Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
File:                     9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa (raw, json)
Hash identifier:          Iizpg00BA6nXJYIfp0VqMymp2N1I/mXLL7CXmtIpuVk=
Subject key identifier:   01:95:92:9D:E4:22:9C:95:F0:6F:B5:C1:26:F7:38:8A:F5:CF:6F:86
Certificate issuer:       /CN=af86fe52-5b77-46b6-9502-51ccccf3a755
Certificate serial:       010D0C9F4328584A549B1D1F18FDAD24283E1460
Authority key identifier: A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa
Signing time:             Fri 27 Jun 2025 13:01:05 +0000
ROA not before:           Fri 27 Jun 2025 13:01:05 +0000
ROA not after:            Thu 25 Sep 2025 13:01:05 +0000
asID:                     16509
IP address blocks:        131.226.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:54:9b:1d:1f:18:fd:ad:24:28:3e:14:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=af86fe52-5b77-46b6-9502-51ccccf3a755
        Validity
            Not Before: Jun 27 13:01:05 2025 GMT
            Not After : Sep 25 13:01:05 2025 GMT
        Subject: CN=6283c64d-7795-46fa-a7e4-fcbcbe71a032
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:b1:30:65:e9:4c:03:e4:2c:ea:35:56:9f:72:
                    5b:78:b2:a9:58:38:1a:97:67:7e:09:e9:23:66:bc:
                    d6:19:c0:f1:52:ee:63:b1:55:e2:85:87:1e:47:ba:
                    46:85:d0:f9:87:b1:b4:6e:47:19:07:17:fa:46:24:
                    f4:63:b6:89:11:8c:34:bb:60:9b:20:39:25:ae:64:
                    e9:bb:77:0e:ee:52:45:97:5b:ab:e2:c8:09:c9:b6:
                    7b:8e:19:b6:61:3f:e4:59:28:d7:b7:11:45:2d:25:
                    7e:45:fc:3d:f3:b8:84:b1:84:18:3d:13:b9:e3:27:
                    22:a5:6b:fa:5b:dc:2a:cf:e0:e8:ef:83:33:64:19:
                    9b:44:0f:f0:4a:61:47:30:a0:5a:70:20:04:96:64:
                    6f:c3:86:32:73:0e:b9:aa:d2:58:e0:34:69:4b:c4:
                    9f:e2:03:10:3c:bf:27:ee:5e:c7:8b:3c:4c:e4:e2:
                    89:93:f7:da:c1:4e:3f:88:43:90:92:19:f7:e5:37:
                    ea:29:82:f2:65:23:56:24:af:84:87:71:b0:4e:6b:
                    14:9b:7c:7d:14:e3:bd:82:fb:22:87:68:60:a1:07:
                    dd:f6:1b:ea:b9:d3:54:27:88:67:c4:e0:04:9f:0b:
                    0a:5e:64:b5:4d:12:74:db:a8:7e:36:6a:f9:4c:12:
                    68:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:95:92:9D:E4:22:9C:95:F0:6F:B5:C1:26:F7:38:8A:F5:CF:6F:86
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/9dbb5454-4382-3a81-8ec0-b1d7d76be66f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755/af86fe52-5b77-46b6-9502-51ccccf3a755.crl

            X509v3 Authority Key Identifier:
                keyid:A4:29:D8:75:BC:BD:E9:F2:23:77:D7:27:2F:CD:86:45:68:FD:62:FA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/af86fe52-5b77-46b6-9502-51ccccf3a755.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.226.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:a7:41:82:3b:27:33:18:49:76:73:45:b5:94:c5:1f:cb:d7:
         ac:cf:6d:93:ad:66:cb:d3:6e:1b:c4:69:bd:9a:ec:b0:23:a3:
         31:d6:82:d3:ab:46:bc:3d:10:f8:77:99:5b:ca:28:45:f5:1b:
         b3:3f:31:9a:54:fc:41:d5:4d:a6:8a:e5:b8:bc:d9:4e:78:d9:
         8b:a5:24:c8:56:b8:93:d4:6c:e9:4c:40:ce:18:3b:8f:33:6e:
         0a:25:83:aa:a5:83:eb:97:cd:f3:0d:de:7d:22:73:c0:97:9f:
         e2:1a:ca:81:1a:6d:1a:81:26:12:f8:c9:c4:ab:ef:88:05:38:
         ec:ae:96:71:c2:05:12:d0:39:d2:c4:63:af:5f:d0:ad:47:c8:
         2c:2c:e1:13:a4:fe:ef:e2:d3:3e:3d:71:48:09:08:34:de:a2:
         13:1b:3a:28:92:2f:d8:b3:50:ae:86:aa:45:6e:fe:1a:72:3c:
         cb:19:03:92:84:24:8b:f4:f9:98:45:f3:82:f3:08:c3:fa:98:
         14:89:dd:73:bd:88:03:77:48:76:02:18:a6:3a:b5:42:02:e7:
         73:80:9d:32:1b:5f:a6:98:cc:00:0f:ff:22:65:52:e6:6b:6d:
         f8:52:cc:f6:7b:a9:ff:fa:b4:b8:b0:8e:87:de:54:3f:68:be:
         3b:11:aa:0a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpUmx0fGP2tJCg+FGAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWY4NmZlNTItNWI3Ny00NmI2LTk1MDItNTFjY2NjZjNh
NzU1MB4XDTI1MDYyNzEzMDEwNVoXDTI1MDkyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NjI4M2M2NGQtNzc5NS00NmZhLWE3ZTQtZmNiY2JlNzFhMDMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlbEwZelMA+Qs6jVWn3JbeLKpWDgal2d+Cekj
ZrzWGcDxUu5jsVXihYceR7pGhdD5h7G0bkcZBxf6RiT0Y7aJEYw0u2CbIDklrmTp
u3cO7lJFl1ur4sgJybZ7jhm2YT/kWSjXtxFFLSV+Rfw987iEsYQYPRO54ycipWv6
W9wqz+Do74MzZBmbRA/wSmFHMKBacCAElmRvw4Yycw65qtJY4DRpS8Sf4gMQPL8n
7l7HizxM5OKJk/fawU4/iEOQkhn35TfqKYLyZSNWJK+Eh3GwTmsUm3x9FOO9gvsi
h2hgoQfd9hvqudNUJ4hnxOAEnwsKXmS1TRJ026h+Nmr5TBJoRQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAGVkp3kIpyV8G+1wSb3OIr1z2+GMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2
ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNjY2NmM2E3NTUvOWRiYjU0NTQtNDM4Mi0z
YTgxLThlYzAtYjFkN2Q3NmJlNjZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYWY4NmZlNTItNWI3Ny00NmI2LTk1
MDItNTFjY2NjZjNhNzU1L2FmODZmZTUyLTViNzctNDZiNi05NTAyLTUxY2NjY2Yz
YTc1NS5jcmwwHwYDVR0jBBgwFoAUpCnYdby96fIjd9cnL82GRWj9YvowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9hZjg2ZmU1Mi01Yjc3LTQ2YjYtOTUwMi01MWNj
Y2NmM2E3NTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCg+K4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACanQYI7JzMYSXZzRbWUxR/L16zPbZOtZsvTbhvEab2a7LAjozHWgtOr
Rrw9EPh3mVvKKEX1G7M/MZpU/EHVTaaK5bi82U542YulJMhWuJPUbOlMQM4YO48z
bgolg6qlg+uXzfMN3n0ic8CXn+IayoEabRqBJhL4ycSr74gFOOyulnHCBRLQOdLE
Y69f0K1HyCws4ROk/u/i0z49cUgJCDTeohMbOiiSL9izUK6GqkVu/hpyPMsZA5KE
JIv0+ZhF84LzCMP6mBSJ3XO9iAN3SHYCGKY6tUIC53OAnTIbX6aYzAAP/yJlUuZr
bfhSzPZ7qf/6tLiwjofeVD9ovjsRqgo=
-----END CERTIFICATE-----
Generated at Mon Jun 30 23:45:31 2025 by rpki-client