Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
File:                     6624b998-13e0-3a4d-aac9-4037a34bff51.roa (raw, json)
Hash identifier:          6F+efi8t6beyEvIxkpXYiwWs0Q/7yIh5lnmWjbqryVo=
Subject key identifier:   99:1D:12:C3:CD:15:4C:8B:F4:62:CE:40:E1:21:66:73:1B:50:16:DA
Certificate issuer:       /CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
Certificate serial:       010D0C9F4328584AC5AB842285CDFB00DAD111D0
Authority key identifier: 8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa
Signing time:             Thu 07 Aug 2025 01:00:33 +0000
ROA not before:           Thu 07 Aug 2025 01:00:33 +0000
ROA not after:            Wed 05 Nov 2025 02:00:33 +0000
asID:                     7127
IP address blocks:        192.214.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c5:ab:84:22:85:cd:fb:00:da:d1:11:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9
        Validity
            Not Before: Aug  7 01:00:33 2025 GMT
            Not After : Nov  5 02:00:33 2025 GMT
        Subject: CN=41717f92-445b-4060-ba12-a70d2fc87fd2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:46:c1:ac:a2:3b:a7:3b:98:37:e0:65:3b:78:
                    f6:69:c7:2f:d2:66:7e:15:71:79:a4:1c:10:14:1a:
                    e1:c2:20:c3:a7:e1:03:76:32:7f:d2:80:06:ee:73:
                    25:09:72:73:d5:b6:80:78:65:02:a3:af:2a:4d:20:
                    17:f5:a6:f7:43:f7:4e:70:71:66:7d:4f:fa:ca:0a:
                    1d:fa:62:8b:89:d7:4e:26:fd:89:ac:02:65:c0:79:
                    f0:5e:9c:f8:02:d5:54:98:a2:f2:c7:ff:d0:18:9f:
                    f0:4c:2a:42:ac:13:e2:6a:59:7f:20:9e:f3:5d:c0:
                    b5:31:d2:7c:e4:b0:f5:e9:10:56:cf:08:48:5e:9b:
                    a6:f4:79:1a:93:0a:a2:f6:0a:01:6b:92:60:88:22:
                    30:5d:75:16:b4:b9:5f:73:52:aa:63:29:45:32:6c:
                    5c:ca:77:80:c1:69:60:d8:7e:f8:08:47:8e:e1:c0:
                    64:eb:2c:1a:77:66:73:d2:10:60:c2:f8:d3:aa:f4:
                    2c:65:8b:c2:d1:d7:34:54:23:af:ab:9b:10:13:71:
                    29:d1:bd:69:e3:fc:70:67:66:e5:77:2f:b3:1c:d8:
                    9e:74:47:25:5b:ea:15:c3:19:4a:28:e3:3b:ab:b4:
                    ec:02:c1:fa:0e:6b:3f:9a:56:50:49:7b:c3:87:cc:
                    ce:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:1D:12:C3:CD:15:4C:8B:F4:62:CE:40:E1:21:66:73:1B:50:16:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/6624b998-13e0-3a4d-aac9-4037a34bff51.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.crl

            X509v3 Authority Key Identifier:
                keyid:8F:F9:0F:06:64:B0:32:AE:06:2D:7A:C2:E3:4B:C1:8E:E4:79:4D:3C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/0aa8c299-03ca-4b81-8bae-83b6d1b3d7d9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.214.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7d:95:9f:ca:cc:55:cf:6d:53:0f:86:28:69:24:8e:3f:fb:39:
         51:3a:86:b2:38:54:f3:bf:a0:dc:b8:96:8a:d8:e8:d0:88:e0:
         33:88:df:87:dd:f4:3d:c9:48:0a:4e:45:29:60:b3:f9:6a:ed:
         50:fb:ea:34:4b:f4:10:c3:81:dd:15:bb:65:6b:a9:42:16:fb:
         fd:fb:fa:38:54:bd:1f:dc:3f:e2:c3:11:a1:ff:d9:5d:ae:b7:
         6f:c5:28:46:d3:25:13:0f:2b:ed:0b:d1:8f:ea:de:7d:16:0f:
         8e:36:5d:fa:dc:eb:0e:2a:96:ac:17:63:d4:b7:3f:13:b0:98:
         f3:dd:1d:1c:2d:bb:2e:7f:47:e0:cc:7e:a2:91:be:07:21:e8:
         6e:f8:4f:70:74:7d:16:3b:26:ec:87:ed:2a:54:d1:b7:b4:93:
         3a:69:2d:0b:0c:f3:ee:a0:f5:d3:d8:8d:f8:19:09:ab:bb:3b:
         49:f1:da:a4:44:87:22:9e:97:a6:62:6b:eb:49:da:79:ef:d7:
         4c:ea:82:44:f4:24:53:03:c8:c7:7c:07:88:33:4e:86:1e:f0:
         43:a3:a5:9d:87:0d:c9:f6:f5:43:81:02:7e:0d:07:9f:e3:ee:
         52:db:0b:35:09:21:57:a0:46:54:d9:79:95:9b:79:50:f9:27:
         df:d6:97:9b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErFq4Qihc37ANrREdAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFhOGMyOTktMDNjYS00YjgxLThiYWUtODNiNmQxYjNk
N2Q5MB4XDTI1MDgwNzAxMDAzM1oXDTI1MTEwNTAyMDAzM1owLzEtMCsGA1UEAxMk
NDE3MTdmOTItNDQ1Yi00MDYwLWJhMTItYTcwZDJmYzg3ZmQyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1EbBrKI7pzuYN+BlO3j2accv0mZ+FXF5pBwQ
FBrhwiDDp+EDdjJ/0oAG7nMlCXJz1baAeGUCo68qTSAX9ab3Q/dOcHFmfU/6ygod
+mKLiddOJv2JrAJlwHnwXpz4AtVUmKLyx//QGJ/wTCpCrBPiall/IJ7zXcC1MdJ8
5LD16RBWzwhIXpum9Hkakwqi9goBa5JgiCIwXXUWtLlfc1KqYylFMmxcyneAwWlg
2H74CEeO4cBk6ywad2Zz0hBgwvjTqvQsZYvC0dc0VCOvq5sQE3Ep0b1p4/xwZ2bl
dy+zHNiedEclW+oVwxlKKOM7q7TsAsH6Dms/mlZQSXvDh8zOBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJkdEsPNFUyL9GLOQOEhZnMbUBbaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4
YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2ZDFiM2Q3ZDkvNjYyNGI5OTgtMTNlMC0z
YTRkLWFhYzktNDAzN2EzNGJmZjUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMGFhOGMyOTktMDNjYS00YjgxLThi
YWUtODNiNmQxYjNkN2Q5LzBhYThjMjk5LTAzY2EtNGI4MS04YmFlLTgzYjZkMWIz
ZDdkOS5jcmwwHwYDVR0jBBgwFoAUj/kPBmSwMq4GLXrC40vBjuR5TTwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wYWE4YzI5OS0wM2NhLTRiODEtOGJhZS04M2I2
ZDFiM2Q3ZDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGwNYAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH2Vn8rMVc9tUw+GKGkkjj/7OVE6hrI4VPO/oNy4lorY6NCI4DOI34fd
9D3JSApORSlgs/lq7VD76jRL9BDDgd0Vu2VrqUIW+/37+jhUvR/cP+LDEaH/2V2u
t2/FKEbTJRMPK+0L0Y/q3n0WD442Xfrc6w4qlqwXY9S3PxOwmPPdHRwtuy5/R+DM
fqKRvgch6G74T3B0fRY7JuyH7SpU0be0kzppLQsM8+6g9dPYjfgZCau7O0nx2qRE
hyKel6Zia+tJ2nnv10zqgkT0JFMDyMd8B4gzToYe8EOjpZ2HDcn29UOBAn4NB5/j
7lLbCzUJIVegRlTZeZWbeVD5J9/Wl5s=
-----END CERTIFICATE-----
Generated at Sun Aug 24 01:13:43 2025 by rpki-client