Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4031d3c1-f8eb-34ee-8c03-9cbff0bb9e94.roa
File:                     4031d3c1-f8eb-34ee-8c03-9cbff0bb9e94.roa (raw, json)
Hash identifier:          Mz2OrzNMwV2aS77VMDd0J9d2ctBETbAA99BoaiGRzTs=
Subject key identifier:   C6:20:3B:9E:F5:16:A4:52:84:2E:24:29:2B:D7:29:85:85:CE:03:0C
Certificate issuer:       /CN=09440a93-986f-41da-8723-7b67f81bdbce
Certificate serial:       010D0C9F4328584A4C66535315A10F83384E8998
Authority key identifier: 48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4031d3c1-f8eb-34ee-8c03-9cbff0bb9e94.roa
Signing time:             Tue 24 Jun 2025 14:28:22 +0000
ROA not before:           Tue 24 Jun 2025 14:28:22 +0000
ROA not after:            Mon 22 Sep 2025 14:28:22 +0000
asID:                     19901
IP address blocks:        207.50.192.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:66:53:53:15:a1:0f:83:38:4e:89:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09440a93-986f-41da-8723-7b67f81bdbce
        Validity
            Not Before: Jun 24 14:28:22 2025 GMT
            Not After : Sep 22 14:28:22 2025 GMT
        Subject: CN=84daab22-d541-4ffd-b3d0-51f4fb3123f8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:30:da:4f:6e:4e:f7:eb:0b:0d:a5:03:b2:63:
                    a4:03:f1:a0:06:e6:8c:68:97:18:67:68:14:7c:48:
                    13:b8:b6:e0:56:9d:6a:dd:58:bf:8d:e4:c3:5c:e0:
                    dd:90:07:35:94:77:a8:b4:02:dd:41:36:94:c7:1c:
                    b9:4c:86:f5:41:d5:54:11:01:fd:32:05:20:c0:59:
                    c3:ea:89:73:98:1c:99:f2:a5:64:2f:bc:8c:4b:6c:
                    b0:ad:64:e3:76:0b:fb:08:19:93:e9:8c:fd:44:17:
                    c4:c0:dc:0b:9a:da:ce:e3:48:26:83:2e:7a:72:99:
                    f2:18:b3:a9:24:6a:eb:e2:5d:e2:24:51:be:90:1e:
                    54:6b:54:15:cf:9e:f7:d8:55:28:33:f1:2c:e1:6b:
                    8d:e2:7f:59:aa:e2:fe:10:f2:57:b6:98:a3:15:3c:
                    1b:40:7d:2b:b1:84:99:fc:bc:d3:a0:fa:f8:8c:8b:
                    b0:74:2d:e9:26:7a:69:0a:6c:b9:2e:d6:d3:49:79:
                    5e:1f:c1:c5:26:bf:96:72:7b:a5:09:ae:c6:96:05:
                    2f:df:7c:55:7f:6b:5f:16:f3:1c:af:d5:49:13:b2:
                    1c:1e:96:18:43:40:45:e1:4a:d9:f4:59:ba:dd:b6:
                    b5:85:08:b5:74:bb:8e:35:9a:6f:e4:76:62:21:57:
                    bd:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:20:3B:9E:F5:16:A4:52:84:2E:24:29:2B:D7:29:85:85:CE:03:0C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/4031d3c1-f8eb-34ee-8c03-9cbff0bb9e94.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce/09440a93-986f-41da-8723-7b67f81bdbce.crl

            X509v3 Authority Key Identifier:
                keyid:48:4B:81:EB:A9:96:97:3F:B2:DE:E9:DE:8A:DE:E9:5C:42:30:43:83

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/09440a93-986f-41da-8723-7b67f81bdbce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.50.192.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         69:4e:27:3b:32:eb:0d:91:c6:38:b7:9f:27:34:18:af:30:74:
         92:16:da:d8:8d:2c:60:a3:56:aa:80:f7:83:c5:0c:1d:27:2a:
         12:c7:8b:f1:27:3a:43:7f:ad:2b:57:69:9f:11:41:fd:36:0b:
         37:92:bd:7a:7f:c2:0a:9b:d1:94:e4:27:5d:64:2c:f6:83:92:
         51:cd:e4:31:4d:b0:65:90:4c:13:a3:02:3b:65:6a:f6:5d:74:
         f0:b0:7d:7d:8d:38:d9:5b:87:71:97:73:8e:a5:d9:bb:d0:e0:
         27:56:bb:b2:38:58:51:8f:17:24:bf:11:36:69:be:17:59:d3:
         31:ee:46:a4:fc:ed:75:c4:a8:40:52:a9:2e:65:85:0e:51:03:
         ca:13:31:c4:1e:0b:fb:e3:4e:c6:e2:0e:4c:d0:bd:7d:25:d1:
         58:c2:94:cc:44:b0:6f:b0:b7:b2:3c:07:f2:28:3a:a3:7d:0c:
         8f:ee:25:ad:16:10:f6:a8:92:79:c4:78:9e:2c:cb:c3:c9:75:
         3c:ce:59:b6:8f:8e:11:78:f1:a9:ce:a1:86:ef:1a:7d:46:cb:
         72:39:5a:c6:f5:39:d5:f4:7e:a9:38:cb:20:dd:45:99:55:a9:
         12:b0:16:62:eb:bb:a0:95:22:f5:55:82:9c:88:13:09:56:c3:
         e8:1a:88:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMZlNTFaEPgzhOiZgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDk0NDBhOTMtOTg2Zi00MWRhLTg3MjMtN2I2N2Y4MWJk
YmNlMB4XDTI1MDYyNDE0MjgyMloXDTI1MDkyMjE0MjgyMlowLzEtMCsGA1UEAxMk
ODRkYWFiMjItZDU0MS00ZmZkLWIzZDAtNTFmNGZiMzEyM2Y4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDDaT25O9+sLDaUDsmOkA/GgBuaMaJcYZ2gU
fEgTuLbgVp1q3Vi/jeTDXODdkAc1lHeotALdQTaUxxy5TIb1QdVUEQH9MgUgwFnD
6olzmByZ8qVkL7yMS2ywrWTjdgv7CBmT6Yz9RBfEwNwLmtrO40gmgy56cpnyGLOp
JGrr4l3iJFG+kB5Ua1QVz5732FUoM/Es4WuN4n9ZquL+EPJXtpijFTwbQH0rsYSZ
/LzToPr4jIuwdC3pJnppCmy5LtbTSXleH8HFJr+WcnulCa7GlgUv33xVf2tfFvMc
r9VJE7IcHpYYQ0BF4UrZ9Fm63ba1hQi1dLuONZpv5HZiIVe98wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYgO571FqRShC4kKSvXKYWFzgMMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0
MGE5My05ODZmLTQxZGEtODcyMy03YjY3ZjgxYmRiY2UvNDAzMWQzYzEtZjhlYi0z
NGVlLThjMDMtOWNiZmYwYmI5ZTk0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMDk0NDBhOTMtOTg2Zi00MWRhLTg3
MjMtN2I2N2Y4MWJkYmNlLzA5NDQwYTkzLTk4NmYtNDFkYS04NzIzLTdiNjdmODFi
ZGJjZS5jcmwwHwYDVR0jBBgwFoAUSEuB66mWlz+y3uneit7pXEIwQ4MwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8wOTQ0MGE5My05ODZmLTQxZGEtODcyMy03YjY3
ZjgxYmRiY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzzLAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGlOJzsy6w2Rxji3nyc0GK8wdJIW2tiNLGCjVqqA94PFDB0nKhLHi/En
OkN/rStXaZ8RQf02CzeSvXp/wgqb0ZTkJ11kLPaDklHN5DFNsGWQTBOjAjtlavZd
dPCwfX2NONlbh3GXc46l2bvQ4CdWu7I4WFGPFyS/ETZpvhdZ0zHuRqT87XXEqEBS
qS5lhQ5RA8oTMcQeC/vjTsbiDkzQvX0l0VjClMxEsG+wt7I8B/IoOqN9DI/uJa0W
EPaoknnEeJ4sy8PJdTzOWbaPjhF48anOoYbvGn1Gy3I5Wsb1OdX0fqk4yyDdRZlV
qRKwFmLru6CVIvVVgpyIEwlWw+gaiG0=
-----END CERTIFICATE-----
Generated at Tue Jul 1 23:29:08 2025 by rpki-client