Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f30a437-7460-33da-aa3c-84f94b7f0c09.roa
File:                     0f30a437-7460-33da-aa3c-84f94b7f0c09.roa (raw, json)
Hash identifier:          Pp3v2vI9W6EBIXj3PyYHC1NeJ1IFBlmp3hcb5tFfTvs=
Subject key identifier:   69:73:8F:E1:9F:68:22:94:10:FF:02:EB:F5:4F:A3:6E:30:45:25:0D
Certificate issuer:       /CN=cec0c869-e6b3-4212-8b8a-efa751589a15
Certificate serial:       010D0C9F43285849AF800419838B9157096DC4C0
Authority key identifier: B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f30a437-7460-33da-aa3c-84f94b7f0c09.roa
Signing time:             Tue 29 Apr 2025 09:38:13 +0000
ROA not before:           Tue 29 Apr 2025 09:38:13 +0000
ROA not after:            Mon 28 Jul 2025 09:38:13 +0000
asID:                     19905
IP address blocks:        206.226.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:af:80:04:19:83:8b:91:57:09:6d:c4:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cec0c869-e6b3-4212-8b8a-efa751589a15
        Validity
            Not Before: Apr 29 09:38:13 2025 GMT
            Not After : Jul 28 09:38:13 2025 GMT
        Subject: CN=15ec1a6c-2d80-4d17-a97a-8aa414f76096
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d8:42:3b:89:f5:26:55:6d:0a:fa:06:23:2d:
                    0a:1e:7b:da:1b:6b:9b:ff:c0:1b:41:93:bc:f4:8c:
                    4c:60:53:aa:46:13:c4:d5:84:7f:ca:99:66:8f:f5:
                    44:b8:a7:07:a0:36:78:3e:27:1a:7c:a8:ae:80:67:
                    ba:e9:91:f7:5b:63:39:6e:60:ac:89:1a:b3:74:5d:
                    56:51:23:28:d5:6d:aa:67:19:df:9b:9a:ee:ec:8f:
                    a5:33:5a:eb:9f:a6:42:34:03:91:69:0b:de:73:c7:
                    e1:c8:56:da:a3:d2:50:69:ee:39:7b:55:a5:7a:c5:
                    89:35:9b:df:e0:1e:78:60:68:46:11:a5:44:e5:d2:
                    cb:80:89:66:0c:09:15:f5:88:e8:3a:8d:1b:e9:9a:
                    b7:4a:42:cc:71:64:b4:48:d4:da:15:00:99:c0:36:
                    93:fd:46:11:7c:48:58:42:14:bc:3f:3f:2b:d1:21:
                    b4:f7:a8:b2:7d:fe:46:b1:21:35:b7:b3:5d:92:bd:
                    8a:63:00:f3:92:d7:94:f1:fb:b4:6b:c1:ac:4d:13:
                    f4:0e:84:3c:f4:cc:86:39:7a:fe:5b:5b:f8:05:f0:
                    39:0e:dd:43:e2:bb:8f:44:1a:b8:8f:96:f5:ed:8d:
                    ff:a6:f5:ff:01:f6:08:cf:bb:9a:c3:66:02:e9:7a:
                    50:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:73:8F:E1:9F:68:22:94:10:FF:02:EB:F5:4F:A3:6E:30:45:25:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/0f30a437-7460-33da-aa3c-84f94b7f0c09.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15/cec0c869-e6b3-4212-8b8a-efa751589a15.crl

            X509v3 Authority Key Identifier:
                keyid:B3:21:2B:C8:BD:3D:B5:8D:63:87:44:D6:40:34:89:FB:9F:EC:A5:4D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/cec0c869-e6b3-4212-8b8a-efa751589a15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.226.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         30:0b:19:08:8a:50:2c:ec:ce:35:24:d8:f4:a6:b5:69:aa:51:
         6a:e1:8a:ce:fd:bd:26:c5:b5:e3:7d:86:5f:7a:33:2b:24:70:
         df:35:f2:fb:55:15:be:1d:75:98:4b:f4:48:c2:fd:d0:fd:b3:
         68:7a:b6:4f:05:bb:ee:dc:ae:0b:ab:0d:3a:55:68:63:4a:82:
         78:45:93:f2:3e:89:8e:86:9c:33:c6:70:60:10:0b:7a:7c:ce:
         1b:49:bb:bb:79:de:3c:62:33:00:3c:57:85:e3:6b:ab:32:42:
         fe:f1:1c:26:fc:b2:30:1d:37:1e:9a:68:84:14:d8:68:d5:97:
         c1:3d:96:0c:bd:1a:e3:ca:e9:4d:49:54:3e:09:d5:19:97:d6:
         1e:40:30:e3:e7:6d:54:e4:e9:3a:ff:86:37:68:bf:55:2d:a8:
         38:3e:55:7d:84:6c:d3:e4:a0:fb:17:d0:c5:97:1c:0d:1b:f5:
         0e:6d:25:80:c4:2d:bd:11:62:90:67:c8:f5:25:52:5f:ad:70:
         8d:70:4c:17:2d:bf:9d:df:cf:be:7e:8e:c4:5b:4b:86:e9:34:
         82:5b:d3:eb:59:15:e0:d8:a5:dc:12:be:b5:f5:5f:a0:b6:4d:
         3c:61:cd:3c:ae:a6:d3:ec:5a:18:8a:44:13:d7:4a:8e:5b:ab:
         cf:1d:d7:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmvgAQZg4uRVwltxMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2VjMGM4NjktZTZiMy00MjEyLThiOGEtZWZhNzUxNTg5
YTE1MB4XDTI1MDQyOTA5MzgxM1oXDTI1MDcyODA5MzgxM1owLzEtMCsGA1UEAxMk
MTVlYzFhNmMtMmQ4MC00ZDE3LWE5N2EtOGFhNDE0Zjc2MDk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo9hCO4n1JlVtCvoGIy0KHnvaG2ub/8AbQZO8
9IxMYFOqRhPE1YR/yplmj/VEuKcHoDZ4PicafKiugGe66ZH3W2M5bmCsiRqzdF1W
USMo1W2qZxnfm5ru7I+lM1rrn6ZCNAORaQvec8fhyFbao9JQae45e1WlesWJNZvf
4B54YGhGEaVE5dLLgIlmDAkV9YjoOo0b6Zq3SkLMcWS0SNTaFQCZwDaT/UYRfEhY
QhS8Pz8r0SG096iyff5GsSE1t7Ndkr2KYwDzkteU8fu0a8GsTRP0DoQ89MyGOXr+
W1v4BfA5Dt1D4ruPRBq4j5b17Y3/pvX/AfYIz7uaw2YC6XpQYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGlzj+GfaCKUEP8C6/VPo24wRSUNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMw
Yzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3NTE1ODlhMTUvMGYzMGE0MzctNzQ2MC0z
M2RhLWFhM2MtODRmOTRiN2YwYzA5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvY2VjMGM4NjktZTZiMy00MjEyLThi
OGEtZWZhNzUxNTg5YTE1L2NlYzBjODY5LWU2YjMtNDIxMi04YjhhLWVmYTc1MTU4
OWExNS5jcmwwHwYDVR0jBBgwFoAUsyEryL09tY1jh0TWQDSJ+5/spU0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy9jZWMwYzg2OS1lNmIzLTQyMTItOGI4YS1lZmE3
NTE1ODlhMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGzuJAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADALGQiKUCzszjUk2PSmtWmqUWrhis79vSbFteN9hl96MyskcN818vtV
Fb4ddZhL9EjC/dD9s2h6tk8Fu+7crgurDTpVaGNKgnhFk/I+iY6GnDPGcGAQC3p8
zhtJu7t53jxiMwA8V4Xja6syQv7xHCb8sjAdNx6aaIQU2GjVl8E9lgy9GuPK6U1J
VD4J1RmX1h5AMOPnbVTk6Tr/hjdov1UtqDg+VX2EbNPkoPsX0MWXHA0b9Q5tJYDE
Lb0RYpBnyPUlUl+tcI1wTBctv53fz75+jsRbS4bpNIJb0+tZFeDYpdwSvrX1X6C2
TTxhzTyuptPsWhiKRBPXSo5bq88d17w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:24 2025 by rpki-client