4YzIx
ZjgwOS5jcmwwHwYDVR0jBBgwFoAUhqQ31G26knrmjZ1q8zXGRprdF+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZDljOWVmNS1iOTYwLTQxMmQtYWY1ZS0yZGYx
OGMyMWY4MDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ci8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA1DBRnnCxJmX+lwrVcxJUiVtfFJG6/49jKZ9VwsJ0CVDxAyHOD7IvNe
4ohZbeee8SWYRmgZumoOgmGjyqzEth0ok2pQvdELK/m6errhT3vZpbaIcpFk5tws
F5ghDGce7RoSk7+KXgdqw3rPYFE9eu6RfnOS/F42xJfax1zklYTqzFanac0Fd0iZ
cEOs2zbteZtQp/Vpy2Ns8riGnyfdh6BMPzxSkB1oABBm5Hs4Yei3CQ4EeJNc8x9o
76FcgvXUwZKB3ujXPBk/zXFjgUrBIdGEN8GBG/PpW87zrJ9LSZM4//3eSZs6xCXe
DMmvIyneHJ72FpijywihWzp+xC9nb/k=
-----END CERTIFICATE-----
Generated at Sun Jun 15 20:02:02 2025 by rpki-client