Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa
File:                     3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa (raw, json)
Hash identifier:          bKDZPUDg+H8qLwwO8r0O4E+U4OXvoienyV25vBevk3k=
Subject key identifier:   44:ED:5D:CD:AD:2A:DC:74:0C:1F:7B:55:55:4F:6F:9B:D1:4E:34:B4
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584AA42B7EB0BC4B8CD56FAD7CE0
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     14618
IP address blocks:        192.111.4.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:7e:b0:bc:4b:8c:d5:6f:ad:7c:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=e5c69be9-72e3-4fec-b82b-ac55339544e4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:a4:a2:36:56:81:df:e3:90:21:65:39:c4:9f:
                    7d:98:d7:13:b8:ae:04:b7:89:ca:52:0f:6d:dd:e1:
                    c5:e4:b7:f4:d4:1a:5a:c5:1f:ac:be:8f:c3:4e:58:
                    44:bc:99:4c:3f:eb:66:80:e9:7f:30:37:31:69:d5:
                    4a:8c:11:c8:46:e1:71:cb:bc:25:42:16:0e:48:3e:
                    e7:45:24:d4:e3:9b:08:d9:73:07:42:54:38:2a:e4:
                    9f:a8:0b:d6:5c:a8:9f:4e:7b:38:8d:26:e4:58:49:
                    06:92:b6:5b:d1:4b:8e:d5:ec:ca:3d:05:ae:f4:ed:
                    24:a5:74:d3:b3:70:69:b1:7b:43:e7:08:3d:ec:af:
                    ab:e0:6b:26:b8:2a:ea:ca:99:0c:19:cc:c3:81:e8:
                    24:a6:4a:d9:25:67:2c:8c:97:95:74:04:d3:fa:b6:
                    11:d6:d6:20:c1:81:a9:54:c1:1d:68:66:21:02:94:
                    9e:f2:05:e3:aa:77:fe:e8:05:f7:91:83:5d:7c:dd:
                    d6:e3:91:32:26:cc:38:25:8e:88:ff:38:bf:61:36:
                    c0:6f:fb:38:ab:15:e9:80:63:90:4d:9d:b5:88:ec:
                    0d:d0:19:db:4d:bf:cd:b8:81:33:1a:65:5a:c0:4b:
                    c4:3f:2d:f7:e6:20:5a:d0:27:c6:6f:09:25:13:2d:
                    38:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:ED:5D:CD:AD:2A:DC:74:0C:1F:7B:55:55:4F:6F:9B:D1:4E:34:B4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/3c1f52fe-3cd6-3531-9b8a-eac5dc4fb0f8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.4.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:1f:97:ca:8e:01:26:cf:c4:7c:8b:ea:f4:eb:6a:04:88:74:
         bb:94:25:12:f7:c4:40:4f:e9:89:ea:89:99:87:79:72:68:0b:
         c0:7b:b3:21:31:60:46:95:a5:15:da:c5:a7:b3:db:96:cf:6e:
         84:69:ea:60:a0:d4:5a:d4:32:10:83:d0:87:8d:b0:7a:62:4e:
         a4:90:19:35:63:a6:25:79:7a:6e:15:fd:90:a7:fc:93:9e:2b:
         02:84:4e:86:8f:c9:5f:94:ae:4c:e9:99:af:ec:05:09:22:17:
         ae:f3:25:fa:de:3b:84:fa:2d:09:67:2a:04:c4:da:d1:b7:2f:
         a7:44:ac:34:61:37:c5:dc:d7:24:68:28:23:8f:33:41:29:7f:
         10:a6:b9:57:8d:6e:93:73:e3:fc:c0:57:fa:3c:a3:67:da:b1:
         a9:a1:20:94:93:68:86:0e:80:53:52:66:f8:6d:b7:e9:f7:f2:
         74:2b:16:be:b0:ae:8b:39:03:ba:c3:39:c7:c1:d5:d6:86:ce:
         a7:92:63:01:f9:99:f9:59:ea:5e:a0:f9:dd:26:0a:2b:ad:92:
         26:a4:eb:80:5f:73:47:a5:80:4d:83:93:d1:e2:00:e8:53:36:
         2f:62:ea:6e:3f:02:56:84:65:b7:46:7a:4b:ac:0b:f1:51:94:
         a9:a8:be:e3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK36wvEuM1W+tfOAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0
ZmNiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
ZTVjNjliZTktNzJlMy00ZmVjLWI4MmItYWM1NTMzOTU0NGU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhKSiNlaB3+OQIWU5xJ99mNcTuK4Et4nKUg9t
3eHF5Lf01BpaxR+svo/DTlhEvJlMP+tmgOl/MDcxadVKjBHIRuFxy7wlQhYOSD7n
RSTU45sI2XMHQlQ4KuSfqAvWXKifTns4jSbkWEkGkrZb0UuO1ezKPQWu9O0kpXTT
s3BpsXtD5wg97K+r4GsmuCrqypkMGczDgegkpkrZJWcsjJeVdATT+rYR1tYgwYGp
VMEdaGYhApSe8gXjqnf+6AX3kYNdfN3W45EyJsw4JY6I/zi/YTbAb/s4qxXpgGOQ
TZ21iOwN0BnbTb/NuIEzGmVawEvEPy335iBa0CfGbwklEy047QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFETtXc2tKtx0DB97VVVPb5vRTjS0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy
YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvM2MxZjUyZmUtM2NkNi0z
NTMxLTliOGEtZWFjNWRjNGZiMGY4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw
NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh
NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi
ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8EMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYfl8qOASbPxHyL6vTragSIdLuUJRL3xEBP6YnqiZmHeXJoC8B7syEx
YEaVpRXaxaez25bPboRp6mCg1FrUMhCD0IeNsHpiTqSQGTVjpiV5em4V/ZCn/JOe
KwKEToaPyV+Urkzpma/sBQkiF67zJfreO4T6LQlnKgTE2tG3L6dErDRhN8Xc1yRo
KCOPM0EpfxCmuVeNbpNz4/zAV/o8o2fasamhIJSTaIYOgFNSZvhtt+n38nQrFr6w
ros5A7rDOcfB1daGzqeSYwH5mflZ6l6g+d0mCiutkiak64Bfc0elgE2Dk9HiAOhT
Ni9i6m4/AlaEZbdGekusC/FRlKmovuM=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:42:02 2025 by rpki-client