Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9aafc54-b009-37b3-8787-819c12852782.roa
File:                     a9aafc54-b009-37b3-8787-819c12852782.roa (raw, json)
Hash identifier:          jnWy4u6k5+Qr+FQzvNNc6iXNTWqepXrI6MwoDAyuBfc=
Subject key identifier:   70:67:A4:E6:CE:5A:54:84:7A:60:F5:FC:0D:64:01:0C:07:9D:69:70
Certificate issuer:       /CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
Certificate serial:       010D0C9F4328584A51FFA1C76C49BDE944D5B620
Authority key identifier: 7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9aafc54-b009-37b3-8787-819c12852782.roa
Signing time:             Thu 26 Jun 2025 14:36:18 +0000
ROA not before:           Thu 26 Jun 2025 14:36:18 +0000
ROA not after:            Wed 24 Sep 2025 14:36:18 +0000
asID:                     396609
IP address blocks:        192.55.83.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:ff:a1:c7:6c:49:bd:e9:44:d5:b6:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c1c8e395-93d7-4494-88c3-84b3dcbc36c2
        Validity
            Not Before: Jun 26 14:36:18 2025 GMT
            Not After : Sep 24 14:36:18 2025 GMT
        Subject: CN=54b862fd-d356-4c1b-83fa-f0f9ecd93cf8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:63:f9:76:3c:b7:f2:87:81:09:5b:53:c2:5f:
                    32:9a:bc:3d:2c:cb:fb:80:19:2d:dd:2c:72:24:0e:
                    19:e9:bf:53:47:44:6f:f0:e1:31:8b:7d:2c:f3:0f:
                    2a:1b:ed:87:e8:90:66:37:5a:53:06:d2:30:eb:6e:
                    5d:cf:83:20:91:37:62:f5:3e:0b:07:6a:dc:1e:ff:
                    f0:bf:28:88:a7:62:50:03:ff:84:04:0b:fc:ca:f6:
                    e0:7e:9e:bf:8a:93:f6:aa:93:9c:f7:19:8c:ea:df:
                    58:34:f6:24:3c:98:1a:22:ee:b7:27:9a:32:81:be:
                    f8:b1:56:7b:13:bd:db:e6:40:a7:5e:3d:9a:41:0c:
                    6f:5b:47:00:90:61:3c:67:dc:f3:82:28:22:87:f0:
                    0e:75:31:61:2c:aa:80:8f:be:4d:5a:50:b8:20:1e:
                    a3:69:bd:a1:aa:27:a9:ec:07:9d:f3:fb:75:5b:54:
                    b7:8c:fe:9b:39:52:4e:5d:79:08:9e:6e:da:80:21:
                    b5:ad:78:df:59:38:d3:96:63:9a:82:1d:7b:db:7d:
                    a8:20:8f:b4:22:19:af:02:70:f9:ca:33:1d:d1:6b:
                    51:f7:9c:75:05:77:99:73:5f:58:08:4a:7d:66:49:
                    da:17:3e:4a:2c:99:1c:71:f5:86:4d:ba:ec:60:37:
                    5f:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:67:A4:E6:CE:5A:54:84:7A:60:F5:FC:0D:64:01:0C:07:9D:69:70
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/a9aafc54-b009-37b3-8787-819c12852782.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.crl

            X509v3 Authority Key Identifier:
                keyid:7D:A9:CF:A4:CE:BE:0E:15:59:17:6F:AB:CA:F4:B3:B5:35:55:0C:91

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/c1c8e395-93d7-4494-88c3-84b3dcbc36c2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.55.83.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:10:36:67:2a:22:6f:5d:66:c3:1e:27:08:7e:80:3c:f1:2e:
         e9:e0:97:d8:b7:45:c1:b8:98:95:63:ef:42:68:4a:71:6e:31:
         fd:17:81:1a:b4:7c:84:98:c5:b6:9a:91:dc:ee:e5:58:d0:7c:
         57:c9:22:7a:8f:85:df:ec:12:2f:78:e1:de:ee:ca:cf:e1:66:
         48:94:21:73:a9:e6:ec:33:ed:0c:86:0f:1c:ec:73:57:62:3b:
         01:f9:84:cd:b6:27:4e:b3:db:68:5a:73:0c:e7:b0:aa:01:4f:
         51:b9:91:73:97:66:94:2c:aa:84:20:70:7f:b2:5a:c8:98:de:
         00:13:9a:7e:d4:a7:8d:b9:ab:8e:d4:12:16:80:df:6a:fe:7c:
         35:27:5d:0d:e4:d2:47:b7:30:7c:da:56:b0:3b:ff:30:67:5e:
         0b:1f:3e:45:8a:00:e8:e9:9f:a1:b8:57:f3:3d:6b:e6:97:74:
         5e:ed:7b:e0:14:3c:43:3d:03:cc:5d:59:1a:71:53:b8:78:9b:
         8d:e6:c6:f0:09:75:d9:0f:a4:4c:9d:d4:cb:47:20:f8:3f:8c:
         a7:58:55:c9:70:1e:8c:6b:47:b6:5f:d6:07:94:3d:9c:af:34:
         8f:6f:5d:ae:db:79:2e:61:e1:06:25:59:da:6f:1b:b6:c9:ea:
         9e:6e:8c:77
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR/6HHbEm96UTVtiAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzFjOGUzOTUtOTNkNy00NDk0LTg4YzMtODRiM2RjYmMz
NmMyMB4XDTI1MDYyNjE0MzYxOFoXDTI1MDkyNDE0MzYxOFowLzEtMCsGA1UEAxMk
NTRiODYyZmQtZDM1Ni00YzFiLTgzZmEtZjBmOWVjZDkzY2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0mP5djy38oeBCVtTwl8ymrw9LMv7gBkt3Sxy
JA4Z6b9TR0Rv8OExi30s8w8qG+2H6JBmN1pTBtIw625dz4MgkTdi9T4LB2rcHv/w
vyiIp2JQA/+EBAv8yvbgfp6/ipP2qpOc9xmM6t9YNPYkPJgaIu63J5oygb74sVZ7
E73b5kCnXj2aQQxvW0cAkGE8Z9zzgigih/AOdTFhLKqAj75NWlC4IB6jab2hqiep
7Aed8/t1W1S3jP6bOVJOXXkInm7agCG1rXjfWTjTlmOagh17232oII+0IhmvAnD5
yjMd0WtR95x1BXeZc19YCEp9ZknaFz5KLJkccfWGTbrsYDdffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHBnpObOWlSEemD1/A1kAQwHnWlwMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4
ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIzZGNiYzM2YzIvYTlhYWZjNTQtYjAwOS0z
N2IzLTg3ODctODE5YzEyODUyNzgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvYzFjOGUzOTUtOTNkNy00NDk0LTg4
YzMtODRiM2RjYmMzNmMyL2MxYzhlMzk1LTkzZDctNDQ5NC04OGMzLTg0YjNkY2Jj
MzZjMi5jcmwwHwYDVR0jBBgwFoAUfanPpM6+DhVZF2+ryvSztTVVDJEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9jMWM4ZTM5NS05M2Q3LTQ0OTQtODhjMy04NGIz
ZGNiYzM2YzIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwDdTMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHQQNmcqIm9dZsMeJwh+gDzxLungl9i3RcG4mJVj70JoSnFuMf0XgRq0
fISYxbaakdzu5VjQfFfJInqPhd/sEi944d7uys/hZkiUIXOp5uwz7QyGDxzsc1di
OwH5hM22J06z22hacwznsKoBT1G5kXOXZpQsqoQgcH+yWsiY3gATmn7Up425q47U
EhaA32r+fDUnXQ3k0ke3MHzaVrA7/zBnXgsfPkWKAOjpn6G4V/M9a+aXdF7te+AU
PEM9A8xdWRpxU7h4m43mxvAJddkPpEyd1MtHIPg/jKdYVclwHoxrR7Zf1geUPZyv
NI9vXa7beS5h4QYlWdpvG7bJ6p5ujHc=
-----END CERTIFICATE-----
Generated at Wed Jul 2 07:29:29 2025 by rpki-client