Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa
File:                     ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa (raw, json)
Hash identifier:          MThlURmTMdw1g58ChpZ1MPgL/36H+iE+2wRJWEzx2ls=
Subject key identifier:   A2:C3:88:3D:90:99:48:CC:F0:DE:48:C1:CF:28:7A:63:F8:F5:9A:85
Certificate issuer:       /CN=1ae9796a-5f3d-4f47-b117-42360a213e37
Certificate serial:       010D0C9F4328584A411052566DF338C0E164FC00
Authority key identifier: 4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     13627
IP address blocks:        198.186.130.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:52:56:6d:f3:38:c0:e1:64:fc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ae9796a-5f3d-4f47-b117-42360a213e37
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=2df837d8-f46c-4915-b1a3-79a497e1590e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:88:37:28:d8:fe:f4:d1:cb:10:31:51:26:c1:
                    da:70:65:6d:b5:1b:d5:7c:38:ae:ec:4d:b1:2d:61:
                    7a:e8:18:02:83:24:ce:ca:f7:44:d3:9d:3f:43:ea:
                    11:1f:6f:25:4f:69:e9:a9:61:f4:ae:0d:38:7f:ac:
                    a5:2a:24:c9:de:ca:e1:5d:78:cf:58:03:52:5f:43:
                    c2:68:bf:ff:d7:89:f3:61:de:86:a5:96:64:97:f3:
                    6c:a4:c0:19:33:ca:c3:77:00:59:d9:e9:6d:f0:af:
                    95:c0:3c:a5:f8:32:22:3d:7d:09:04:4b:5c:6f:b8:
                    ab:cc:3e:af:24:97:9b:8b:d7:f3:e0:07:b3:5b:aa:
                    39:0f:dd:15:53:a7:13:28:e1:a8:a1:09:c8:44:2e:
                    23:6e:d8:de:ca:66:ec:fa:69:b5:f2:2d:30:94:71:
                    a7:38:02:74:69:20:f5:f1:6e:61:ce:37:69:da:71:
                    ed:0e:a3:0a:e2:df:65:57:45:f3:d1:9f:c7:ff:de:
                    52:69:9b:5f:e7:c3:49:84:d4:27:70:2c:84:bf:d2:
                    1b:31:fe:5c:5b:45:d7:85:c0:8b:14:e3:eb:b8:7b:
                    3f:42:86:6f:c3:32:e5:80:ef:0d:ed:65:11:18:b7:
                    9e:34:1b:ac:7d:38:3d:23:c5:59:7b:4f:4d:8a:b2:
                    48:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C3:88:3D:90:99:48:CC:F0:DE:48:C1:CF:28:7A:63:F8:F5:9A:85
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/ff0a3b12-0e55-32a0-83dc-bc2f1cb8f5d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37/1ae9796a-5f3d-4f47-b117-42360a213e37.crl

            X509v3 Authority Key Identifier:
                keyid:4E:CB:3A:FE:5F:05:1E:AC:06:DD:59:CE:47:A6:DE:B3:29:7F:41:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/1ae9796a-5f3d-4f47-b117-42360a213e37.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.186.130.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         25:47:24:5d:76:fc:b1:0f:aa:76:13:4a:6e:5e:0d:ec:44:74:
         d9:21:52:35:2b:22:e4:d1:99:22:2e:22:c4:6a:91:8c:4b:73:
         31:b1:0d:b5:3e:f7:c5:a1:05:7a:06:7d:1a:a8:aa:46:d5:94:
         20:78:34:cf:91:4b:b1:2b:a1:9f:b8:0a:15:fc:96:d5:13:f6:
         c2:e4:44:88:cb:3b:ce:c1:99:55:36:08:1e:dc:88:e1:40:80:
         a0:b4:8b:47:41:a1:b0:c7:0e:f9:8a:e8:6b:11:61:9a:4e:c8:
         59:ef:b0:1b:88:a0:c9:bd:74:09:85:fe:92:e7:af:c9:f2:ba:
         df:8f:93:18:81:8b:b5:2e:92:50:bf:a0:57:eb:40:83:7f:d7:
         7e:64:47:d9:c7:f7:a2:d1:e0:19:6b:fa:7c:37:01:8e:00:67:
         74:c8:b9:f4:77:c5:de:78:70:98:24:f3:77:91:48:13:70:41:
         02:ac:5d:a6:61:fa:e7:c7:d2:ca:b6:0e:fe:32:5c:b7:7b:ee:
         7f:1e:58:b3:61:62:01:6b:dd:2e:94:e0:a1:29:71:c6:86:e7:
         cd:1b:d4:47:18:95:cd:75:25:1e:09:04:47:d1:34:68:f4:90:
         33:86:d8:e1:51:72:9e:99:39:8e:03:83:25:17:87:af:dd:06:
         88:d2:8a:53
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFJWbfM4wOFk/AAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWFlOTc5NmEtNWYzZC00ZjQ3LWIxMTctNDIzNjBhMjEz
ZTM3MB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
MmRmODM3ZDgtZjQ2Yy00OTE1LWIxYTMtNzlhNDk3ZTE1OTBlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhog3KNj+9NHLEDFRJsHacGVttRvVfDiu7E2x
LWF66BgCgyTOyvdE050/Q+oRH28lT2npqWH0rg04f6ylKiTJ3srhXXjPWANSX0PC
aL//14nzYd6GpZZkl/NspMAZM8rDdwBZ2elt8K+VwDyl+DIiPX0JBEtcb7irzD6v
JJebi9fz4AezW6o5D90VU6cTKOGooQnIRC4jbtjeymbs+mm18i0wlHGnOAJ0aSD1
8W5hzjdp2nHtDqMK4t9lV0Xz0Z/H/95SaZtf58NJhNQncCyEv9IbMf5cW0XXhcCL
FOPruHs/QoZvwzLlgO8N7WURGLeeNBusfTg9I8VZe09NirJINwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKLDiD2QmUjM8N5Iwc8oemP49ZqFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5
Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2MGEyMTNlMzcvZmYwYTNiMTItMGU1NS0z
MmEwLTgzZGMtYmMyZjFjYjhmNWQzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMWFlOTc5NmEtNWYzZC00ZjQ3LWIx
MTctNDIzNjBhMjEzZTM3LzFhZTk3OTZhLTVmM2QtNGY0Ny1iMTE3LTQyMzYwYTIx
M2UzNy5jcmwwHwYDVR0jBBgwFoAUTss6/l8FHqwG3VnOR6besyl/QdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8xYWU5Nzk2YS01ZjNkLTRmNDctYjExNy00MjM2
MGEyMTNlMzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxrqCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACVHJF12/LEPqnYTSm5eDexEdNkhUjUrIuTRmSIuIsRqkYxLczGxDbU+
98WhBXoGfRqoqkbVlCB4NM+RS7EroZ+4ChX8ltUT9sLkRIjLO87BmVU2CB7ciOFA
gKC0i0dBobDHDvmK6GsRYZpOyFnvsBuIoMm9dAmF/pLnr8nyut+PkxiBi7UuklC/
oFfrQIN/135kR9nH96LR4Blr+nw3AY4AZ3TIufR3xd54cJgk83eRSBNwQQKsXaZh
+ufH0sq2Dv4yXLd77n8eWLNhYgFr3S6U4KEpccaG580b1EcYlc11JR4JBEfRNGj0
kDOG2OFRcp6ZOY4DgyUXh6/dBojSilM=
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:34:02 2025 by rpki-client