Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/403fe506-45c8-3ff3-b41e-ffcf71ebf5bf.roa
File:                     403fe506-45c8-3ff3-b41e-ffcf71ebf5bf.roa (raw, json)
Hash identifier:          2yLGuLaK4ovz3wsw+Tv5Whsuu5BmtbV6Mu+YyXhKRAg=
Subject key identifier:   EB:1E:6A:2B:D0:EF:BD:C9:D9:D6:F7:50:53:41:7C:0C:63:CB:98:A5
Certificate issuer:       /CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
Certificate serial:       010D0C9F4328584A3CE022CC288C76E9E7B9A2C0
Authority key identifier: 59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/403fe506-45c8-3ff3-b41e-ffcf71ebf5bf.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     0
IP address blocks:        192.58.240.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:22:cc:28:8c:76:e9:e7:b9:a2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=75e138da-dba3-4d89-ab3f-656fba4b9c20
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=125c8dad-362d-46ed-8c8d-b78cde5edc42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:40:88:23:93:61:98:71:2a:cf:3b:b9:8c:b0:
                    45:33:37:2c:57:1c:8d:45:19:79:80:3d:2d:cc:91:
                    3f:20:c5:75:a3:4f:fa:e2:34:bf:d4:5b:c6:28:83:
                    06:4a:78:8a:54:df:74:f3:a3:0b:0e:42:a7:f0:ac:
                    de:c3:c6:6e:0d:25:52:37:51:0f:f5:c9:4d:ef:be:
                    55:80:87:15:09:02:fb:17:05:8b:cd:a6:a3:87:33:
                    ca:79:6f:83:df:28:ba:80:46:e2:17:9c:14:04:da:
                    d8:3e:c5:12:53:eb:27:4b:d8:ca:8f:0c:de:8b:ce:
                    2c:bb:c9:ba:aa:96:83:f3:16:db:07:22:cf:bd:a4:
                    d2:3c:15:fc:2f:05:74:cb:68:8a:a0:5a:52:8d:96:
                    85:ab:a5:43:4e:d2:28:c9:dc:34:96:2e:f2:be:ac:
                    2e:eb:da:d6:ce:1d:b0:3e:b3:1b:67:bc:0b:c4:18:
                    59:41:37:69:24:9d:7d:d8:b0:a6:ad:18:73:87:c1:
                    90:3e:dd:c0:20:74:44:77:43:4e:b2:a5:22:c8:1e:
                    6e:a6:2a:2e:c3:e8:cb:31:44:59:98:e4:ec:8b:df:
                    65:eb:27:ef:0b:9e:4b:71:9a:74:b5:bc:80:47:31:
                    32:f2:81:a2:e4:54:2b:ca:f0:32:c3:3f:3d:4c:df:
                    32:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:1E:6A:2B:D0:EF:BD:C9:D9:D6:F7:50:53:41:7C:0C:63:CB:98:A5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/403fe506-45c8-3ff3-b41e-ffcf71ebf5bf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20/75e138da-dba3-4d89-ab3f-656fba4b9c20.crl

            X509v3 Authority Key Identifier:
                keyid:59:8F:96:26:DD:32:05:12:B3:32:54:3B:72:41:D8:46:64:76:C9:61

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/75e138da-dba3-4d89-ab3f-656fba4b9c20.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.58.240.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:8f:ee:ba:e7:da:e2:79:f9:7f:64:67:29:35:64:85:4c:20:
         c0:6d:e8:fa:2b:5d:16:b8:5a:bb:62:db:3d:c9:c8:a1:d4:59:
         cd:f4:8b:49:e3:65:61:58:e2:c1:77:95:77:1d:2b:43:80:19:
         92:d8:ea:0c:09:bd:5c:b8:5c:4a:cd:cf:dc:4c:74:9b:f1:5d:
         32:be:06:77:bf:d3:ad:73:eb:5b:12:c2:26:16:df:36:e9:5f:
         1d:c1:dd:bb:ba:e5:ce:01:67:8d:fc:ee:70:91:60:76:43:22:
         f0:c5:7b:e5:b7:f4:66:53:5d:c8:ad:19:c4:8c:3b:79:3a:e7:
         57:7a:e3:07:1b:56:1a:73:36:80:cc:c3:91:86:de:2d:6a:6f:
         f3:6c:ef:f3:8b:e8:51:95:b8:ca:e7:68:6d:1f:68:0b:e0:96:
         32:0c:8b:fd:12:1e:b0:d3:92:eb:7c:3b:f9:7a:80:a1:54:05:
         f6:bf:5c:bf:e2:2c:50:cb:20:14:4e:e1:4e:28:df:9d:81:1b:
         f1:1a:4f:a4:d8:e9:90:53:53:b8:d8:73:dd:62:c9:0b:78:71:
         2e:2c:d5:f0:c7:25:a3:87:b0:a9:f6:0d:ab:1d:42:40:08:2a:
         37:57:ce:c8:84:bd:32:28:fe:c7:7e:a3:ab:07:93:6c:cd:86:
         1e:75:b7:fa
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo84CLMKIx26ee5osAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzVlMTM4ZGEtZGJhMy00ZDg5LWFiM2YtNjU2ZmJhNGI5
YzIwMB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
MTI1YzhkYWQtMzYyZC00NmVkLThjOGQtYjc4Y2RlNWVkYzQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmECII5NhmHEqzzu5jLBFMzcsVxyNRRl5gD0t
zJE/IMV1o0/64jS/1FvGKIMGSniKVN9086MLDkKn8Kzew8ZuDSVSN1EP9clN775V
gIcVCQL7FwWLzaajhzPKeW+D3yi6gEbiF5wUBNrYPsUSU+snS9jKjwzei84su8m6
qpaD8xbbByLPvaTSPBX8LwV0y2iKoFpSjZaFq6VDTtIoydw0li7yvqwu69rWzh2w
PrMbZ7wLxBhZQTdpJJ192LCmrRhzh8GQPt3AIHREd0NOsqUiyB5upiouw+jLMURZ
mOTsi99l6yfvC55LcZp0tbyARzEy8oGi5FQryvAywz89TN8y/wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOseaivQ773J2db3UFNBfAxjy5ilMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy83NWUx
MzhkYS1kYmEzLTRkODktYWIzZi02NTZmYmE0YjljMjAvNDAzZmU1MDYtNDVjOC0z
ZmYzLWI0MWUtZmZjZjcxZWJmNWJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvNzVlMTM4ZGEtZGJhMy00ZDg5LWFi
M2YtNjU2ZmJhNGI5YzIwLzc1ZTEzOGRhLWRiYTMtNGQ4OS1hYjNmLTY1NmZiYTRi
OWMyMC5jcmwwHwYDVR0jBBgwFoAUWY+WJt0yBRKzMlQ7ckHYRmR2yWEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy83NWUxMzhkYS1kYmEzLTRkODktYWIzZi02NTZm
YmE0YjljMjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBwDrwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHKP7rrn2uJ5+X9kZyk1ZIVMIMBt6PorXRa4Wrti2z3JyKHUWc30i0nj
ZWFY4sF3lXcdK0OAGZLY6gwJvVy4XErNz9xMdJvxXTK+Bne/061z61sSwiYW3zbp
Xx3B3bu65c4BZ4387nCRYHZDIvDFe+W39GZTXcitGcSMO3k651d64wcbVhpzNoDM
w5GG3i1qb/Ns7/OL6FGVuMrnaG0faAvgljIMi/0SHrDTkut8O/l6gKFUBfa/XL/i
LFDLIBRO4U4o352BG/EaT6TY6ZBTU7jYc91iyQt4cS4s1fDHJaOHsKn2DasdQkAI
KjdXzsiEvTIo/sd+o6sHk2zNhh51t/o=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:18:48 2025 by rpki-client