Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/696d6f33-47b5-3d71-8de3-ed17b101ac9e.roa
File:                     696d6f33-47b5-3d71-8de3-ed17b101ac9e.roa (raw, json)
Hash identifier:          aJ5X5mR9T54j7zl0F7DE+SSVlQxXmdrOxib6QerWAR0=
Subject key identifier:   F9:E1:F2:2E:DF:11:D7:95:F9:D2:BD:BB:AF:BB:20:0A:EA:9F:D9:FA
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAA0D302FDA602A7AC6100
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/696d6f33-47b5-3d71-8de3-ed17b101ac9e.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     7122
IP address blocks:        205.200.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:a0:d3:02:fd:a6:02:a7:ac:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=cc48a0ab-0e9c-43c5-8955-b5f9de762d0a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:81:bf:ce:30:1e:a6:d8:9d:b5:21:c2:e8:4d:
                    8c:a7:5a:f8:75:0d:c3:c8:b4:a2:6b:9c:4c:66:27:
                    67:fc:88:ab:ac:a4:7c:e4:3a:81:0c:24:4f:8d:d2:
                    42:f7:2e:7f:0f:49:89:63:e6:51:1f:5c:fe:45:f3:
                    50:0c:5c:e2:f4:98:fa:d8:6e:13:b7:be:77:26:55:
                    ba:6c:36:bf:0c:ab:43:25:52:5f:d7:6b:0d:da:21:
                    fc:12:32:e7:6c:e8:50:b4:d5:24:b7:4d:33:2e:40:
                    25:19:a6:f5:1b:b1:d5:88:7e:d0:9a:f0:eb:53:db:
                    8e:5b:c6:6e:7a:46:95:da:f4:8b:0f:20:a5:da:79:
                    2e:42:41:b6:9b:a5:19:98:aa:50:bb:8d:ea:df:84:
                    ce:3f:06:4b:01:3c:4f:eb:92:74:aa:6d:12:4f:0e:
                    34:8e:e4:56:5f:95:b0:ec:90:38:78:cf:d4:6d:eb:
                    de:22:01:8a:8e:40:43:aa:86:8d:89:05:a8:a0:b9:
                    7b:cd:5c:5f:e8:7b:c3:a7:8c:fd:29:c6:27:49:d2:
                    12:64:cb:0b:1c:97:29:09:0b:07:88:3b:a2:08:98:
                    f4:8a:c7:d8:2b:07:7f:dc:8a:4d:a3:2e:e7:4e:37:
                    39:d8:89:ea:d0:3e:18:ee:1e:fd:fb:ba:e9:2d:0a:
                    db:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:E1:F2:2E:DF:11:D7:95:F9:D2:BD:BB:AF:BB:20:0A:EA:9F:D9:FA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/696d6f33-47b5-3d71-8de3-ed17b101ac9e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.200.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4d:0b:f8:83:67:6c:25:d1:2c:ab:97:9f:12:e2:2b:a4:c3:78:
         ad:33:06:ee:86:dc:ba:01:c4:8c:75:15:59:d5:18:1f:64:f8:
         20:24:95:39:84:ac:a3:2e:f2:be:72:03:80:ae:95:ec:d2:e4:
         24:48:f3:a1:a0:56:77:55:d7:0a:82:dc:af:dd:b6:09:dd:70:
         56:4d:40:e3:39:e4:47:bd:5d:e0:f4:0e:69:5e:f2:fe:e9:32:
         1a:49:ca:75:08:df:f6:25:ca:98:2d:b2:fa:8d:41:48:2c:35:
         5f:74:50:8c:b5:df:15:18:9a:b5:a1:3e:88:3c:4e:34:ff:a0:
         f3:82:3b:14:9f:8a:61:af:dd:da:67:7b:c5:f2:ca:03:2b:56:
         94:de:8d:e1:6e:5b:c6:47:e1:c5:f5:fd:1e:68:98:74:d0:37:
         73:c9:58:d7:6f:6d:91:44:7a:02:d8:e4:97:22:e2:39:b8:1c:
         2c:ce:f4:e1:10:a4:3d:b5:47:bd:58:8e:57:76:3d:db:05:eb:
         8b:98:c9:22:2b:eb:fb:f0:dc:12:d5:bb:64:73:6c:3b:35:5d:
         58:b5:b0:cb:ae:6c:37:51:74:ec:e7:1a:e3:fa:b9:1e:93:d1:
         8f:e0:9a:f5:e3:7b:f5:26:94:d9:18:b6:56:63:2c:6e:67:2a:
         f9:70:c3:1e
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEoA2qDTAv2mAqesYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
Y2M0OGEwYWItMGU5Yy00M2M1LTg5NTUtYjVmOWRlNzYyZDBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApYG/zjAeptidtSHC6E2Mp1r4dQ3DyLSia5xM
Zidn/IirrKR85DqBDCRPjdJC9y5/D0mJY+ZRH1z+RfNQDFzi9Jj62G4Tt753JlW6
bDa/DKtDJVJf12sN2iH8EjLnbOhQtNUkt00zLkAlGab1G7HViH7QmvDrU9uOW8Zu
ekaV2vSLDyCl2nkuQkG2m6UZmKpQu43q34TOPwZLATxP65J0qm0STw40juRWX5Ww
7JA4eM/UbeveIgGKjkBDqoaNiQWooLl7zVxf6HvDp4z9KcYnSdISZMsLHJcpCQsH
iDuiCJj0isfYKwd/3IpNoy7nTjc52Inq0D4Y7h79+7rpLQrbzwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPnh8i7fEdeV+dK9u6+7IArqn9n6MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvNjk2ZDZmMzMtNDdiNS0z
ZDcxLThkZTMtZWQxN2IxMDFhYzllLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAzcgwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEATQv4g2dsJdEsq5efEuIrpMN4rTMG7obcugHEjHUVWdUYH2T4ICSVOYSs
oy7yvnIDgK6V7NLkJEjzoaBWd1XXCoLcr922Cd1wVk1A4znkR71d4PQOaV7y/uky
GknKdQjf9iXKmC2y+o1BSCw1X3RQjLXfFRiataE+iDxONP+g84I7FJ+KYa/d2md7
xfLKAytWlN6N4W5bxkfhxfX9HmiYdNA3c8lY129tkUR6AtjklyLiObgcLM704RCk
PbVHvViOV3Y92wXri5jJIivr+/DcEtW7ZHNsOzVdWLWwy65sN1F07Oca4/q5HpPR
j+Ca9eN79SaU2Ri2VmMsbmcq+XDDHg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:22:04 2025 by rpki-client