Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa
File:                     0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa (raw, json)
Hash identifier:          NI8v66qc+QBA+YoY0s36AmMx3b9fLr07prP6q+bMdec=
Subject key identifier:   F4:B5:CD:18:78:74:C2:E0:D5:D6:47:AF:C9:9D:BF:C6:DF:A0:3D:CA
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A42D692164646D92931784580
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa
Signing time:             Sat 21 Jun 2025 04:16:27 +0000
ROA not before:           Sat 21 Jun 2025 04:16:27 +0000
ROA not after:            Fri 19 Sep 2025 04:16:27 +0000
asID:                     6922
IP address blocks:        192.124.231.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:42:d6:92:16:46:46:d9:29:31:78:45:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jun 21 04:16:27 2025 GMT
            Not After : Sep 19 04:16:27 2025 GMT
        Subject: CN=e859cc0d-db4e-4ed2-99c2-68b0c76bba9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:4e:c6:28:00:ed:da:e3:a6:65:2b:44:ac:17:
                    d9:a0:eb:fb:28:dc:f8:df:20:2d:0d:c9:6f:a4:4a:
                    d2:a8:28:76:e2:0b:00:e8:b4:8a:a5:12:98:de:25:
                    40:49:eb:6c:d3:68:fc:26:fd:35:44:54:c6:9e:90:
                    71:a7:37:22:99:23:5d:df:e6:a2:5d:d4:78:4d:71:
                    5a:d2:4a:4d:c0:2e:bc:ba:14:4d:a5:7d:99:2e:04:
                    d7:d0:02:8c:78:8b:17:db:09:6b:d1:ac:b9:a5:74:
                    c0:d2:df:8f:71:1a:65:50:2c:ff:f5:da:87:20:3b:
                    f5:23:5e:fe:b0:d4:19:99:ac:3d:83:c0:88:97:e4:
                    f7:9a:78:2f:79:66:73:40:7f:dd:f7:95:53:30:9b:
                    b2:20:c8:92:c9:94:12:02:4c:aa:2d:e3:1f:ff:55:
                    07:ed:aa:18:9b:fe:c6:42:ea:5b:37:a2:74:70:3e:
                    76:a5:bd:4f:6e:ea:33:a8:b0:8c:1b:d4:bd:fb:44:
                    d2:ee:b5:0d:8f:82:45:c8:ac:bd:00:96:56:04:61:
                    45:46:58:25:e3:2e:37:08:e7:8c:fe:2f:ab:f5:7c:
                    0a:da:25:f9:06:93:3d:73:40:28:ae:69:20:7c:fa:
                    a5:87:4e:98:ef:4b:bb:35:03:3c:20:e9:f1:03:35:
                    f2:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B5:CD:18:78:74:C2:E0:D5:D6:47:AF:C9:9D:BF:C6:DF:A0:3D:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/0ed2e2c5-ee06-3d02-9a78-dad9818e33d3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.124.231.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:07:62:6e:23:c9:0e:06:ef:f2:10:38:3e:1c:dd:76:4a:23:
         17:0e:79:a2:cd:5d:82:82:5b:3f:6a:18:52:80:43:c3:5e:bc:
         fd:03:cd:05:72:b4:ce:78:8a:a6:de:65:72:3a:7b:d0:6c:ad:
         e9:86:b9:30:d8:19:2b:c3:4f:2a:fb:14:7a:dc:b5:7d:ca:bb:
         7c:1d:8b:c3:80:6a:4b:a6:73:ab:82:7c:56:cd:a3:6a:c4:64:
         c3:94:d5:91:20:4c:50:75:25:34:e0:37:8b:fe:7f:7f:3e:7d:
         92:5e:8c:23:71:1c:27:e2:46:10:2a:13:77:7e:95:10:e7:67:
         13:b1:00:96:ae:3e:61:0f:5d:28:1a:82:ac:bc:46:e9:54:e4:
         f1:7d:70:8c:82:47:61:5f:9b:d7:ff:df:16:e3:77:2c:2d:4e:
         5a:97:27:0f:45:e8:db:c3:f3:fd:83:04:a3:6b:60:24:b1:39:
         b3:23:c2:62:e0:dd:4e:10:35:67:bc:f3:bc:8e:29:0f:f0:fc:
         e0:34:39:6a:11:19:f7:b7:98:e1:22:df:25:34:5c:67:95:bc:
         45:fd:6b:fb:62:39:77:1f:b0:1a:c5:a5:53:4e:14:49:24:b6:
         76:c9:0f:0a:b8:47:a6:62:16:f3:2f:95:ba:12:9d:08:19:63:
         a6:15:37:3b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpC1pIWRkbZKTF4RYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDYyMTA0MTYyN1oXDTI1MDkxOTA0MTYyN1owLzEtMCsGA1UEAxMk
ZTg1OWNjMGQtZGI0ZS00ZWQyLTk5YzItNjhiMGM3NmJiYTlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlU7GKADt2uOmZStErBfZoOv7KNz43yAtDclv
pErSqCh24gsA6LSKpRKY3iVASets02j8Jv01RFTGnpBxpzcimSNd3+aiXdR4TXFa
0kpNwC68uhRNpX2ZLgTX0AKMeIsX2wlr0ay5pXTA0t+PcRplUCz/9dqHIDv1I17+
sNQZmaw9g8CIl+T3mngveWZzQH/d95VTMJuyIMiSyZQSAkyqLeMf/1UH7aoYm/7G
QupbN6J0cD52pb1PbuozqLCMG9S9+0TS7rUNj4JFyKy9AJZWBGFFRlgl4y43COeM
/i+r9XwK2iX5BpM9c0AormkgfPqlh06Y70u7NQM8IOnxAzXyjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPS1zRh4dMLg1dZHr8mdv8bfoD3KMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvMGVkMmUyYzUtZWUwNi0z
ZDAyLTlhNzgtZGFkOTgxOGUzM2QzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwHznMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAB8HYm4jyQ4G7/IQOD4c3XZKIxcOeaLNXYKCWz9qGFKAQ8NevP0DzQVy
tM54iqbeZXI6e9BsremGuTDYGSvDTyr7FHrctX3Ku3wdi8OAakumc6uCfFbNo2rE
ZMOU1ZEgTFB1JTTgN4v+f38+fZJejCNxHCfiRhAqE3d+lRDnZxOxAJauPmEPXSga
gqy8RulU5PF9cIyCR2Ffm9f/3xbjdywtTlqXJw9F6NvD8/2DBKNrYCSxObMjwmLg
3U4QNWe887yOKQ/w/OA0OWoRGfe3mOEi3yU0XGeVvEX9a/tiOXcfsBrFpVNOFEkk
tnbJDwq4R6ZiFvMvlboSnQgZY6YVNzs=
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:58:15 2025 by rpki-client