Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa
File:                     cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa (raw, json)
Hash identifier:          iAAjYXnEHJIHzwFYH+6qZWi9YPYJaaiqme7JAme3qfo=
Subject key identifier:   2D:54:48:79:A8:6F:6D:82:D6:CA:05:67:9B:21:BA:C2:7D:7B:00:C7
Certificate issuer:       /CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
Certificate serial:       010D0C9F4328584A911F582AAA771F10AE4B6080
Authority key identifier: C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa
Signing time:             Sat 19 Jul 2025 05:16:08 +0000
ROA not before:           Sat 19 Jul 2025 05:16:08 +0000
ROA not after:            Fri 17 Oct 2025 05:16:08 +0000
asID:                     6922
IP address blocks:        198.215.24.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 09 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:91:1f:58:2a:aa:77:1f:10:ae:4b:60:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e81a256-41ff-4f51-8092-c7fffa4d9221
        Validity
            Not Before: Jul 19 05:16:08 2025 GMT
            Not After : Oct 17 05:16:08 2025 GMT
        Subject: CN=909d8941-397b-4040-99b7-ae7bc6d722ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:e7:46:d9:19:08:c9:7d:db:40:ba:18:f6:4b:
                    ca:19:b1:1f:a9:96:af:a2:25:4d:80:e8:a5:ac:e0:
                    3a:1d:50:d5:ea:7a:cd:7f:c7:b6:87:b6:fe:45:d4:
                    17:42:c7:e9:92:dd:47:38:6c:c2:56:41:21:48:7c:
                    2e:05:d8:5f:64:4e:56:25:99:70:52:cd:fe:aa:af:
                    58:fb:39:9b:ad:a8:15:77:aa:80:18:c8:33:d3:ed:
                    93:5e:2a:0a:22:99:18:34:71:76:96:0c:0b:29:1f:
                    49:39:56:ed:4e:a5:32:07:18:8b:e9:1b:cb:a1:e5:
                    f8:fb:0d:37:3d:29:0c:e0:c8:41:de:30:81:8c:1c:
                    9f:a0:08:c8:99:bf:76:16:14:39:44:d5:40:de:41:
                    d9:b8:d6:5b:a9:36:61:75:82:a3:70:6b:f3:11:4e:
                    99:86:3e:3e:c1:9e:2a:be:8a:7e:cb:6d:52:04:45:
                    40:e5:b7:89:c6:65:e1:a0:47:6d:b7:35:2b:ee:c1:
                    bb:56:f0:43:c7:4c:43:f0:6d:7a:2a:d9:8d:fd:79:
                    b5:6b:53:cd:ac:bb:92:03:b3:6e:50:76:60:7e:d7:
                    1f:99:d7:e1:f7:82:2f:9c:99:7c:d0:94:da:56:6f:
                    58:80:f0:d0:46:0b:59:07:c2:a8:3f:de:e4:30:d3:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:54:48:79:A8:6F:6D:82:D6:CA:05:67:9B:21:BA:C2:7D:7B:00:C7
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/cc81e71c-c5d3-34f6-b55e-f5ecac51af82.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221/4e81a256-41ff-4f51-8092-c7fffa4d9221.crl

            X509v3 Authority Key Identifier:
                keyid:C2:2B:67:61:D1:1E:AC:E5:13:26:4F:10:46:D2:FA:CC:7C:45:8B:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e81a256-41ff-4f51-8092-c7fffa4d9221.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.215.24.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         65:f0:a5:84:13:79:de:c2:6a:c4:d1:f3:2d:e6:14:df:2c:2d:
         88:f6:42:81:bc:a1:5e:38:5d:5d:4a:d6:58:8b:55:90:96:f6:
         d0:9a:a7:74:e8:43:3e:54:77:56:fc:fb:58:45:93:eb:e9:69:
         56:ce:43:b9:54:47:3f:c8:50:84:6c:bd:3d:b4:d4:11:0d:24:
         36:87:0e:b4:29:e8:84:5e:3b:f5:d5:67:b3:1e:72:9d:76:47:
         e7:34:2d:5d:5d:1f:31:28:68:e6:52:c4:8d:06:68:eb:d6:79:
         e0:fb:8f:40:e1:d2:06:d1:0f:9e:c5:3d:b2:f1:d0:18:a3:89:
         f4:24:1a:ca:87:22:6d:72:d6:90:74:a4:75:8c:e9:6d:1f:25:
         61:fc:ad:18:48:da:42:be:77:80:6e:91:c9:03:3b:be:2e:ec:
         27:b6:80:05:09:6a:dd:dc:a6:24:9d:06:d2:33:18:dd:4f:ae:
         ed:63:e7:d6:ae:5b:90:b7:1a:1d:10:40:4c:7b:15:ea:c6:a3:
         74:1a:6f:01:49:5c:4f:2c:19:c0:99:3f:76:ca:87:c3:26:bf:
         fd:de:0e:67:be:fd:ae:28:9c:36:a1:39:54:8e:9a:4b:00:17:
         43:69:09:fd:35:fe:1e:14:3f:92:1b:f4:da:75:07:8f:ad:39:
         eb:fb:a8:f7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqRH1gqqncfEK5LYIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU4MWEyNTYtNDFmZi00ZjUxLTgwOTItYzdmZmZhNGQ5
MjIxMB4XDTI1MDcxOTA1MTYwOFoXDTI1MTAxNzA1MTYwOFowLzEtMCsGA1UEAxMk
OTA5ZDg5NDEtMzk3Yi00MDQwLTk5YjctYWU3YmM2ZDcyMmVmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq+dG2RkIyX3bQLoY9kvKGbEfqZavoiVNgOil
rOA6HVDV6nrNf8e2h7b+RdQXQsfpkt1HOGzCVkEhSHwuBdhfZE5WJZlwUs3+qq9Y
+zmbragVd6qAGMgz0+2TXioKIpkYNHF2lgwLKR9JOVbtTqUyBxiL6RvLoeX4+w03
PSkM4MhB3jCBjByfoAjImb92FhQ5RNVA3kHZuNZbqTZhdYKjcGvzEU6Zhj4+wZ4q
vop+y21SBEVA5beJxmXhoEdttzUr7sG7VvBDx0xD8G16KtmN/Xm1a1PNrLuSA7Nu
UHZgftcfmdfh94IvnJl80JTaVm9YgPDQRgtZB8KoP97kMNOQBwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC1USHmob22C1soFZ5shusJ9ewDHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgx
YTI1Ni00MWZmLTRmNTEtODA5Mi1jN2ZmZmE0ZDkyMjEvY2M4MWU3MWMtYzVkMy0z
NGY2LWI1NWUtZjVlY2FjNTFhZjgyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGU4MWEyNTYtNDFmZi00ZjUxLTgw
OTItYzdmZmZhNGQ5MjIxLzRlODFhMjU2LTQxZmYtNGY1MS04MDkyLWM3ZmZmYTRk
OTIyMS5jcmwwHwYDVR0jBBgwFoAUwitnYdEerOUTJk8QRtL6zHxFiyowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTgxYTI1Ni00MWZmLTRmNTEtODA5Mi1jN2Zm
ZmE0ZDkyMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDxtcYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGXwpYQTed7CasTR8y3mFN8sLYj2QoG8oV44XV1K1liLVZCW9tCap3To
Qz5Ud1b8+1hFk+vpaVbOQ7lURz/IUIRsvT201BENJDaHDrQp6IReO/XVZ7Mecp12
R+c0LV1dHzEoaOZSxI0GaOvWeeD7j0Dh0gbRD57FPbLx0BijifQkGsqHIm1y1pB0
pHWM6W0fJWH8rRhI2kK+d4BukckDO74u7Ce2gAUJat3cpiSdBtIzGN1Pru1j59au
W5C3Gh0QQEx7FerGo3QabwFJXE8sGcCZP3bKh8Mmv/3eDme+/a4onDahOVSOmksA
F0NpCf01/h4UP5Ib9Np1B4+tOev7qPc=
-----END CERTIFICATE-----
Generated at Fri Aug 8 10:09:40 2025 by rpki-client