Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa
File:                     fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa (raw, json)
Hash identifier:          Ym5p9bP8btp7E4/fE62ShgqQ0R8UgL7j3z3y8xlwN1k=
Subject key identifier:   50:86:F6:A0:37:2D:4C:DD:64:05:D9:CA:CE:2C:60:E7:4E:E5:58:0E
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584A00DAB2BED12B026921BDE300
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa
Signing time:             Wed 28 May 2025 13:01:04 +0000
ROA not before:           Wed 28 May 2025 13:01:04 +0000
ROA not after:            Tue 26 Aug 2025 13:01:04 +0000
asID:                     30381
IP address blocks:        216.6.202.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:00:da:b2:be:d1:2b:02:69:21:bd:e3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: May 28 13:01:04 2025 GMT
            Not After : Aug 26 13:01:04 2025 GMT
        Subject: CN=e809f3d7-1652-40d7-afc9-d8940788f627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:56:8e:37:e2:67:25:be:83:5d:a7:42:ca:7b:
                    ad:99:a5:1d:ab:f0:65:41:17:8d:3b:9d:27:b6:fd:
                    72:4d:e3:c4:b6:22:b5:c5:a1:ef:08:15:59:3c:4c:
                    6d:70:8e:ec:74:cd:11:c5:9c:ed:ff:5f:ea:17:31:
                    f4:17:d2:c3:d3:0e:93:0a:bf:af:ba:b0:2e:75:89:
                    15:9a:0e:45:84:6c:90:2b:1b:a0:7c:fe:ea:51:9b:
                    81:1d:f2:07:77:ad:9b:4a:e6:d7:97:7e:02:44:8b:
                    85:b3:78:ed:a0:e7:e2:2b:4c:95:d2:ed:da:f5:a0:
                    ab:de:c1:02:61:ff:9e:e2:7f:d1:72:ae:67:0d:d7:
                    97:cd:2a:dc:f1:f8:d5:bf:31:fb:4c:48:b8:0a:13:
                    77:ce:46:44:3f:ed:18:cb:ee:5a:4f:32:ae:60:3d:
                    f3:8d:37:35:84:67:3d:01:7c:72:8f:ab:30:e2:35:
                    b9:45:30:3b:cc:d2:4f:9d:7e:c7:79:a9:c9:62:59:
                    60:c8:00:11:04:22:66:9f:ba:83:dd:b7:e4:43:f7:
                    34:98:97:f2:9a:bf:11:a1:ca:b5:79:2f:8e:a5:65:
                    78:63:66:c7:cd:0e:55:54:92:4f:c0:b7:12:12:b3:
                    a3:e7:64:4f:71:05:39:28:35:81:d7:be:50:4a:52:
                    f8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:86:F6:A0:37:2D:4C:DD:64:05:D9:CA:CE:2C:60:E7:4E:E5:58:0E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/fd706aaf-04a5-32ab-8796-7108d4e7d4b1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.6.202.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         08:65:29:c8:52:74:d0:2d:07:a0:30:58:cc:8c:56:5d:b5:78:
         58:92:7f:7e:0b:30:04:e6:f3:3a:db:86:c0:d8:96:da:82:cb:
         4f:76:66:6d:5c:2f:9c:09:5a:43:06:23:d8:b9:87:49:86:ab:
         1d:1e:1a:a8:b1:eb:65:c1:d1:04:8e:1f:c7:4d:a2:20:3a:1e:
         cc:d2:cc:c3:13:0f:85:84:ae:70:ea:87:00:48:52:fb:9e:85:
         0f:23:71:a4:ea:38:eb:63:56:86:b9:61:56:c1:95:36:c7:9f:
         df:2a:0c:e4:f9:97:12:8f:3c:73:ad:a1:6a:53:1e:fc:ca:e1:
         af:8d:20:56:4b:dd:45:d8:92:76:e8:89:dc:8a:0e:5b:49:bc:
         84:cd:92:d6:5a:62:24:7e:3b:80:05:2e:5d:d0:87:c2:d0:75:
         71:20:6e:58:c4:37:62:03:52:04:dd:87:37:09:33:1f:0b:7c:
         bc:e9:a1:21:78:e6:07:14:ac:cb:5a:c1:45:a4:b7:51:ac:d4:
         49:2b:72:e0:82:7d:e2:a7:d3:32:3d:38:c3:46:d7:7a:5c:6b:
         f1:61:38:c4:9e:3f:5d:60:a3:f2:58:17:24:c6:e3:9a:14:5b:
         fc:7f:9d:82:16:65:4a:6b:01:67:62:a6:1a:cb:1d:52:de:63:
         30:4c:b1:56
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoA2rK+0SsCaSG94wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDUyODEzMDEwNFoXDTI1MDgyNjEzMDEwNFowLzEtMCsGA1UEAxMk
ZTgwOWYzZDctMTY1Mi00MGQ3LWFmYzktZDg5NDA3ODhmNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnVaON+JnJb6DXadCynutmaUdq/BlQReNO50n
tv1yTePEtiK1xaHvCBVZPExtcI7sdM0RxZzt/1/qFzH0F9LD0w6TCr+vurAudYkV
mg5FhGyQKxugfP7qUZuBHfIHd62bSubXl34CRIuFs3jtoOfiK0yV0u3a9aCr3sEC
Yf+e4n/Rcq5nDdeXzSrc8fjVvzH7TEi4ChN3zkZEP+0Yy+5aTzKuYD3zjTc1hGc9
AXxyj6sw4jW5RTA7zNJPnX7HeanJYllgyAARBCJmn7qD3bfkQ/c0mJfymr8Rocq1
eS+OpWV4Y2bHzQ5VVJJPwLcSErOj52RPcQU5KDWB175QSlL4vwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFFCG9qA3LUzdZAXZys4sYOdO5VgOMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvZmQ3MDZhYWYtMDRhNS0z
MmFiLTg3OTYtNzEwOGQ0ZTdkNGIxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2AbKMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAhlKchSdNAtB6AwWMyMVl21eFiSf34LMATm8zrbhsDYltqCy092Zm1c
L5wJWkMGI9i5h0mGqx0eGqix62XB0QSOH8dNoiA6HszSzMMTD4WErnDqhwBIUvue
hQ8jcaTqOOtjVoa5YVbBlTbHn98qDOT5lxKPPHOtoWpTHvzK4a+NIFZL3UXYknbo
idyKDltJvITNktZaYiR+O4AFLl3Qh8LQdXEgbljEN2IDUgTdhzcJMx8LfLzpoSF4
5gcUrMtawUWkt1Gs1EkrcuCCfeKn0zI9OMNG13pca/FhOMSeP11go/JYFyTG45oU
W/x/nYIWZUprAWdiphrLHVLeYzBMsVY=
-----END CERTIFICATE-----
Generated at Mon Jun 16 09:29:41 2025 by rpki-client