Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa
File:                     ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa (raw, json)
Hash identifier:          8EtdQZFGQ167Z9gvm/I3A5eu152N2pOl8mb0W7rIDkE=
Subject key identifier:   94:34:68:5F:7B:16:D6:0A:F5:62:8F:C8:77:7E:44:A1:CE:D8:34:1B
Certificate issuer:       /CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
Certificate serial:       010D0C9F43285849E4EFC20D40B8CC462AB8CC00
Authority key identifier: BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa
Signing time:             Sun 18 May 2025 13:01:00 +0000
ROA not before:           Sun 18 May 2025 13:01:00 +0000
ROA not after:            Sat 16 Aug 2025 13:01:00 +0000
asID:                     16696
IP address blocks:        208.101.233.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:e4:ef:c2:0d:40:b8:cc:46:2a:b8:cc:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1fce966d-21b8-4ec5-b3b3-8fd5be7afc60
        Validity
            Not Before: May 18 13:01:00 2025 GMT
            Not After : Aug 16 13:01:00 2025 GMT
        Subject: CN=5616fa31-ccd6-474b-b8a8-7958a62f1a49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:52:cd:9b:ee:37:66:91:01:ac:ff:39:6e:01:
                    0a:ae:a4:8a:d8:e8:60:a3:17:72:d2:81:47:05:30:
                    5f:db:80:97:c1:55:e3:c2:bb:d8:e2:b0:a3:f4:a0:
                    5e:4e:d5:75:fe:d0:87:4f:db:6e:9e:8b:3c:b0:1e:
                    67:06:e3:26:e2:a2:f8:bf:6c:bb:1a:14:3a:a4:f2:
                    9a:f4:1b:6c:1b:c4:aa:18:7c:30:77:33:77:7e:64:
                    77:b4:d8:aa:4c:9d:3c:da:e9:bd:fb:7e:30:c5:fd:
                    e5:ca:ec:44:6a:84:7c:1a:13:7b:48:16:ad:0d:08:
                    20:d2:75:71:af:d3:23:d4:f9:4a:fa:b3:90:57:09:
                    1a:57:18:d2:cd:ef:fa:21:53:6b:d3:f5:05:0a:d6:
                    dc:3d:4b:24:63:0a:2a:78:f0:98:b5:de:05:a0:df:
                    3c:88:71:f5:7a:e4:5b:a3:c5:52:43:69:74:5c:76:
                    ed:69:2f:e6:19:24:eb:e9:1e:25:84:df:b1:64:8e:
                    6a:88:96:e1:ef:b7:95:66:ca:8c:f3:6f:e5:ad:11:
                    40:58:30:65:26:2a:22:b0:46:aa:6b:bc:4e:41:66:
                    9d:08:14:32:03:90:3a:83:ca:68:ef:53:2e:d8:c8:
                    f7:8c:3a:e2:2f:24:be:6e:1b:3c:cf:55:ab:93:f8:
                    6b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:34:68:5F:7B:16:D6:0A:F5:62:8F:C8:77:7E:44:A1:CE:D8:34:1B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/ff55aa1d-5f93-3217-8536-4af786f6fdd5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.crl

            X509v3 Authority Key Identifier:
                keyid:BB:7B:E3:3E:CB:8F:42:78:23:F3:FB:8F:2B:B6:37:3D:E2:AD:68:C3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/1fce966d-21b8-4ec5-b3b3-8fd5be7afc60.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.101.233.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         04:ef:7d:71:9c:3b:9d:fc:92:96:83:fb:1d:6f:50:d1:7d:61:
         49:0e:c8:35:35:2f:bd:19:3f:68:c2:1e:7e:75:8f:71:d8:52:
         bd:4a:22:0b:4f:c2:4d:1b:9c:7f:5b:ac:f2:43:6e:f8:ab:1d:
         93:ac:67:69:83:c2:b0:f3:70:a0:1d:fa:3d:17:82:41:fb:38:
         0b:ff:42:f3:06:c4:57:31:47:ed:c0:a8:7e:58:fc:b2:ce:ff:
         f9:62:0b:53:22:d4:94:2b:18:86:53:45:8e:67:de:eb:39:d9:
         d2:96:5e:a3:ab:05:46:ac:2b:ae:88:cf:53:3e:6e:14:d6:42:
         98:5e:5d:e9:63:9e:97:26:27:8a:60:b5:3b:0a:36:24:24:06:
         e4:e4:8e:74:8e:a9:11:86:fd:72:c3:db:b7:ff:a6:40:f3:ec:
         65:79:f2:85:40:b5:99:06:66:cf:64:ba:63:8a:b6:37:1f:e3:
         af:b6:50:ed:e5:09:81:a0:c7:30:87:59:ef:df:25:23:12:0d:
         07:63:f8:cf:7c:a8:e0:31:19:14:ba:69:a1:f5:65:d5:ea:e0:
         b3:0d:32:6a:f3:32:bd:57:1a:26:57:6f:e4:84:1b:4a:ef:f1:
         be:0f:6a:c2:8e:ab:91:d0:7e:99:36:3b:a8:63:71:49:e3:14:
         65:63:7f:ec
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnk78INQLjMRiq4zAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWZjZTk2NmQtMjFiOC00ZWM1LWIzYjMtOGZkNWJlN2Fm
YzYwMB4XDTI1MDUxODEzMDEwMFoXDTI1MDgxNjEzMDEwMFowLzEtMCsGA1UEAxMk
NTYxNmZhMzEtY2NkNi00NzRiLWI4YTgtNzk1OGE2MmYxYTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVLNm+43ZpEBrP85bgEKrqSK2Ohgoxdy0oFH
BTBf24CXwVXjwrvY4rCj9KBeTtV1/tCHT9tunos8sB5nBuMm4qL4v2y7GhQ6pPKa
9BtsG8SqGHwwdzN3fmR3tNiqTJ082um9+34wxf3lyuxEaoR8GhN7SBatDQgg0nVx
r9Mj1PlK+rOQVwkaVxjSze/6IVNr0/UFCtbcPUskYwoqePCYtd4FoN88iHH1euRb
o8VSQ2l0XHbtaS/mGSTr6R4lhN+xZI5qiJbh77eVZsqM82/lrRFAWDBlJioisEaq
a7xOQWadCBQyA5A6g8po71Mu2Mj3jDriLyS+bhs8z1Wrk/hrZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJQ0aF97FtYK9WKPyHd+RKHO2DQbMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC8xZmNl
OTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1YmU3YWZjNjAvZmY1NWFhMWQtNWY5My0z
MjE3LTg1MzYtNGFmNzg2ZjZmZGQ1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvMWZjZTk2NmQtMjFiOC00ZWM1LWIz
YjMtOGZkNWJlN2FmYzYwLzFmY2U5NjZkLTIxYjgtNGVjNS1iM2IzLThmZDViZTdh
ZmM2MC5jcmwwHwYDVR0jBBgwFoAUu3vjPsuPQngj8/uPK7Y3PeKtaMMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC8xZmNlOTY2ZC0yMWI4LTRlYzUtYjNiMy04ZmQ1
YmU3YWZjNjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0GXpMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAATvfXGcO538kpaD+x1vUNF9YUkOyDU1L70ZP2jCHn51j3HYUr1KIgtP
wk0bnH9brPJDbvirHZOsZ2mDwrDzcKAd+j0XgkH7OAv/QvMGxFcxR+3AqH5Y/LLO
//liC1Mi1JQrGIZTRY5n3us52dKWXqOrBUasK66Iz1M+bhTWQpheXeljnpcmJ4pg
tTsKNiQkBuTkjnSOqRGG/XLD27f/pkDz7GV58oVAtZkGZs9kumOKtjcf46+2UO3l
CYGgxzCHWe/fJSMSDQdj+M98qOAxGRS6aaH1ZdXq4LMNMmrzMr1XGiZXb+SEG0rv
8b4PasKOq5HQfpk2O6hjcUnjFGVjf+w=
-----END CERTIFICATE-----
Generated at Sun Jun 15 17:52:21 2025 by rpki-client