Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
File:                     880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa (raw, json)
Hash identifier:          AqZGVB4bhFTw80Symb42v1RdcPOsAS9zEm4e8O1ucf8=
Subject key identifier:   06:24:92:8B:0F:EA:50:CA:84:22:57:C3:71:AE:68:B8:2B:76:C7:CC
Certificate issuer:       /CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
Certificate serial:       010D0C9F4328584AA42B7818181F3D23DCAA1000
Authority key identifier: 17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa
Signing time:             Sat 26 Jul 2025 01:00:49 +0000
ROA not before:           Sat 26 Jul 2025 01:00:49 +0000
ROA not after:            Fri 24 Oct 2025 01:00:49 +0000
asID:                     7224
IP address blocks:        192.111.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a4:2b:78:18:18:1f:3d:23:dc:aa:10:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b472af2f-c62b-4c94-904b-aa7bffda4fcb
        Validity
            Not Before: Jul 26 01:00:49 2025 GMT
            Not After : Oct 24 01:00:49 2025 GMT
        Subject: CN=64d2b831-ed50-4ab8-984a-b17f6542ed3c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:06:00:d9:46:35:4e:53:a0:06:fb:69:46:d6:
                    f1:cd:47:22:87:91:27:73:05:93:db:7e:c2:c9:44:
                    29:0b:f7:9b:2d:73:ab:74:b9:61:a5:3f:9b:04:b5:
                    07:40:81:3a:19:c1:d0:1e:dc:32:bd:0d:12:18:94:
                    29:33:40:51:14:19:3d:e9:6a:34:0f:a1:a8:59:c8:
                    a9:30:6e:5a:e2:08:97:64:57:6b:52:56:d0:e0:8b:
                    94:bb:c5:2a:71:ad:36:39:98:e1:3b:00:d4:15:c1:
                    a4:f5:ba:7d:8f:fe:2b:14:be:60:71:84:d4:d1:14:
                    22:74:fe:c4:07:77:92:45:1f:b2:b9:6c:5b:ce:53:
                    46:53:b0:d4:4b:80:e0:8f:69:bd:cf:6c:cd:1e:6b:
                    a6:4f:8b:a2:41:67:24:71:be:23:af:56:f2:bf:0f:
                    c4:79:69:f2:a2:42:fa:91:df:b3:db:ad:e0:c7:17:
                    65:95:80:1c:94:a2:f7:67:c3:e4:f1:d2:ca:1a:86:
                    e7:2e:2a:4f:87:bb:6e:53:38:82:13:85:d3:16:14:
                    ce:0d:e9:62:31:c0:db:ba:7f:b2:b4:c5:bf:c6:0c:
                    1a:8a:85:95:35:97:fa:b0:12:ff:a0:32:5e:c9:40:
                    39:ef:b7:3d:9d:27:f3:f1:32:5d:0a:85:90:99:c1:
                    a6:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:24:92:8B:0F:EA:50:CA:84:22:57:C3:71:AE:68:B8:2B:76:C7:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/880ec8d5-1a28-3e99-b6fb-840b1baabac6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb/b472af2f-c62b-4c94-904b-aa7bffda4fcb.crl

            X509v3 Authority Key Identifier:
                keyid:17:00:4E:49:7C:45:40:F1:3D:56:51:BA:F6:F7:8B:AD:6A:15:BB:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b472af2f-c62b-4c94-904b-aa7bffda4fcb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.111.6.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:a5:1a:41:ae:7f:79:03:69:23:ef:d4:bf:0c:0d:ec:03:66:
         38:16:bb:64:22:8b:02:72:e8:a7:b9:73:46:e9:8a:95:29:de:
         e6:7e:f5:d0:b8:30:be:90:10:86:1f:1e:cf:1a:91:1f:3a:e8:
         a6:be:8a:32:a0:48:6e:a8:75:0a:06:40:23:35:7e:0c:64:3d:
         82:46:93:71:b0:09:17:ea:bf:21:b9:d7:b1:44:10:e7:a7:d9:
         8f:d7:88:9b:06:21:d0:14:74:15:37:17:45:64:ee:6f:ac:2a:
         da:df:34:4b:4d:d9:c8:b5:9a:d4:f9:e7:a0:cf:70:d8:a8:ba:
         ae:5b:14:51:ff:ec:5e:ac:af:f4:88:35:67:11:06:60:5b:91:
         af:80:22:89:bb:f2:8e:ed:97:94:fd:34:df:af:17:dc:d1:ed:
         5a:3a:a1:f1:b4:24:e8:9c:d0:28:58:31:0b:81:11:0f:48:6f:
         0c:3c:b0:5c:69:5c:fb:ed:f6:c2:2e:c3:18:bf:66:4c:b2:fe:
         51:0a:6c:a9:93:11:77:5f:63:85:11:58:0d:af:52:94:2c:a8:
         f0:9d:ef:77:05:7b:e0:c3:46:35:52:ee:1b:31:5a:4e:56:d7:
         7d:e3:71:dd:26:d4:c8:ad:1b:60:52:48:1d:de:49:b2:f3:01:
         d8:f8:43:6e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqkK3gYGB89I9yqEAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjQ3MmFmMmYtYzYyYi00Yzk0LTkwNGItYWE3YmZmZGE0
ZmNiMB4XDTI1MDcyNjAxMDA0OVoXDTI1MTAyNDAxMDA0OVowLzEtMCsGA1UEAxMk
NjRkMmI4MzEtZWQ1MC00YWI4LTk4NGEtYjE3ZjY1NDJlZDNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoQYA2UY1TlOgBvtpRtbxzUcih5EncwWT237C
yUQpC/ebLXOrdLlhpT+bBLUHQIE6GcHQHtwyvQ0SGJQpM0BRFBk96Wo0D6GoWcip
MG5a4giXZFdrUlbQ4IuUu8Uqca02OZjhOwDUFcGk9bp9j/4rFL5gcYTU0RQidP7E
B3eSRR+yuWxbzlNGU7DUS4Dgj2m9z2zNHmumT4uiQWckcb4jr1byvw/EeWnyokL6
kd+z263gxxdllYAclKL3Z8Pk8dLKGobnLipPh7tuUziCE4XTFhTODeliMcDbun+y
tMW/xgwaioWVNZf6sBL/oDJeyUA577c9nSfz8TJdCoWQmcGmMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAYkkosP6lDKhCJXw3GuaLgrdsfMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcy
YWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdiZmZkYTRmY2IvODgwZWM4ZDUtMWEyOC0z
ZTk5LWI2ZmItODQwYjFiYWFiYWM2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjQ3MmFmMmYtYzYyYi00Yzk0LTkw
NGItYWE3YmZmZGE0ZmNiL2I0NzJhZjJmLWM2MmItNGM5NC05MDRiLWFhN2JmZmRh
NGZjYi5jcmwwHwYDVR0jBBgwFoAUFwBOSXxFQPE9VlG69veLrWoVuz8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iNDcyYWYyZi1jNjJiLTRjOTQtOTA0Yi1hYTdi
ZmZkYTRmY2IuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwG8GMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG2lGkGuf3kDaSPv1L8MDewDZjgWu2QiiwJy6Ke5c0bpipUp3uZ+9dC4
ML6QEIYfHs8akR866Ka+ijKgSG6odQoGQCM1fgxkPYJGk3GwCRfqvyG517FEEOen
2Y/XiJsGIdAUdBU3F0Vk7m+sKtrfNEtN2ci1mtT556DPcNiouq5bFFH/7F6sr/SI
NWcRBmBbka+AIom78o7tl5T9NN+vF9zR7Vo6ofG0JOic0ChYMQuBEQ9Ibww8sFxp
XPvt9sIuwxi/Zkyy/lEKbKmTEXdfY4URWA2vUpQsqPCd73cFe+DDRjVS7hsxWk5W
133jcd0m1MitG2BSSB3eSbLzAdj4Q24=
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:06:07 2025 by rpki-client