Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
File:                     44093855-c660-345f-9454-29953b3f2acb.roa (raw, json)
Hash identifier:          LJEo339lihTVqxY2G70KcKDR5eJ3jj3uo4/R9dHxbhc=
Subject key identifier:   03:7F:AD:2D:0A:1F:B3:C5:65:8E:A3:4C:CF:9D:44:11:65:E2:FE:B5
Certificate issuer:       /CN=fbe88551-e36f-4364-ac40-a262166c72ad
Certificate serial:       010D0C9F4328584A4110523216F8BD6A17F9B100
Authority key identifier: A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa
Signing time:             Fri 20 Jun 2025 13:01:05 +0000
ROA not before:           Fri 20 Jun 2025 13:01:05 +0000
ROA not after:            Thu 18 Sep 2025 13:01:05 +0000
asID:                     63435
IP address blocks:        199.58.30.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 09:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:41:10:52:32:16:f8:bd:6a:17:f9:b1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fbe88551-e36f-4364-ac40-a262166c72ad
        Validity
            Not Before: Jun 20 13:01:05 2025 GMT
            Not After : Sep 18 13:01:05 2025 GMT
        Subject: CN=4b021f5a-40eb-4e2d-a7be-673bab8b7626
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:08:76:db:1f:10:ba:69:8a:67:7a:d1:de:c6:
                    33:09:bd:fd:05:fe:9b:2c:f3:67:01:df:0e:97:24:
                    fd:2e:ea:e7:9a:2c:70:41:61:c2:ed:c7:e3:a6:37:
                    c4:ce:ce:c1:97:94:1b:82:44:0f:31:e5:47:0f:10:
                    0f:17:52:99:2a:20:63:3b:a7:02:02:17:ed:e0:37:
                    e1:d4:ad:5b:6d:47:e3:6a:94:29:08:f1:d1:94:e1:
                    08:aa:39:87:56:b1:d8:f7:c7:6a:f4:3d:f8:93:ba:
                    49:f5:0a:0f:3c:cd:3e:93:50:7b:13:89:fa:8b:77:
                    d6:ec:36:2c:7f:bc:7d:bb:e9:d7:c7:24:f6:0a:24:
                    52:65:cb:d9:f6:23:2c:ad:ea:df:21:4d:22:5c:00:
                    9a:07:72:3e:9f:56:5f:d6:7a:8b:74:3e:66:4f:63:
                    25:64:c9:af:66:11:e9:82:92:08:fa:95:61:b8:36:
                    00:f0:9a:ad:d8:fe:53:90:92:c1:a2:88:cc:d4:f7:
                    19:ca:64:f2:d1:f2:80:0e:c4:24:b0:55:14:13:e1:
                    8d:58:c3:9b:7a:8d:9c:e2:b3:02:9d:5a:3a:52:4a:
                    d1:53:17:8f:27:19:2c:7d:1c:5a:de:67:1d:17:f1:
                    4b:89:34:32:2a:45:d3:b9:af:ec:2b:19:1f:bc:16:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:7F:AD:2D:0A:1F:B3:C5:65:8E:A3:4C:CF:9D:44:11:65:E2:FE:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/44093855-c660-345f-9454-29953b3f2acb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad/fbe88551-e36f-4364-ac40-a262166c72ad.crl

            X509v3 Authority Key Identifier:
                keyid:A1:4D:9B:84:F4:D6:87:5C:4D:0C:56:6E:8D:D4:C8:64:4B:C8:75:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/fbe88551-e36f-4364-ac40-a262166c72ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.58.30.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         28:e0:e5:b1:72:0d:f2:01:91:21:e3:33:d4:e3:e8:65:91:02:
         d3:d3:60:76:a9:8a:4a:0c:16:19:36:62:bb:94:53:3e:4d:64:
         46:45:3c:e2:eb:81:39:25:a4:64:ad:6a:da:a2:14:21:43:8f:
         0a:86:bd:b8:c8:8f:e4:b2:e8:ab:94:e6:17:72:f8:b9:61:5c:
         db:58:8e:9d:ab:99:bb:82:c5:d2:df:12:82:a1:c1:8f:ab:08:
         23:29:c2:89:61:f2:e9:c7:18:7f:38:df:87:62:05:46:08:ba:
         81:ec:df:52:4c:0a:63:6e:6a:7e:5b:b6:15:90:6a:2f:15:d6:
         80:7f:49:c6:e6:8f:6d:48:ca:ea:ca:fd:fa:c8:81:66:a0:0d:
         56:b9:d0:ed:fa:bb:79:d9:53:46:73:10:e5:04:01:7c:3b:c2:
         68:e0:0c:72:da:17:7f:e0:00:12:38:50:de:b0:ce:a2:19:96:
         49:06:e9:1f:d5:c9:ea:df:e4:09:52:18:27:71:1d:e2:0b:3b:
         e9:9f:bd:a1:8d:9f:d1:71:2b:c9:d7:4d:9d:e5:aa:27:e3:f8:
         d5:36:a5:10:51:59:ce:48:9f:0a:f7:d0:13:52:03:fb:41:a5:
         3f:be:b8:12:60:d3:22:85:02:e0:00:d6:7b:3f:0d:96:3f:03:
         6c:15:c0:a7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpBEFIyFvi9ahf5sQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJlODg1NTEtZTM2Zi00MzY0LWFjNDAtYTI2MjE2NmM3
MmFkMB4XDTI1MDYyMDEzMDEwNVoXDTI1MDkxODEzMDEwNVowLzEtMCsGA1UEAxMk
NGIwMjFmNWEtNDBlYi00ZTJkLWE3YmUtNjczYmFiOGI3NjI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkQh22x8QummKZ3rR3sYzCb39Bf6bLPNnAd8O
lyT9LurnmixwQWHC7cfjpjfEzs7Bl5QbgkQPMeVHDxAPF1KZKiBjO6cCAhft4Dfh
1K1bbUfjapQpCPHRlOEIqjmHVrHY98dq9D34k7pJ9QoPPM0+k1B7E4n6i3fW7DYs
f7x9u+nXxyT2CiRSZcvZ9iMsrerfIU0iXACaB3I+n1Zf1nqLdD5mT2MlZMmvZhHp
gpII+pVhuDYA8Jqt2P5TkJLBoojM1PcZymTy0fKADsQksFUUE+GNWMObeo2c4rMC
nVo6UkrRUxePJxksfRxa3mcdF/FLiTQyKkXTua/sKxkfvBYVnQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAN/rS0KH7PFZY6jTM+dRBFl4v61MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9mYmU4
ODU1MS1lMzZmLTQzNjQtYWM0MC1hMjYyMTY2YzcyYWQvNDQwOTM4NTUtYzY2MC0z
NDVmLTk0NTQtMjk5NTNiM2YyYWNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvZmJlODg1NTEtZTM2Zi00MzY0LWFj
NDAtYTI2MjE2NmM3MmFkL2ZiZTg4NTUxLWUzNmYtNDM2NC1hYzQwLWEyNjIxNjZj
NzJhZC5jcmwwHwYDVR0jBBgwFoAUoU2bhPTWh1xNDFZujdTIZEvIdU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9mYmU4ODU1MS1lMzZmLTQzNjQtYWM0MC1hMjYy
MTY2YzcyYWQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxzoeMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACjg5bFyDfIBkSHjM9Tj6GWRAtPTYHapikoMFhk2YruUUz5NZEZFPOLr
gTklpGStatqiFCFDjwqGvbjIj+Sy6KuU5hdy+LlhXNtYjp2rmbuCxdLfEoKhwY+r
CCMpwolh8unHGH8434diBUYIuoHs31JMCmNuan5bthWQai8V1oB/Scbmj21IyurK
/frIgWagDVa50O36u3nZU0ZzEOUEAXw7wmjgDHLaF3/gABI4UN6wzqIZlkkG6R/V
yerf5AlSGCdxHeILO+mfvaGNn9FxK8nXTZ3lqifj+NU2pRBRWc5Inwr30BNSA/tB
pT++uBJg0yKFAuAA1ns/DZY/A2wVwKc=
-----END CERTIFICATE-----
Generated at Fri Jul 4 07:24:19 2025 by rpki-client