Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa
File:                     0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa (raw, json)
Hash identifier:          gIQ4kYgtKA7PolNHs+2g/GRXKZrotgWSEBWg/WjOcPw=
Subject key identifier:   5C:15:A7:82:9B:C0:CB:81:63:B3:37:0D:01:85:2C:67:64:82:92:03
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3FAAD7531A39EB9173B09300
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     22652
IP address blocks:        184.95.206.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d7:53:1a:39:eb:91:73:b0:93:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=a0c528e8-3852-47cd-9467-ed61f0b8d9c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:8f:a5:e3:43:65:eb:85:10:fd:33:c7:75:89:
                    13:54:4c:e8:cb:84:b7:e5:dc:4a:ee:2d:4a:1f:db:
                    15:f1:2f:b6:60:73:5e:e3:7d:49:ba:0e:3f:f9:fb:
                    a0:ff:8c:b6:f9:06:96:8f:8f:47:9d:23:1e:59:50:
                    bf:c1:92:17:a7:18:94:b8:dc:dc:f8:80:38:86:cf:
                    15:41:98:4a:d5:a7:dd:6f:f7:bb:72:5e:76:28:45:
                    6d:85:3a:12:2d:64:b0:08:33:f3:de:1d:ca:12:f6:
                    a7:20:0b:e3:8c:0b:03:34:63:2d:cf:b2:4b:dd:38:
                    38:2e:d7:81:c7:1a:83:9e:de:d4:0d:c1:34:be:a7:
                    b7:37:3a:c6:74:e4:30:34:c7:33:b8:fa:27:da:35:
                    b3:7a:62:69:81:4d:d6:aa:bb:05:04:1a:7b:33:5b:
                    d5:15:44:ea:d0:77:05:d7:72:f8:91:26:ae:ab:17:
                    6b:87:1b:d1:8a:6d:95:26:e1:38:6d:92:83:e6:47:
                    6d:9c:d8:35:31:37:38:0e:37:95:6f:4e:98:ed:00:
                    51:35:5c:4c:74:17:7a:93:f4:06:a7:ff:76:13:53:
                    00:44:aa:06:5a:b7:6f:46:95:15:6c:66:ef:f3:06:
                    d7:94:35:37:3a:ad:10:8b:16:09:42:bf:d1:40:7e:
                    60:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:15:A7:82:9B:C0:CB:81:63:B3:37:0D:01:85:2C:67:64:82:92:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/0bbf0a41-2213-3aad-ac1f-292cb0926b3b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.206.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:18:1f:21:a6:48:19:71:b7:9c:e6:c2:99:0b:64:1e:8d:
         b0:a7:e2:17:6a:89:84:3b:8d:8b:d1:aa:f1:34:20:f1:5c:ae:
         11:46:26:1e:39:6b:c2:39:46:9d:82:1a:2d:69:68:2c:19:25:
         d2:37:2f:c2:15:eb:17:38:1c:ce:3a:de:02:04:67:c3:bd:07:
         00:fd:4e:f2:54:6c:2b:39:52:23:d4:5e:b8:75:f3:26:04:73:
         c4:af:ba:a3:96:47:a0:fc:d0:37:ad:21:c9:13:47:cf:7c:c3:
         72:c0:a5:08:38:08:a3:d9:3a:f4:0c:60:69:43:7a:92:5f:15:
         e9:56:61:9c:95:cd:e5:fd:96:51:37:ac:25:36:22:2e:68:ff:
         0f:7e:a5:2d:19:3b:a9:03:df:77:73:1c:62:fc:05:af:59:62:
         28:a8:bb:0e:23:3b:13:a8:b4:eb:6d:e9:8f:a3:0c:93:19:5c:
         8f:b8:b7:ba:d5:c9:23:db:e3:60:59:b6:5c:c8:71:01:20:fc:
         ab:83:43:9f:d5:ab:dc:70:69:eb:1f:b9:71:e6:69:f0:48:78:
         a4:50:e1:ed:cc:b6:bc:f7:ad:95:fc:29:7a:bb:cf:02:34:71:
         10:24:77:f0:9c:1b:32:e2:cc:6e:cf:3b:a5:ed:0a:1f:0a:8b:
         85:19:b0:29
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtdTGjnrkXOwkwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk
YTBjNTI4ZTgtMzg1Mi00N2NkLTk0NjctZWQ2MWYwYjhkOWMzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg4+l40Nl64UQ/TPHdYkTVEzoy4S35dxK7i1K
H9sV8S+2YHNe431Jug4/+fug/4y2+QaWj49HnSMeWVC/wZIXpxiUuNzc+IA4hs8V
QZhK1afdb/e7cl52KEVthToSLWSwCDPz3h3KEvanIAvjjAsDNGMtz7JL3Tg4LteB
xxqDnt7UDcE0vqe3NzrGdOQwNMczuPon2jWzemJpgU3WqrsFBBp7M1vVFUTq0HcF
13L4kSauqxdrhxvRim2VJuE4bZKD5kdtnNg1MTc4DjeVb06Y7QBRNVxMdBd6k/QG
p/92E1MARKoGWrdvRpUVbGbv8wbXlDU3Oq0QixYJQr/RQH5gvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFwVp4KbwMuBY7M3DQGFLGdkgpIDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvMGJiZjBhNDEtMjIxMy0z
YWFkLWFjMWYtMjkyY2IwOTI2YjNiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuF/OMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABxCGB8hpkgZcbec5sKZC2QejbCn4hdqiYQ7jYvRqvE0IPFcrhFGJh45
a8I5Rp2CGi1paCwZJdI3L8IV6xc4HM463gIEZ8O9BwD9TvJUbCs5UiPUXrh18yYE
c8SvuqOWR6D80DetIckTR898w3LApQg4CKPZOvQMYGlDepJfFelWYZyVzeX9llE3
rCU2Ii5o/w9+pS0ZO6kD33dzHGL8Ba9ZYiiouw4jOxOotOtt6Y+jDJMZXI+4t7rV
ySPb42BZtlzIcQEg/KuDQ5/Vq9xwaesfuXHmafBIeKRQ4e3Mtrz3rZX8KXq7zwI0
cRAkd/CcGzLizG7PO6XtCh8Ki4UZsCk=
-----END CERTIFICATE-----
Generated at Tue Jul 1 19:57:58 2025 by rpki-client