Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56d0a32c-42b7-345c-874c-c77c5d064d5b.roa
File:                     56d0a32c-42b7-345c-874c-c77c5d064d5b.roa (raw, json)
Hash identifier:          Vod1U/YQxIsvYu0IJUYPfAepqNyQgro+QP4DB//5pUs=
Subject key identifier:   01:7B:76:FB:08:BD:C7:F7:E7:0E:D1:6F:46:7A:01:CD:2B:96:B2:B2
Certificate issuer:       /CN=b8be496f-26c6-462d-b056-46163f1d0fae
Certificate serial:       010D0C9F4328584AD7D1381F694CE2DD4F685180
Authority key identifier: A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56d0a32c-42b7-345c-874c-c77c5d064d5b.roa
Signing time:             Wed 13 Aug 2025 13:00:41 +0000
ROA not before:           Wed 13 Aug 2025 13:00:41 +0000
ROA not after:            Tue 11 Nov 2025 14:00:41 +0000
asID:                     132892
IP address blocks:        198.41.144.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d7:d1:38:1f:69:4c:e2:dd:4f:68:51:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8be496f-26c6-462d-b056-46163f1d0fae
        Validity
            Not Before: Aug 13 13:00:41 2025 GMT
            Not After : Nov 11 14:00:41 2025 GMT
        Subject: CN=dd4738c8-9936-4ce5-ba91-d4ee7e4f06be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:50:ec:da:b4:06:ae:eb:57:7e:83:43:0b:4e:
                    bd:76:c2:4a:a7:ca:81:93:29:e2:47:4b:9b:d9:93:
                    5b:61:b7:fa:03:17:41:13:41:f5:bb:21:16:12:9b:
                    78:c3:29:08:5d:e7:91:3e:34:54:85:c4:f3:ff:e6:
                    8e:a7:d8:59:5d:22:30:29:57:b9:59:c4:41:44:0b:
                    02:65:97:a0:f9:40:67:c9:08:e2:11:f2:a9:85:0e:
                    a0:90:24:eb:19:11:72:0f:3b:b0:93:65:e2:f6:19:
                    8d:31:8c:ad:9d:aa:d9:78:47:a7:84:0d:30:dd:bb:
                    b1:c7:01:b2:a7:46:f0:e1:03:d3:96:46:0b:8d:5e:
                    b1:d0:b4:6b:4f:62:75:79:d3:0e:69:ae:28:75:35:
                    11:05:15:51:00:d1:3e:b7:83:e4:ea:7b:0a:a0:c0:
                    7a:d0:64:b5:49:f0:f4:e4:0b:14:7a:86:c7:68:a2:
                    ff:91:f6:83:73:07:9e:b5:20:2f:5d:07:fe:6c:3e:
                    f1:71:e2:79:78:09:58:ec:2e:c8:b4:80:45:9d:98:
                    a8:6d:43:9c:72:01:69:ba:fd:6b:98:04:2a:c3:5d:
                    f2:c5:ce:5c:d7:31:00:b1:ca:cd:be:e8:e4:85:34:
                    5e:c6:66:5d:67:80:8a:7b:63:e5:02:15:9d:b1:80:
                    87:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:7B:76:FB:08:BD:C7:F7:E7:0E:D1:6F:46:7A:01:CD:2B:96:B2:B2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/56d0a32c-42b7-345c-874c-c77c5d064d5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae/b8be496f-26c6-462d-b056-46163f1d0fae.crl

            X509v3 Authority Key Identifier:
                keyid:A6:E7:A6:B4:40:19:CF:4E:38:87:66:D9:40:67:75:99:D0:C4:92:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/b8be496f-26c6-462d-b056-46163f1d0fae.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.144.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         75:97:0f:1e:21:18:0c:e8:ed:28:d4:6f:0c:f4:b5:5b:3f:8a:
         18:a6:c8:2a:99:ac:d7:51:2f:d5:95:c3:ff:17:80:01:52:0e:
         86:2d:b8:d5:6a:89:2f:af:ae:49:73:7c:75:78:d0:c0:84:92:
         96:a6:ce:5d:96:c9:a3:34:e5:60:1c:80:3a:f4:60:94:8f:9b:
         c6:4a:0e:ce:b8:8f:e6:4e:f2:8e:e7:bc:93:50:9c:d4:d7:87:
         21:16:35:9f:54:a0:23:2e:3e:79:54:a9:75:e0:b3:61:5e:b1:
         66:f0:e4:d0:dc:71:cc:9a:3e:fc:2b:d1:0f:45:33:08:33:6f:
         8a:63:b0:54:e3:28:c7:fe:5e:13:0b:af:fe:43:d5:33:4b:50:
         0c:b5:80:15:98:d6:47:03:c0:7e:7f:80:f0:1a:f2:a3:b7:c0:
         91:89:6e:8e:bd:eb:cc:99:98:b3:be:85:9e:eb:f8:0e:2d:dc:
         06:c1:9d:e8:83:95:08:57:d3:ca:b3:60:be:11:58:57:b7:df:
         a1:a3:ca:dd:98:47:64:28:00:fc:36:b2:a2:01:c4:f7:4b:93:
         54:f5:8e:e8:89:43:cf:fe:07:c9:a6:4f:bd:6d:85:b2:ad:84:
         86:46:3a:0e:a6:51:fa:19:ec:d2:44:e2:46:fe:bb:fc:6c:95:
         46:34:93:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErX0TgfaUzi3U9oUYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjhiZTQ5NmYtMjZjNi00NjJkLWIwNTYtNDYxNjNmMWQw
ZmFlMB4XDTI1MDgxMzEzMDA0MVoXDTI1MTExMTE0MDA0MVowLzEtMCsGA1UEAxMk
ZGQ0NzM4YzgtOTkzNi00Y2U1LWJhOTEtZDRlZTdlNGYwNmJlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlFDs2rQGrutXfoNDC069dsJKp8qBkyniR0ub
2ZNbYbf6AxdBE0H1uyEWEpt4wykIXeeRPjRUhcTz/+aOp9hZXSIwKVe5WcRBRAsC
ZZeg+UBnyQjiEfKphQ6gkCTrGRFyDzuwk2Xi9hmNMYytnarZeEenhA0w3buxxwGy
p0bw4QPTlkYLjV6x0LRrT2J1edMOaa4odTURBRVRANE+t4Pk6nsKoMB60GS1SfD0
5AsUeobHaKL/kfaDcweetSAvXQf+bD7xceJ5eAlY7C7ItIBFnZiobUOccgFpuv1r
mAQqw13yxc5c1zEAscrNvujkhTRexmZdZ4CKe2PlAhWdsYCHXwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFAF7dvsIvcf35w7Rb0Z6Ac0rlrKyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJl
NDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2M2YxZDBmYWUvNTZkMGEzMmMtNDJiNy0z
NDVjLTg3NGMtYzc3YzVkMDY0ZDViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYjhiZTQ5NmYtMjZjNi00NjJkLWIw
NTYtNDYxNjNmMWQwZmFlL2I4YmU0OTZmLTI2YzYtNDYyZC1iMDU2LTQ2MTYzZjFk
MGZhZS5jcmwwHwYDVR0jBBgwFoAUpuemtEAZz044h2bZQGd1mdDEktwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9iOGJlNDk2Zi0yNmM2LTQ2MmQtYjA1Ni00NjE2
M2YxZDBmYWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAximQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHWXDx4hGAzo7SjUbwz0tVs/ihimyCqZrNdRL9WVw/8XgAFSDoYtuNVq
iS+vrklzfHV40MCEkpamzl2WyaM05WAcgDr0YJSPm8ZKDs64j+ZO8o7nvJNQnNTX
hyEWNZ9UoCMuPnlUqXXgs2FesWbw5NDcccyaPvwr0Q9FMwgzb4pjsFTjKMf+XhML
r/5D1TNLUAy1gBWY1kcDwH5/gPAa8qO3wJGJbo6968yZmLO+hZ7r+A4t3AbBneiD
lQhX08qzYL4RWFe336Gjyt2YR2QoAPw2sqIBxPdLk1T1juiJQ8/+B8mmT71thbKt
hIZGOg6mUfoZ7NJE4kb+u/xslUY0k0c=
-----END CERTIFICATE-----
Generated at Sat Aug 23 16:51:55 2025 by rpki-client