Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa
File:                     556256f3-71f8-39ae-b5c5-3261af0bb871.roa (raw, json)
Hash identifier:          lhSqXeOjvE9JvFgMxvTIezf4JalWwRA7VbLrmfUzo10=
Subject key identifier:   36:D3:D8:51:29:77:EF:E6:4B:3C:B0:28:42:A8:3A:30:2C:E6:FE:CA
Certificate issuer:       /CN=80713a6d-ea31-48fc-a530-e2898cffb87a
Certificate serial:       010D0C9F4328584AADF10BB043ACCED7160654E0
Authority key identifier: BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        192.132.1.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0b:b0:43:ac:ce:d7:16:06:54:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80713a6d-ea31-48fc-a530-e2898cffb87a
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=4323f810-479d-4b86-af53-ff3eb952e921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:19:8f:73:0b:0a:e3:4d:31:eb:fd:a2:13:
                    71:07:71:18:2b:6d:6d:2c:fa:c4:44:98:67:35:18:
                    4e:ff:3e:73:2e:70:87:93:ef:ab:90:82:ff:79:74:
                    7b:38:e4:38:6c:42:fc:2e:21:f8:46:fe:4f:f5:90:
                    7f:01:a2:72:cb:fb:24:bb:5a:11:c4:1b:c5:a8:44:
                    6f:bb:65:4b:6c:4f:f1:8b:b6:2b:0b:f9:2c:f2:38:
                    d6:72:de:bb:a9:0f:b5:bd:08:b4:2d:47:5c:55:29:
                    cd:85:ed:4d:5a:d0:c5:14:30:10:5e:f1:7a:72:63:
                    73:83:06:3a:04:0c:4b:25:03:fb:90:e8:27:34:e2:
                    ac:d3:2b:17:8a:8c:8e:ce:89:e7:7f:c1:8d:c2:0d:
                    90:24:d1:2b:31:a2:3e:28:2e:52:08:ab:b0:c7:5f:
                    8c:c7:e6:b1:0b:fd:49:45:3c:9a:e4:db:78:36:44:
                    35:a9:f2:f1:34:78:1f:6d:be:7d:a9:65:f6:03:31:
                    0f:8f:22:4d:e1:46:10:52:75:6a:9f:33:4b:5e:c5:
                    4e:36:b7:38:84:8c:b7:99:57:cc:55:90:13:d2:65:
                    0c:4a:5a:40:9b:cd:0c:fc:f8:d6:16:43:9d:4d:a9:
                    47:e8:d1:33:30:e6:0e:e4:fd:4e:c5:f8:c8:87:cd:
                    2a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:D3:D8:51:29:77:EF:E6:4B:3C:B0:28:42:A8:3A:30:2C:E6:FE:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/556256f3-71f8-39ae-b5c5-3261af0bb871.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a/80713a6d-ea31-48fc-a530-e2898cffb87a.crl

            X509v3 Authority Key Identifier:
                keyid:BF:6D:BF:CA:7B:EF:E6:FF:CC:BB:E1:4E:71:3C:AF:63:8F:93:0B:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/80713a6d-ea31-48fc-a530-e2898cffb87a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.132.1.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:39:2d:a7:05:84:82:4f:ce:bc:12:7a:0f:8d:37:de:9b:8d:
         84:83:76:d4:a9:1e:0a:e5:83:04:f3:32:4b:ad:c1:1a:13:13:
         aa:46:9d:d7:b1:4c:db:44:67:b3:4c:d1:d4:29:5f:a0:45:6b:
         47:de:5c:3f:73:d5:3a:63:dc:4e:9e:b1:b3:f4:33:28:cb:e5:
         80:57:9c:43:f2:c5:ef:38:40:c8:81:e8:5d:9d:93:3a:b6:13:
         69:3c:cd:c7:07:ea:4f:8f:e0:1e:52:b6:0a:f4:42:9d:3e:c3:
         80:c2:2c:d2:ac:5f:a1:98:8b:0b:ca:15:f2:53:50:66:57:58:
         d9:b6:9c:a7:5b:4d:33:1d:3a:66:e8:12:35:21:75:53:fe:b9:
         13:a3:74:7c:58:20:ad:bc:3c:1b:9a:e1:f7:81:b3:09:62:a1:
         82:9a:f5:5e:87:22:13:ad:a6:da:7b:79:01:08:a8:ef:45:f3:
         8d:a0:71:65:92:0e:c1:94:77:af:14:7d:37:c8:68:91:2f:3f:
         9b:6c:c7:52:d3:af:cd:16:b0:b5:b9:9d:b7:62:5c:8a:dd:82:
         bd:f8:9f:20:a4:0f:41:40:ff:bb:4e:49:b8:5c:05:27:3b:2b:
         7d:26:4f:b5:72:b5:64:05:ef:d7:9e:7c:1d:6a:22:75:94:9b:
         6a:f1:2f:73
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8QuwQ6zO1xYGVOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODA3MTNhNmQtZWEzMS00OGZjLWE1MzAtZTI4OThjZmZi
ODdhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NDMyM2Y4MTAtNDc5ZC00Yjg2LWFmNTMtZmYzZWI5NTJlOTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnfUZj3MLCuNNMev9ohNxB3EYK21tLPrERJhn
NRhO/z5zLnCHk++rkIL/eXR7OOQ4bEL8LiH4Rv5P9ZB/AaJyy/sku1oRxBvFqERv
u2VLbE/xi7YrC/ks8jjWct67qQ+1vQi0LUdcVSnNhe1NWtDFFDAQXvF6cmNzgwY6
BAxLJQP7kOgnNOKs0ysXioyOzonnf8GNwg2QJNErMaI+KC5SCKuwx1+Mx+axC/1J
RTya5Nt4NkQ1qfLxNHgfbb59qWX2AzEPjyJN4UYQUnVqnzNLXsVONrc4hIy3mVfM
VZAT0mUMSlpAm80M/PjWFkOdTalH6NEzMOYO5P1OxfjIh80qSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbT2FEpd+/mSzywKEKoOjAs5v7KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS84MDcx
M2E2ZC1lYTMxLTQ4ZmMtYTUzMC1lMjg5OGNmZmI4N2EvNTU2MjU2ZjMtNzFmOC0z
OWFlLWI1YzUtMzI2MWFmMGJiODcxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvODA3MTNhNmQtZWEzMS00OGZjLWE1
MzAtZTI4OThjZmZiODdhLzgwNzEzYTZkLWVhMzEtNDhmYy1hNTMwLWUyODk4Y2Zm
Yjg3YS5jcmwwHwYDVR0jBBgwFoAUv22/ynvv5v/Mu+FOcTyvY4+TC7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS84MDcxM2E2ZC1lYTMxLTQ4ZmMtYTUzMC1lMjg5
OGNmZmI4N2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIQBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJA5LacFhIJPzrwSeg+NN96bjYSDdtSpHgrlgwTzMkutwRoTE6pGndex
TNtEZ7NM0dQpX6BFa0feXD9z1Tpj3E6esbP0MyjL5YBXnEPyxe84QMiB6F2dkzq2
E2k8zccH6k+P4B5Stgr0Qp0+w4DCLNKsX6GYiwvKFfJTUGZXWNm2nKdbTTMdOmbo
EjUhdVP+uROjdHxYIK28PBua4feBswlioYKa9V6HIhOtptp7eQEIqO9F842gcWWS
DsGUd68UfTfIaJEvP5tsx1LTr80WsLW5nbdiXIrdgr34nyCkD0FA/7tOSbhcBSc7
K30mT7VytWQF79eefB1qInWUm2rxL3M=
-----END CERTIFICATE-----
Generated at Wed Aug 6 16:05:18 2025 by rpki-client