Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa
File:                     1409aa94-2531-37d3-b5ae-f6234514777e.roa (raw, json)
Hash identifier:          eQDwvpc3UPSRTX+7Rwokm9LGuoeiMUhA40pCp1RV+4Q=
Subject key identifier:   34:90:C7:C2:AA:3A:AF:3D:AF:ED:E5:15:8F:77:F6:F0:B0:86:7F:16
Certificate issuer:       /CN=55640631-1b52-4455-ab16-7633a452f342
Certificate serial:       010D0C9F4328584A5765C042D891000986FB5C80
Authority key identifier: 50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa
Signing time:             Sat 28 Jun 2025 13:01:02 +0000
ROA not before:           Sat 28 Jun 2025 13:01:02 +0000
ROA not after:            Fri 26 Sep 2025 13:01:02 +0000
asID:                     400269
IP address blocks:        142.190.187.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:57:65:c0:42:d8:91:00:09:86:fb:5c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55640631-1b52-4455-ab16-7633a452f342
        Validity
            Not Before: Jun 28 13:01:02 2025 GMT
            Not After : Sep 26 13:01:02 2025 GMT
        Subject: CN=a0194b65-bdba-4c4f-972c-d442410dd6d6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:75:cb:2b:3a:0f:f7:c7:62:d9:50:b3:9e:ba:
                    6c:39:60:a7:e1:a8:59:d4:58:3a:b5:a5:b7:f4:8e:
                    c8:a7:b7:48:23:80:b8:c3:f5:50:7e:2b:39:aa:f5:
                    e8:2c:d1:f6:08:1e:78:94:02:66:d9:1a:da:ce:43:
                    a5:0a:25:81:d6:ca:3b:07:f5:6c:6c:3d:a3:09:c5:
                    5c:2b:f2:d4:e3:c2:af:2a:d8:93:97:c5:31:3b:28:
                    24:ad:0b:4d:ee:93:e5:37:e3:52:03:96:37:6d:87:
                    af:22:ae:da:33:a2:56:9d:3f:24:26:d5:62:07:80:
                    a7:c9:22:0c:4a:4e:ee:7d:2f:71:e7:8d:41:41:7e:
                    e5:33:64:d4:03:d7:5e:90:12:76:c2:a0:02:63:e6:
                    48:c8:18:2f:14:60:24:2c:c6:09:79:d3:1b:4d:e2:
                    97:38:be:de:94:ec:32:6a:ed:71:57:30:04:4a:f2:
                    fb:65:fa:ca:35:eb:d3:d5:58:ed:f0:87:e1:cf:4f:
                    b0:04:4a:2d:88:76:15:05:32:0e:89:42:86:d6:34:
                    05:62:e2:64:41:b9:22:a0:9e:ea:41:9a:e8:73:ac:
                    14:82:90:95:6b:a1:50:d5:c2:29:cd:3f:c0:0c:f3:
                    41:25:1b:55:83:ba:63:fd:1a:93:ec:51:1f:4f:ee:
                    c2:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:90:C7:C2:AA:3A:AF:3D:AF:ED:E5:15:8F:77:F6:F0:B0:86:7F:16
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/1409aa94-2531-37d3-b5ae-f6234514777e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342/55640631-1b52-4455-ab16-7633a452f342.crl

            X509v3 Authority Key Identifier:
                keyid:50:55:A8:D9:61:64:9F:49:55:B9:F7:41:35:BB:FD:0B:AB:B7:97:BC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/55640631-1b52-4455-ab16-7633a452f342.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.190.187.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ac:ff:f3:c8:c0:87:17:ae:c9:cf:d9:c5:18:4f:5c:a4:e4:48:
         68:27:24:a6:3b:9c:34:44:5f:00:be:25:dc:0e:28:6a:03:de:
         4c:f3:81:dd:60:1d:21:a4:4e:f6:27:d8:3b:84:34:9b:53:b3:
         61:be:80:7f:60:5d:9a:4e:77:35:c7:e4:c5:9d:0d:8d:07:35:
         ab:d9:b8:30:db:d4:86:07:92:7f:b1:2b:fe:8c:7a:7a:94:d3:
         78:af:bb:9f:6d:2d:51:e0:ea:82:bf:c6:02:6a:cc:dd:51:34:
         12:83:a5:30:65:36:fa:39:05:ab:0c:4e:43:da:02:90:4d:87:
         5f:03:9c:49:6c:58:6d:d9:43:8f:f5:39:cf:82:57:cb:06:8c:
         52:b5:1f:1f:aa:29:01:c6:5a:67:4c:6a:29:5e:d6:37:a4:b9:
         aa:e7:20:9f:bb:db:37:23:c2:5a:56:8b:c5:e8:29:9e:03:16:
         80:6b:c0:cb:05:3f:5f:d5:11:30:8a:87:fd:90:18:df:6b:38:
         35:6c:4e:f0:c7:e2:9f:a6:e1:33:0e:36:74:84:13:b7:35:58:
         ad:dc:68:cf:73:ab:dc:90:5a:9b:6d:84:d2:4e:cc:2d:29:f2:
         d3:7a:63:e7:7d:58:41:0c:4c:d5:76:9b:8c:ee:8e:d3:e5:63:
         c5:2a:1c:b9
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpXZcBC2JEACYb7XIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTU2NDA2MzEtMWI1Mi00NDU1LWFiMTYtNzYzM2E0NTJm
MzQyMB4XDTI1MDYyODEzMDEwMloXDTI1MDkyNjEzMDEwMlowLzEtMCsGA1UEAxMk
YTAxOTRiNjUtYmRiYS00YzRmLTk3MmMtZDQ0MjQxMGRkNmQ2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg3XLKzoP98di2VCznrpsOWCn4ahZ1Fg6taW3
9I7Ip7dII4C4w/VQfis5qvXoLNH2CB54lAJm2RrazkOlCiWB1so7B/VsbD2jCcVc
K/LU48KvKtiTl8UxOygkrQtN7pPlN+NSA5Y3bYevIq7aM6JWnT8kJtViB4CnySIM
Sk7ufS9x541BQX7lM2TUA9dekBJ2wqACY+ZIyBgvFGAkLMYJedMbTeKXOL7elOwy
au1xVzAESvL7ZfrKNevT1Vjt8Ifhz0+wBEotiHYVBTIOiUKG1jQFYuJkQbkioJ7q
QZroc6wUgpCVa6FQ1cIpzT/ADPNBJRtVg7pj/RqT7FEfT+7CwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDSQx8KqOq89r+3lFY939vCwhn8WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0
MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMzYTQ1MmYzNDIvMTQwOWFhOTQtMjUzMS0z
N2QzLWI1YWUtZjYyMzQ1MTQ3NzdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNTU2NDA2MzEtMWI1Mi00NDU1LWFi
MTYtNzYzM2E0NTJmMzQyLzU1NjQwNjMxLTFiNTItNDQ1NS1hYjE2LTc2MzNhNDUy
ZjM0Mi5jcmwwHwYDVR0jBBgwFoAUUFWo2WFkn0lVufdBNbv9C6u3l7wwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81NTY0MDYzMS0xYjUyLTQ0NTUtYWIxNi03NjMz
YTQ1MmYzNDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjr67MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKz/88jAhxeuyc/ZxRhPXKTkSGgnJKY7nDREXwC+JdwOKGoD3kzzgd1g
HSGkTvYn2DuENJtTs2G+gH9gXZpOdzXH5MWdDY0HNavZuDDb1IYHkn+xK/6MenqU
03ivu59tLVHg6oK/xgJqzN1RNBKDpTBlNvo5BasMTkPaApBNh18DnElsWG3ZQ4/1
Oc+CV8sGjFK1Hx+qKQHGWmdMaile1jekuarnIJ+72zcjwlpWi8XoKZ4DFoBrwMsF
P1/VETCKh/2QGN9rODVsTvDH4p+m4TMONnSEE7c1WK3caM9zq9yQWptthNJOzC0p
8tN6Y+d9WEEMTNV2m4zujtPlY8UqHLk=
-----END CERTIFICATE-----
Generated at Sun Jul 6 00:33:05 2025 by rpki-client