Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
File:                     62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa (raw, json)
Hash identifier:          CRI9v05zfikc0gfJCcp6YEnj5iHuy/pfkcpZxOGJGuA=
Subject key identifier:   0E:D4:24:F6:61:1B:54:E5:D5:6A:61:5B:6E:99:BE:97:7E:07:8D:26
Certificate issuer:       /CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
Certificate serial:       010D0C9F43285849A4BA4D499FA40AB54144F520
Authority key identifier: CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa
Signing time:             Fri 25 Apr 2025 13:01:00 +0000
ROA not before:           Fri 25 Apr 2025 13:01:00 +0000
ROA not after:            Thu 24 Jul 2025 13:01:00 +0000
asID:                     8075
IP address blocks:        192.131.254.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a4:ba:4d:49:9f:a4:0a:b5:41:44:f5:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2941f7b4-6dbb-4519-a33a-46d7923cc72a
        Validity
            Not Before: Apr 25 13:01:00 2025 GMT
            Not After : Jul 24 13:01:00 2025 GMT
        Subject: CN=f2d04d00-f8d2-4737-afd6-dd7639f09959
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:df:24:5e:23:47:54:b5:fe:e5:de:9c:ab:09:
                    1d:95:0a:1e:65:32:1b:9f:d6:55:5b:36:0e:da:d4:
                    a8:30:8e:c9:30:8c:cd:99:e9:06:9c:91:cb:6f:5c:
                    52:fa:2b:44:bf:32:21:f6:4f:0f:34:96:69:53:f6:
                    c4:40:ab:aa:d8:b8:69:35:76:51:02:60:dd:7b:6e:
                    5b:a0:f6:f0:4f:74:c1:36:5b:dd:d0:eb:27:8a:72:
                    bd:ac:d7:9e:d6:16:0c:89:ed:92:6a:b5:83:0a:ae:
                    1d:01:56:78:d4:25:6d:6c:32:e7:8a:40:36:5b:1b:
                    8c:4b:9f:01:4e:7a:d4:ab:43:5a:b8:2b:cd:1a:04:
                    47:45:7d:d0:cd:a5:1b:de:c4:16:26:3a:3a:19:a8:
                    c0:b8:dd:82:20:76:c3:fb:51:9d:e7:93:22:4f:b5:
                    e3:31:00:68:a0:f1:21:c3:88:f4:dd:f6:82:ad:16:
                    5a:da:c0:c7:a4:64:29:05:5c:7f:66:5f:d4:39:3a:
                    86:16:ae:c8:4b:0f:e8:c4:54:26:19:23:e3:8b:5d:
                    9f:5d:cc:d5:9b:b0:33:13:6a:9e:54:83:cc:9f:57:
                    fa:58:81:96:15:59:3b:fc:3d:77:8e:ec:78:4d:e8:
                    85:3a:90:5c:4c:df:3f:0d:74:c9:92:20:8c:dd:a1:
                    d6:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:D4:24:F6:61:1B:54:E5:D5:6A:61:5B:6E:99:BE:97:7E:07:8D:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/62492b55-c4a5-3985-a1e2-dbbb70b77d69.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a/2941f7b4-6dbb-4519-a33a-46d7923cc72a.crl

            X509v3 Authority Key Identifier:
                keyid:CD:87:29:25:8B:EE:B0:B5:F2:E7:67:DF:1E:B8:0F:80:FC:3F:D4:12

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/2941f7b4-6dbb-4519-a33a-46d7923cc72a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.131.254.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:87:f1:1d:eb:9d:e6:56:8c:3b:c2:20:97:08:49:f8:5d:c7:
         b2:8d:2e:58:b0:3e:c2:17:5a:e4:b1:8c:a8:96:3b:38:82:e8:
         c1:63:d0:a2:93:3c:03:72:a0:96:66:57:56:0b:7c:a9:73:db:
         63:32:5a:ee:a4:e2:29:dd:3f:01:d7:71:d4:55:c9:84:c4:08:
         3c:68:10:9b:cc:1b:c2:13:5d:c5:3d:0c:21:29:1a:af:f4:ab:
         c7:40:40:f4:42:b0:ed:58:f3:30:8d:5c:56:5b:da:68:0d:21:
         dd:68:8c:92:9a:f5:e5:2a:9c:5f:ce:0c:cc:05:9c:41:c5:be:
         d3:00:3b:58:95:44:7e:7b:1c:85:17:30:7a:c8:11:24:97:db:
         53:89:e4:35:e9:9f:ea:37:8c:19:8e:87:0b:7d:f3:05:b5:3e:
         01:48:38:1c:4e:75:8b:16:c8:e2:3b:29:16:da:3f:29:67:f8:
         26:13:69:1c:df:3d:1e:f0:73:22:db:c1:c8:55:ed:75:98:5d:
         45:6c:4d:d5:5e:be:58:ee:fc:fc:71:a1:f9:d2:2a:46:d3:a6:
         8a:62:52:20:4d:16:83:25:d7:f2:7d:0e:16:62:86:5c:b8:2e:
         79:d9:1a:d8:75:12:9c:4e:cc:74:9a:54:8f:56:1b:62:ad:53:
         bf:4f:0b:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmkuk1Jn6QKtUFE9SAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjk0MWY3YjQtNmRiYi00NTE5LWEzM2EtNDZkNzkyM2Nj
NzJhMB4XDTI1MDQyNTEzMDEwMFoXDTI1MDcyNDEzMDEwMFowLzEtMCsGA1UEAxMk
ZjJkMDRkMDAtZjhkMi00NzM3LWFmZDYtZGQ3NjM5ZjA5OTU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg98kXiNHVLX+5d6cqwkdlQoeZTIbn9ZVWzYO
2tSoMI7JMIzNmekGnJHLb1xS+itEvzIh9k8PNJZpU/bEQKuq2LhpNXZRAmDde25b
oPbwT3TBNlvd0OsninK9rNee1hYMie2SarWDCq4dAVZ41CVtbDLnikA2WxuMS58B
TnrUq0NauCvNGgRHRX3QzaUb3sQWJjo6GajAuN2CIHbD+1Gd55MiT7XjMQBooPEh
w4j03faCrRZa2sDHpGQpBVx/Zl/UOTqGFq7ISw/oxFQmGSPji12fXczVm7AzE2qe
VIPMn1f6WIGWFVk7/D13jux4TeiFOpBcTN8/DXTJkiCM3aHW2wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA7UJPZhG1Tl1WphW26Zvpd+B40mMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8yOTQx
ZjdiNC02ZGJiLTQ1MTktYTMzYS00NmQ3OTIzY2M3MmEvNjI0OTJiNTUtYzRhNS0z
OTg1LWExZTItZGJiYjcwYjc3ZDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMjk0MWY3YjQtNmRiYi00NTE5LWEz
M2EtNDZkNzkyM2NjNzJhLzI5NDFmN2I0LTZkYmItNDUxOS1hMzNhLTQ2ZDc5MjNj
YzcyYS5jcmwwHwYDVR0jBBgwFoAUzYcpJYvusLXy52ffHrgPgPw/1BIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8yOTQxZjdiNC02ZGJiLTQ1MTktYTMzYS00NmQ3
OTIzY2M3MmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwIP+MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK+H8R3rneZWjDvCIJcISfhdx7KNLliwPsIXWuSxjKiWOziC6MFj0KKT
PANyoJZmV1YLfKlz22MyWu6k4indPwHXcdRVyYTECDxoEJvMG8ITXcU9DCEpGq/0
q8dAQPRCsO1Y8zCNXFZb2mgNId1ojJKa9eUqnF/ODMwFnEHFvtMAO1iVRH57HIUX
MHrIESSX21OJ5DXpn+o3jBmOhwt98wW1PgFIOBxOdYsWyOI7KRbaPyln+CYTaRzf
PR7wcyLbwchV7XWYXUVsTdVevlju/PxxofnSKkbTpopiUiBNFoMl1/J9DhZihly4
LnnZGth1EpxOzHSaVI9WG2KtU79PC4c=
-----END CERTIFICATE-----
Generated at Sun Jun 29 15:54:17 2025 by rpki-client