Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa
File:                     de61a027-f38d-3973-b508-b0013dbf6399.roa (raw, json)
Hash identifier:          sxClkwI4uY1NDDcARaeadApLcdjRE9ielGHqfm0Pp/g=
Subject key identifier:   74:CA:F3:21:47:03:F2:D6:EB:ED:E6:7F:26:B9:88:D5:D2:4E:0E:28
Certificate issuer:       /CN=66367942-14b9-49ce-b2d4-9472107e8402
Certificate serial:       010D0C9F4328584A0C0549B484B84868DF870D00
Authority key identifier: 75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     53831
IP address blocks:        192.187.26.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:49:b4:84:b8:48:68:df:87:0d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=66367942-14b9-49ce-b2d4-9472107e8402
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=3acfb438-bb29-453d-9f1c-6f341417b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:32:11:7b:cb:6f:42:82:ae:58:6a:30:8d:b3:
                    42:49:46:fd:75:6b:94:70:fd:7d:d8:53:57:b3:be:
                    0a:07:8c:52:fa:82:c8:25:34:ea:48:f9:7f:0e:20:
                    57:f0:4a:54:dc:97:34:d8:4b:4c:a3:52:dc:3a:0b:
                    39:f7:e7:0b:e3:e2:45:13:8b:4c:c2:9a:fb:d1:91:
                    b4:2a:0b:c8:8f:28:d6:1e:28:99:4c:8e:03:3e:c2:
                    9c:9b:6b:1f:21:ed:7c:38:25:3e:9e:82:11:88:3a:
                    cf:36:88:d2:83:f4:8d:f8:7b:f6:3e:eb:07:4d:7e:
                    1d:1a:95:84:8c:b4:09:10:8c:63:64:f3:a0:06:9f:
                    28:d6:62:48:2c:0b:f5:9b:13:19:2a:59:27:9f:f2:
                    57:4d:ff:25:49:1f:46:85:85:dc:5e:f1:6b:2e:4b:
                    b3:84:00:30:41:1c:b9:89:79:cf:9c:87:63:23:71:
                    ee:0c:21:35:ea:c1:3d:cb:92:5d:53:1d:a1:75:f7:
                    31:a5:f9:c9:4f:c9:09:9e:99:d9:28:3f:f7:bb:cd:
                    c7:f0:be:e3:39:79:6a:68:18:87:01:dd:8d:13:95:
                    41:02:2a:8a:60:45:49:09:fd:51:bd:e3:93:51:cb:
                    93:e1:65:81:e1:b5:cf:18:43:e7:cf:11:4c:86:c3:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:CA:F3:21:47:03:F2:D6:EB:ED:E6:7F:26:B9:88:D5:D2:4E:0E:28
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/de61a027-f38d-3973-b508-b0013dbf6399.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402/66367942-14b9-49ce-b2d4-9472107e8402.crl

            X509v3 Authority Key Identifier:
                keyid:75:E1:54:E8:68:D3:05:BE:1A:2B:F4:40:7C:B5:06:22:1F:94:09:D7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/66367942-14b9-49ce-b2d4-9472107e8402.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.187.26.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:f7:1b:94:a9:74:86:5f:ea:14:92:d9:b4:3c:65:50:ff:0f:
         42:c6:07:6e:1b:ad:30:92:1a:b0:35:e3:45:fb:09:1d:2e:d1:
         7f:83:5c:bd:a0:a1:0f:a4:c1:9d:ad:7c:1e:56:de:78:6a:b3:
         f7:89:d1:36:3a:2f:03:71:c6:b3:49:21:55:60:09:d9:db:86:
         8a:9f:8b:70:20:08:a5:a7:a3:85:6d:09:50:d8:09:5d:7c:4b:
         1e:6c:92:75:ba:43:e7:2c:d9:a9:53:47:a8:e8:d2:af:62:91:
         25:ee:48:79:5d:d9:e4:c4:71:61:a1:5c:e5:af:b4:47:7f:a2:
         aa:3f:d9:32:df:31:b4:18:cb:24:2f:85:4e:db:ac:93:36:c5:
         f8:f6:c7:3d:c0:35:c4:9f:cd:9b:b6:94:a3:54:ca:2c:d0:a1:
         a9:9b:d4:79:95:13:36:8c:8d:2b:03:33:f0:57:ed:20:15:12:
         7d:e6:52:c6:f4:f8:c6:07:2a:27:97:2d:67:04:2a:56:47:a2:
         b4:eb:40:9a:fe:75:d2:57:0c:28:f9:d5:dd:5a:3c:a1:ee:b4:
         9a:d2:41:ea:48:3a:4d:1c:83:24:ce:f7:60:18:8d:d9:08:c7:
         06:83:f0:3b:78:1a:22:5b:f0:7c:49:db:e0:40:a2:1e:79:ae:
         79:a9:c6:3e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBUm0hLhIaN+HDQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjYzNjc5NDItMTRiOS00OWNlLWIyZDQtOTQ3MjEwN2U4
NDAyMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
M2FjZmI0MzgtYmIyOS00NTNkLTlmMWMtNmYzNDE0MTdiN2FiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxTIRe8tvQoKuWGowjbNCSUb9dWuUcP192FNX
s74KB4xS+oLIJTTqSPl/DiBX8EpU3Jc02EtMo1LcOgs59+cL4+JFE4tMwpr70ZG0
KgvIjyjWHiiZTI4DPsKcm2sfIe18OCU+noIRiDrPNojSg/SN+Hv2PusHTX4dGpWE
jLQJEIxjZPOgBp8o1mJILAv1mxMZKlknn/JXTf8lSR9GhYXcXvFrLkuzhAAwQRy5
iXnPnIdjI3HuDCE16sE9y5JdUx2hdfcxpfnJT8kJnpnZKD/3u83H8L7jOXlqaBiH
Ad2NE5VBAiqKYEVJCf1RveOTUcuT4WWB4bXPGEPnzxFMhsNWdwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTK8yFHA/LW6+3mfya5iNXSTg4oMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS82NjM2
Nzk0Mi0xNGI5LTQ5Y2UtYjJkNC05NDcyMTA3ZTg0MDIvZGU2MWEwMjctZjM4ZC0z
OTczLWI1MDgtYjAwMTNkYmY2Mzk5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNjYzNjc5NDItMTRiOS00OWNlLWIy
ZDQtOTQ3MjEwN2U4NDAyLzY2MzY3OTQyLTE0YjktNDljZS1iMmQ0LTk0NzIxMDdl
ODQwMi5jcmwwHwYDVR0jBBgwFoAUdeFU6GjTBb4aK/RAfLUGIh+UCdcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS82NjM2Nzk0Mi0xNGI5LTQ5Y2UtYjJkNC05NDcy
MTA3ZTg0MDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwLsaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEz3G5SpdIZf6hSS2bQ8ZVD/D0LGB24brTCSGrA140X7CR0u0X+DXL2g
oQ+kwZ2tfB5W3nhqs/eJ0TY6LwNxxrNJIVVgCdnbhoqfi3AgCKWno4VtCVDYCV18
Sx5sknW6Q+cs2alTR6jo0q9ikSXuSHld2eTEcWGhXOWvtEd/oqo/2TLfMbQYyyQv
hU7brJM2xfj2xz3ANcSfzZu2lKNUyizQoamb1HmVEzaMjSsDM/BX7SAVEn3mUsb0
+MYHKieXLWcEKlZHorTrQJr+ddJXDCj51d1aPKHutJrSQepIOk0cgyTO92AYjdkI
xwaD8Dt4GiJb8HxJ2+BAoh55rnmpxj4=
-----END CERTIFICATE-----
Generated at Tue Jun 17 07:56:11 2025 by rpki-client