Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
File:                     01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa (raw, json)
Hash identifier:          8W32e0Q6q0jyDSJcYw0JLd6rcPKfsBljsBKwLBdGfdk=
Subject key identifier:   C2:F0:F4:CC:4F:A2:F9:A2:43:84:59:BF:63:08:18:B3:45:F8:B0:22
Certificate issuer:       /CN=8ee8b7f9-2148-4099-8192-6428b14301be
Certificate serial:       010D0C9F4328584A2C201F70A2768A830CB73200
Authority key identifier: 84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa
Signing time:             Fri 13 Jun 2025 01:00:51 +0000
ROA not before:           Fri 13 Jun 2025 01:00:51 +0000
ROA not after:            Thu 11 Sep 2025 01:00:51 +0000
asID:                     3464
IP address blocks:        192.31.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2c:20:1f:70:a2:76:8a:83:0c:b7:32:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee8b7f9-2148-4099-8192-6428b14301be
        Validity
            Not Before: Jun 13 01:00:51 2025 GMT
            Not After : Sep 11 01:00:51 2025 GMT
        Subject: CN=c2c274b5-bca7-4f20-b490-7cb22309f2e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ec:0a:39:86:3c:cd:ea:34:3d:b3:66:a7:c0:
                    59:85:7f:54:f0:7c:9e:a6:f3:41:21:33:12:dc:a5:
                    8e:60:27:72:f8:65:30:0c:18:d0:58:20:23:ea:27:
                    9f:3e:06:42:f2:ea:ac:6b:37:78:a5:1c:fd:0e:e9:
                    a8:94:d0:de:6f:b3:82:fe:24:d7:aa:6c:29:84:af:
                    79:69:51:a7:a8:e3:d4:7c:e2:d2:89:f8:81:c4:68:
                    c7:d5:06:5b:c5:e4:d8:45:df:09:dc:f8:38:69:71:
                    8a:bc:91:5e:d8:8e:78:02:26:e1:fc:a1:35:10:3b:
                    c3:f5:c8:ac:75:da:8d:4e:92:27:73:e7:0f:2e:f1:
                    18:39:5b:32:70:ac:7b:31:b6:38:27:c0:b2:e7:64:
                    70:cd:22:c7:0d:81:3d:50:36:17:15:e8:64:4b:52:
                    13:13:c6:f6:dd:5b:64:e0:ee:f5:f0:4a:5c:71:1d:
                    b8:b7:ff:e9:45:3d:9f:9f:3e:57:24:a6:89:de:f3:
                    d0:55:e5:25:b5:31:96:01:60:6f:46:0d:65:a6:ed:
                    9b:01:fe:40:3c:64:1b:e3:ff:ad:96:d4:81:c8:1f:
                    a4:b6:e9:42:56:b1:6e:98:76:dc:5d:ee:53:f3:a3:
                    ce:07:d5:4d:fb:66:83:31:cb:4e:8f:b7:a3:bd:3d:
                    d0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:F0:F4:CC:4F:A2:F9:A2:43:84:59:BF:63:08:18:B3:45:F8:B0:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/01f3bebd-e19e-3830-a3ec-e884f4a82d6f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be/8ee8b7f9-2148-4099-8192-6428b14301be.crl

            X509v3 Authority Key Identifier:
                keyid:84:9F:4D:F9:59:BA:A5:E1:B2:A2:D4:3F:81:F6:C8:5B:81:2D:B1:5E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8ee8b7f9-2148-4099-8192-6428b14301be.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.107.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         24:e8:fc:5f:b0:18:36:08:cb:d2:a4:22:7d:0e:c4:b4:00:ab:
         9d:48:c6:1d:2f:54:51:b1:39:b4:b4:9c:b1:fd:98:5f:bb:5a:
         da:ba:05:0e:d8:4f:e1:6f:bf:2e:a1:0e:99:11:8d:5e:fc:2b:
         16:db:d4:a9:b9:7a:1f:1b:7b:9f:62:04:04:50:99:1d:03:05:
         f7:25:85:48:e0:b9:0e:7d:85:c1:80:de:4e:df:76:36:22:f2:
         20:2d:ca:fe:ec:99:e8:73:df:ef:1f:b7:f4:73:2d:94:5f:e7:
         56:07:b8:a8:34:7b:3d:2f:6e:88:80:4b:b9:38:49:2d:35:03:
         c6:ad:95:7d:69:e7:2f:11:38:e7:22:b8:fd:65:62:bb:63:b4:
         68:76:1a:37:46:f8:e9:cb:67:67:88:33:88:8b:40:5b:db:f4:
         d7:48:70:f9:ee:61:30:72:25:30:54:91:6d:ea:6f:0f:ff:a7:
         61:d6:7b:dd:42:31:bf:77:3f:e7:9d:e3:80:85:ae:87:97:b9:
         8a:b2:ae:37:f3:f8:4a:a4:db:2e:18:5f:fc:4a:3f:68:ca:3e:
         d1:00:7d:9f:66:a8:b5:e5:18:32:87:a5:ec:61:95:69:54:f8:
         4e:e2:9c:e0:a2:c6:7b:e5:ce:13:64:45:bd:ce:59:b0:bc:69:
         f6:c5:f9:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEosIB9wonaKgwy3MgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlOGI3ZjktMjE0OC00MDk5LTgxOTItNjQyOGIxNDMw
MWJlMB4XDTI1MDYxMzAxMDA1MVoXDTI1MDkxMTAxMDA1MVowLzEtMCsGA1UEAxMk
YzJjMjc0YjUtYmNhNy00ZjIwLWI0OTAtN2NiMjIzMDlmMmU5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApOwKOYY8zeo0PbNmp8BZhX9U8HyepvNBITMS
3KWOYCdy+GUwDBjQWCAj6iefPgZC8uqsazd4pRz9DumolNDeb7OC/iTXqmwphK95
aVGnqOPUfOLSifiBxGjH1QZbxeTYRd8J3Pg4aXGKvJFe2I54Aibh/KE1EDvD9cis
ddqNTpInc+cPLvEYOVsycKx7MbY4J8Cy52RwzSLHDYE9UDYXFehkS1ITE8b23Vtk
4O718EpccR24t//pRT2fnz5XJKaJ3vPQVeUltTGWAWBvRg1lpu2bAf5APGQb4/+t
ltSByB+ktulCVrFumHbcXe5T86POB9VN+2aDMctOj7ejvT3QhwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMLw9MxPovmiQ4RZv2MIGLNF+LAiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84ZWU4
YjdmOS0yMTQ4LTQwOTktODE5Mi02NDI4YjE0MzAxYmUvMDFmM2JlYmQtZTE5ZS0z
ODMwLWEzZWMtZTg4NGY0YTgyZDZmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGVlOGI3ZjktMjE0OC00MDk5LTgx
OTItNjQyOGIxNDMwMWJlLzhlZThiN2Y5LTIxNDgtNDA5OS04MTkyLTY0MjhiMTQz
MDFiZS5jcmwwHwYDVR0jBBgwFoAUhJ9N+Vm6peGyotQ/gfbIW4EtsV4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84ZWU4YjdmOS0yMTQ4LTQwOTktODE5Mi02NDI4
YjE0MzAxYmUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB9rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACTo/F+wGDYIy9KkIn0OxLQAq51Ixh0vVFGxObS0nLH9mF+7Wtq6BQ7Y
T+Fvvy6hDpkRjV78Kxbb1Km5eh8be59iBARQmR0DBfclhUjguQ59hcGA3k7fdjYi
8iAtyv7smehz3+8ft/RzLZRf51YHuKg0ez0vboiAS7k4SS01A8atlX1p5y8ROOci
uP1lYrtjtGh2GjdG+OnLZ2eIM4iLQFvb9NdIcPnuYTByJTBUkW3qbw//p2HWe91C
Mb93P+ed44CFroeXuYqyrjfz+Eqk2y4YX/xKP2jKPtEAfZ9mqLXlGDKHpexhlWlU
+E7inOCixnvlzhNkRb3OWbC8afbF+UI=
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:18:26 2025 by rpki-client