Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
File:                     6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa (raw, json)
Hash identifier:          9WBacME4iKlsJko8Qc4vOOXn7T92zAmPbHmr5Uk/QAY=
Subject key identifier:   40:51:37:36:22:E0:52:C3:7A:5E:C3:0B:E3:03:8E:4E:60:AD:AF:7D
Certificate issuer:       /CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
Certificate serial:       010D0C9F4328584A3050306E875156334F8BD7C0
Authority key identifier: 31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa
Signing time:             Sat 14 Jun 2025 13:01:04 +0000
ROA not before:           Sat 14 Jun 2025 13:01:04 +0000
ROA not after:            Fri 12 Sep 2025 13:01:04 +0000
asID:                     47050
IP address blocks:        173.224.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:30:50:30:6e:87:51:56:33:4f:8b:d7:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0b5f2daf-7d7a-4848-bbd2-055f43ae8970
        Validity
            Not Before: Jun 14 13:01:04 2025 GMT
            Not After : Sep 12 13:01:04 2025 GMT
        Subject: CN=7007273e-3b3e-4879-9bac-a74037df6603
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:1a:10:33:68:ff:df:e8:73:5f:d6:fd:83:
                    eb:fd:83:c6:f4:78:49:a9:e6:d2:6f:fd:d9:17:f6:
                    ef:ae:22:a5:d5:a6:8d:f5:41:10:c2:4d:02:b0:63:
                    d5:f8:ab:92:db:48:98:4d:12:90:9d:c9:36:bc:0b:
                    9d:34:2e:d2:fd:62:13:71:d7:ad:3a:48:f3:3f:c6:
                    e9:4a:12:ea:bf:fe:c2:8f:7d:ca:a3:25:eb:08:c9:
                    93:03:b0:e3:e9:1d:ab:3a:e8:3d:75:40:01:7d:6b:
                    bd:06:ad:97:bf:22:ac:98:5d:cb:ed:7a:83:7b:8f:
                    e9:33:2f:28:38:83:15:88:e3:5f:a7:c5:ea:f0:7c:
                    5c:59:ec:94:a6:1d:43:ff:8d:f9:bc:64:74:e0:a0:
                    7c:de:a8:21:86:4b:f5:fe:93:3c:8a:22:5c:ff:50:
                    27:3d:bf:1c:6a:c7:1d:14:2c:f5:98:aa:b8:f4:f2:
                    26:ee:3a:f0:f0:26:77:3c:58:d5:f6:1e:0f:f2:23:
                    7b:70:f5:07:ea:64:7b:a0:aa:b8:3d:ab:08:c3:3c:
                    d3:dd:f9:c5:6e:35:ea:fc:26:a5:75:bf:24:ea:6f:
                    2c:ac:de:87:46:ed:c0:28:49:23:25:6d:ba:b8:67:
                    2b:6c:ae:49:6e:9d:6f:2f:81:ea:3f:00:ab:ff:75:
                    fd:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:51:37:36:22:E0:52:C3:7A:5E:C3:0B:E3:03:8E:4E:60:AD:AF:7D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/6f894f95-bb5b-39d3-a4a2-ba110e6d9b0f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.crl

            X509v3 Authority Key Identifier:
                keyid:31:92:05:77:3C:9D:CE:89:CE:95:DE:50:97:AF:43:01:1E:56:6F:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/0b5f2daf-7d7a-4848-bbd2-055f43ae8970.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  173.224.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:b8:0b:40:e8:f9:a6:51:34:46:ee:27:00:a6:dd:dc:ac:37:
         c5:4d:10:8d:60:22:a3:c2:4f:4a:d7:5e:82:a3:38:02:ed:8c:
         c6:0f:05:3f:aa:43:d5:fd:47:39:d4:11:ed:44:3e:6e:ad:c1:
         a7:2f:ad:19:aa:ea:2d:18:38:9e:c6:9c:87:d8:8d:d5:bf:16:
         45:dd:15:0d:ef:b1:0d:b5:04:93:a4:5b:cf:c1:a5:1b:61:9b:
         7b:40:8e:4f:26:29:da:e6:5f:d4:e4:99:75:11:44:17:63:f8:
         39:33:90:58:f0:74:a9:6e:da:b0:2d:f2:05:95:76:62:c2:a7:
         7e:13:1e:3f:ee:b9:21:e7:3e:ff:3f:2d:84:a7:46:2f:40:36:
         e1:f2:d9:6c:0c:47:c4:80:84:3d:4c:7b:0e:22:0d:f0:29:97:
         fa:0e:37:83:75:4c:71:a3:0f:68:c7:58:17:68:75:39:44:67:
         49:71:a7:44:1e:8a:04:33:72:11:a5:f5:f2:77:98:f6:ff:38:
         cd:d0:cc:79:87:a1:94:9a:43:7c:41:44:06:88:91:7c:ae:22:
         76:42:f7:4c:18:9a:98:1b:fc:66:59:ea:e1:4f:ad:d2:bb:ed:
         2c:8c:7b:ad:24:ac:82:23:06:6f:72:e8:3e:b4:dc:e9:72:27:
         d3:63:cf:1f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEowUDBuh1FWM0+L18AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGI1ZjJkYWYtN2Q3YS00ODQ4LWJiZDItMDU1ZjQzYWU4
OTcwMB4XDTI1MDYxNDEzMDEwNFoXDTI1MDkxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NzAwNzI3M2UtM2IzZS00ODc5LTliYWMtYTc0MDM3ZGY2NjAzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZUaEDNo/9/oc1/W/YPr/YPG9HhJqebSb/3Z
F/bvriKl1aaN9UEQwk0CsGPV+KuS20iYTRKQnck2vAudNC7S/WITcdetOkjzP8bp
ShLqv/7Cj33KoyXrCMmTA7Dj6R2rOug9dUABfWu9Bq2XvyKsmF3L7XqDe4/pMy8o
OIMViONfp8Xq8HxcWeyUph1D/435vGR04KB83qghhkv1/pM8iiJc/1AnPb8cascd
FCz1mKq49PIm7jrw8CZ3PFjV9h4P8iN7cPUH6mR7oKq4PasIwzzT3fnFbjXq/Cal
db8k6m8srN6HRu3AKEkjJW26uGcrbK5Jbp1vL4HqPwCr/3X9rQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEBRNzYi4FLDel7DC+MDjk5gra99MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVm
MmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVmNDNhZTg5NzAvNmY4OTRmOTUtYmI1Yi0z
OWQzLWE0YTItYmExMTBlNmQ5YjBmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMGI1ZjJkYWYtN2Q3YS00ODQ4LWJi
ZDItMDU1ZjQzYWU4OTcwLzBiNWYyZGFmLTdkN2EtNDg0OC1iYmQyLTA1NWY0M2Fl
ODk3MC5jcmwwHwYDVR0jBBgwFoAUMZIFdzydzonOld5Ql69DAR5Wb+IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8wYjVmMmRhZi03ZDdhLTQ4NDgtYmJkMi0wNTVm
NDNhZTg5NzAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEreBQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGy4C0Do+aZRNEbuJwCm3dysN8VNEI1gIqPCT0rXXoKjOALtjMYPBT+q
Q9X9RznUEe1EPm6twacvrRmq6i0YOJ7GnIfYjdW/FkXdFQ3vsQ21BJOkW8/BpRth
m3tAjk8mKdrmX9TkmXURRBdj+DkzkFjwdKlu2rAt8gWVdmLCp34THj/uuSHnPv8/
LYSnRi9ANuHy2WwMR8SAhD1Mew4iDfApl/oON4N1THGjD2jHWBdodTlEZ0lxp0Qe
igQzchGl9fJ3mPb/OM3QzHmHoZSaQ3xBRAaIkXyuInZC90wYmpgb/GZZ6uFPrdK7
7SyMe60krIIjBm9y6D603OlyJ9Njzx8=
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:52:39 2025 by rpki-client