Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/63d1fd6e-9b76-38a9-93bf-434fe0f41164.roa
File:                     63d1fd6e-9b76-38a9-93bf-434fe0f41164.roa (raw, json)
Hash identifier:          aWB1H5DsEVPmNyYiysEQZQryUCJCK34VI7SUHLFQFkY=
Subject key identifier:   7B:20:2A:F7:AD:73:3A:B4:E9:07:83:51:5E:43:45:60:80:82:71:C3
Certificate issuer:       /CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
Certificate serial:       010D0C9F4328584A49707E10F94820AC9799FC80
Authority key identifier: 25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/63d1fd6e-9b76-38a9-93bf-434fe0f41164.roa
Signing time:             Mon 23 Jun 2025 13:01:03 +0000
ROA not before:           Mon 23 Jun 2025 13:01:03 +0000
ROA not after:            Sun 21 Sep 2025 13:01:03 +0000
asID:                     10103
IP address blocks:        199.188.196.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:49:70:7e:10:f9:48:20:ac:97:99:fc:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=c4668147-a71b-4fb3-9ed9-e1e04061bbdd
        Validity
            Not Before: Jun 23 13:01:03 2025 GMT
            Not After : Sep 21 13:01:03 2025 GMT
        Subject: CN=f4e8c0c9-5bbb-4205-895e-abd12b5e744d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:38:5d:4c:17:28:c3:10:c8:a4:4e:7f:46:51:
                    b1:44:f9:aa:6d:31:2e:fa:a7:3b:82:71:f1:64:6f:
                    48:18:e4:db:f5:4a:5d:d0:77:36:bc:e7:72:e8:30:
                    2d:df:00:93:e4:be:b8:00:a3:c8:39:4d:bc:78:ef:
                    cc:ae:65:8a:7c:aa:f3:00:cd:f5:75:19:7d:fc:c9:
                    10:46:92:cd:a1:8a:9a:33:92:f0:3a:b6:6d:9b:7e:
                    b8:bf:ac:b3:1d:8e:55:ae:2f:bf:4c:17:18:39:b7:
                    45:1c:d9:e3:07:8d:51:97:db:ee:b4:a2:20:06:46:
                    14:9e:bf:ef:f0:33:73:31:28:e8:4d:d2:c3:9f:33:
                    33:1a:49:57:25:2a:7d:71:89:0b:4a:77:9e:55:b5:
                    6e:ad:1d:fc:3a:b7:d5:9e:58:46:92:82:8d:22:59:
                    6f:7e:4d:6d:15:70:1c:3e:a5:69:cc:7a:89:e5:a6:
                    51:7b:f8:e1:d1:80:27:7a:0d:a9:e9:28:2f:e1:fd:
                    fd:d6:f0:72:b6:00:70:0e:3b:a1:07:41:82:57:89:
                    ba:c9:e7:5e:c5:e9:7b:70:0d:3b:03:2e:0a:8b:76:
                    08:94:a4:c6:5c:53:88:a7:48:bc:4b:b4:5d:80:d2:
                    35:b3:3a:85:79:d1:8f:cd:80:7d:48:f9:1a:b0:04:
                    e8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:20:2A:F7:AD:73:3A:B4:E9:07:83:51:5E:43:45:60:80:82:71:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/63d1fd6e-9b76-38a9-93bf-434fe0f41164.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.crl

            X509v3 Authority Key Identifier:
                keyid:25:2C:65:D1:2B:2B:E5:A6:80:45:38:98:E0:6B:67:DB:F5:0A:EE:38

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/c4668147-a71b-4fb3-9ed9-e1e04061bbdd.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.188.196.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:56:03:08:b1:d7:b9:9d:a3:9b:e7:dd:ae:43:fd:b2:c2:
         d3:b1:ae:31:45:ae:c4:5b:7b:da:a5:38:55:2e:59:ef:ee:1f:
         f6:25:69:20:d7:e9:04:a1:be:a0:db:c7:ee:84:74:81:ad:01:
         1a:63:6d:61:7b:a6:ef:80:61:05:1c:f4:48:39:48:81:31:11:
         48:3f:9f:f3:a3:83:e3:ee:c4:9a:fc:65:13:31:c4:7c:a7:e3:
         70:ad:2d:c3:63:29:93:73:c3:45:12:b4:62:7b:ca:61:d5:cb:
         a9:d7:3f:f3:21:ce:82:a5:44:87:2a:10:73:7e:cc:ba:ee:a1:
         c3:c2:9a:9e:01:9b:ae:36:87:df:75:63:ca:d3:da:97:52:f8:
         53:fa:70:7a:de:dd:e9:35:62:14:c0:6d:3b:91:f8:5c:13:df:
         07:33:28:90:f5:d3:1b:36:d1:d3:30:96:26:8d:d7:c7:64:3e:
         1b:be:48:06:35:60:23:0c:ae:e7:c6:a6:e2:c4:9d:cb:10:5f:
         cf:eb:bd:24:7f:28:34:8e:c9:1b:12:c7:a1:65:56:3e:4a:89:
         95:6f:d6:a4:94:eb:38:62:1e:89:2b:2f:dc:ac:7b:76:e8:15:
         cd:7c:4e:1c:ca:28:25:1d:35:f1:cb:ae:68:bc:da:17:58:49:
         85:6b:4c:25
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpJcH4Q+UggrJeZ/IAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYzQ2NjgxNDctYTcxYi00ZmIzLTllZDktZTFlMDQwNjFi
YmRkMB4XDTI1MDYyMzEzMDEwM1oXDTI1MDkyMTEzMDEwM1owLzEtMCsGA1UEAxMk
ZjRlOGMwYzktNWJiYi00MjA1LTg5NWUtYWJkMTJiNWU3NDRkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1jhdTBcowxDIpE5/RlGxRPmqbTEu+qc7gnHx
ZG9IGOTb9Upd0Hc2vOdy6DAt3wCT5L64AKPIOU28eO/MrmWKfKrzAM31dRl9/MkQ
RpLNoYqaM5LwOrZtm364v6yzHY5Vri+/TBcYObdFHNnjB41Rl9vutKIgBkYUnr/v
8DNzMSjoTdLDnzMzGklXJSp9cYkLSneeVbVurR38OrfVnlhGkoKNIllvfk1tFXAc
PqVpzHqJ5aZRe/jh0YAneg2p6Sgv4f391vBytgBwDjuhB0GCV4m6yedexel7cA07
Ay4Ki3YIlKTGXFOIp0i8S7RdgNI1szqFedGPzYB9SPkasAToqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHsgKvetczq06QeDUV5DRWCAgnHDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2
ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUwNDA2MWJiZGQvNjNkMWZkNmUtOWI3Ni0z
OGE5LTkzYmYtNDM0ZmUwZjQxMTY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYzQ2NjgxNDctYTcxYi00ZmIzLTll
ZDktZTFlMDQwNjFiYmRkL2M0NjY4MTQ3LWE3MWItNGZiMy05ZWQ5LWUxZTA0MDYx
YmJkZC5jcmwwHwYDVR0jBBgwFoAUJSxl0Ssr5aaARTiY4Gtn2/UK7jgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9jNDY2ODE0Ny1hNzFiLTRmYjMtOWVkOS1lMWUw
NDA2MWJiZGQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBx7zEMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAH7vVgMIsde5naOb592uQ/2ywtOxrjFFrsRbe9qlOFUuWe/uH/YlaSDX
6QShvqDbx+6EdIGtARpjbWF7pu+AYQUc9Eg5SIExEUg/n/Ojg+PuxJr8ZRMxxHyn
43CtLcNjKZNzw0UStGJ7ymHVy6nXP/MhzoKlRIcqEHN+zLruocPCmp4Bm642h991
Y8rT2pdS+FP6cHre3ek1YhTAbTuR+FwT3wczKJD10xs20dMwliaN18dkPhu+SAY1
YCMMrufGpuLEncsQX8/rvSR/KDSOyRsSx6FlVj5KiZVv1qSU6zhiHokrL9yse3bo
Fc18ThzKKCUdNfHLrmi82hdYSYVrTCU=
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:16:27 2025 by rpki-client