Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/fcbe34e8-ff52-32a3-b8ad-b78b80ad6c11.roa
File:                     fcbe34e8-ff52-32a3-b8ad-b78b80ad6c11.roa (raw, json)
Hash identifier:          uTxLLTJ3yDaSJ/r1VC2yiE2p7XmT3obYpJknhue/Tyc=
Subject key identifier:   28:08:7A:88:6E:5D:07:A5:60:C9:98:CD:94:C8:54:94:46:35:4E:32
Certificate issuer:       /CN=50554af3-8108-491d-84e4-240f4874833a
Certificate serial:       010D0C9F4328584A3E45A6508EC4D60DFA674540
Authority key identifier: 62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/fcbe34e8-ff52-32a3-b8ad-b78b80ad6c11.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     3561
IP address blocks:        185.200.236.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a6:50:8e:c4:d6:0d:fa:67:45:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=50554af3-8108-491d-84e4-240f4874833a
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=c1232c9e-3918-49ed-9b83-fcf817c7e521
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:d6:0b:b0:a8:6c:fb:a9:bd:e3:99:57:04:44:
                    fa:d6:01:ab:18:9d:77:2a:d5:e1:c6:e6:58:00:6a:
                    fc:4d:b0:ba:90:51:cc:14:e7:76:bc:32:5f:bb:1c:
                    43:66:83:c8:ed:e5:c6:36:b1:c1:5d:cd:03:64:22:
                    9a:cd:29:64:81:48:81:61:45:39:ec:50:a6:71:b4:
                    42:31:e1:a6:07:76:a5:3a:03:cf:bf:60:f0:e8:47:
                    ce:dd:59:08:8e:05:0a:85:e4:9c:37:d3:af:a2:31:
                    ca:3f:0b:f7:a4:68:0c:b6:be:9b:b6:20:82:07:f2:
                    c7:62:dc:97:4f:ae:3b:42:12:58:4f:78:68:da:52:
                    b5:84:7d:5f:09:50:4e:31:a8:3b:10:3c:de:4d:f9:
                    43:6b:8b:6a:a4:98:56:c1:e5:86:85:d1:3c:6e:65:
                    df:f5:07:8a:26:84:20:c3:3b:82:73:29:75:95:6b:
                    5b:6e:dd:dc:a7:5d:37:ba:40:7d:98:77:c2:76:4c:
                    24:f1:09:cb:60:69:be:9c:81:ce:86:fb:78:99:a2:
                    1f:df:69:3d:d2:ba:9f:c1:b7:24:bc:8a:33:d1:00:
                    86:fb:09:81:c7:7e:f5:e1:8a:49:aa:44:19:b4:82:
                    80:10:f3:b4:50:0c:11:d1:af:d3:12:c1:68:cc:ef:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:08:7A:88:6E:5D:07:A5:60:C9:98:CD:94:C8:54:94:46:35:4E:32
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/fcbe34e8-ff52-32a3-b8ad-b78b80ad6c11.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a/50554af3-8108-491d-84e4-240f4874833a.crl

            X509v3 Authority Key Identifier:
                keyid:62:F9:9E:4B:84:14:A7:D4:AD:22:12:4C:DB:E3:59:77:91:6F:BA:0C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/50554af3-8108-491d-84e4-240f4874833a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.200.236.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:c0:1c:3e:7c:ee:6d:9c:c4:8a:00:75:fc:67:08:c5:25:bf:
         3d:41:9e:1d:8a:af:6b:5e:42:05:5b:9f:43:ec:6c:14:2e:6f:
         00:8e:57:a8:cd:45:74:b9:ed:e5:63:87:40:c9:2e:f3:9c:d0:
         a9:a3:95:7f:65:e6:bd:a5:fa:2c:8e:a3:13:1a:7c:b0:ca:01:
         c5:90:5b:39:94:47:4f:8b:e6:61:39:63:ed:a4:fc:48:a5:ed:
         f9:33:85:0b:b2:12:a4:75:88:ca:97:93:95:bc:fb:52:58:93:
         f6:36:a7:01:8c:be:8a:a1:44:0a:b8:ac:81:8e:18:57:96:cd:
         82:3f:43:e4:84:33:9c:94:14:76:1f:3f:79:c1:40:df:8b:4f:
         bc:16:39:da:67:78:45:51:62:5e:71:1a:41:1c:af:36:b8:5e:
         12:50:9e:11:80:e0:7b:2b:b3:33:bb:a0:4d:22:4f:71:76:40:
         34:12:23:f8:20:4c:49:38:b8:e5:30:3c:25:72:5a:e0:99:dc:
         8c:88:c8:61:e0:ad:d8:ae:a0:6d:25:47:03:fb:03:5f:ad:f9:
         ee:c3:85:23:41:96:93:8b:de:af:4c:87:bd:b1:f8:6a:27:df:
         9e:ad:44:4f:e5:1f:1b:a4:01:21:87:35:38:62:cb:51:79:35:
         f8:1f:e5:d6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaZQjsTWDfpnRUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTA1NTRhZjMtODEwOC00OTFkLTg0ZTQtMjQwZjQ4NzQ4
MzNhMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
YzEyMzJjOWUtMzkxOC00OWVkLTliODMtZmNmODE3YzdlNTIxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNYLsKhs+6m945lXBET61gGrGJ13KtXhxuZY
AGr8TbC6kFHMFOd2vDJfuxxDZoPI7eXGNrHBXc0DZCKazSlkgUiBYUU57FCmcbRC
MeGmB3alOgPPv2Dw6EfO3VkIjgUKheScN9OvojHKPwv3pGgMtr6btiCCB/LHYtyX
T647QhJYT3ho2lK1hH1fCVBOMag7EDzeTflDa4tqpJhWweWGhdE8bmXf9QeKJoQg
wzuCcyl1lWtbbt3cp103ukB9mHfCdkwk8QnLYGm+nIHOhvt4maIf32k90rqfwbck
vIoz0QCG+wmBx3714YpJqkQZtIKAEPO0UAwR0a/TEsFozO+KwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCgIeohuXQelYMmYzZTIVJRGNU4yMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1
NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBmNDg3NDgzM2EvZmNiZTM0ZTgtZmY1Mi0z
MmEzLWI4YWQtYjc4YjgwYWQ2YzExLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNTA1NTRhZjMtODEwOC00OTFkLTg0
ZTQtMjQwZjQ4NzQ4MzNhLzUwNTU0YWYzLTgxMDgtNDkxZC04NGU0LTI0MGY0ODc0
ODMzYS5jcmwwHwYDVR0jBBgwFoAUYvmeS4QUp9StIhJM2+NZd5FvugwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS81MDU1NGFmMy04MTA4LTQ5MWQtODRlNC0yNDBm
NDg3NDgzM2EuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucjsMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAI3AHD587m2cxIoAdfxnCMUlvz1Bnh2Kr2teQgVbn0PsbBQubwCOV6jN
RXS57eVjh0DJLvOc0KmjlX9l5r2l+iyOoxMafLDKAcWQWzmUR0+L5mE5Y+2k/Eil
7fkzhQuyEqR1iMqXk5W8+1JYk/Y2pwGMvoqhRAq4rIGOGFeWzYI/Q+SEM5yUFHYf
P3nBQN+LT7wWOdpneEVRYl5xGkEcrza4XhJQnhGA4HsrszO7oE0iT3F2QDQSI/gg
TEk4uOUwPCVyWuCZ3IyIyGHgrdiuoG0lRwP7A1+t+e7DhSNBlpOL3q9Mh72x+Gon
356tRE/lHxukASGHNThiy1F5Nfgf5dY=
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:44 2025 by rpki-client