Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
File:                     c905560f-e46c-3a04-8eec-93cebdd49469.roa (raw, json)
Hash identifier:          2SkGjkahcmCpRot+NYIJUncHLAzhr+HrRbmsBhE7wz8=
Subject key identifier:   43:28:B7:97:00:03:19:E7:52:77:8D:9E:44:69:A9:04:D9:D9:82:CD
Certificate issuer:       /CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
Certificate serial:       010D0C9F4328584A9FFB9D640A3A77FAB652FE00
Authority key identifier: 97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa
Signing time:             Thu 24 Jul 2025 13:01:02 +0000
ROA not before:           Thu 24 Jul 2025 13:01:02 +0000
ROA not after:            Wed 22 Oct 2025 13:01:02 +0000
asID:                     16509
IP address blocks:        206.225.201.0/24 maxlen: 24
                          206.225.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9f:fb:9d:64:0a:3a:77:fa:b6:52:fe:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=618a8ae4-be62-4ef0-9dc7-4c4d826a40df
        Validity
            Not Before: Jul 24 13:01:02 2025 GMT
            Not After : Oct 22 13:01:02 2025 GMT
        Subject: CN=d2c9515e-01c7-4cf3-9c4c-5bddb666cd3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:96:cc:90:08:73:a5:8a:2b:ae:b3:d1:54:55:
                    44:24:7f:fe:be:59:52:6f:d2:7a:e7:af:1c:e3:e5:
                    88:ae:7e:06:91:88:13:80:a9:69:16:16:12:52:cf:
                    c5:be:1b:cd:55:6c:d9:a6:d2:f5:89:09:d3:1d:d8:
                    44:18:7e:ca:08:d8:5a:b8:88:c6:11:2d:aa:a0:9a:
                    e7:43:92:ca:33:3f:a1:68:42:ed:c2:49:ac:2f:4d:
                    1c:23:0f:e8:97:66:e8:b9:7c:8f:79:78:99:83:b6:
                    a7:b7:5c:c2:7a:86:92:5f:3a:8c:7d:61:7a:02:10:
                    94:a8:fe:84:ce:94:c7:59:75:0f:c1:cc:ef:7e:6c:
                    81:f3:a7:1e:cf:bc:b7:bf:4e:9f:09:1c:e4:9e:ac:
                    5f:f4:9c:db:a0:b9:30:be:f7:21:b0:2a:cb:d4:f6:
                    ab:4c:1c:e6:20:6f:35:4c:42:d2:7a:2f:1d:ee:cf:
                    6d:bc:90:ba:44:fd:dc:b1:89:83:64:4c:d3:c4:9b:
                    bb:4f:13:7a:1f:0c:c4:2e:82:2f:42:4c:40:7a:75:
                    7d:24:e6:58:fb:ad:a5:05:71:aa:1c:24:59:63:66:
                    d5:cf:33:76:d6:59:46:e0:d8:d3:c1:5f:20:41:4e:
                    d2:2a:fd:71:0f:a4:16:26:9d:a8:1c:aa:30:6e:e8:
                    5d:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:28:B7:97:00:03:19:E7:52:77:8D:9E:44:69:A9:04:D9:D9:82:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/c905560f-e46c-3a04-8eec-93cebdd49469.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.crl

            X509v3 Authority Key Identifier:
                keyid:97:3E:57:F5:31:81:B1:52:52:67:D3:06:2B:A5:F1:4A:48:BE:A3:75

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/618a8ae4-be62-4ef0-9dc7-4c4d826a40df.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.225.201.0/24
                  206.225.203.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:79:f2:cd:c5:88:1a:cf:00:61:79:11:a7:61:df:42:81:cb:
         b3:e1:17:78:62:ee:0e:8f:b6:77:b2:24:f4:de:4e:bc:37:d7:
         3b:1b:e2:9c:59:2b:6e:98:4f:fd:1d:68:90:69:cb:c4:d4:25:
         d1:0f:b7:a3:10:40:97:49:12:24:fc:31:1a:b2:de:fc:1e:34:
         49:41:d6:9d:17:10:fa:82:2f:eb:87:9a:91:fe:4a:9d:ba:0e:
         c2:0c:1d:40:71:9f:0a:c9:37:dc:40:d6:fe:ae:57:fd:d9:dd:
         24:78:ca:97:ae:5a:e2:36:34:b7:78:f9:6a:35:42:5b:6f:f2:
         b4:06:ba:f5:8b:f5:93:55:28:5a:5c:5c:f3:02:2c:a5:d3:a6:
         fb:42:68:09:ba:f0:c4:02:3d:84:11:98:39:80:39:a9:cc:75:
         89:27:cd:e3:4a:8b:6a:30:2f:02:13:4f:04:a5:48:37:41:55:
         b5:f7:81:71:65:a6:ad:89:5d:06:71:eb:a6:2f:4c:84:b3:78:
         89:78:6c:3c:15:35:86:4f:71:ec:f6:dd:22:9d:cd:21:1d:44:
         48:11:70:b0:95:72:fa:4c:47:ca:8f:f4:54:0b:45:a1:5a:b7:
         59:d0:26:dc:0d:9a:12:1c:d2:5a:8c:95:f4:a8:a3:6d:ee:aa:
         ef:5c:aa:38
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqf+51kCjp3+rZS/gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjE4YThhZTQtYmU2Mi00ZWYwLTlkYzctNGM0ZDgyNmE0
MGRmMB4XDTI1MDcyNDEzMDEwMloXDTI1MTAyMjEzMDEwMlowLzEtMCsGA1UEAxMk
ZDJjOTUxNWUtMDFjNy00Y2YzLTljNGMtNWJkZGI2NjZjZDNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh5bMkAhzpYorrrPRVFVEJH/+vllSb9J6568c
4+WIrn4GkYgTgKlpFhYSUs/FvhvNVWzZptL1iQnTHdhEGH7KCNhauIjGES2qoJrn
Q5LKMz+haELtwkmsL00cIw/ol2bouXyPeXiZg7ant1zCeoaSXzqMfWF6AhCUqP6E
zpTHWXUPwczvfmyB86cez7y3v06fCRzknqxf9JzboLkwvvchsCrL1ParTBzmIG81
TELSei8d7s9tvJC6RP3csYmDZEzTxJu7TxN6HwzELoIvQkxAenV9JOZY+62lBXGq
HCRZY2bVzzN21llG4NjTwV8gQU7SKv1xD6QWJp2oHKowbuhdlQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFEMot5cAAxnnUneNnkRpqQTZ2YLNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThh
OGFlNC1iZTYyLTRlZjAtOWRjNy00YzRkODI2YTQwZGYvYzkwNTU2MGYtZTQ2Yy0z
YTA0LThlZWMtOTNjZWJkZDQ5NDY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNjE4YThhZTQtYmU2Mi00ZWYwLTlk
YzctNGM0ZDgyNmE0MGRmLzYxOGE4YWU0LWJlNjItNGVmMC05ZGM3LTRjNGQ4MjZh
NDBkZi5jcmwwHwYDVR0jBBgwFoAUlz5X9TGBsVJSZ9MGK6XxSki+o3UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi82MThhOGFlNC1iZTYyLTRlZjAtOWRjNy00YzRk
ODI2YTQwZGYuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzuHJAwQA
zuHLMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAAV58s3FiBrPAGF5Eadh30KBy7PhF3hi7g6PtneyJPTeTrw3
1zsb4pxZK26YT/0daJBpy8TUJdEPt6MQQJdJEiT8MRqy3vweNElB1p0XEPqCL+uH
mpH+Sp26DsIMHUBxnwrJN9xA1v6uV/3Z3SR4ypeuWuI2NLd4+Wo1Qltv8rQGuvWL
9ZNVKFpcXPMCLKXTpvtCaAm68MQCPYQRmDmAOanMdYknzeNKi2owLwITTwSlSDdB
VbX3gXFlpq2JXQZx66YvTISzeIl4bDwVNYZPcez23SKdzSEdREgRcLCVcvpMR8qP
9FQLRaFat1nQJtwNmhIc0lqMlfSoo23uqu9cqjg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 07:51:43 2025 by rpki-client