Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
File:                     b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa (raw, json)
Hash identifier:          gtT/G8B1+iQMNNf0/5OZo+8cnORnefjNmJx8vpGGqG0=
Subject key identifier:   B6:26:3E:68:A6:F6:5E:FF:5D:12:98:DE:01:EA:4E:DB:D1:44:AD:AA
Certificate issuer:       /CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
Certificate serial:       010D0C9F4328584B1F016CAABFB642F81C1EAD00
Authority key identifier: 52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa
Signing time:             Mon 08 Sep 2025 01:00:33 +0000
ROA not before:           Mon 08 Sep 2025 01:00:33 +0000
ROA not after:            Sun 07 Dec 2025 02:00:33 +0000
asID:                     62643
IP address blocks:        192.234.120.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 23 Oct 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:1f:01:6c:aa:bf:b6:42:f8:1c:1e:ad:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8
        Validity
            Not Before: Sep  8 01:00:33 2025 GMT
            Not After : Dec  7 02:00:33 2025 GMT
        Subject: CN=e2203f59-6962-4674-9900-8b75be5381e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:36:37:58:e8:ba:85:de:ec:94:8a:d3:26:
                    73:29:da:8f:a8:32:27:e3:91:43:76:b1:d9:93:b0:
                    df:af:c6:86:1a:d1:11:69:b0:a9:b2:84:ed:07:3c:
                    7e:3c:29:70:23:48:8d:b4:60:d1:88:c5:ba:dc:a9:
                    b2:b8:da:53:ff:54:b2:a3:e6:f7:4a:82:05:0f:9d:
                    88:35:30:00:1d:8b:44:05:b4:02:5b:4d:28:70:a3:
                    3d:4c:15:fa:6b:cf:ed:8b:bf:1c:fa:14:e0:42:8a:
                    62:58:c6:69:22:12:19:e6:c9:bd:c9:08:13:7c:18:
                    13:1d:44:9c:c4:5a:27:34:bf:61:75:49:98:4d:96:
                    1b:f7:0b:2c:cf:61:99:1d:7e:fb:38:b5:aa:24:82:
                    45:0e:24:7d:49:32:83:3e:3a:f9:09:41:44:44:d5:
                    a6:f2:20:8c:73:29:bc:67:65:83:31:f7:25:3b:d1:
                    b2:cf:18:cd:9a:50:e5:b6:a5:97:a6:26:bc:3a:6d:
                    83:8e:ce:28:0d:4c:a3:79:e5:1f:7c:48:5d:39:16:
                    d8:4c:06:10:b6:21:16:70:d4:8b:bd:b9:84:0c:60:
                    6d:8e:46:d1:77:e7:9c:8f:49:1b:e8:f6:bc:3e:12:
                    66:50:b2:ec:d0:4e:bf:80:f8:2e:7d:85:69:2d:e8:
                    e6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:26:3E:68:A6:F6:5E:FF:5D:12:98:DE:01:EA:4E:DB:D1:44:AD:AA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/b531e632-8932-3c9c-afb6-2fc6e31e30a0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.crl

            X509v3 Authority Key Identifier:
                keyid:52:7B:70:BA:7C:3B:9D:0F:59:59:42:0D:91:87:3D:5D:B9:D8:84:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/73bfd974-b7f2-41e2-9d3f-9e4765c1ccc8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.234.120.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         83:43:b7:dc:d4:99:4b:e8:22:2d:a1:06:1c:a6:53:b0:67:af:
         5e:2f:79:fe:91:dc:6b:09:f9:70:79:86:db:01:92:94:fa:7d:
         3a:af:41:d8:2c:8d:7c:70:31:32:7e:f1:01:36:50:bb:5e:37:
         0e:00:c2:b9:8d:25:a2:88:a1:fa:b7:4a:a1:5d:30:73:cd:f4:
         c4:59:9c:49:2d:47:6e:da:71:b1:61:fa:3f:41:c7:a7:42:f6:
         e0:43:6b:65:3f:0a:6d:e3:4f:35:c9:cc:44:e9:19:17:8e:a0:
         06:bd:2a:70:90:25:c7:f9:e0:91:bf:38:d6:35:6f:f2:15:9a:
         8d:3a:ed:20:8b:fc:79:8c:b9:9e:cf:dc:ff:5b:1b:43:47:53:
         43:0b:6c:85:c4:03:f7:ef:64:fa:06:37:c7:88:b7:c8:c0:72:
         6b:76:de:99:36:5e:27:a1:d0:19:fd:16:d7:69:2a:21:97:e0:
         2a:63:85:c8:25:ad:b1:1b:47:68:e2:53:cd:9e:20:f2:a4:17:
         59:50:bd:3e:30:a9:51:60:36:a9:83:9c:e1:26:61:a8:bd:e0:
         96:4f:51:46:90:4f:65:56:bd:76:a9:f9:6d:f6:e0:af:6e:90:
         68:31:45:04:91:b3:2f:bd:00:ec:a4:8a:65:ee:aa:42:f4:c6:
         1a:dc:b7:b1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEsfAWyqv7ZC+BwerQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzNiZmQ5NzQtYjdmMi00MWUyLTlkM2YtOWU0NzY1YzFj
Y2M4MB4XDTI1MDkwODAxMDAzM1oXDTI1MTIwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZTIyMDNmNTktNjk2Mi00Njc0LTk5MDAtOGI3NWJlNTM4MWU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAros2N1jouoXe7JSK0yZzKdqPqDIn45FDdrHZ
k7Dfr8aGGtERabCpsoTtBzx+PClwI0iNtGDRiMW63KmyuNpT/1Syo+b3SoIFD52I
NTAAHYtEBbQCW00ocKM9TBX6a8/ti78c+hTgQopiWMZpIhIZ5sm9yQgTfBgTHUSc
xFonNL9hdUmYTZYb9wssz2GZHX77OLWqJIJFDiR9STKDPjr5CUFERNWm8iCMcym8
Z2WDMfclO9GyzxjNmlDltqWXpia8Om2Djs4oDUyjeeUffEhdORbYTAYQtiEWcNSL
vbmEDGBtjkbRd+ecj0kb6Pa8PhJmULLs0E6/gPgufYVpLejmRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLYmPmim9l7/XRKY3gHqTtvRRK2qMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83M2Jm
ZDk3NC1iN2YyLTQxZTItOWQzZi05ZTQ3NjVjMWNjYzgvYjUzMWU2MzItODkzMi0z
YzljLWFmYjYtMmZjNmUzMWUzMGEwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzNiZmQ5NzQtYjdmMi00MWUyLTlk
M2YtOWU0NzY1YzFjY2M4LzczYmZkOTc0LWI3ZjItNDFlMi05ZDNmLTllNDc2NWMx
Y2NjOC5jcmwwHwYDVR0jBBgwFoAUUntwunw7nQ9ZWUINkYc9XbnYhBUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83M2JmZDk3NC1iN2YyLTQxZTItOWQzZi05ZTQ3
NjVjMWNjYzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwOp4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAINDt9zUmUvoIi2hBhymU7Bnr14vef6R3GsJ+XB5htsBkpT6fTqvQdgs
jXxwMTJ+8QE2ULteNw4AwrmNJaKIofq3SqFdMHPN9MRZnEktR27acbFh+j9Bx6dC
9uBDa2U/Cm3jTzXJzETpGReOoAa9KnCQJcf54JG/ONY1b/IVmo067SCL/HmMuZ7P
3P9bG0NHU0MLbIXEA/fvZPoGN8eIt8jAcmt23pk2Xieh0Bn9FtdpKiGX4Cpjhcgl
rbEbR2jiU82eIPKkF1lQvT4wqVFgNqmDnOEmYai94JZPUUaQT2VWvXap+W324K9u
kGgxRQSRsy+9AOykimXuqkL0xhrct7E=
-----END CERTIFICATE-----
Generated at Mon Oct 20 18:04:07 2025 by rpki-client