Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e78768c6-c98e-3ab6-b144-8d3053bd573c.roa
File:                     e78768c6-c98e-3ab6-b144-8d3053bd573c.roa (raw, json)
Hash identifier:          MkFHzhiaR3JufXNmxwpBNNmfTJ5eu/aU21EtOl2HWPE=
Subject key identifier:   F2:77:16:82:9E:59:39:32:54:54:38:2D:92:5E:87:0C:4B:69:8C:8A
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F43285849EA295DC6C53969E9F78A1520
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e78768c6-c98e-3ab6-b144-8d3053bd573c.roa
Signing time:             Tue 20 May 2025 09:56:20 +0000
ROA not before:           Tue 20 May 2025 09:56:20 +0000
ROA not after:            Mon 18 Aug 2025 09:56:20 +0000
asID:                     16509
IP address blocks:        216.139.92.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 07:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:29:5d:c6:c5:39:69:e9:f7:8a:15:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: May 20 09:56:20 2025 GMT
            Not After : Aug 18 09:56:20 2025 GMT
        Subject: CN=2b48b21d-b000-47be-bdd7-fe7ced4d4412
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f5:85:07:42:48:fe:bc:87:8f:81:b3:57:a3:
                    61:a9:bc:4a:8f:1d:59:53:61:52:10:82:37:5f:06:
                    1d:c2:24:04:8e:0a:3a:a7:56:3d:56:4f:f4:38:b0:
                    9a:8e:a6:33:c5:a2:a4:f5:80:a4:04:65:93:fc:31:
                    ce:72:ba:95:8d:ab:9c:79:55:e0:18:90:17:5e:95:
                    df:2d:81:1a:b6:be:2b:45:d0:69:a3:f0:5d:9f:3d:
                    16:c0:6d:d2:37:56:95:9e:71:61:28:fb:9c:6f:71:
                    b2:2a:7f:1b:fe:5b:87:f1:c5:cc:23:ce:6d:35:58:
                    62:c9:53:7c:eb:e6:0c:3f:92:9b:70:69:a8:32:03:
                    d3:8f:86:11:74:93:f3:e7:98:7e:9c:09:7c:43:26:
                    58:9f:e6:3f:8c:1e:fd:a3:00:71:27:51:90:f5:f8:
                    1d:b6:d6:ba:b4:9d:ca:66:65:52:6f:af:a6:e4:14:
                    0c:b9:f2:93:55:5f:7e:fe:3d:05:96:85:1b:4b:66:
                    eb:77:1c:3a:54:e7:1d:fa:34:c2:b8:08:1b:ec:82:
                    d2:e4:8b:07:77:3d:60:96:38:89:b7:06:96:55:f0:
                    33:2d:7f:b9:23:43:0c:d6:b7:2f:82:35:71:e9:06:
                    93:79:1b:1e:fa:4a:6c:73:a4:4a:bc:d1:d9:d6:e8:
                    b5:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:77:16:82:9E:59:39:32:54:54:38:2D:92:5E:87:0C:4B:69:8C:8A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e78768c6-c98e-3ab6-b144-8d3053bd573c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.139.92.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a3:4a:b8:60:dd:76:4f:31:ab:44:4f:fb:a7:1d:a7:ec:04:36:
         81:79:75:aa:e5:60:8c:cd:b2:f3:0b:82:e3:39:e6:01:18:1e:
         a7:b7:8b:62:e2:61:c7:8c:e5:30:64:37:05:b6:85:fa:0a:63:
         c9:50:3a:04:c0:a8:20:b8:4e:db:8f:1e:32:12:d5:10:ce:07:
         87:fb:ac:17:d6:ad:20:18:a4:49:91:ea:a4:99:67:e4:a7:8c:
         32:d7:0c:01:ee:f7:96:78:ca:84:54:4d:68:c4:74:36:8b:5f:
         e9:89:5b:16:bb:50:73:bc:fa:83:8a:3a:60:8b:0f:d7:97:91:
         52:35:0b:b9:d8:52:be:80:f9:54:f8:5f:60:3a:0e:2d:6f:cc:
         7f:50:6d:11:84:e3:84:37:4c:8a:ec:46:ec:f5:0a:40:53:93:
         bb:6b:10:42:47:7f:81:d8:a2:26:d1:45:8a:c4:a0:25:3f:c8:
         90:39:fe:fe:7f:93:59:62:89:f0:0b:0f:f3:b4:14:be:2f:a9:
         c3:de:cb:2d:a0:eb:9e:e4:2e:08:26:a7:29:44:d0:5c:5c:d7:
         1d:ce:19:40:31:0b:7e:7f:aa:51:38:7b:b7:7b:b7:0c:09:e1:
         de:2b:6b:17:f3:78:6b:fe:cb:7d:24:1b:c9:d2:50:86:71:0f:
         bb:09:c0:36
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqKV3GxTlp6feKFSAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDUyMDA5NTYyMFoXDTI1MDgxODA5NTYyMFowLzEtMCsGA1UEAxMk
MmI0OGIyMWQtYjAwMC00N2JlLWJkZDctZmU3Y2VkNGQ0NDEyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw/WFB0JI/ryHj4GzV6NhqbxKjx1ZU2FSEII3
XwYdwiQEjgo6p1Y9Vk/0OLCajqYzxaKk9YCkBGWT/DHOcrqVjauceVXgGJAXXpXf
LYEatr4rRdBpo/Bdnz0WwG3SN1aVnnFhKPucb3GyKn8b/luH8cXMI85tNVhiyVN8
6+YMP5KbcGmoMgPTj4YRdJPz55h+nAl8QyZYn+Y/jB79owBxJ1GQ9fgdtta6tJ3K
ZmVSb6+m5BQMufKTVV9+/j0FloUbS2brdxw6VOcd+jTCuAgb7ILS5IsHdz1gljiJ
twaWVfAzLX+5I0MM1rcvgjVx6QaTeRse+kpsc6RKvNHZ1ui16QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPJ3FoKeWTkyVFQ4LZJehwxLaYyKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTc4NzY4YzYtYzk4ZS0z
YWI2LWIxNDQtOGQzMDUzYmQ1NzNjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2ItcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKNKuGDddk8xq0RP+6cdp+wENoF5darlYIzNsvMLguM55gEYHqe3i2Li
YceM5TBkNwW2hfoKY8lQOgTAqCC4TtuPHjIS1RDOB4f7rBfWrSAYpEmR6qSZZ+Sn
jDLXDAHu95Z4yoRUTWjEdDaLX+mJWxa7UHO8+oOKOmCLD9eXkVI1C7nYUr6A+VT4
X2A6Di1vzH9QbRGE44Q3TIrsRuz1CkBTk7trEEJHf4HYoibRRYrEoCU/yJA5/v5/
k1liifALD/O0FL4vqcPeyy2g657kLggmpylE0Fxc1x3OGUAxC35/qlE4e7d7twwJ
4d4raxfzeGv+y30kG8nSUIZxD7sJwDY=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:42:33 2025 by rpki-client