Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/cdd9d96e-c597-37d7-879b-2361331f67c4.roa
File:                     cdd9d96e-c597-37d7-879b-2361331f67c4.roa (raw, json)
Hash identifier:          7jZO23ETum/iR6OUOSbWODerD18xnIU6uqsBh4jmC+Y=
Subject key identifier:   21:A4:7E:CC:DF:A6:FF:6C:DC:F9:B3:AA:DE:A8:0A:37:58:A6:9C:76
Certificate issuer:       /CN=0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef
Certificate serial:       010D0C9F4328584A4D14BA81EBC128979B73E940
Authority key identifier: CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/cdd9d96e-c597-37d7-879b-2361331f67c4.roa
Signing time:             Tue 24 Jun 2025 20:19:46 +0000
ROA not before:           Tue 24 Jun 2025 20:19:46 +0000
ROA not after:            Mon 22 Sep 2025 20:19:46 +0000
asID:                     8075
IP address blocks:        198.202.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4d:14:ba:81:eb:c1:28:97:9b:73:e9:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef
        Validity
            Not Before: Jun 24 20:19:46 2025 GMT
            Not After : Sep 22 20:19:46 2025 GMT
        Subject: CN=7f13156e-c394-4af7-a476-5ad409b98254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:dc:47:65:c0:ac:79:4d:de:59:57:20:0d:02:
                    bf:01:63:1b:17:38:67:c5:83:9f:65:af:66:61:99:
                    d9:13:e3:fb:43:0f:c7:fa:10:4e:2e:8d:46:6e:16:
                    b9:a8:ef:d7:c1:79:da:c4:da:93:30:57:78:c0:be:
                    8f:46:53:d8:fb:68:fd:57:4c:d2:e9:92:a6:ee:9c:
                    01:d5:fd:77:46:54:59:65:7b:51:66:4f:78:83:c0:
                    37:18:79:11:1d:b7:8a:6a:3b:9d:4b:7f:dd:ca:47:
                    dc:aa:c4:7a:6b:09:f7:6c:26:d1:7f:bb:41:ac:45:
                    59:a1:29:cf:53:64:94:f9:69:d9:dc:72:dc:d4:30:
                    ae:08:ca:34:29:f0:04:a6:ec:94:30:98:47:8f:eb:
                    2c:bb:1c:9b:2d:66:1e:d3:ec:7d:df:cc:ba:0f:46:
                    ff:0c:9b:d3:10:22:a6:ad:a9:d5:4c:5d:3b:2d:bd:
                    12:d8:cd:14:d1:c4:b6:5a:dc:c7:3b:56:b0:bb:c6:
                    16:48:a3:36:99:9a:d0:55:1b:28:7d:f0:49:98:98:
                    51:88:33:68:cc:25:ed:8b:e1:b8:22:22:65:c1:7b:
                    0c:dc:3a:59:26:e6:70:75:ee:3a:72:ce:14:82:ef:
                    69:a2:2b:27:8b:c2:b9:35:6a:3a:5f:de:ed:e3:88:
                    06:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:A4:7E:CC:DF:A6:FF:6C:DC:F9:B3:AA:DE:A8:0A:37:58:A6:9C:76
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/cdd9d96e-c597-37d7-879b-2361331f67c4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.crl

            X509v3 Authority Key Identifier:
                keyid:CD:12:39:46:4A:15:CD:A8:8B:37:E8:16:AF:14:72:09:D5:20:2B:32

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/0dbe9d2b-80b6-42e1-abc7-ed6b6df6bcef.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.202.27.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:84:c4:c5:54:3e:60:6e:a8:e0:bd:cd:3a:59:90:52:94:65:
         b4:91:26:f7:5c:97:0c:5a:23:98:94:7f:98:55:1e:51:19:5c:
         55:86:51:cb:98:50:0b:c3:42:d0:a7:5c:90:17:4a:4d:92:fe:
         f1:6b:75:16:52:21:a7:da:e4:da:af:f2:36:a7:32:ea:41:93:
         16:10:fc:45:da:dc:32:85:89:82:50:54:19:2a:ff:6c:b3:db:
         48:28:a2:0f:9b:e8:51:e5:89:a2:54:54:41:35:c9:93:f0:cc:
         2f:6f:67:5c:b1:d6:84:35:27:81:bd:47:45:55:39:2d:d0:ff:
         a8:00:97:88:be:98:02:75:31:d2:86:0f:66:37:d9:eb:3d:5c:
         71:ec:bc:43:e6:04:55:cc:45:df:6e:ad:a6:93:73:23:25:3c:
         46:9a:73:f9:a9:e0:dc:9b:27:0d:41:e5:c2:a7:9f:93:fd:f9:
         d1:63:f9:5e:8a:cd:98:ed:57:c9:be:38:62:07:b1:20:ef:78:
         41:e4:cd:e6:24:e3:a1:75:51:f8:14:b7:65:15:05:b9:3a:ee:
         d0:b7:35:dd:5d:ea:11:55:ed:0f:46:58:09:86:32:b4:b6:8e:
         85:70:1a:b8:ab:ca:30:0c:ce:74:42:92:7a:74:21:44:82:a5:
         fa:b9:d5:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpNFLqB68Eol5tz6UAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGRiZTlkMmItODBiNi00MmUxLWFiYzctZWQ2YjZkZjZi
Y2VmMB4XDTI1MDYyNDIwMTk0NloXDTI1MDkyMjIwMTk0NlowLzEtMCsGA1UEAxMk
N2YxMzE1NmUtYzM5NC00YWY3LWE0NzYtNWFkNDA5Yjk4MjU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi9xHZcCseU3eWVcgDQK/AWMbFzhnxYOfZa9m
YZnZE+P7Qw/H+hBOLo1Gbha5qO/XwXnaxNqTMFd4wL6PRlPY+2j9V0zS6ZKm7pwB
1f13RlRZZXtRZk94g8A3GHkRHbeKajudS3/dykfcqsR6awn3bCbRf7tBrEVZoSnP
U2SU+WnZ3HLc1DCuCMo0KfAEpuyUMJhHj+ssuxybLWYe0+x938y6D0b/DJvTECKm
ranVTF07Lb0S2M0U0cS2WtzHO1awu8YWSKM2mZrQVRsoffBJmJhRiDNozCXti+G4
IiJlwXsM3DpZJuZwde46cs4Ugu9poisni8K5NWo6X97t44gGBQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCGkfszfpv9s3Pmzqt6oCjdYppx2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8wZGJl
OWQyYi04MGI2LTQyZTEtYWJjNy1lZDZiNmRmNmJjZWYvY2RkOWQ5NmUtYzU5Ny0z
N2Q3LTg3OWItMjM2MTMzMWY2N2M0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvMGRiZTlkMmItODBiNi00MmUxLWFi
YzctZWQ2YjZkZjZiY2VmLzBkYmU5ZDJiLTgwYjYtNDJlMS1hYmM3LWVkNmI2ZGY2
YmNlZi5jcmwwHwYDVR0jBBgwFoAUzRI5RkoVzaiLN+gWrxRyCdUgKzIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8wZGJlOWQyYi04MGI2LTQyZTEtYWJjNy1lZDZi
NmRmNmJjZWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxsobMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAL2ExMVUPmBuqOC9zTpZkFKUZbSRJvdclwxaI5iUf5hVHlEZXFWGUcuY
UAvDQtCnXJAXSk2S/vFrdRZSIafa5Nqv8janMupBkxYQ/EXa3DKFiYJQVBkq/2yz
20goog+b6FHliaJUVEE1yZPwzC9vZ1yx1oQ1J4G9R0VVOS3Q/6gAl4i+mAJ1MdKG
D2Y32es9XHHsvEPmBFXMRd9uraaTcyMlPEaac/mp4NybJw1B5cKnn5P9+dFj+V6K
zZjtV8m+OGIHsSDveEHkzeYk46F1UfgUt2UVBbk67tC3Nd1d6hFV7Q9GWAmGMrS2
joVwGriryjAMznRCknp0IUSCpfq51X4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:35:43 2025 by rpki-client