Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/519e471b-ecef-3971-9210-cef7bc4d5872.roa
File:                     519e471b-ecef-3971-9210-cef7bc4d5872.roa (raw, json)
Hash identifier:          UGDpgtOqyDWyTh2zl9CjFR7a0VQ0zbPOm1aj179x+Ek=
Subject key identifier:   87:8C:E5:F2:44:32:3C:3C:F8:E9:5C:90:34:15:1B:AC:A1:32:79:40
Certificate issuer:       /CN=28103d71-6a1e-4497-9178-fb6f75de4a67
Certificate serial:       010D0C9F4328584A4A1ADBB3968AB5CEBF9BFF50
Authority key identifier: C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/519e471b-ecef-3971-9210-cef7bc4d5872.roa
Signing time:             Mon 23 Jun 2025 18:44:42 +0000
ROA not before:           Mon 23 Jun 2025 18:44:42 +0000
ROA not after:            Sun 21 Sep 2025 18:44:42 +0000
asID:                     20001
IP address blocks:        172.81.115.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:1a:db:b3:96:8a:b5:ce:bf:9b:ff:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28103d71-6a1e-4497-9178-fb6f75de4a67
        Validity
            Not Before: Jun 23 18:44:42 2025 GMT
            Not After : Sep 21 18:44:42 2025 GMT
        Subject: CN=f66f78b8-2447-46cb-8bca-04a75a2133e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d2:0a:0f:65:c7:31:92:72:57:da:2c:1c:f7:
                    a0:94:ff:ba:ff:7e:58:97:da:8b:41:bd:11:98:4f:
                    52:f8:cc:31:b0:8f:3c:74:7b:db:25:73:82:1b:e4:
                    fe:ed:59:57:93:d0:0a:51:0e:00:72:90:e7:6a:a1:
                    ca:87:64:fd:8d:7b:db:8e:b5:4b:eb:dc:41:f4:9c:
                    41:8c:fd:1f:41:0f:92:1d:e2:4b:b0:82:39:3c:82:
                    56:ae:9f:4f:dc:57:fb:7a:7b:59:53:33:3e:e3:dd:
                    16:5c:0e:07:90:15:e5:38:1f:5c:ab:eb:b8:56:5a:
                    07:f2:d5:40:35:34:ba:e0:ae:27:14:5c:b9:9d:d2:
                    c7:84:eb:76:10:fa:55:e4:0d:61:96:67:d6:93:57:
                    fb:fa:91:51:a7:6b:b1:13:30:fb:74:4a:c8:e5:f6:
                    e6:6a:48:97:ad:02:94:25:9b:88:2b:ed:79:fb:fb:
                    d5:97:b1:45:bd:38:e6:3f:aa:90:45:78:52:97:65:
                    42:0f:9b:ae:16:93:4a:f8:1e:d2:c6:90:b9:48:b4:
                    cb:e0:95:ca:37:0a:a3:b3:b3:75:28:de:5c:8b:df:
                    23:0b:fe:d0:e8:2a:86:1c:82:59:c1:c2:b9:31:bb:
                    0e:df:e7:c2:c4:66:bd:7b:ef:33:55:f5:02:53:b6:
                    cf:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:8C:E5:F2:44:32:3C:3C:F8:E9:5C:90:34:15:1B:AC:A1:32:79:40
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/519e471b-ecef-3971-9210-cef7bc4d5872.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67/28103d71-6a1e-4497-9178-fb6f75de4a67.crl

            X509v3 Authority Key Identifier:
                keyid:C6:E8:D0:B5:48:99:69:67:84:7D:AB:28:5E:1E:E6:90:DA:43:F3:B7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/28103d71-6a1e-4497-9178-fb6f75de4a67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.115.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:58:9e:7a:4b:c3:f9:30:4f:b2:8c:d6:53:3f:e3:de:fc:
         b5:91:ee:b1:1d:dd:3a:2d:1a:7b:78:1f:91:5f:db:5d:d2:f1:
         22:14:72:fb:1e:81:ca:df:65:f5:d2:73:f7:29:c3:a3:9f:da:
         e9:38:52:a9:0e:9c:bc:1b:73:c6:e9:78:e3:c8:03:99:9f:8a:
         25:82:93:7c:8d:a4:d3:16:5f:a6:58:88:7c:50:03:66:8e:9e:
         65:3e:75:12:51:6f:b1:52:94:9e:24:4f:91:fc:64:b5:e4:b0:
         61:f8:2e:43:dd:7c:c5:9d:4e:25:24:79:20:0f:cc:64:5c:ad:
         5f:2e:a5:0f:2a:59:ec:35:28:1d:4d:fa:09:89:6f:5c:cb:ec:
         39:a0:04:92:4f:75:17:e3:cb:4a:55:ae:05:9b:a3:f9:e7:b0:
         7a:24:68:68:32:2d:e8:fe:7a:0e:d7:bc:30:9d:4f:bf:99:d8:
         c6:8c:2b:89:ce:d0:04:b0:aa:e7:5e:c0:7b:c3:22:59:9e:d1:
         2b:0d:7d:5a:18:b6:52:12:65:1f:99:9c:db:c3:62:df:60:20:
         dc:2c:ee:3f:0d:1c:f3:c0:20:59:7d:0e:4b:1e:0e:66:f8:e9:
         42:cd:f7:68:29:98:54:da:78:a2:2e:e1:a9:f2:ed:38:1d:f2:
         8c:2d:df:ff
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpKGtuzloq1zr+b/1AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjgxMDNkNzEtNmExZS00NDk3LTkxNzgtZmI2Zjc1ZGU0
YTY3MB4XDTI1MDYyMzE4NDQ0MloXDTI1MDkyMTE4NDQ0MlowLzEtMCsGA1UEAxMk
ZjY2Zjc4YjgtMjQ0Ny00NmNiLThiY2EtMDRhNzVhMjEzM2U5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29IKD2XHMZJyV9osHPeglP+6/35Yl9qLQb0R
mE9S+MwxsI88dHvbJXOCG+T+7VlXk9AKUQ4AcpDnaqHKh2T9jXvbjrVL69xB9JxB
jP0fQQ+SHeJLsII5PIJWrp9P3Ff7entZUzM+490WXA4HkBXlOB9cq+u4VloH8tVA
NTS64K4nFFy5ndLHhOt2EPpV5A1hlmfWk1f7+pFRp2uxEzD7dErI5fbmakiXrQKU
JZuIK+15+/vVl7FFvTjmP6qQRXhSl2VCD5uuFpNK+B7SxpC5SLTL4JXKNwqjs7N1
KN5ci98jC/7Q6CqGHIJZwcK5MbsO3+fCxGa9e+8zVfUCU7bPIwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIeM5fJEMjw8+OlckDQVG6yhMnlAMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8yODEw
M2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZmNzVkZTRhNjcvNTE5ZTQ3MWItZWNlZi0z
OTcxLTkyMTAtY2VmN2JjNGQ1ODcyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvMjgxMDNkNzEtNmExZS00NDk3LTkx
NzgtZmI2Zjc1ZGU0YTY3LzI4MTAzZDcxLTZhMWUtNDQ5Ny05MTc4LWZiNmY3NWRl
NGE2Ny5jcmwwHwYDVR0jBBgwFoAUxujQtUiZaWeEfasoXh7mkNpD87cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8yODEwM2Q3MS02YTFlLTQ0OTctOTE3OC1mYjZm
NzVkZTRhNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFFzMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADGkWJ56S8P5ME+yjNZTP+Pe/LWR7rEd3TotGnt4H5Ff213S8SIUcvse
gcrfZfXSc/cpw6Of2uk4UqkOnLwbc8bpeOPIA5mfiiWCk3yNpNMWX6ZYiHxQA2aO
nmU+dRJRb7FSlJ4kT5H8ZLXksGH4LkPdfMWdTiUkeSAPzGRcrV8upQ8qWew1KB1N
+gmJb1zL7DmgBJJPdRfjy0pVrgWbo/nnsHokaGgyLej+eg7XvDCdT7+Z2MaMK4nO
0ASwqudewHvDIlme0SsNfVoYtlISZR+ZnNvDYt9gINws7j8NHPPAIFl9DkseDmb4
6ULN92gpmFTaeKIu4any7Tgd8owt3/8=
-----END CERTIFICATE-----
Generated at Wed Jul 2 22:34:23 2025 by rpki-client