Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
File:                     12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa (raw, json)
Hash identifier:          r79HZPnK59POOIOIcxI5MOx7/sCsj1klgwwmKAtqtsI=
Subject key identifier:   E7:79:A5:53:76:30:E9:45:72:CF:38:8D:04:DF:2A:E6:E7:3E:C8:B1
Certificate issuer:       /CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
Certificate serial:       010D0C9F4328584A331AE3633445A84F8D13CEC0
Authority key identifier: 51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     7018
IP address blocks:        199.83.144.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e3:63:34:45:a8:4f:8d:13:ce:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2a006d48-b22f-4d9b-8138-c0de62d10e11
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=5297dd49-fa0b-49fa-8aa1-ef0e25dbf378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:95:67:3d:58:f8:41:ba:92:75:ea:c5:e2:f0:
                    02:49:c1:cc:1c:c2:5d:de:c5:c8:36:87:2b:75:81:
                    dc:39:88:27:b7:0e:83:e4:03:12:fd:46:9b:0a:33:
                    a2:7c:b6:8d:0c:40:88:56:bf:33:85:f6:e0:6c:79:
                    d4:63:04:b0:ff:30:6c:cb:72:e9:ab:ee:26:26:f4:
                    0f:c0:ab:a1:98:bf:11:5a:0c:3b:d6:01:6f:0c:9a:
                    f1:f4:a8:a9:80:62:96:12:fa:3e:cc:43:3a:dd:28:
                    54:1f:01:54:47:18:ac:af:24:41:b1:4f:a1:13:45:
                    10:b4:3c:31:81:c0:fb:c5:9f:32:dc:bf:25:72:c1:
                    3b:26:10:cc:ac:43:6a:b9:b4:9a:98:53:2c:bd:cc:
                    59:bd:b0:5e:92:b9:f3:f3:29:cf:6f:71:6e:33:58:
                    ec:dc:46:aa:c3:d1:33:31:cb:b0:4b:c7:5a:1c:93:
                    68:e8:13:e2:f0:f1:a3:1d:44:99:f8:9a:ba:21:08:
                    ca:2f:99:30:a6:3d:1f:79:de:07:70:d8:c0:f3:c9:
                    67:64:ef:46:32:2a:5d:a4:54:8f:bc:3a:bd:62:c9:
                    6e:81:61:83:25:98:f3:80:61:26:89:0c:95:0b:dd:
                    9f:8b:a9:5f:6b:ad:ee:c2:eb:e6:e4:1f:46:ae:7d:
                    5b:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:79:A5:53:76:30:E9:45:72:CF:38:8D:04:DF:2A:E6:E7:3E:C8:B1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/12e9abff-ffe8-33aa-b1bf-75feb1647aad.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11/2a006d48-b22f-4d9b-8138-c0de62d10e11.crl

            X509v3 Authority Key Identifier:
                keyid:51:86:2F:5B:C6:DE:6A:97:66:72:2A:76:B4:FF:06:B0:B9:81:25:6D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/2a006d48-b22f-4d9b-8138-c0de62d10e11.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.83.144.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         c4:bd:8c:9c:85:d2:c2:a8:9d:57:db:d6:5b:fe:f3:48:65:bc:
         3b:c7:4d:38:3a:45:4a:56:31:3b:22:3b:1d:82:8b:a8:10:a6:
         68:26:81:e3:6b:bd:25:2a:21:8f:f7:ec:fd:25:b3:53:0f:ce:
         a1:62:00:f6:e5:3b:7d:f2:51:ba:06:12:8b:b1:58:8f:fb:f9:
         8b:5e:8c:c5:0a:da:62:85:c7:3d:16:10:0c:4e:7a:0d:6a:b3:
         51:a8:88:52:db:0b:7f:5f:de:c3:6c:52:43:c7:85:89:77:23:
         3e:b1:19:fb:ac:31:2c:90:99:98:73:10:9d:6d:d0:b4:72:70:
         43:66:6a:3c:51:9d:88:80:89:78:d6:19:58:c9:6b:7c:cf:18:
         bd:22:77:84:ec:e4:7c:2e:02:8f:57:30:a3:15:c7:18:c5:95:
         e5:d0:1c:84:83:b1:02:98:fe:d6:3c:60:8e:bb:ae:38:8f:b5:
         c4:21:bb:96:39:e5:af:3b:08:51:77:9d:9b:38:bb:d3:5f:e6:
         1a:9b:14:7d:f3:4c:16:73:e5:53:31:88:5a:29:4d:af:b7:ea:
         e6:a8:53:96:ab:ff:83:0b:3b:87:d2:11:56:52:54:b4:68:b7:
         e4:d2:30:e6:67:1d:b9:47:06:c7:10:cd:80:81:f9:79:21:e3:
         87:7b:bb:c8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuNjNEWoT40TzsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmEwMDZkNDgtYjIyZi00ZDliLTgxMzgtYzBkZTYyZDEw
ZTExMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
NTI5N2RkNDktZmEwYi00OWZhLThhYTEtZWYwZTI1ZGJmMzc4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJVnPVj4QbqSderF4vACScHMHMJd3sXINocr
dYHcOYgntw6D5AMS/UabCjOifLaNDECIVr8zhfbgbHnUYwSw/zBsy3Lpq+4mJvQP
wKuhmL8RWgw71gFvDJrx9KipgGKWEvo+zEM63ShUHwFURxisryRBsU+hE0UQtDwx
gcD7xZ8y3L8lcsE7JhDMrENqubSamFMsvcxZvbBekrnz8ynPb3FuM1js3Eaqw9Ez
McuwS8daHJNo6BPi8PGjHUSZ+Jq6IQjKL5kwpj0fed4HcNjA88lnZO9GMipdpFSP
vDq9YslugWGDJZjzgGEmiQyVC92fi6lfa63uwuvm5B9Grn1bhQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOd5pVN2MOlFcs84jQTfKubnPsixMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAw
NmQ0OC1iMjJmLTRkOWItODEzOC1jMGRlNjJkMTBlMTEvMTJlOWFiZmYtZmZlOC0z
M2FhLWIxYmYtNzVmZWIxNjQ3YWFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvMmEwMDZkNDgtYjIyZi00ZDliLTgx
MzgtYzBkZTYyZDEwZTExLzJhMDA2ZDQ4LWIyMmYtNGQ5Yi04MTM4LWMwZGU2MmQx
MGUxMS5jcmwwHwYDVR0jBBgwFoAUUYYvW8beapdmcip2tP8GsLmBJW0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy8yYTAwNmQ0OC1iMjJmLTRkOWItODEzOC1jMGRl
NjJkMTBlMTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDx1OQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAMS9jJyF0sKonVfb1lv+80hlvDvHTTg6RUpWMTsiOx2Ci6gQpmgmgeNr
vSUqIY/37P0ls1MPzqFiAPblO33yUboGEouxWI/7+YtejMUK2mKFxz0WEAxOeg1q
s1GoiFLbC39f3sNsUkPHhYl3Iz6xGfusMSyQmZhzEJ1t0LRycENmajxRnYiAiXjW
GVjJa3zPGL0id4Ts5HwuAo9XMKMVxxjFleXQHISDsQKY/tY8YI67rjiPtcQhu5Y5
5a87CFF3nZs4u9Nf5hqbFH3zTBZz5VMxiFopTa+36uaoU5ar/4MLO4fSEVZSVLRo
t+TSMOZnHblHBscQzYCB+Xkh44d7u8g=
-----END CERTIFICATE-----
Generated at Mon Jun 30 06:58:21 2025 by rpki-client