Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa
File:                     0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa (raw, json)
Hash identifier:          fRBKUgAYBhMUp/Vy1EYFh7zGZ8Yl7zjtQBEvMbunQqE=
Subject key identifier:   34:12:32:73:0B:79:FA:09:9F:96:88:7D:48:AA:21:13:EC:93:B0:73
Certificate issuer:       /CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
Certificate serial:       010D0C9F43285849ED303CBC64F816A30CEA6100
Authority key identifier: 95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa
Signing time:             Wed 21 May 2025 11:57:36 +0000
ROA not before:           Wed 21 May 2025 11:57:36 +0000
ROA not after:            Tue 19 Aug 2025 11:57:36 +0000
asID:                     198949
IP address blocks:        192.31.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:30:3c:bc:64:f8:16:a3:0c:ea:61:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=a6f26d75-0d3a-4bef-8d6a-36d16664307e
        Validity
            Not Before: May 21 11:57:36 2025 GMT
            Not After : Aug 19 11:57:36 2025 GMT
        Subject: CN=2c3f182b-7f7d-4cc0-9c31-3f0b8cb76b5f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:49:8c:37:9b:8d:45:34:3d:2a:7c:11:98:d4:
                    f5:23:5f:d4:0c:dc:cc:06:64:ad:23:c7:f0:8c:b1:
                    20:6f:b6:27:e1:57:2b:5b:76:bf:44:cb:a5:50:98:
                    15:6c:3d:7d:e3:8c:a3:6e:85:49:bf:0d:00:bc:1b:
                    61:52:f0:9f:65:13:9d:39:e3:96:9c:de:e9:48:90:
                    19:e1:81:fa:53:1f:43:6f:9d:87:74:1c:c9:6a:dd:
                    64:10:1b:ce:2f:82:16:b1:97:26:38:11:f7:48:d0:
                    7a:10:f9:b3:28:d0:3b:44:a4:5a:4b:3d:fe:ab:9b:
                    cd:f2:fb:f8:48:9f:6d:a5:df:9d:d6:71:fd:b3:fc:
                    c6:84:8a:c4:66:4a:0a:e0:b4:37:cd:bd:10:d6:a1:
                    18:ac:a6:0c:6c:d5:e0:95:7f:9d:18:8d:d4:17:d4:
                    52:55:54:2a:d8:77:50:5a:48:4d:94:de:2a:83:c5:
                    33:b8:89:2c:52:bf:05:5d:4b:71:3f:f5:3d:2a:c5:
                    bf:1a:83:43:1a:88:80:15:2a:0c:06:1c:cb:bf:60:
                    d5:87:3a:fc:47:73:7d:36:09:ce:c7:f3:9f:e3:c0:
                    28:26:7e:bb:87:e0:c8:6f:1a:bc:0e:0e:f8:0d:b7:
                    18:09:f1:fd:f7:69:46:07:2a:57:7d:2b:a2:5f:0c:
                    92:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:12:32:73:0B:79:FA:09:9F:96:88:7D:48:AA:21:13:EC:93:B0:73
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/0f9884f6-c8e9-3844-8318-2086b25c3ff9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e/a6f26d75-0d3a-4bef-8d6a-36d16664307e.crl

            X509v3 Authority Key Identifier:
                keyid:95:63:35:33:47:05:5D:59:71:3A:DA:67:E9:EB:BB:5A:F5:DC:7D:2B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/a6f26d75-0d3a-4bef-8d6a-36d16664307e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.31.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:00:2b:93:ca:f2:95:af:55:a1:e1:a8:98:56:a3:da:6e:64:
         20:63:d5:cc:dd:43:fc:73:c4:72:dd:7e:df:5f:34:2e:75:31:
         f2:c0:b5:97:b6:e7:ef:a5:50:2f:ef:22:66:2b:53:3f:61:10:
         cb:bd:14:fc:79:cd:5f:19:93:ef:16:53:ee:06:3c:9a:14:4f:
         b8:ed:7b:dc:1e:41:bd:5c:da:5f:7b:69:73:18:0b:7e:db:68:
         88:d2:b6:88:a1:df:36:e1:c8:b6:30:66:c2:96:bb:c8:b7:6b:
         4d:39:04:fb:43:57:22:67:f8:15:c9:1c:1d:a2:dd:f3:ce:9f:
         e2:e6:92:42:4e:84:32:3c:1b:52:58:cf:c5:c2:47:a0:81:4e:
         67:53:97:6c:5b:01:af:b4:e6:59:21:48:70:35:b3:f0:ee:19:
         0d:05:0a:88:12:2a:5d:9e:ec:0a:26:29:2e:06:52:7b:ac:82:
         cc:ff:90:fe:93:d2:ec:4a:84:ad:02:ab:d3:86:bb:6a:be:5e:
         ce:21:f5:bd:e0:3c:81:35:5e:3f:ea:d5:a3:8d:21:92:08:1d:
         47:92:72:03:77:13:c7:d0:b2:d6:c0:0e:d7:35:7b:ce:eb:06:
         a7:6a:0e:e2:a2:84:cd:fe:92:b7:4a:bc:a9:e6:cb:ca:e5:27:
         62:0b:9a:49
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntMDy8ZPgWowzqYQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYTZmMjZkNzUtMGQzYS00YmVmLThkNmEtMzZkMTY2NjQz
MDdlMB4XDTI1MDUyMTExNTczNloXDTI1MDgxOTExNTczNlowLzEtMCsGA1UEAxMk
MmMzZjE4MmItN2Y3ZC00Y2MwLTljMzEtM2YwYjhjYjc2YjVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm0mMN5uNRTQ9KnwRmNT1I1/UDNzMBmStI8fw
jLEgb7Yn4VcrW3a/RMulUJgVbD1944yjboVJvw0AvBthUvCfZROdOeOWnN7pSJAZ
4YH6Ux9Db52HdBzJat1kEBvOL4IWsZcmOBH3SNB6EPmzKNA7RKRaSz3+q5vN8vv4
SJ9tpd+d1nH9s/zGhIrEZkoK4LQ3zb0Q1qEYrKYMbNXglX+dGI3UF9RSVVQq2HdQ
WkhNlN4qg8UzuIksUr8FXUtxP/U9KsW/GoNDGoiAFSoMBhzLv2DVhzr8R3N9NgnO
x/Of48AoJn67h+DIbxq8Dg74DbcYCfH992lGBypXfSuiXwySpwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDQSMnMLefoJn5aIfUiqIRPsk7BzMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYy
NmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQxNjY2NDMwN2UvMGY5ODg0ZjYtYzhlOS0z
ODQ0LTgzMTgtMjA4NmIyNWMzZmY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYTZmMjZkNzUtMGQzYS00YmVmLThk
NmEtMzZkMTY2NjQzMDdlL2E2ZjI2ZDc1LTBkM2EtNGJlZi04ZDZhLTM2ZDE2NjY0
MzA3ZS5jcmwwHwYDVR0jBBgwFoAUlWM1M0cFXVlxOtpn6eu7WvXcfSswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9hNmYyNmQ3NS0wZDNhLTRiZWYtOGQ2YS0zNmQx
NjY2NDMwN2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwB/sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHsAK5PK8pWvVaHhqJhWo9puZCBj1czdQ/xzxHLdft9fNC51MfLAtZe2
5++lUC/vImYrUz9hEMu9FPx5zV8Zk+8WU+4GPJoUT7jte9weQb1c2l97aXMYC37b
aIjStoih3zbhyLYwZsKWu8i3a005BPtDVyJn+BXJHB2i3fPOn+LmkkJOhDI8G1JY
z8XCR6CBTmdTl2xbAa+05lkhSHA1s/DuGQ0FCogSKl2e7AomKS4GUnusgsz/kP6T
0uxKhK0Cq9OGu2q+Xs4h9b3gPIE1Xj/q1aONIZIIHUeScgN3E8fQstbADtc1e87r
BqdqDuKihM3+krdKvKnmy8rlJ2ILmkk=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:49:04 2025 by rpki-client