Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa
File:                     522c862f-9fcd-3df6-b8da-dfc4d521d237.roa (raw, json)
Hash identifier:          4yXk87El6B9/9Unlict4b2TSL7DY2LQmEE/aW1v8cBE=
Subject key identifier:   DB:D8:0A:7E:55:6B:FD:2A:68:E3:DA:81:73:2B:87:3D:0A:51:89:1A
Certificate issuer:       /CN=56183502-983d-4114-a074-bf0eaa901de3
Certificate serial:       010D0C9F4328584ACF70FD21F657847116CB1900
Authority key identifier: A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa
Signing time:             Sun 10 Aug 2025 13:00:41 +0000
ROA not before:           Sun 10 Aug 2025 13:00:41 +0000
ROA not after:            Sat 08 Nov 2025 14:00:41 +0000
asID:                     54363
IP address blocks:        199.193.16.0/24 maxlen: 24
                          199.193.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cf:70:fd:21:f6:57:84:71:16:cb:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=56183502-983d-4114-a074-bf0eaa901de3
        Validity
            Not Before: Aug 10 13:00:41 2025 GMT
            Not After : Nov  8 14:00:41 2025 GMT
        Subject: CN=1815e146-65f8-48d0-af85-9624e1981cc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:bb:ce:1f:a4:b6:2c:5f:45:cb:ae:48:0c:f8:
                    e5:c0:f8:65:8d:3b:c5:79:00:52:ab:46:c7:2f:05:
                    a8:80:6e:51:aa:54:de:70:0f:fe:43:dc:b4:fb:29:
                    20:1c:24:f9:1b:0c:b1:7c:1a:71:cd:a8:cf:0e:c0:
                    0c:d2:b0:36:7f:80:87:22:8c:09:05:01:3a:52:e3:
                    6e:06:c8:bc:0f:7a:95:4c:bd:89:db:ae:3b:13:a6:
                    1e:c1:18:7c:02:ad:10:8a:cd:23:8a:79:39:2d:34:
                    61:b7:39:18:bd:f3:36:5f:72:9e:2f:ec:f5:78:da:
                    6f:25:79:07:fa:70:95:f0:d7:18:8a:2c:fc:31:45:
                    6f:a7:8c:3f:d2:be:37:04:b7:35:eb:e9:39:30:dd:
                    33:46:e1:aa:b4:01:4e:88:00:ed:ef:3e:55:e3:17:
                    6e:c4:04:af:cb:bc:bc:99:52:4a:54:16:ad:05:2b:
                    75:99:c3:65:06:f6:2a:25:de:d7:6a:e5:26:a1:92:
                    24:44:3a:39:27:a0:ed:cd:9f:02:98:85:12:76:82:
                    09:cf:9c:66:7a:d3:ce:83:3e:d2:63:c5:4d:0e:e7:
                    3f:f3:9c:fa:1a:66:7c:63:9f:be:8d:fa:3a:a3:ab:
                    5c:be:2f:18:49:27:62:58:ea:ed:3c:24:c4:4f:b4:
                    d1:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:D8:0A:7E:55:6B:FD:2A:68:E3:DA:81:73:2B:87:3D:0A:51:89:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/522c862f-9fcd-3df6-b8da-dfc4d521d237.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3/56183502-983d-4114-a074-bf0eaa901de3.crl

            X509v3 Authority Key Identifier:
                keyid:A7:70:17:EE:B3:BC:91:78:E4:7F:7D:63:93:F5:25:DA:8E:9E:6C:27

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/56183502-983d-4114-a074-bf0eaa901de3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.193.16.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2d:3d:64:12:9a:5f:ea:7c:a6:d6:8a:18:56:66:9a:1f:94:cc:
         bb:1b:29:7f:4f:c6:3f:4a:d6:03:db:68:a5:dd:64:1f:52:0e:
         13:49:96:d3:0f:71:2b:cb:8e:58:c3:67:35:af:bb:5a:e6:ba:
         38:12:cc:ce:b7:0e:88:1c:63:12:f9:6a:ce:2d:a0:a3:2f:92:
         b2:3c:87:57:0d:9a:b5:be:0a:9a:c5:11:86:0a:17:5b:10:a7:
         f9:00:b6:a8:2c:b2:67:d5:7b:9f:77:8c:b3:f7:cb:3c:95:2e:
         df:17:59:f2:65:42:8c:fa:2f:7d:d8:45:8a:d0:76:6b:7b:95:
         a0:bf:54:f6:b7:e8:78:16:d8:4c:d3:92:79:5c:bf:6f:df:89:
         a5:ed:96:99:f3:e9:ec:ee:12:c8:4a:f9:87:98:f5:b5:9a:2a:
         2b:6f:a8:72:f6:20:1e:bf:ae:f6:99:a3:f5:ff:28:95:89:ba:
         a4:da:44:d5:d7:03:13:88:e3:89:1b:7e:6e:e6:09:f6:1f:5b:
         d1:f3:09:7a:e5:17:cf:f4:ba:18:6c:33:c4:68:30:01:51:d2:
         60:89:d8:95:b2:7f:62:46:68:3f:6b:08:f2:fd:7a:17:77:38:
         9f:f2:95:fb:c9:28:cc:d1:90:c2:f9:e0:f2:dd:19:03:aa:33:
         b7:f9:1f:94
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErPcP0h9leEcRbLGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTYxODM1MDItOTgzZC00MTE0LWEwNzQtYmYwZWFhOTAx
ZGUzMB4XDTI1MDgxMDEzMDA0MVoXDTI1MTEwODE0MDA0MVowLzEtMCsGA1UEAxMk
MTgxNWUxNDYtNjVmOC00OGQwLWFmODUtOTYyNGUxOTgxY2M1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLvOH6S2LF9Fy65IDPjlwPhljTvFeQBSq0bH
LwWogG5RqlTecA/+Q9y0+ykgHCT5GwyxfBpxzajPDsAM0rA2f4CHIowJBQE6UuNu
Bsi8D3qVTL2J2647E6YewRh8Aq0Qis0jink5LTRhtzkYvfM2X3KeL+z1eNpvJXkH
+nCV8NcYiiz8MUVvp4w/0r43BLc16+k5MN0zRuGqtAFOiADt7z5V4xduxASvy7y8
mVJKVBatBSt1mcNlBvYqJd7XauUmoZIkRDo5J6DtzZ8CmIUSdoIJz5xmetPOgz7S
Y8VNDuc/85z6GmZ8Y5++jfo6o6tcvi8YSSdiWOrtPCTET7TRjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNvYCn5Va/0qaOPagXMrhz0KUYkaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81NjE4
MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBlYWE5MDFkZTMvNTIyYzg2MmYtOWZjZC0z
ZGY2LWI4ZGEtZGZjNGQ1MjFkMjM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNTYxODM1MDItOTgzZC00MTE0LWEw
NzQtYmYwZWFhOTAxZGUzLzU2MTgzNTAyLTk4M2QtNDExNC1hMDc0LWJmMGVhYTkw
MWRlMy5jcmwwHwYDVR0jBBgwFoAUp3AX7rO8kXjkf31jk/Ul2o6ebCcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81NjE4MzUwMi05ODNkLTQxMTQtYTA3NC1iZjBl
YWE5MDFkZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx8EQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC09ZBKaX+p8ptaKGFZmmh+UzLsbKX9Pxj9K1gPbaKXdZB9SDhNJltMP
cSvLjljDZzWvu1rmujgSzM63DogcYxL5as4toKMvkrI8h1cNmrW+CprFEYYKF1sQ
p/kAtqgssmfVe593jLP3yzyVLt8XWfJlQoz6L33YRYrQdmt7laC/VPa36HgW2EzT
knlcv2/fiaXtlpnz6ezuEshK+YeY9bWaKitvqHL2IB6/rvaZo/X/KJWJuqTaRNXX
AxOI44kbfm7mCfYfW9HzCXrlF8/0uhhsM8RoMAFR0mCJ2JWyf2JGaD9rCPL9ehd3
OJ/ylfvJKMzRkML54PLdGQOqM7f5H5Q=
-----END CERTIFICATE-----
Generated at Sat Aug 23 21:55:23 2025 by rpki-client