Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6354c51e-1a62-3708-b099-90c75bde3449.roa
File:                     6354c51e-1a62-3708-b099-90c75bde3449.roa (raw, json)
Hash identifier:          LO0cJGSlMYUVUEws8FOSdCrkuNHxZkSiTTdrugyJa5E=
Subject key identifier:   1B:CA:EA:99:5E:CF:ED:33:4E:5D:A4:A5:EF:84:4F:08:91:6F:DE:EB
Certificate issuer:       /CN=74939129-73e4-4131-8dea-7d0466eca8f3
Certificate serial:       010D0C9F4328584AA1616E928C0EA33AD5A18C00
Authority key identifier: 81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6354c51e-1a62-3708-b099-90c75bde3449.roa
Signing time:             Fri 25 Jul 2025 01:00:50 +0000
ROA not before:           Fri 25 Jul 2025 01:00:50 +0000
ROA not after:            Thu 23 Oct 2025 01:00:50 +0000
asID:                     20115
IP address blocks:        192.61.236.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a1:61:6e:92:8c:0e:a3:3a:d5:a1:8c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74939129-73e4-4131-8dea-7d0466eca8f3
        Validity
            Not Before: Jul 25 01:00:50 2025 GMT
            Not After : Oct 23 01:00:50 2025 GMT
        Subject: CN=957e378d-e216-4bf2-8d0e-fdc288dc84f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:f9:31:2e:8f:2c:1f:93:0b:99:a5:c9:6f:b3:
                    40:d1:23:4d:b4:2a:8c:17:08:82:55:ea:69:58:78:
                    0b:61:b8:7a:d2:b0:ff:ba:6e:fd:90:d3:15:1d:1c:
                    32:d7:ec:7e:40:6e:f8:2c:2d:87:02:aa:00:67:6c:
                    ee:a5:75:c1:f1:cf:85:62:f4:b4:99:d6:e8:db:61:
                    33:1a:c0:0a:fd:fb:cb:fa:0b:41:b8:c2:d5:95:fc:
                    79:da:f0:16:3b:aa:71:ca:a2:04:08:47:59:bd:d3:
                    f8:a0:86:6c:42:a4:fb:77:c6:08:5c:f0:77:52:aa:
                    f2:4d:85:48:ec:85:9c:15:d5:92:d5:6a:fd:0a:9c:
                    a7:f4:7c:fa:3e:71:41:8d:be:00:16:85:26:f2:f9:
                    83:03:dc:be:02:8c:f3:c6:04:57:a9:6a:77:40:20:
                    ca:02:67:af:ff:df:ea:21:d8:9c:2d:38:a0:de:51:
                    10:75:f2:4c:89:8d:fb:ae:e2:2f:8e:3b:b0:ee:0c:
                    be:66:36:be:a6:41:90:bd:ad:ed:1a:2e:00:e9:59:
                    0e:e7:4b:b8:c0:06:e4:5d:33:11:33:76:4f:ee:45:
                    77:6a:21:8b:b1:ea:21:f5:9e:15:65:df:4d:fc:b6:
                    0f:c8:23:a6:b6:a5:91:94:5b:a2:6f:73:f6:9f:22:
                    a4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:CA:EA:99:5E:CF:ED:33:4E:5D:A4:A5:EF:84:4F:08:91:6F:DE:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/6354c51e-1a62-3708-b099-90c75bde3449.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3/74939129-73e4-4131-8dea-7d0466eca8f3.crl

            X509v3 Authority Key Identifier:
                keyid:81:32:A9:67:D9:BB:7B:FC:FB:D1:1A:B0:49:C1:50:69:68:DA:A7:49

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/74939129-73e4-4131-8dea-7d0466eca8f3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.61.236.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:88:2c:7e:6e:b5:40:7f:d9:21:ae:03:73:f5:52:0a:38:bd:
         89:08:07:b8:a1:10:55:04:0d:58:3c:3e:e2:3f:6a:02:04:fb:
         e3:58:98:9e:d7:d5:5a:f1:27:27:09:5c:7b:0e:d3:5e:d3:ed:
         02:9d:33:30:f3:99:e9:79:1e:eb:25:05:85:ef:77:69:6d:93:
         cb:dd:2f:60:d7:96:c7:2d:ad:e7:aa:03:36:fb:80:32:5d:29:
         a5:08:a6:38:bc:02:56:79:b7:9f:ad:9d:3c:17:50:0b:c6:d6:
         cd:29:68:87:f5:e0:80:3a:9b:e2:29:be:bd:12:c8:ef:3f:7e:
         14:6f:98:92:b0:77:32:38:58:c8:89:4c:e4:14:19:d9:1c:3b:
         5f:9b:6d:01:13:8b:62:63:b2:d7:22:29:5f:8f:36:16:d7:92:
         6a:72:f4:ff:bd:12:63:bf:29:13:27:16:1e:50:c6:b2:28:ae:
         dc:80:fd:53:24:ae:6b:6f:25:01:7c:76:39:29:e8:02:c0:c2:
         68:ec:55:fa:5f:28:46:4c:5a:88:19:7c:59:8c:cb:e1:54:94:
         b1:16:d2:28:78:e9:a4:8f:18:4b:ef:af:9f:c6:1c:5f:f1:1b:
         8c:35:83:b2:a2:84:88:7a:7d:dd:f2:26:1e:8e:e2:73:d8:39:
         fa:f1:e4:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqhYW6SjA6jOtWhjAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzQ5MzkxMjktNzNlNC00MTMxLThkZWEtN2QwNDY2ZWNh
OGYzMB4XDTI1MDcyNTAxMDA1MFoXDTI1MTAyMzAxMDA1MFowLzEtMCsGA1UEAxMk
OTU3ZTM3OGQtZTIxNi00YmYyLThkMGUtZmRjMjg4ZGM4NGY4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/kxLo8sH5MLmaXJb7NA0SNNtCqMFwiCVepp
WHgLYbh60rD/um79kNMVHRwy1+x+QG74LC2HAqoAZ2zupXXB8c+FYvS0mdbo22Ez
GsAK/fvL+gtBuMLVlfx52vAWO6pxyqIECEdZvdP4oIZsQqT7d8YIXPB3UqryTYVI
7IWcFdWS1Wr9Cpyn9Hz6PnFBjb4AFoUm8vmDA9y+AozzxgRXqWp3QCDKAmev/9/q
IdicLTig3lEQdfJMiY37ruIvjjuw7gy+Zja+pkGQva3tGi4A6VkO50u4wAbkXTMR
M3ZP7kV3aiGLseoh9Z4VZd9N/LYPyCOmtqWRlFuib3P2nyKkCQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBvK6plez+0zTl2kpe+ETwiRb97rMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS83NDkz
OTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0NjZlY2E4ZjMvNjM1NGM1MWUtMWE2Mi0z
NzA4LWIwOTktOTBjNzViZGUzNDQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNzQ5MzkxMjktNzNlNC00MTMxLThk
ZWEtN2QwNDY2ZWNhOGYzLzc0OTM5MTI5LTczZTQtNDEzMS04ZGVhLTdkMDQ2NmVj
YThmMy5jcmwwHwYDVR0jBBgwFoAUgTKpZ9m7e/z70RqwScFQaWjap0kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS83NDkzOTEyOS03M2U0LTQxMzEtOGRlYS03ZDA0
NjZlY2E4ZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwD3sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2ILH5utUB/2SGuA3P1Ugo4vYkIB7ihEFUEDVg8PuI/agIE++NYmJ7X
1VrxJycJXHsO017T7QKdMzDzmel5HuslBYXvd2ltk8vdL2DXlsctreeqAzb7gDJd
KaUIpji8AlZ5t5+tnTwXUAvG1s0paIf14IA6m+Ipvr0SyO8/fhRvmJKwdzI4WMiJ
TOQUGdkcO1+bbQETi2JjstciKV+PNhbXkmpy9P+9EmO/KRMnFh5QxrIortyA/VMk
rmtvJQF8djkp6ALAwmjsVfpfKEZMWogZfFmMy+FUlLEW0ih46aSPGEvvr5/GHF/x
G4w1g7KihIh6fd3yJh6O4nPYOfrx5Mo=
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:04:30 2025 by rpki-client