Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1507d2fb-5fe3-34e9-b243-7fc925c0bbe9.roa
File:                     1507d2fb-5fe3-34e9-b243-7fc925c0bbe9.roa (raw, json)
Hash identifier:          9KWxAUH5YBDkIGwd7MZkOiEOcDS93JTBnoRhCRGpnx4=
Subject key identifier:   52:31:43:97:EB:2A:1A:CF:D3:4F:B6:8A:E2:2B:1B:BA:0A:CB:D8:95
Certificate issuer:       /CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
Certificate serial:       010D0C9F4328584A84122C2D362624A1929A7460
Authority key identifier: 17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1507d2fb-5fe3-34e9-b243-7fc925c0bbe9.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     15169
IP address blocks:        216.239.38.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:2c:2d:36:26:24:a1:92:9a:74:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e9328a9-e1d2-45d8-bdb5-eefe152994f9
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=a0e7661e-d4d1-44f4-8809-595eac6025cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:48:f1:18:3e:dc:df:ef:af:ac:66:73:b7:eb:
                    54:b9:d1:d2:e0:52:e0:a9:72:5e:9d:cc:ff:d3:41:
                    bc:cf:d5:dc:d0:c9:d7:59:46:47:fc:6a:44:91:21:
                    a3:19:61:71:71:9a:b3:ff:5d:38:c8:35:d0:7a:06:
                    08:4b:76:69:c6:18:fd:5d:65:d5:25:26:d8:80:60:
                    a8:e1:4c:4d:ea:2c:a3:f8:7a:68:9a:5f:f0:be:f9:
                    51:d5:fb:11:f8:b0:7e:e8:51:21:1b:ea:05:b9:6a:
                    60:8a:c1:e3:32:60:1c:f4:ce:d2:42:51:b9:7d:ff:
                    43:33:22:0a:05:d6:77:20:9e:d6:96:34:c3:02:4a:
                    9c:c8:19:20:c8:23:60:40:02:ce:2b:3d:da:63:c2:
                    95:4a:0b:29:82:68:51:57:7d:41:6d:49:b1:5e:98:
                    80:3f:d4:da:26:82:db:bc:e0:4d:d9:2a:41:ab:72:
                    5a:62:1c:8f:d8:c9:90:e5:1c:cd:23:14:58:ac:11:
                    21:69:42:31:c2:ca:d5:1a:b0:c2:cd:18:55:d5:51:
                    60:2c:3b:18:eb:33:b9:2b:95:97:06:40:e8:ea:30:
                    f1:eb:f7:c0:64:06:7b:a7:f9:7d:9b:f1:7d:48:01:
                    a5:a8:a2:5a:c6:25:4d:22:d7:b8:c6:a9:65:a4:f5:
                    fd:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:31:43:97:EB:2A:1A:CF:D3:4F:B6:8A:E2:2B:1B:BA:0A:CB:D8:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/1507d2fb-5fe3-34e9-b243-7fc925c0bbe9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.crl

            X509v3 Authority Key Identifier:
                keyid:17:F1:26:FF:1A:4B:FC:F8:51:C5:AD:AE:C1:DF:0C:80:95:FD:67:FC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5e9328a9-e1d2-45d8-bdb5-eefe152994f9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.38.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a5:6f:2e:a8:13:e8:c1:6d:92:ba:0b:04:e4:70:5b:fb:43:ee:
         71:ea:b4:87:49:80:51:c8:c9:ea:1e:6d:13:c8:ec:e2:e0:33:
         1e:af:aa:37:6b:7b:7e:be:6c:3f:88:6a:65:69:1c:eb:23:1c:
         c0:43:d1:b0:b5:f3:95:ba:bc:5c:07:bf:5e:34:c1:39:7d:60:
         30:d7:05:90:08:7f:08:a9:a6:41:30:61:73:c3:e2:c0:c9:cd:
         73:31:ec:f7:dd:d4:94:8f:9e:b7:81:03:5d:77:1d:1a:95:ec:
         c2:b1:e9:4c:3c:78:0c:9d:5d:2c:50:46:89:37:45:05:a1:4b:
         9d:3a:9b:e6:07:e8:34:df:7d:7f:d3:75:74:95:78:2d:70:87:
         f9:d1:cb:e6:67:c9:80:0d:af:8f:b7:d8:54:c3:c1:79:95:7d:
         b8:bf:fa:6d:df:53:bf:0f:88:d6:64:60:5d:de:43:50:62:cd:
         78:40:d0:04:e3:b9:ee:78:04:cc:c8:c3:93:2a:2a:2a:7b:45:
         7d:4d:57:68:0b:66:31:b3:8a:e9:9d:0d:70:20:65:2b:2a:78:
         50:84:75:8c:5d:ce:96:8c:df:d3:d0:77:29:e6:0f:e0:00:0e:
         b2:da:ed:ce:ee:c7:7d:fc:ce:b5:7a:22:2c:72:23:86:92:bf:
         96:e1:e3:5f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiwtNiYkoZKadGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU5MzI4YTktZTFkMi00NWQ4LWJkYjUtZWVmZTE1Mjk5
NGY5MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
YTBlNzY2MWUtZDRkMS00NGY0LTg4MDktNTk1ZWFjNjAyNWNiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykjxGD7c3++vrGZzt+tUudHS4FLgqXJencz/
00G8z9Xc0MnXWUZH/GpEkSGjGWFxcZqz/104yDXQegYIS3Zpxhj9XWXVJSbYgGCo
4UxN6iyj+Hpoml/wvvlR1fsR+LB+6FEhG+oFuWpgisHjMmAc9M7SQlG5ff9DMyIK
BdZ3IJ7WljTDAkqcyBkgyCNgQALOKz3aY8KVSgspgmhRV31BbUmxXpiAP9TaJoLb
vOBN2SpBq3JaYhyP2MmQ5RzNIxRYrBEhaUIxwsrVGrDCzRhV1VFgLDsY6zO5K5WX
BkDo6jDx6/fAZAZ7p/l9m/F9SAGlqKJaxiVNIte4xqllpPX97wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFIxQ5frKhrP00+2iuIrG7oKy9iVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkz
MjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZlMTUyOTk0ZjkvMTUwN2QyZmItNWZlMy0z
NGU5LWIyNDMtN2ZjOTI1YzBiYmU5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWU5MzI4YTktZTFkMi00NWQ4LWJk
YjUtZWVmZTE1Mjk5NGY5LzVlOTMyOGE5LWUxZDItNDVkOC1iZGI1LWVlZmUxNTI5
OTRmOS5jcmwwHwYDVR0jBBgwFoAUF/Em/xpL/PhRxa2uwd8MgJX9Z/wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZTkzMjhhOS1lMWQyLTQ1ZDgtYmRiNS1lZWZl
MTUyOTk0ZjkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2O8mMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKVvLqgT6MFtkroLBORwW/tD7nHqtIdJgFHIyeoebRPI7OLgMx6vqjdr
e36+bD+IamVpHOsjHMBD0bC185W6vFwHv140wTl9YDDXBZAIfwippkEwYXPD4sDJ
zXMx7Pfd1JSPnreBA113HRqV7MKx6Uw8eAydXSxQRok3RQWhS506m+YH6DTffX/T
dXSVeC1wh/nRy+ZnyYANr4+32FTDwXmVfbi/+m3fU78PiNZkYF3eQ1BizXhA0ATj
ue54BMzIw5MqKip7RX1NV2gLZjGziumdDXAgZSsqeFCEdYxdzpaM39PQdynmD+AA
DrLa7c7ux338zrV6IixyI4aSv5bh418=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:55:59 2025 by rpki-client