Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa
File:                     1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa (raw, json)
Hash identifier:          lWGD3zkY6Br934HQFjDgNQSzINB9bqGGcorXFCdaA+k=
Subject key identifier:   44:F9:33:CB:38:BF:FC:34:05:0A:E7:C9:5A:70:8E:B0:36:88:8B:EA
Certificate issuer:       /CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
Certificate serial:       010D0C9F4328584AECC12D7CCE8287F1AA354B00
Authority key identifier: D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     16509
IP address blocks:        192.80.241.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:2d:7c:ce:82:87:f1:aa:35:4b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=c2093724-bc90-41ab-8076-fd1d9210fd0c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:82:3c:a1:fa:c4:4a:c7:1e:c6:03:65:13:b8:
                    a4:c8:5f:2a:8a:50:b6:2b:6e:82:75:98:67:5e:84:
                    8a:6b:34:60:e6:d5:3b:74:6c:f0:91:8e:e0:f9:3a:
                    fb:3a:1e:ac:29:3a:3d:c1:0b:81:c3:e5:eb:2c:00:
                    ba:1f:8f:a6:d7:c9:e0:f3:03:82:05:49:18:57:39:
                    8d:75:5f:c9:0e:70:27:59:b1:85:54:36:2f:b6:46:
                    0b:93:1a:bb:63:f6:fa:ff:25:45:aa:e9:28:af:7e:
                    09:dc:18:f1:60:6e:00:eb:4c:13:c6:60:26:fe:17:
                    0a:2d:ea:f4:af:90:b1:26:b1:d7:ee:5d:c0:3e:e9:
                    e9:44:22:f8:70:ff:cf:1b:04:40:9e:90:ba:28:22:
                    23:66:a7:7f:c8:7f:5a:b2:a3:df:43:13:67:87:08:
                    3a:2e:f9:c8:90:b1:43:ce:23:2d:36:5a:12:fb:21:
                    be:75:d7:9b:ef:1b:b2:df:c7:bc:f2:9b:ea:45:3a:
                    20:01:be:ca:21:a0:86:49:f0:27:cb:43:4c:8a:fc:
                    60:e7:30:71:b2:8f:14:49:9a:b2:4e:a3:67:b6:da:
                    7e:b4:34:78:d3:91:93:4b:0e:84:00:f2:b1:ed:65:
                    7a:56:e7:dc:50:99:f3:a7:46:a0:9d:c4:b7:2d:74:
                    e7:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:F9:33:CB:38:BF:FC:34:05:0A:E7:C9:5A:70:8E:B0:36:88:8B:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/1bcf5dea-947d-30e0-8c01-cb81eeeaab18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.crl

            X509v3 Authority Key Identifier:
                keyid:D9:C1:0D:6D:EC:FA:E9:C4:55:81:D6:35:01:1E:C0:6D:D6:70:4A:AA

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7ba747ce-9a4d-470c-b3a1-dfc36f9c78dd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.80.241.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         19:2f:f9:14:ff:47:77:a8:09:f1:bc:ae:40:c7:ad:42:60:d2:
         94:de:fd:8a:e5:d0:dd:64:47:19:82:71:d7:9e:b2:e3:f4:66:
         3f:89:f1:84:6c:48:b2:78:6d:27:3e:be:de:9f:3b:be:5e:3d:
         64:68:c7:0a:da:6a:51:47:9f:e4:79:6d:4b:66:d7:9d:8f:23:
         c5:6b:2a:af:e7:8d:4a:b3:bc:19:0b:41:45:2a:c0:75:2d:20:
         6d:56:c5:09:19:b0:2a:b4:7a:00:91:a8:5d:45:7c:52:02:a8:
         0d:71:06:10:6a:8f:cc:09:4f:3a:fb:8d:b5:a0:83:d5:e3:d9:
         67:10:7b:a7:a4:0d:58:95:69:76:26:c2:84:2b:f2:7e:a2:e9:
         02:e4:2c:e5:89:b2:43:14:98:51:b7:f0:6e:3f:04:a9:e3:a1:
         92:db:95:87:11:db:3b:94:dc:08:a8:13:73:6f:28:27:63:74:
         e6:e9:5e:61:a0:b2:26:e7:5d:7c:7a:28:93:96:fe:c8:92:8b:
         cf:e8:d5:57:b5:29:0f:15:12:76:84:48:8d:e3:18:dd:ba:60:
         99:fc:8c:ed:30:40:4f:79:07:1d:fc:a6:3f:d7:7a:f2:0a:f7:
         04:bb:35:0b:4c:25:80:ae:34:5e:c5:9f:e5:e2:60:07:91:59:
         52:cd:8d:de
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswS18zoKH8ao1SwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzQ3Y2UtOWE0ZC00NzBjLWIzYTEtZGZjMzZmOWM3
OGRkMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
YzIwOTM3MjQtYmM5MC00MWFiLTgwNzYtZmQxZDkyMTBmZDBjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYI8ofrESscexgNlE7ikyF8qilC2K26CdZhn
XoSKazRg5tU7dGzwkY7g+Tr7Oh6sKTo9wQuBw+XrLAC6H4+m18ng8wOCBUkYVzmN
dV/JDnAnWbGFVDYvtkYLkxq7Y/b6/yVFqukor34J3BjxYG4A60wTxmAm/hcKLer0
r5CxJrHX7l3APunpRCL4cP/PGwRAnpC6KCIjZqd/yH9asqPfQxNnhwg6LvnIkLFD
ziMtNloS+yG+ddeb7xuy38e88pvqRTogAb7KIaCGSfAny0NMivxg5zBxso8USZqy
TqNnttp+tDR405GTSw6EAPKx7WV6VufcUJnzp0agncS3LXTnzQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFET5M8s4v/w0BQrnyVpwjrA2iIvqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3
NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMzNmY5Yzc4ZGQvMWJjZjVkZWEtOTQ3ZC0z
MGUwLThjMDEtY2I4MWVlZWFhYjE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2JhNzQ3Y2UtOWE0ZC00NzBjLWIz
YTEtZGZjMzZmOWM3OGRkLzdiYTc0N2NlLTlhNGQtNDcwYy1iM2ExLWRmYzM2Zjlj
NzhkZC5jcmwwHwYDVR0jBBgwFoAU2cENbez66cRVgdY1AR7AbdZwSqowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83YmE3NDdjZS05YTRkLTQ3MGMtYjNhMS1kZmMz
NmY5Yzc4ZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwFDxMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABkv+RT/R3eoCfG8rkDHrUJg0pTe/Yrl0N1kRxmCcdeesuP0Zj+J8YRs
SLJ4bSc+vt6fO75ePWRoxwraalFHn+R5bUtm152PI8VrKq/njUqzvBkLQUUqwHUt
IG1WxQkZsCq0egCRqF1FfFICqA1xBhBqj8wJTzr7jbWgg9Xj2WcQe6ekDViVaXYm
woQr8n6i6QLkLOWJskMUmFG38G4/BKnjoZLblYcR2zuU3AioE3NvKCdjdObpXmGg
sibnXXx6KJOW/siSi8/o1Ve1KQ8VEnaESI3jGN26YJn8jO0wQE95Bx38pj/XevIK
9wS7NQtMJYCuNF7Fn+XiYAeRWVLNjd4=
-----END CERTIFICATE-----
Generated at Sat Aug 23 13:58:53 2025 by rpki-client