Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a763aa75-086d-3fc0-be34-88db389beb9f.roa
File:                     a763aa75-086d-3fc0-be34-88db389beb9f.roa (raw, json)
Hash identifier:          cZYtdqy17Naox+4bZ1Kp7MT0wgVjNUrzqW2BdRPi6eU=
Subject key identifier:   23:F9:2F:53:78:6D:FB:C5:D3:8A:71:C4:D4:6B:B9:DD:5D:FA:F9:15
Certificate issuer:       /CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
Certificate serial:       010D0C9F4328584A4AD592F0073A47CFFDD6BA80
Authority key identifier: 63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a763aa75-086d-3fc0-be34-88db389beb9f.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        172.84.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:92:f0:07:3a:47:cf:fd:d6:ba:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c7a240a6-7109-4cea-b4c6-82f627a534d6
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=c1b82c28-10c0-4602-bac7-46d57be0bca3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:10:20:f4:23:fc:f1:39:76:5f:15:6d:21:39:
                    d8:13:b8:c5:ed:32:50:70:29:1d:1f:9d:35:67:ac:
                    50:a4:71:7f:44:55:69:80:89:03:bf:d5:0b:a5:54:
                    20:12:59:26:fb:7d:39:5d:f0:b6:96:31:10:79:6b:
                    33:30:51:cd:0d:e9:45:69:f4:00:47:08:89:62:f2:
                    48:b3:34:1a:cd:b2:fa:45:a7:2f:43:5a:f1:2d:9c:
                    f2:6e:d0:9f:46:69:42:c6:39:78:fc:7a:7e:d8:8f:
                    e6:db:cd:23:d4:ac:a9:a5:19:5c:ec:c7:f3:7f:aa:
                    39:e7:a2:f7:57:77:9d:d9:cb:4b:42:9a:5a:44:a7:
                    09:a9:d0:72:78:a7:89:8c:bb:9c:38:57:18:d5:60:
                    87:19:ab:3e:a0:ce:38:db:ff:6d:92:4a:e6:52:1d:
                    c2:c4:99:57:05:ee:3e:68:be:9f:b1:a3:be:af:a0:
                    a9:9c:86:05:50:69:5c:f8:2c:e3:00:3b:72:0c:01:
                    bf:b7:8a:22:58:39:23:b0:2f:81:ee:20:11:fb:d1:
                    a8:57:18:59:69:80:38:53:4b:f7:f8:ee:d1:64:a8:
                    30:a9:60:4b:e0:67:ea:bb:48:8c:bb:f1:96:eb:72:
                    6b:f2:7c:7c:43:1d:12:02:d1:0d:cc:0e:18:f4:70:
                    da:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:F9:2F:53:78:6D:FB:C5:D3:8A:71:C4:D4:6B:B9:DD:5D:FA:F9:15
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/a763aa75-086d-3fc0-be34-88db389beb9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6/c7a240a6-7109-4cea-b4c6-82f627a534d6.crl

            X509v3 Authority Key Identifier:
                keyid:63:B0:53:A7:E5:00:E1:A7:5E:E6:10:16:EA:3B:F1:3C:9E:CF:88:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/c7a240a6-7109-4cea-b4c6-82f627a534d6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.84.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:df:d6:95:2d:51:d3:ec:d5:79:06:55:13:81:a1:9a:4f:6f:
         d8:2e:be:3f:25:fb:6c:5f:df:6b:67:bf:04:e7:d6:da:54:c6:
         09:1f:2e:c8:1c:f2:12:c8:8c:49:7b:14:d3:c5:a2:e3:77:b6:
         d5:3e:13:9a:9c:d8:97:97:4b:c4:31:cc:9c:ec:bf:58:19:83:
         ff:c2:bf:6e:d0:d6:f4:95:3a:e5:eb:b7:42:01:9a:cd:e9:40:
         f0:00:1e:4b:0d:49:bb:b3:ba:eb:76:e3:d0:57:de:56:57:7a:
         76:77:1a:e4:73:6e:79:27:c4:37:e7:e6:f7:a6:81:a0:ce:e0:
         59:16:9f:cb:dd:71:28:96:cd:cd:4e:7a:c2:a0:9a:f1:15:25:
         3a:e9:a3:87:8b:49:15:5a:70:13:3f:02:49:45:e6:6b:23:76:
         21:4b:de:61:ba:73:18:32:63:21:ee:af:e5:fd:c0:c4:ed:4f:
         76:a8:9a:ab:9e:f5:38:79:45:69:f1:80:71:0c:89:aa:74:1c:
         7c:0c:e5:7f:ba:71:69:8e:7f:99:23:5f:8f:32:36:b9:89:7f:
         77:58:7f:9d:6d:ca:eb:bb:b4:8f:8a:70:de:8c:80:57:64:f7:
         ea:39:6a:66:9c:12:88:6d:7e:a1:0e:4f:14:41:99:bf:0e:44:
         da:ab:8d:e9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZLwBzpHz/3WuoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzdhMjQwYTYtNzEwOS00Y2VhLWI0YzYtODJmNjI3YTUz
NGQ2MB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YzFiODJjMjgtMTBjMC00NjAyLWJhYzctNDZkNTdiZTBiY2EzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBAg9CP88Tl2XxVtITnYE7jF7TJQcCkdH501
Z6xQpHF/RFVpgIkDv9ULpVQgElkm+305XfC2ljEQeWszMFHNDelFafQARwiJYvJI
szQazbL6RacvQ1rxLZzybtCfRmlCxjl4/Hp+2I/m280j1KyppRlc7Mfzf6o556L3
V3ed2ctLQppaRKcJqdByeKeJjLucOFcY1WCHGas+oM442/9tkkrmUh3CxJlXBe4+
aL6fsaO+r6CpnIYFUGlc+CzjADtyDAG/t4oiWDkjsC+B7iAR+9GoVxhZaYA4U0v3
+O7RZKgwqWBL4Gfqu0iMu/GW63Jr8nx8Qx0SAtENzA4Y9HDaCwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCP5L1N4bfvF04pxxNRrud1d+vkVMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2Ey
NDBhNi03MTA5LTRjZWEtYjRjNi04MmY2MjdhNTM0ZDYvYTc2M2FhNzUtMDg2ZC0z
ZmMwLWJlMzQtODhkYjM4OWJlYjlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvYzdhMjQwYTYtNzEwOS00Y2VhLWI0
YzYtODJmNjI3YTUzNGQ2L2M3YTI0MGE2LTcxMDktNGNlYS1iNGM2LTgyZjYyN2E1
MzRkNi5jcmwwHwYDVR0jBBgwFoAUY7BTp+UA4ade5hAW6jvxPJ7PiPMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9jN2EyNDBhNi03MTA5LTRjZWEtYjRjNi04MmY2
MjdhNTM0ZDYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFRcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAbf1pUtUdPs1XkGVROBoZpPb9guvj8l+2xf32tnvwTn1tpUxgkfLsgc
8hLIjEl7FNPFouN3ttU+E5qc2JeXS8QxzJzsv1gZg//Cv27Q1vSVOuXrt0IBms3p
QPAAHksNSbuzuut249BX3lZXenZ3GuRzbnknxDfn5vemgaDO4FkWn8vdcSiWzc1O
esKgmvEVJTrpo4eLSRVacBM/AklF5msjdiFL3mG6cxgyYyHur+X9wMTtT3aomque
9Th5RWnxgHEMiap0HHwM5X+6cWmOf5kjX48yNrmJf3dYf51tyuu7tI+KcN6MgFdk
9+o5amacEohtfqEOTxRBmb8ORNqrjek=
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:10:57 2025 by rpki-client