Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/1b91a3d3-6e81-36a8-a974-3e61f961b833.roa
File:                     1b91a3d3-6e81-36a8-a974-3e61f961b833.roa (raw, json)
Hash identifier:          SYJ8GFwyXOjzpmrMii7YbmoJAp4TnxvpXhPoBh9mPMM=
Subject key identifier:   DF:67:8B:F3:0C:09:91:CF:97:8E:67:00:6F:19:91:75:13:99:4B:6C
Certificate issuer:       /CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
Certificate serial:       010D0C9F4328584AE5C676DC0541F9C6EBA04500
Authority key identifier: 26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/1b91a3d3-6e81-36a8-a974-3e61f961b833.roa
Signing time:             Mon 18 Aug 2025 13:00:41 +0000
ROA not before:           Mon 18 Aug 2025 13:00:41 +0000
ROA not after:            Sun 16 Nov 2025 14:00:41 +0000
asID:                     3855
IP address blocks:        142.54.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e5:c6:76:dc:05:41:f9:c6:eb:a0:45:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e3fada49-b353-4a69-9b32-1b6ab3729db1
        Validity
            Not Before: Aug 18 13:00:41 2025 GMT
            Not After : Nov 16 14:00:41 2025 GMT
        Subject: CN=69aa6a5d-cbc4-4b33-afd0-db1b5c2a1e96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:7d:b2:43:42:0e:f5:e3:79:d3:7f:44:bc:00:
                    14:23:27:95:ef:6d:25:a1:b6:d1:34:5b:38:1f:82:
                    40:0e:2f:e4:44:00:3c:a2:77:af:35:67:bb:85:13:
                    1e:f5:3c:96:c1:70:ff:55:b6:f1:ed:6a:38:44:fe:
                    71:23:ac:ef:9d:f9:98:de:17:5d:a0:30:97:bd:80:
                    c7:23:27:e8:98:69:9a:6a:3b:3c:9d:06:b0:86:91:
                    5b:0d:70:2f:2c:96:90:60:44:c6:a4:a5:c4:32:46:
                    9c:07:88:2e:69:cc:ae:e2:37:51:7d:aa:21:c9:0f:
                    3c:45:87:75:8f:0a:30:21:e9:ca:7b:a4:4b:81:6e:
                    a8:65:44:fb:44:df:7e:d3:58:a0:5c:e9:3d:70:4c:
                    1a:28:a8:e5:3d:fd:5c:e9:91:0d:7b:1e:7a:fb:aa:
                    d1:a2:cb:3b:3a:06:16:74:9a:bf:0c:e5:ba:0e:49:
                    56:c2:28:85:02:77:c5:ed:90:35:be:d9:d6:b7:19:
                    d2:c4:24:df:e9:dc:f6:dd:29:e2:be:2c:38:03:6f:
                    53:6e:94:b7:e0:0e:be:bb:92:b2:db:90:e1:a9:06:
                    7b:89:66:15:ea:3e:a5:fb:10:5f:92:55:7f:61:a2:
                    6d:da:d2:16:80:a8:53:6b:fc:79:6c:60:62:c4:ab:
                    49:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:67:8B:F3:0C:09:91:CF:97:8E:67:00:6F:19:91:75:13:99:4B:6C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/1b91a3d3-6e81-36a8-a974-3e61f961b833.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1/e3fada49-b353-4a69-9b32-1b6ab3729db1.crl

            X509v3 Authority Key Identifier:
                keyid:26:E9:72:DD:F2:AB:6A:0B:0F:65:29:13:47:2F:D8:DF:E5:06:3D:9E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/e3fada49-b353-4a69-9b32-1b6ab3729db1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.54.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:75:e3:4e:5e:e7:42:32:29:c3:bd:77:24:a1:c4:62:cd:86:
         3d:59:7e:fb:24:27:7e:e7:fb:8a:aa:46:16:20:aa:f0:e2:a0:
         98:91:73:16:9d:53:69:cd:68:56:56:41:e6:dc:81:60:2d:89:
         f7:c0:40:13:b8:ec:0e:8a:40:cc:82:77:3f:e1:59:a9:78:89:
         45:0a:6e:3e:df:77:b5:12:99:6b:8b:c0:ee:30:99:d6:6d:15:
         70:f7:67:da:fc:49:e4:ab:39:b0:2f:9f:ea:76:8f:1c:3c:a5:
         55:1a:21:de:44:31:29:10:b1:a8:a6:28:89:02:2c:ab:e1:df:
         91:f7:68:95:a4:df:d7:a5:ae:76:85:a5:28:fb:ea:7a:e0:ae:
         76:b6:d2:94:6a:6f:2d:e3:89:f2:9b:b4:13:dc:d1:5b:6c:ea:
         a6:63:6f:0c:ae:ab:41:03:ec:1b:25:dc:23:0a:9c:6a:74:d6:
         1b:67:22:98:be:18:5c:37:73:fa:56:c7:ea:89:79:e8:c4:7f:
         5f:a1:ae:26:85:d5:ff:63:f5:e9:b4:1b:32:84:f5:c3:24:51:
         b5:53:04:7e:c0:6c:2b:17:f9:a3:f7:1a:64:0f:92:f1:6a:d1:
         9f:00:10:33:77:5b:cb:80:2a:d5:cd:c7:d2:4c:2a:f5:b7:b3:
         e1:b6:9f:b4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErlxnbcBUH5xuugRQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTNmYWRhNDktYjM1My00YTY5LTliMzItMWI2YWIzNzI5
ZGIxMB4XDTI1MDgxODEzMDA0MVoXDTI1MTExNjE0MDA0MVowLzEtMCsGA1UEAxMk
NjlhYTZhNWQtY2JjNC00YjMzLWFmZDAtZGIxYjVjMmExZTk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiX2yQ0IO9eN5039EvAAUIyeV720lobbRNFs4
H4JADi/kRAA8onevNWe7hRMe9TyWwXD/Vbbx7Wo4RP5xI6zvnfmY3hddoDCXvYDH
IyfomGmaajs8nQawhpFbDXAvLJaQYETGpKXEMkacB4guacyu4jdRfaohyQ88RYd1
jwowIenKe6RLgW6oZUT7RN9+01igXOk9cEwaKKjlPf1c6ZENex56+6rRoss7OgYW
dJq/DOW6DklWwiiFAnfF7ZA1vtnWtxnSxCTf6dz23Sniviw4A29TbpS34A6+u5Ky
25DhqQZ7iWYV6j6l+xBfklV/YaJt2tIWgKhTa/x5bGBixKtJ6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFN9ni/MMCZHPl45nAG8ZkXUTmUtsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9lM2Zh
ZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZhYjM3MjlkYjEvMWI5MWEzZDMtNmU4MS0z
NmE4LWE5NzQtM2U2MWY5NjFiODMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZTNmYWRhNDktYjM1My00YTY5LTli
MzItMWI2YWIzNzI5ZGIxL2UzZmFkYTQ5LWIzNTMtNGE2OS05YjMyLTFiNmFiMzcy
OWRiMS5jcmwwHwYDVR0jBBgwFoAUJuly3fKragsPZSkTRy/Y3+UGPZ4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9lM2ZhZGE0OS1iMzUzLTRhNjktOWIzMi0xYjZh
YjM3MjlkYjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDjjbAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGB1405e50IyKcO9dyShxGLNhj1ZfvskJ37n+4qqRhYgqvDioJiRcxad
U2nNaFZWQebcgWAtiffAQBO47A6KQMyCdz/hWal4iUUKbj7fd7USmWuLwO4wmdZt
FXD3Z9r8SeSrObAvn+p2jxw8pVUaId5EMSkQsaimKIkCLKvh35H3aJWk39elrnaF
pSj76nrgrna20pRqby3jifKbtBPc0Vts6qZjbwyuq0ED7Bsl3CMKnGp01htnIpi+
GFw3c/pWx+qJeejEf1+hriaF1f9j9em0GzKE9cMkUbVTBH7AbCsX+aP3GmQPkvFq
0Z8AEDN3W8uAKtXNx9JMKvW3s+G2n7Q=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:05:56 2025 by rpki-client