Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa
File:                     77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa (raw, json)
Hash identifier:          jNCsjG8QgLjO4MS/tTKSgXULWkkMU9OZZYNO378Koew=
Subject key identifier:   53:92:8E:54:F2:3D:36:E5:92:33:FF:20:7B:04:2C:E3:15:DF:54:40
Certificate issuer:       /CN=1b1fd062-f802-4363-ad37-7232f990c625
Certificate serial:       010D0C9F4328584AD23BDA12554EA1EEF0337880
Authority key identifier: D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397593
IP address blocks:        158.51.190.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3b:da:12:55:4e:a1:ee:f0:33:78:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1b1fd062-f802-4363-ad37-7232f990c625
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=ec82edbb-8f30-407e-96bc-8d1ed5c78304
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:7d:e6:45:bd:5e:b7:61:7c:a6:6a:2d:f7:74:
                    09:e2:18:bb:c6:4d:26:e6:45:c1:e3:64:88:c1:aa:
                    5e:85:8e:be:56:fb:38:c8:c0:af:1c:b0:fc:be:1b:
                    13:0b:68:2f:62:f3:0b:31:49:4d:a5:a8:37:5a:e4:
                    5f:f6:ec:d3:d2:91:3d:27:36:68:12:65:20:1f:c7:
                    d4:b3:d7:ea:00:f9:d2:ac:98:29:5a:87:71:aa:ad:
                    3b:d4:a9:62:32:cf:09:83:2b:c7:a3:90:f0:d0:3a:
                    62:8f:fa:28:e8:5f:f6:97:09:20:35:39:af:a8:84:
                    9e:9a:90:cd:05:f6:b5:f9:34:b8:63:10:8e:85:50:
                    1b:01:e2:09:3b:6b:49:95:4f:bf:e6:f9:6d:62:c4:
                    70:02:17:e3:a4:28:4b:79:79:48:32:1e:22:73:00:
                    b9:0c:d8:61:50:ad:11:f4:55:0a:a4:c9:d3:cf:84:
                    b7:aa:9f:d1:44:b8:08:f7:61:07:6d:fa:b8:d7:39:
                    08:be:4b:bd:de:10:fe:fe:92:80:23:6a:08:ca:24:
                    ff:c2:47:06:ef:46:de:52:2a:f9:28:36:dc:93:ab:
                    51:8d:c7:ec:28:10:24:c6:1e:54:27:7a:5b:de:f9:
                    01:c4:bf:c9:f0:2b:04:df:79:7b:d6:11:a2:c7:f3:
                    c3:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:92:8E:54:F2:3D:36:E5:92:33:FF:20:7B:04:2C:E3:15:DF:54:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/77945582-4ddd-3fcb-bd7c-ec18d5e400c2.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625/1b1fd062-f802-4363-ad37-7232f990c625.crl

            X509v3 Authority Key Identifier:
                keyid:D1:C9:01:FA:B8:1E:C7:B3:77:02:B9:4F:41:BC:05:A5:ED:94:7B:C5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1b1fd062-f802-4363-ad37-7232f990c625.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.51.190.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:67:a3:66:c2:10:7b:8e:af:95:07:47:f7:00:ce:4d:f0:29:
         fb:f7:84:09:35:cd:85:84:28:59:23:d1:06:b5:b5:9a:d8:93:
         79:61:20:85:bb:ce:32:25:28:a6:93:1b:16:5e:25:47:e6:6e:
         01:2a:2c:94:fc:40:c8:52:46:e1:a2:20:88:05:b8:87:b2:d0:
         dc:12:92:18:cb:af:f3:71:07:77:b3:97:2e:1a:7c:f0:71:d8:
         37:78:43:4a:03:94:0b:b3:57:55:3f:9a:29:16:82:36:c4:2e:
         f4:3e:05:e8:5e:cc:ab:e8:11:3b:11:5c:13:90:da:c1:8b:ae:
         89:ca:cd:8d:bb:55:e8:5a:fb:ef:88:bb:1d:16:c1:5c:06:8d:
         7d:b6:49:e3:38:bc:05:fe:23:e8:f4:9a:13:30:5f:dc:5e:e3:
         98:76:75:0e:bb:12:1b:b3:8f:6b:29:3e:3d:3d:f0:9a:6f:76:
         43:4d:70:c6:53:34:7c:46:90:bf:d5:76:ce:f1:49:77:00:56:
         67:40:9d:41:68:57:d5:4c:bd:e8:f6:df:0e:ba:32:a3:ce:0f:
         1f:92:d2:97:80:10:56:81:09:6f:22:f2:af:a4:26:5c:1d:a7:
         f5:2d:9b:f8:b3:fe:3d:59:ee:7b:8c:39:90:31:80:7e:79:2d:
         b1:65:7a:69
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErSO9oSVU6h7vAzeIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWIxZmQwNjItZjgwMi00MzYzLWFkMzctNzIzMmY5OTBj
NjI1MB4XDTI1MDgxMTEzMDA0MFoXDTI1MTEwOTE0MDA0MFowLzEtMCsGA1UEAxMk
ZWM4MmVkYmItOGYzMC00MDdlLTk2YmMtOGQxZWQ1Yzc4MzA0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz33mRb1et2F8pmot93QJ4hi7xk0m5kXB42SI
wapehY6+Vvs4yMCvHLD8vhsTC2gvYvMLMUlNpag3WuRf9uzT0pE9JzZoEmUgH8fU
s9fqAPnSrJgpWodxqq071KliMs8JgyvHo5Dw0Dpij/oo6F/2lwkgNTmvqISempDN
Bfa1+TS4YxCOhVAbAeIJO2tJlU+/5vltYsRwAhfjpChLeXlIMh4icwC5DNhhUK0R
9FUKpMnTz4S3qp/RRLgI92EHbfq41zkIvku93hD+/pKAI2oIyiT/wkcG70beUir5
KDbck6tRjcfsKBAkxh5UJ3pb3vkBxL/J8CsE33l71hGix/PDlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFOSjlTyPTblkjP/IHsELOMV31RAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xYjFm
ZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMyZjk5MGM2MjUvNzc5NDU1ODItNGRkZC0z
ZmNiLWJkN2MtZWMxOGQ1ZTQwMGMyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWIxZmQwNjItZjgwMi00MzYzLWFk
MzctNzIzMmY5OTBjNjI1LzFiMWZkMDYyLWY4MDItNDM2My1hZDM3LTcyMzJmOTkw
YzYyNS5jcmwwHwYDVR0jBBgwFoAU0ckB+rgex7N3ArlPQbwFpe2Ue8UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xYjFmZDA2Mi1mODAyLTQzNjMtYWQzNy03MjMy
Zjk5MGM2MjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBnjO+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIdno2bCEHuOr5UHR/cAzk3wKfv3hAk1zYWEKFkj0Qa1tZrYk3lhIIW7
zjIlKKaTGxZeJUfmbgEqLJT8QMhSRuGiIIgFuIey0NwSkhjLr/NxB3ezly4afPBx
2Dd4Q0oDlAuzV1U/mikWgjbELvQ+BehezKvoETsRXBOQ2sGLronKzY27Veha+++I
ux0WwVwGjX22SeM4vAX+I+j0mhMwX9xe45h2dQ67Ehuzj2spPj098JpvdkNNcMZT
NHxGkL/Vds7xSXcAVmdAnUFoV9VMvej23w66MqPODx+S0peAEFaBCW8i8q+kJlwd
p/Utm/iz/j1Z7nuMOZAxgH55LbFlemk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:11:38 2025 by rpki-client