Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa
File:                     dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa (raw, json)
Hash identifier:          8b5AFoh46waAw/IgyE+jQWmF1pb+rN7lEOIvGgl8tTM=
Subject key identifier:   24:FF:7D:F8:B0:BA:A9:6C:D8:07:9D:B0:22:0C:6A:40:17:A9:53:EB
Certificate issuer:       /CN=a91f81ff-5317-40f4-a544-5df2e3358a57
Certificate serial:       010D0C9F4328584A3A1589DD5E0B8530C3111540
Authority key identifier: 34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     40628
IP address blocks:        199.190.128.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:89:dd:5e:0b:85:30:c3:11:15:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a91f81ff-5317-40f4-a544-5df2e3358a57
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=c1e513d1-2910-4a88-bbd1-8e640608ab8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a1:ed:4c:fb:a0:ea:65:76:50:5c:c0:d8:3a:
                    92:00:62:fb:64:9b:95:4a:87:48:85:73:72:9e:0c:
                    32:e9:25:a5:6a:c9:27:c0:ab:a6:e5:19:45:b9:44:
                    cb:0e:47:67:64:30:32:b3:8e:8d:6d:4f:28:a7:14:
                    f3:40:2c:23:76:86:d5:70:4d:db:9b:71:69:7e:16:
                    61:e8:51:e7:7b:e0:93:4c:17:69:9a:bb:94:2d:a1:
                    a3:07:8b:18:b2:92:51:1a:06:09:83:0b:e2:05:27:
                    59:86:24:8c:98:71:33:81:fc:68:7a:6a:6d:3a:75:
                    5a:f0:0f:ea:e5:a5:19:75:79:86:66:7a:b7:b1:a2:
                    d4:a9:d8:10:2b:bf:db:bc:8a:8f:d7:f5:c0:f8:86:
                    f0:db:3b:71:8e:a5:30:40:31:e4:42:41:94:1d:d3:
                    78:ef:6e:96:82:a0:54:c2:35:8e:bd:d3:98:e2:52:
                    dc:75:2f:d7:db:7c:eb:12:83:7c:e5:16:c7:b0:bf:
                    c9:82:85:5c:cf:9d:ee:48:38:d2:61:b8:3c:28:88:
                    2a:2e:f7:70:ee:28:69:86:af:e7:d8:c2:a6:7a:22:
                    43:c1:b9:dd:0c:07:01:4d:34:ff:f5:9f:ff:8e:36:
                    59:7f:af:46:b5:b3:2b:b5:b5:70:99:3b:67:7f:de:
                    eb:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:FF:7D:F8:B0:BA:A9:6C:D8:07:9D:B0:22:0C:6A:40:17:A9:53:EB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/dfcdde2c-ae45-3bdf-8e16-faf694b42aca.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57/a91f81ff-5317-40f4-a544-5df2e3358a57.crl

            X509v3 Authority Key Identifier:
                keyid:34:07:13:67:0F:11:1D:B3:4C:B2:2E:75:BD:B0:6E:4B:D4:5F:22:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/a91f81ff-5317-40f4-a544-5df2e3358a57.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.190.128.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:80:87:01:12:dd:74:74:58:34:a0:ec:66:b0:19:2e:be:cc:
         48:05:cd:85:25:d3:ee:27:78:06:32:69:c1:f0:b5:58:21:8c:
         48:92:4f:96:ec:13:9b:cc:45:c0:08:4f:9a:7a:0f:83:72:6a:
         42:91:7d:ec:6f:6f:5d:d5:be:aa:e2:0b:13:94:e4:b6:06:4e:
         22:ee:44:b7:0c:be:a0:83:0a:4c:c6:b7:61:c3:99:96:6d:b5:
         17:ce:2e:21:4f:03:02:04:15:91:c6:a9:e0:5c:47:dd:b0:a5:
         d7:97:b5:6e:a0:87:55:0f:91:b3:13:df:54:fc:ea:08:8c:b2:
         36:a6:da:51:b8:f4:62:c1:55:e9:eb:8c:d4:d8:5b:4b:b1:c1:
         7c:17:a8:6b:98:96:97:5a:19:cd:d8:77:b9:72:e9:1b:4b:37:
         f6:4c:31:01:63:dd:ee:11:fe:65:a6:a4:09:cd:ef:c1:d5:7c:
         25:27:cf:87:1a:35:a4:94:e0:57:ff:c7:73:b1:15:cd:d8:2e:
         86:99:12:0b:06:a4:3e:ae:08:de:76:14:6a:eb:e6:8b:5c:db:
         2a:78:95:40:05:46:f6:8d:ac:e1:03:87:45:69:c9:75:ec:17:
         6a:74:ac:56:54:f3:c3:9d:dd:32:b3:e3:96:ac:61:31:7a:cc:
         b9:33:37:79
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FYndXguFMMMRFUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTkxZjgxZmYtNTMxNy00MGY0LWE1NDQtNWRmMmUzMzU4
YTU3MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
YzFlNTEzZDEtMjkxMC00YTg4LWJiZDEtOGU2NDA2MDhhYjhjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKHtTPug6mV2UFzA2DqSAGL7ZJuVSodIhXNy
ngwy6SWlasknwKum5RlFuUTLDkdnZDAys46NbU8opxTzQCwjdobVcE3bm3FpfhZh
6FHne+CTTBdpmruULaGjB4sYspJRGgYJgwviBSdZhiSMmHEzgfxoemptOnVa8A/q
5aUZdXmGZnq3saLUqdgQK7/bvIqP1/XA+Ibw2ztxjqUwQDHkQkGUHdN4726WgqBU
wjWOvdOY4lLcdS/X23zrEoN85RbHsL/JgoVcz53uSDjSYbg8KIgqLvdw7ihphq/n
2MKmeiJDwbndDAcBTTT/9Z//jjZZf69GtbMrtbVwmTtnf97rSQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCT/ffiwuqls2AedsCIMakAXqVPrMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFm
ODFmZi01MzE3LTQwZjQtYTU0NC01ZGYyZTMzNThhNTcvZGZjZGRlMmMtYWU0NS0z
YmRmLThlMTYtZmFmNjk0YjQyYWNhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYTkxZjgxZmYtNTMxNy00MGY0LWE1
NDQtNWRmMmUzMzU4YTU3L2E5MWY4MWZmLTUzMTctNDBmNC1hNTQ0LTVkZjJlMzM1
OGE1Ny5jcmwwHwYDVR0jBBgwFoAUNAcTZw8RHbNMsi51vbBuS9RfIl4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hOTFmODFmZi01MzE3LTQwZjQtYTU0NC01ZGYy
ZTMzNThhNTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx76AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH6AhwES3XR0WDSg7GawGS6+zEgFzYUl0+4neAYyacHwtVghjEiST5bs
E5vMRcAIT5p6D4NyakKRfexvb13VvqriCxOU5LYGTiLuRLcMvqCDCkzGt2HDmZZt
tRfOLiFPAwIEFZHGqeBcR92wpdeXtW6gh1UPkbMT31T86giMsjam2lG49GLBVenr
jNTYW0uxwXwXqGuYlpdaGc3Yd7ly6RtLN/ZMMQFj3e4R/mWmpAnN78HVfCUnz4ca
NaSU4Ff/x3OxFc3YLoaZEgsGpD6uCN52FGrr5otc2yp4lUAFRvaNrOEDh0VpyXXs
F2p0rFZU88Od3TKz45asYTF6zLkzN3k=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:53:43 2025 by rpki-client