Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
File:                     3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa (raw, json)
Hash identifier:          28trDzfwx1gagXbIz9S3eToTqaEEk/TpYGA74MvQpYQ=
Subject key identifier:   96:45:67:9D:26:A0:FE:B7:E6:15:E8:8F:AF:14:94:B6:16:C2:C4:89
Certificate issuer:       /CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
Certificate serial:       010D0C9F4328584A03A53D0E6721689602BDD580
Authority key identifier: E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14061
IP address blocks:        192.81.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:3d:0e:67:21:68:96:02:bd:d5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2b88d4e5-7adf-42ce-bae8-7267f62e2698
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=23383424-ec07-40ab-bc0a-e990edc2d191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:8c:31:3c:d3:3f:97:fb:dc:92:2e:6b:f2:42:
                    31:7f:de:5c:7b:de:22:25:24:01:ec:2a:a0:12:7d:
                    1c:0b:0e:62:9f:79:8e:d7:d0:41:de:ed:cc:df:a3:
                    ce:91:4f:ee:6c:36:70:b6:13:6f:10:4c:7b:7e:20:
                    92:c3:79:c7:b8:de:68:03:45:7c:e8:e1:86:12:ab:
                    24:fe:d5:6e:89:c4:25:d1:95:a0:55:ac:b3:fc:8a:
                    75:e6:47:0d:fb:59:88:47:b5:ee:55:a5:6e:23:94:
                    f4:c4:32:31:d5:fd:ab:47:f2:de:e5:02:85:af:f9:
                    6e:31:9a:d4:61:cd:87:28:8f:19:8e:ae:aa:7f:c6:
                    5f:e3:63:6e:0d:30:ab:b6:85:e2:d2:7e:77:f0:9d:
                    da:05:a2:71:37:c9:a2:50:13:2a:a9:b6:c7:38:90:
                    ef:58:6a:be:6d:17:5e:21:31:b6:00:64:e1:97:5f:
                    d8:86:73:3e:be:ea:1e:9b:5a:1e:21:79:65:2a:63:
                    5d:dc:42:e6:67:e9:4e:87:67:d8:a3:a1:10:1e:bd:
                    82:bb:5f:1f:f4:3b:bb:b0:ed:3b:f1:dd:5e:e2:27:
                    54:78:62:c6:18:14:de:e7:36:b2:27:68:95:01:50:
                    df:91:1d:26:ae:99:30:81:85:a8:92:e8:40:1b:e8:
                    7d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:45:67:9D:26:A0:FE:B7:E6:15:E8:8F:AF:14:94:B6:16:C2:C4:89
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/3d0c964e-a887-3fdc-aec0-0b7ec249804e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698/2b88d4e5-7adf-42ce-bae8-7267f62e2698.crl

            X509v3 Authority Key Identifier:
                keyid:E6:E1:E2:8C:2C:AC:79:DA:B0:DE:34:EB:3C:F2:AE:DB:37:41:33:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2b88d4e5-7adf-42ce-bae8-7267f62e2698.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.81.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:fc:69:ce:b7:f3:05:2d:d9:0b:93:91:8e:f9:c9:d6:fc:5b:
         d0:7b:c6:a3:9d:f1:0b:35:6f:ec:b1:ff:8f:6b:78:f3:d9:92:
         d0:04:5a:38:48:c2:7a:d2:59:78:57:22:78:c5:f9:c4:fd:7e:
         81:5d:ea:2e:f4:2c:89:bb:32:41:a3:9b:2e:d7:34:2b:4d:b6:
         3e:45:f7:22:82:20:e8:7d:9a:88:47:4b:e6:ab:15:2e:e1:19:
         06:e7:c2:f7:79:6d:37:f9:8a:f8:c2:0e:9e:f7:a8:cb:bc:31:
         57:ab:41:e7:e9:d1:a7:43:da:82:6f:7a:7b:3e:47:f8:00:46:
         6c:26:e1:5a:88:2a:e1:e1:37:31:cf:54:2f:c0:2f:95:ab:4a:
         11:4c:87:c0:af:21:78:d8:ad:37:85:db:cc:cc:17:2f:e9:3d:
         db:59:55:d1:b8:4a:08:65:6d:48:af:3b:ca:51:36:6c:c1:e1:
         5a:ef:2b:8b:8e:ba:dc:37:4b:84:aa:da:cb:97:b3:b1:95:6a:
         de:62:9d:42:8f:b1:c9:4b:ef:50:d1:cb:3f:dd:d3:e6:fd:5c:
         72:23:db:f8:d6:b8:ed:73:59:0e:6f:06:1b:48:b4:7c:29:cf:
         3f:9d:60:eb:4f:e3:d7:a3:5d:5e:6a:98:75:91:71:30:fb:31:
         63:a0:a9:18
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoDpT0OZyFolgK91YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmI4OGQ0ZTUtN2FkZi00MmNlLWJhZTgtNzI2N2Y2MmUy
Njk4MB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
MjMzODM0MjQtZWMwNy00MGFiLWJjMGEtZTk5MGVkYzJkMTkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgowxPNM/l/vcki5r8kIxf95ce94iJSQB7Cqg
En0cCw5in3mO19BB3u3M36POkU/ubDZwthNvEEx7fiCSw3nHuN5oA0V86OGGEqsk
/tVuicQl0ZWgVayz/Ip15kcN+1mIR7XuVaVuI5T0xDIx1f2rR/Le5QKFr/luMZrU
Yc2HKI8Zjq6qf8Zf42NuDTCrtoXi0n538J3aBaJxN8miUBMqqbbHOJDvWGq+bRde
ITG2AGThl1/YhnM+vuoem1oeIXllKmNd3ELmZ+lOh2fYo6EQHr2Cu18f9Du7sO07
8d1e4idUeGLGGBTe5zayJ2iVAVDfkR0mrpkwgYWokuhAG+h94QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJZFZ50moP635hXoj68UlLYWwsSJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4
ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3ZjYyZTI2OTgvM2QwYzk2NGUtYTg4Ny0z
ZmRjLWFlYzAtMGI3ZWMyNDk4MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmI4OGQ0ZTUtN2FkZi00MmNlLWJh
ZTgtNzI2N2Y2MmUyNjk4LzJiODhkNGU1LTdhZGYtNDJjZS1iYWU4LTcyNjdmNjJl
MjY5OC5jcmwwHwYDVR0jBBgwFoAU5uHijCysedqw3jTrPPKu2zdBMwMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yYjg4ZDRlNS03YWRmLTQyY2UtYmFlOC03MjY3
ZjYyZTI2OTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwFHQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAK78ac638wUt2QuTkY75ydb8W9B7xqOd8Qs1b+yx/49rePPZktAEWjhI
wnrSWXhXInjF+cT9foFd6i70LIm7MkGjmy7XNCtNtj5F9yKCIOh9mohHS+arFS7h
GQbnwvd5bTf5ivjCDp73qMu8MVerQefp0adD2oJvens+R/gARmwm4VqIKuHhNzHP
VC/AL5WrShFMh8CvIXjYrTeF28zMFy/pPdtZVdG4SghlbUivO8pRNmzB4VrvK4uO
utw3S4Sq2suXs7GVat5inUKPsclL71DRyz/d0+b9XHIj2/jWuO1zWQ5vBhtItHwp
zz+dYOtP49ejXV5qmHWRcTD7MWOgqRg=
-----END CERTIFICATE-----
Generated at Sun Jun 15 06:24:35 2025 by rpki-client