Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
File:                     bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa (raw, json)
Hash identifier:          TBaOcrzLHaWRvB9YJPLW4+xMUd1Y8qqzy7RA/v0zwPI=
Subject key identifier:   16:EC:DD:B3:B5:4C:44:34:70:D4:AA:03:98:69:BE:73:AA:D6:7B:CE
Certificate issuer:       /CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
Certificate serial:       010D0C9F4328584A51F17031B3E9666E25330680
Authority key identifier: 80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa
Signing time:             Thu 26 Jun 2025 14:07:42 +0000
ROA not before:           Thu 26 Jun 2025 14:07:42 +0000
ROA not after:            Wed 24 Sep 2025 14:07:42 +0000
asID:                     13335
IP address blocks:        173.0.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:f1:70:31:b3:e9:66:6e:25:33:06:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=253c1f46-e2ad-4547-8b1c-5935addeddb5
        Validity
            Not Before: Jun 26 14:07:42 2025 GMT
            Not After : Sep 24 14:07:42 2025 GMT
        Subject: CN=fe102df0-f295-439b-8e07-9f917a08c286
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:bf:59:bd:90:ca:41:ac:80:a8:06:d6:c8:9d:
                    92:e5:47:67:32:8b:35:61:06:61:88:78:93:b0:49:
                    01:7d:38:a2:63:15:ba:d2:0d:75:87:73:c2:f0:64:
                    ab:57:d7:61:b2:b6:af:37:f3:0b:be:b8:9f:2a:8d:
                    ce:0d:3b:72:3e:7a:51:83:2b:58:98:57:c0:be:9f:
                    6c:fa:c5:e3:d6:63:1c:b7:2d:c8:98:86:9d:68:99:
                    50:ef:74:6e:a6:07:3d:b3:c4:13:fb:bc:06:04:c1:
                    c6:1f:d4:05:a8:68:ce:3e:48:30:ed:44:5e:9a:a7:
                    e5:d1:f4:dd:2f:0a:98:4b:9f:54:35:37:b1:97:a8:
                    ba:41:56:ea:3f:fa:ba:67:42:92:27:56:93:bb:de:
                    44:8c:9b:5f:6a:fe:6c:97:25:7a:1f:57:b2:41:24:
                    e7:90:42:51:62:a3:5b:56:62:d2:26:23:1c:fc:44:
                    af:23:b5:5d:d7:1b:57:7b:b1:18:87:26:c1:07:83:
                    d7:9a:4f:2f:1b:48:08:ad:84:75:c8:e1:12:47:90:
                    8c:f8:0c:d2:f5:45:2b:88:01:38:4c:64:a4:0e:62:
                    75:d4:dc:7d:05:1e:a7:b6:4f:71:64:23:d1:7d:e0:
                    cf:4a:b7:55:bd:77:96:f0:4e:90:7a:69:40:6f:11:
                    9d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:EC:DD:B3:B5:4C:44:34:70:D4:AA:03:98:69:BE:73:AA:D6:7B:CE
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/bd7cd31f-4cd2-363f-94c4-c5e5d84b2170.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5/253c1f46-e2ad-4547-8b1c-5935addeddb5.crl

            X509v3 Authority Key Identifier:
                keyid:80:1D:43:D8:F7:17:16:B0:69:AB:08:47:B2:A9:15:13:40:32:69:66

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/253c1f46-e2ad-4547-8b1c-5935addeddb5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.0.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1d:97:dc:bb:09:15:77:7b:b9:94:72:ff:7b:da:50:a4:3d:60:
         cb:ad:cb:12:8d:df:e5:cb:7b:cb:82:f7:54:1f:23:ba:35:71:
         07:19:fb:52:6c:1b:ae:99:15:10:b2:7b:14:89:ef:7b:66:ee:
         e0:7f:b0:d8:eb:90:f7:4c:38:82:19:6f:99:0e:5d:4f:33:42:
         c1:ba:fb:8d:14:df:f6:4c:5f:6c:5c:de:53:90:1f:5f:f7:f4:
         2e:49:fa:ea:6e:03:94:98:6f:ab:78:33:87:47:5b:3d:46:a8:
         75:77:b3:5b:8a:7c:05:95:e4:b5:35:1b:b2:ab:c8:e4:94:0e:
         ee:5f:2b:0c:e8:91:04:81:e2:aa:c0:24:52:ee:e8:c3:96:09:
         4f:35:fa:bd:87:71:1e:58:89:48:13:1d:ed:21:5e:12:fb:0e:
         e7:e6:80:51:c1:cf:79:de:9c:9b:f5:95:fb:3a:4d:c9:56:95:
         df:e0:de:a9:59:c8:32:70:64:f7:a4:55:3f:1d:ec:fa:41:3b:
         76:07:fc:ce:fe:f5:d1:da:69:2e:ec:fa:36:d0:cf:89:59:84:
         b4:89:9e:78:1d:ee:d0:31:90:f7:c1:74:89:61:23:14:0a:91:
         bd:cb:88:f1:e4:a9:f5:30:ee:4b:c0:d1:8c:96:12:85:9c:5a:
         f1:ef:1f:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR8XAxs+lmbiUzBoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjUzYzFmNDYtZTJhZC00NTQ3LThiMWMtNTkzNWFkZGVk
ZGI1MB4XDTI1MDYyNjE0MDc0MloXDTI1MDkyNDE0MDc0MlowLzEtMCsGA1UEAxMk
ZmUxMDJkZjAtZjI5NS00MzliLThlMDctOWY5MTdhMDhjMjg2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnr9ZvZDKQayAqAbWyJ2S5UdnMos1YQZhiHiT
sEkBfTiiYxW60g11h3PC8GSrV9dhsravN/MLvrifKo3ODTtyPnpRgytYmFfAvp9s
+sXj1mMcty3ImIadaJlQ73Rupgc9s8QT+7wGBMHGH9QFqGjOPkgw7URemqfl0fTd
LwqYS59UNTexl6i6QVbqP/q6Z0KSJ1aTu95EjJtfav5slyV6H1eyQSTnkEJRYqNb
VmLSJiMc/ESvI7Vd1xtXe7EYhybBB4PXmk8vG0gIrYR1yOESR5CM+AzS9UUriAE4
TGSkDmJ11Nx9BR6ntk9xZCPRfeDPSrdVvXeW8E6QemlAbxGd6wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBbs3bO1TEQ0cNSqA5hpvnOq1nvOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNj
MWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1YWRkZWRkYjUvYmQ3Y2QzMWYtNGNkMi0z
NjNmLTk0YzQtYzVlNWQ4NGIyMTcwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMjUzYzFmNDYtZTJhZC00NTQ3LThi
MWMtNTkzNWFkZGVkZGI1LzI1M2MxZjQ2LWUyYWQtNDU0Ny04YjFjLTU5MzVhZGRl
ZGRiNS5jcmwwHwYDVR0jBBgwFoAUgB1D2PcXFrBpqwhHsqkVE0AyaWYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yNTNjMWY0Ni1lMmFkLTQ1NDctOGIxYy01OTM1
YWRkZWRkYjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArQBcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB2X3LsJFXd7uZRy/3vaUKQ9YMutyxKN3+XLe8uC91QfI7o1cQcZ+1Js
G66ZFRCyexSJ73tm7uB/sNjrkPdMOIIZb5kOXU8zQsG6+40U3/ZMX2xc3lOQH1/3
9C5J+upuA5SYb6t4M4dHWz1GqHV3s1uKfAWV5LU1G7KryOSUDu5fKwzokQSB4qrA
JFLu6MOWCU81+r2HcR5YiUgTHe0hXhL7DufmgFHBz3nenJv1lfs6TclWld/g3qlZ
yDJwZPekVT8d7PpBO3YH/M7+9dHaaS7s+jbQz4lZhLSJnngd7tAxkPfBdIlhIxQK
kb3LiPHkqfUw7kvA0YyWEoWcWvHvH1s=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:07:37 2025 by rpki-client