Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
File:                     b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa (raw, json)
Hash identifier:          Rau6gdvlg3Yrs/pf9PH8c92bD5nEnoUv4kf6tU4Xm6g=
Subject key identifier:   FC:C8:0D:A4:69:0D:86:49:96:01:FD:79:E9:9F:9C:AD:D8:33:0A:83
Certificate issuer:       /CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
Certificate serial:       010D0C9F4328584A3E45A1969841135C851D6540
Authority key identifier: 52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     62643
IP address blocks:        192.234.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a1:96:98:41:13:5c:85:1d:65:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=f56ef8ec-2741-4e62-84cd-55512ec6ae34
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:95:1d:9d:de:e2:e0:31:8b:e9:b7:ce:bf:
                    25:21:e4:dc:e6:7b:d4:34:3e:ec:f7:56:a9:53:a2:
                    ce:8f:65:18:04:73:28:2c:f4:f8:73:27:92:b6:fc:
                    53:f2:e3:94:da:29:a7:0e:60:7e:0a:06:6a:1f:2d:
                    fd:c8:35:aa:2e:67:1b:49:66:19:cf:c6:a8:73:f8:
                    b6:de:56:b6:36:b4:0e:7c:ca:56:0b:af:48:90:16:
                    52:65:0c:7d:d1:d5:04:81:f5:60:19:6a:01:27:c9:
                    e5:58:c3:22:49:16:64:68:2b:bc:58:18:0a:1f:fd:
                    f2:12:5b:18:a8:d7:d0:17:d3:bc:6e:47:c5:51:de:
                    3b:0c:f2:15:77:02:03:d0:d8:2c:ae:e6:17:7c:10:
                    0b:93:16:b4:89:d0:fa:96:0e:ae:88:e7:28:8e:10:
                    00:1d:31:88:cb:69:39:1a:db:f5:17:d6:1f:eb:4d:
                    4a:76:e7:89:73:51:af:eb:f7:16:54:9f:fd:34:36:
                    12:42:88:4f:bc:fa:84:2b:06:53:35:c7:f3:8c:50:
                    2f:74:cd:30:18:79:99:d9:f2:f4:1b:3d:52:18:76:
                    56:bb:3a:9e:5c:6d:46:f8:24:64:ba:34:30:cd:8a:
                    71:5b:8b:d5:31:c5:dd:f6:07:d1:94:a3:f3:78:37:
                    4e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:C8:0D:A4:69:0D:86:49:96:01:FD:79:E9:9F:9C:AD:D8:33:0A:83
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl

            X509v3 Authority Key Identifier:
                keyid:52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:f5:41:28:49:a0:7e:35:2a:9b:da:c0:72:ab:62:0e:8f:08:
         50:47:00:1d:78:8e:19:6c:65:a0:c7:d5:34:7b:7b:3c:db:84:
         95:99:e6:83:82:c1:c0:66:14:76:8e:16:be:3b:b1:dd:26:6f:
         2e:dd:b0:db:0b:88:89:45:f7:da:27:1a:cc:2f:94:e3:10:34:
         57:64:8d:81:80:d6:38:62:85:9a:0e:11:65:04:1a:b5:fc:95:
         0f:f6:fe:eb:10:5d:21:5f:26:05:4a:53:4a:17:c3:c7:9b:eb:
         3b:d8:ad:0e:47:f7:b0:60:ce:f1:0d:48:f9:8a:ca:5b:0e:ec:
         ee:79:4f:d3:6a:80:a7:0f:2c:4e:28:53:41:3e:8e:32:b3:2e:
         1c:ef:66:e9:18:24:d4:7d:85:89:a7:66:3b:21:50:08:45:7b:
         95:8f:28:ca:dc:e3:07:43:96:d2:f4:13:55:a0:09:f2:de:db:
         bd:e5:76:c0:e7:4a:dc:16:34:95:47:f5:bc:45:0d:62:71:50:
         02:1c:a7:9c:d5:e0:b7:c6:92:62:95:b7:3f:bd:72:d5:c8:85:
         1a:61:b1:f9:ce:05:68:34:3c:73:41:93:be:70:50:ef:a5:00:
         f0:b5:af:fc:cb:f8:59:56:9a:10:40:cb:3a:86:81:7c:96:5d:
         92:13:8a:a3
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaGWmEETXIUdZUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNiZmQ5NzQtYjdmMi00MWUyLTlkM2YtOWU0NzY1YzFj
Y2M4MB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
ZjU2ZWY4ZWMtMjc0MS00ZTYyLTg0Y2QtNTU1MTJlYzZhZTM0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAknyVHZ3e4uAxi+m3zr8lIeTc5nvUND7s91ap
U6LOj2UYBHMoLPT4cyeStvxT8uOU2imnDmB+CgZqHy39yDWqLmcbSWYZz8aoc/i2
3la2NrQOfMpWC69IkBZSZQx90dUEgfVgGWoBJ8nlWMMiSRZkaCu8WBgKH/3yElsY
qNfQF9O8bkfFUd47DPIVdwID0NgsruYXfBALkxa0idD6lg6uiOcojhAAHTGIy2k5
Gtv1F9Yf601KdueJc1Gv6/cWVJ/9NDYSQohPvPqEKwZTNcfzjFAvdM0wGHmZ2fL0
Gz1SGHZWuzqeXG1G+CRkujQwzYpxW4vVMcXd9gfRlKPzeDdOkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPzIDaRpDYZJlgH9eemfnK3YMwqDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2Jm
ZDk3NC1iN2YyLTQxZTItOWQzZi05ZTQ3NjVjMWNjYzgvYjUzMWU2MzItODkzMi0z
YzljLWFmYjYtMmZjNmUzMWUzMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzNiZmQ5NzQtYjdmMi00MWUyLTlk
M2YtOWU0NzY1YzFjY2M4LzczYmZkOTc0LWI3ZjItNDFlMi05ZDNmLTllNDc2NWMx
Y2NjOC5jcmwwHwYDVR0jBBgwFoAUUntwunw7nQ9ZWUINkYc9XbnYhBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83M2JmZDk3NC1iN2YyLTQxZTItOWQzZi05ZTQ3
NjVjMWNjYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwOp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB31QShJoH41KpvawHKrYg6PCFBHAB14jhlsZaDH1TR7ezzbhJWZ5oOC
wcBmFHaOFr47sd0mby7dsNsLiIlF99onGswvlOMQNFdkjYGA1jhihZoOEWUEGrX8
lQ/2/usQXSFfJgVKU0oXw8eb6zvYrQ5H97BgzvENSPmKylsO7O55T9NqgKcPLE4o
U0E+jjKzLhzvZukYJNR9hYmnZjshUAhFe5WPKMrc4wdDltL0E1WgCfLe273ldsDn
StwWNJVH9bxFDWJxUAIcp5zV4LfGkmKVtz+9ctXIhRphsfnOBWg0PHNBk75wUO+l
APC1r/zL+FlWmhBAyzqGgXyWXZITiqM=
-----END CERTIFICATE-----
Generated at Tue Jul 1 11:37:54 2025 by rpki-client