Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/637c46e9-a236-3d7b-bf0c-2be3cc51b7de.roa
File:                     637c46e9-a236-3d7b-bf0c-2be3cc51b7de.roa (raw, json)
Hash identifier:          CSGDWKlxZ09DEpcxla1iZ2WqHNI/h3f3lVbZmfo3I4Y=
Subject key identifier:   E6:91:9C:72:D3:A5:B6:23:C4:07:34:14:9D:96:0A:0A:3B:41:F5:49
Certificate issuer:       /CN=91294759-5da4-4acf-8f32-7c022824b443
Certificate serial:       010D0C9F4328584A5335AA21D2B12106985F8580
Authority key identifier: 4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/637c46e9-a236-3d7b-bf0c-2be3cc51b7de.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     3477
IP address blocks:        205.159.118.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:aa:21:d2:b1:21:06:98:5f:85:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91294759-5da4-4acf-8f32-7c022824b443
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=c02eef5c-6ce1-4e55-ba7d-0bd45ad88560
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fe:c7:b8:37:33:ba:e2:a7:13:1e:2f:34:70:
                    d0:f6:76:94:48:3f:87:30:ba:cb:aa:c4:05:80:87:
                    7e:0e:6c:42:7c:24:58:b5:15:d8:3b:4e:c8:b9:93:
                    69:c3:1c:e7:7d:24:72:8f:f7:1c:77:54:e9:2d:3e:
                    d8:8b:1e:60:fa:29:d8:22:6a:65:58:af:d8:af:7d:
                    dd:61:0b:2e:ac:c6:f7:fd:ed:e3:1e:88:8c:f8:15:
                    ea:2e:64:ff:e5:d8:fd:f2:d8:e2:17:41:f2:0e:46:
                    0d:89:e3:7f:98:a7:b6:93:e9:b6:6b:75:86:6d:f7:
                    f9:cb:aa:06:6f:57:aa:7a:1b:19:d3:9d:0c:16:69:
                    98:b6:c7:7d:8f:de:87:ee:87:ec:e8:3b:df:48:bd:
                    b6:09:22:1d:ed:61:47:d6:8f:04:f2:25:2e:24:a8:
                    27:77:65:ee:7c:5e:b4:45:f9:c9:10:74:93:a3:e1:
                    ed:fc:c6:49:ba:9b:93:3a:80:42:70:3b:29:19:a8:
                    39:92:b1:cd:dc:2b:ed:ff:93:93:b1:ca:f9:63:77:
                    6e:b9:db:c7:3f:ad:68:fb:e8:51:88:04:b6:27:2d:
                    bb:9d:5d:1e:7c:27:a4:47:7b:ef:c6:c2:23:cf:ed:
                    a2:8f:ef:c8:35:c1:f1:46:89:2d:a7:59:c4:43:18:
                    c4:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:91:9C:72:D3:A5:B6:23:C4:07:34:14:9D:96:0A:0A:3B:41:F5:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/637c46e9-a236-3d7b-bf0c-2be3cc51b7de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443/91294759-5da4-4acf-8f32-7c022824b443.crl

            X509v3 Authority Key Identifier:
                keyid:4A:E3:79:93:AC:D8:45:48:A9:B2:47:A7:78:3F:37:39:27:E0:0F:22

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/91294759-5da4-4acf-8f32-7c022824b443.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  205.159.118.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:f3:73:3c:4c:44:90:fb:83:b4:eb:9d:7f:b1:cf:f5:36:ab:
         6d:22:3a:7d:f9:68:df:2d:3a:87:61:9e:de:a6:79:5a:71:c6:
         bc:b0:93:bf:a2:b5:f2:f2:9e:49:20:8b:4d:7c:a3:27:7a:f8:
         23:49:29:68:60:10:81:ba:b4:80:0d:b1:f3:4f:ee:0a:6d:87:
         35:e6:cf:94:ad:5a:94:1d:38:0f:f6:f1:16:0c:0d:ba:fa:c7:
         ca:b0:32:99:db:d8:2a:e8:66:78:1d:c1:72:79:e1:03:c0:ca:
         dd:f6:d1:d6:f4:13:3b:89:32:f2:75:81:dd:ff:05:bb:c1:2a:
         f9:80:03:1e:9c:6c:9b:f8:25:4b:ef:82:b1:b0:c6:76:92:d8:
         48:4b:01:3f:1d:f7:2c:ff:c0:72:82:7f:a4:5f:2f:f8:1a:96:
         41:db:8b:06:49:18:d7:ef:ef:b3:6e:b1:23:4d:c1:a5:78:aa:
         7d:23:3f:fe:d5:e8:e1:de:24:c2:10:96:e8:d9:e8:59:8b:ac:
         07:3e:fa:7a:df:c7:f6:9f:8b:4d:0c:cb:97:17:19:a1:cb:bc:
         93:14:68:e0:d0:dc:4c:b4:77:fa:d9:3a:42:01:b0:a7:23:11:
         23:e4:20:c6:1e:14:1e:09:bd:14:12:08:24:0f:fe:00:0e:38:
         60:b3:41:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNaoh0rEhBphfhYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEyOTQ3NTktNWRhNC00YWNmLThmMzItN2MwMjI4MjRi
NDQzMB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
YzAyZWVmNWMtNmNlMS00ZTU1LWJhN2QtMGJkNDVhZDg4NTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo/7HuDczuuKnEx4vNHDQ9naUSD+HMLrLqsQF
gId+DmxCfCRYtRXYO07IuZNpwxznfSRyj/ccd1TpLT7Yix5g+inYImplWK/Yr33d
YQsurMb3/e3jHoiM+BXqLmT/5dj98tjiF0HyDkYNieN/mKe2k+m2a3WGbff5y6oG
b1eqehsZ050MFmmYtsd9j96H7ofs6DvfSL22CSId7WFH1o8E8iUuJKgnd2XufF60
RfnJEHSTo+Ht/MZJupuTOoBCcDspGag5krHN3Cvt/5OTscr5Y3duudvHP61o++hR
iAS2Jy27nV0efCekR3vvxsIjz+2ij+/INcHxRoktp1nEQxjEwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOaRnHLTpbYjxAc0FJ2WCgo7QfVJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS85MTI5
NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAyMjgyNGI0NDMvNjM3YzQ2ZTktYTIzNi0z
ZDdiLWJmMGMtMmJlM2NjNTFiN2RlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOTEyOTQ3NTktNWRhNC00YWNmLThm
MzItN2MwMjI4MjRiNDQzLzkxMjk0NzU5LTVkYTQtNGFjZi04ZjMyLTdjMDIyODI0
YjQ0My5jcmwwHwYDVR0jBBgwFoAUSuN5k6zYRUipskeneD83OSfgDyIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS85MTI5NDc1OS01ZGE0LTRhY2YtOGYzMi03YzAy
MjgyNGI0NDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzZ92MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA3zczxMRJD7g7TrnX+xz/U2q20iOn35aN8tOodhnt6meVpxxrywk7+i
tfLynkkgi018oyd6+CNJKWhgEIG6tIANsfNP7gpthzXmz5StWpQdOA/28RYMDbr6
x8qwMpnb2CroZngdwXJ54QPAyt320db0EzuJMvJ1gd3/BbvBKvmAAx6cbJv4JUvv
grGwxnaS2EhLAT8d9yz/wHKCf6RfL/galkHbiwZJGNfv77NusSNNwaV4qn0jP/7V
6OHeJMIQlujZ6FmLrAc++nrfx/afi00My5cXGaHLvJMUaODQ3Ey0d/rZOkIBsKcj
ESPkIMYeFB4JvRQSCCQP/gAOOGCzQXE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 04:00:58 2025 by rpki-client