Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/35efccb8-4ccb-3796-af39-449ee97b1666.roa
File:                     35efccb8-4ccb-3796-af39-449ee97b1666.roa (raw, json)
Hash identifier:          cIHa7l0eyeOduc1uvZQ8QKxut9MuVCRDx3nKKfcSw/w=
Subject key identifier:   FE:3D:49:46:3F:AC:30:3F:4F:32:53:77:7B:82:BB:5C:83:AC:E8:5E
Certificate issuer:       /CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
Certificate serial:       010D0C9F4328584A814646081F8ACE4C0E079780
Authority key identifier: C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/35efccb8-4ccb-3796-af39-449ee97b1666.roa
Signing time:             Sun 13 Jul 2025 13:01:03 +0000
ROA not before:           Sun 13 Jul 2025 13:01:03 +0000
ROA not after:            Sat 11 Oct 2025 13:01:03 +0000
asID:                     11272
IP address blocks:        198.28.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:81:46:46:08:1f:8a:ce:4c:0e:07:97:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55feeaf5-abfd-4f9c-9707-9236ce5397bd
        Validity
            Not Before: Jul 13 13:01:03 2025 GMT
            Not After : Oct 11 13:01:03 2025 GMT
        Subject: CN=6a6a59dd-35dd-47c0-be5b-debf3bd32b34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8a:27:74:ed:88:9e:8e:c2:bb:a5:f3:ea:bc:
                    99:91:73:ad:77:98:d0:ff:9c:2b:80:7c:f8:55:7a:
                    98:42:e4:c4:3b:12:a7:5c:4e:dd:c5:74:a4:06:86:
                    ba:7b:30:51:19:c0:6f:b4:01:46:f9:ff:eb:32:95:
                    c0:e2:ca:fb:28:ee:df:73:86:4e:2d:c9:2b:98:3b:
                    d8:31:91:3f:2c:38:de:85:2d:30:58:b3:5e:aa:6c:
                    90:ab:fb:d5:c7:6f:d9:85:c4:40:c8:b7:bc:fd:d8:
                    3b:98:1e:e5:36:d6:c6:3c:10:14:e3:68:74:5e:a7:
                    bd:5b:e9:75:9c:e6:b7:eb:cd:a5:d0:12:de:30:41:
                    3d:23:36:a9:77:cb:cc:2c:69:63:14:38:90:c5:c2:
                    4d:fa:47:52:7e:98:77:29:09:f6:a5:3b:bf:f7:4c:
                    28:7a:ba:4c:65:76:e8:96:73:3b:5a:3b:8c:b9:1d:
                    e4:81:ee:c7:45:21:1a:86:57:ae:46:05:8c:4e:5b:
                    77:97:e1:47:eb:8c:29:1a:da:7b:c3:fb:fa:f8:a4:
                    13:9e:28:1c:5a:18:b5:f3:4c:c4:44:e2:3b:72:2f:
                    b4:13:63:d3:78:99:2a:b1:2d:81:78:6e:6a:49:c3:
                    28:39:22:3c:9b:0d:e3:18:66:f6:15:90:e3:21:50:
                    7c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:3D:49:46:3F:AC:30:3F:4F:32:53:77:7B:82:BB:5C:83:AC:E8:5E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/35efccb8-4ccb-3796-af39-449ee97b1666.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd/55feeaf5-abfd-4f9c-9707-9236ce5397bd.crl

            X509v3 Authority Key Identifier:
                keyid:C9:EF:4B:01:33:02:5C:34:66:53:86:01:A7:05:AC:03:48:05:9A:BA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/55feeaf5-abfd-4f9c-9707-9236ce5397bd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.28.160.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         01:44:6f:55:be:04:75:70:89:c1:20:62:7f:bd:1c:36:3c:31:
         0c:ef:1b:14:5d:62:b1:1c:17:5d:97:3d:2c:4d:df:97:65:68:
         be:53:4c:ff:f1:33:a9:0d:0f:97:6c:ef:2d:59:70:41:78:87:
         01:f4:c6:8f:fe:b4:05:b1:fc:4b:be:1a:e2:38:92:d5:91:c9:
         2f:8a:73:1a:16:30:d3:23:74:47:32:12:3e:c1:92:ef:46:83:
         1a:ef:09:35:7e:10:99:16:71:95:73:d1:60:d9:2c:52:1b:14:
         99:f4:5a:fe:f2:f0:9d:f2:c7:b7:73:6e:be:b8:fd:49:8b:00:
         59:40:dc:ea:f0:e7:6f:5d:02:d4:77:ae:29:ee:3c:db:88:cd:
         af:7e:c1:ab:33:1a:b3:74:33:9f:52:a5:7c:db:cb:7b:38:bd:
         17:8d:41:fd:63:8e:49:01:80:c1:65:2b:93:9a:a3:7b:08:0c:
         79:7e:88:24:29:bf:72:02:db:a5:ef:ac:85:b2:c1:ea:6d:ef:
         67:ba:d3:d7:42:cd:3d:79:86:83:95:ed:3e:f5:db:73:a2:c9:
         26:ab:28:3e:80:35:01:12:56:ba:0e:72:c9:2c:c6:21:c3:f5:
         f5:63:42:81:28:03:81:39:b4:86:3e:79:34:4e:0b:57:d5:c9:
         c6:bf:bd:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqBRkYIH4rOTA4Hl4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTVmZWVhZjUtYWJmZC00ZjljLTk3MDctOTIzNmNlNTM5
N2JkMB4XDTI1MDcxMzEzMDEwM1oXDTI1MTAxMTEzMDEwM1owLzEtMCsGA1UEAxMk
NmE2YTU5ZGQtMzVkZC00N2MwLWJlNWItZGViZjNiZDMyYjM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIondO2Ino7Cu6Xz6ryZkXOtd5jQ/5wrgHz4
VXqYQuTEOxKnXE7dxXSkBoa6ezBRGcBvtAFG+f/rMpXA4sr7KO7fc4ZOLckrmDvY
MZE/LDjehS0wWLNeqmyQq/vVx2/ZhcRAyLe8/dg7mB7lNtbGPBAU42h0Xqe9W+l1
nOa3682l0BLeMEE9Izapd8vMLGljFDiQxcJN+kdSfph3KQn2pTu/90woerpMZXbo
lnM7WjuMuR3kge7HRSEahleuRgWMTlt3l+FH64wpGtp7w/v6+KQTnigcWhi180zE
ROI7ci+0E2PTeJkqsS2BeG5qScMoOSI8mw3jGGb2FZDjIVB8VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP49SUY/rDA/TzJTd3uCu1yDrOheMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy81NWZl
ZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2Y2U1Mzk3YmQvMzVlZmNjYjgtNGNjYi0z
Nzk2LWFmMzktNDQ5ZWU5N2IxNjY2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNTVmZWVhZjUtYWJmZC00ZjljLTk3
MDctOTIzNmNlNTM5N2JkLzU1ZmVlYWY1LWFiZmQtNGY5Yy05NzA3LTkyMzZjZTUz
OTdiZC5jcmwwHwYDVR0jBBgwFoAUye9LATMCXDRmU4YBpwWsA0gFmrowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy81NWZlZWFmNS1hYmZkLTRmOWMtOTcwNy05MjM2
Y2U1Mzk3YmQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQFxhygMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAFEb1W+BHVwicEgYn+9HDY8MQzvGxRdYrEcF12XPSxN35dlaL5TTP/x
M6kND5ds7y1ZcEF4hwH0xo/+tAWx/Eu+GuI4ktWRyS+KcxoWMNMjdEcyEj7Bku9G
gxrvCTV+EJkWcZVz0WDZLFIbFJn0Wv7y8J3yx7dzbr64/UmLAFlA3Orw529dAtR3
rinuPNuIza9+waszGrN0M59SpXzby3s4vReNQf1jjkkBgMFlK5Oao3sIDHl+iCQp
v3IC26XvrIWywept72e609dCzT15hoOV7T7123OiySarKD6ANQESVroOcsksxiHD
9fVjQoEoA4E5tIY+eTROC1fVyca/vWk=
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:08:08 2025 by rpki-client