Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa
File:                     2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa (raw, json)
Hash identifier:          Hnm7GOfIFaVC7R2dAIpUq9Ynw6JaZrPUqvhC50XNgTI=
Subject key identifier:   EA:FA:6F:09:23:E1:20:F9:9B:BE:7B:B7:10:9E:E4:D6:21:5D:E3:48
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DA9992D6ADEB3B7975F480
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     36522
IP address blocks:        184.151.252.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:99:92:d6:ad:eb:3b:79:75:f4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=3fc4e814-02cf-4782-a67a-cd3e5ac7895c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:4f:9f:01:55:e5:97:86:99:a7:ac:f8:6e:7b:
                    70:67:b9:df:ee:0c:b2:5f:c7:df:d7:5a:e6:a2:f1:
                    78:19:a9:65:6a:13:b8:f9:b9:8c:bc:b8:c4:7f:96:
                    e5:81:9d:c6:50:33:ff:71:20:07:5f:57:64:cc:f2:
                    53:32:dc:29:87:f2:0d:34:69:c8:c7:b8:f4:59:e2:
                    93:95:99:11:f3:fb:3a:8c:fd:d3:4b:74:72:00:ec:
                    4b:5f:3a:96:0a:7f:e3:6d:8e:d3:43:cb:40:3c:ff:
                    c7:23:c7:4b:48:57:7e:89:0d:35:9f:da:25:b5:38:
                    1c:04:cd:03:96:d0:ae:6e:0d:c5:ca:90:9a:cc:75:
                    ad:8a:11:ad:da:53:e2:ec:e4:f4:60:96:46:c1:d6:
                    d6:d9:18:e2:2a:b1:20:e5:da:25:fe:d8:d4:94:22:
                    7c:81:a6:a5:9f:f6:99:8d:4f:ba:23:c7:57:5c:a3:
                    ce:ce:58:c0:6c:a2:81:01:5c:92:29:3c:8e:ca:ef:
                    db:1b:87:2c:40:90:b1:69:ef:ff:05:77:10:3a:c0:
                    83:38:07:27:d0:bd:22:f6:16:65:de:64:46:fb:d6:
                    7e:0c:62:67:99:a6:c1:a8:49:23:73:ab:aa:c4:f8:
                    9b:33:6b:6f:f4:31:fe:54:00:f7:8f:81:45:92:ac:
                    48:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FA:6F:09:23:E1:20:F9:9B:BE:7B:B7:10:9E:E4:D6:21:5D:E3:48
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2cfd8609-baba-3b33-bb17-5b6d935c24d4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.151.252.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:58:97:c6:6d:96:df:4e:e8:e8:9d:6a:1a:81:48:1f:9a:b4:
         65:c3:a9:70:3b:09:f3:46:a5:50:f3:a7:ba:dc:09:88:84:f9:
         b5:b1:c1:13:7c:0d:b3:4b:fc:fb:e9:59:9a:49:03:90:c1:26:
         3c:d4:35:d3:20:cd:f9:cd:35:d2:a9:52:90:ef:1c:6f:72:f0:
         7b:db:d2:ba:0f:c0:bf:f1:6d:2a:e3:3c:2d:60:08:c7:1b:72:
         00:5b:b3:de:7c:5e:3d:b5:af:0e:1f:0b:8b:28:56:0b:99:97:
         96:5b:d3:4d:99:3b:1d:13:05:56:c0:46:2a:e6:df:19:74:67:
         0b:d0:8c:da:81:59:0d:ed:81:ad:59:c8:34:9f:6e:9f:92:fc:
         9d:ab:ee:7c:7b:a3:4f:17:95:c7:aa:8e:2d:69:39:00:17:48:
         a8:fb:40:c5:de:75:c9:62:3c:00:79:ee:8b:78:6d:38:e5:a3:
         61:62:6f:3b:75:31:c5:ec:eb:32:db:72:53:7c:b7:6b:b3:fb:
         c8:bf:45:ab:c9:02:b0:6a:09:5f:d2:01:3b:ec:79:36:d0:93:
         a6:97:03:2c:0d:56:ff:d7:4b:ab:35:8c:e6:00:fa:c5:ca:07:
         6e:e7:bf:f2:02:1f:8b:4a:4e:27:e8:bd:61:35:90:65:1b:a6:
         e7:11:9b:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2pmS1q3rO3l19IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
M2ZjNGU4MTQtMDJjZi00NzgyLWE2N2EtY2QzZTVhYzc4OTVjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmU+fAVXll4aZp6z4bntwZ7nf7gyyX8ff11rm
ovF4GallahO4+bmMvLjEf5blgZ3GUDP/cSAHX1dkzPJTMtwph/INNGnIx7j0WeKT
lZkR8/s6jP3TS3RyAOxLXzqWCn/jbY7TQ8tAPP/HI8dLSFd+iQ01n9oltTgcBM0D
ltCubg3FypCazHWtihGt2lPi7OT0YJZGwdbW2RjiKrEg5dol/tjUlCJ8gaaln/aZ
jU+6I8dXXKPOzljAbKKBAVySKTyOyu/bG4csQJCxae//BXcQOsCDOAcn0L0i9hZl
3mRG+9Z+DGJnmabBqEkjc6uqxPibM2tv9DH+VAD3j4FFkqxI3QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOr6bwkj4SD5m757txCe5NYhXeNIMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmNmZDg2MDktYmFiYS0z
YjMzLWJiMTctNWI2ZDkzNWMyNGQ0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuJf8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABZYl8Ztlt9O6OidahqBSB+atGXDqXA7CfNGpVDzp7rcCYiE+bWxwRN8
DbNL/PvpWZpJA5DBJjzUNdMgzfnNNdKpUpDvHG9y8Hvb0roPwL/xbSrjPC1gCMcb
cgBbs958Xj21rw4fC4soVguZl5Zb002ZOx0TBVbARirm3xl0ZwvQjNqBWQ3tga1Z
yDSfbp+S/J2r7nx7o08Xlceqji1pOQAXSKj7QMXedcliPAB57ot4bTjlo2Fibzt1
McXs6zLbclN8t2uz+8i/RavJArBqCV/SATvseTbQk6aXAywNVv/XS6s1jOYA+sXK
B27nv/ICH4tKTifovWE1kGUbpucRm3E=
-----END CERTIFICATE-----
Generated at Mon Jun 30 20:40:22 2025 by rpki-client