Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa
File:                     4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa (raw, json)
Hash identifier:          XGUkbKphZ+755Au28pqnkOp/8xfP7rH/1CdXOz7+FIk=
Subject key identifier:   ED:79:77:BC:33:78:AA:93:43:90:90:A3:EA:80:8C:C3:DC:04:79:82
Certificate issuer:       /CN=5dc12714-5247-41c5-b244-d0edceb32982
Certificate serial:       010D0C9F4328584A86DB7732D29D8A75E9E36400
Authority key identifier: 1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa
Signing time:             Tue 15 Jul 2025 13:01:04 +0000
ROA not before:           Tue 15 Jul 2025 13:01:04 +0000
ROA not after:            Mon 13 Oct 2025 13:01:04 +0000
asID:                     18619
IP address blocks:        206.166.213.0/24 maxlen: 24
                          209.237.153.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:86:db:77:32:d2:9d:8a:75:e9:e3:64:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dc12714-5247-41c5-b244-d0edceb32982
        Validity
            Not Before: Jul 15 13:01:04 2025 GMT
            Not After : Oct 13 13:01:04 2025 GMT
        Subject: CN=df98aa51-62ae-4d81-a415-df2fe11e0460
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d9:d9:02:02:7e:e9:84:ff:98:27:85:45:79:
                    e1:68:4b:d2:87:4e:59:30:69:1b:48:b2:eb:34:0d:
                    69:0c:14:09:f9:53:4b:81:3f:8b:4d:96:62:92:f1:
                    4a:5c:a0:27:6e:ae:10:15:4b:c5:ff:38:7f:1f:11:
                    9a:65:c0:24:75:79:6c:8e:79:f5:ce:fc:b4:6c:96:
                    41:03:98:f9:da:3c:cf:47:22:0d:b8:29:16:b5:9d:
                    92:bc:41:4f:66:39:cb:a5:78:71:48:b1:fb:97:8e:
                    9c:f2:f0:b3:37:22:47:a7:de:58:a5:6d:1c:7d:a9:
                    b2:f2:04:86:be:22:ed:3f:26:d7:66:9b:9d:e9:d2:
                    5a:9c:dc:0e:f1:cc:a0:ea:f5:17:ee:30:72:8a:49:
                    b4:56:91:49:98:bb:62:c2:a4:90:fd:e9:6b:a2:29:
                    e3:78:38:15:11:8f:1d:d9:61:59:7f:00:42:32:86:
                    19:39:f5:af:0c:17:fb:c5:13:d2:b7:41:b2:26:d8:
                    4f:5b:06:d7:9e:55:c5:c8:95:dc:29:61:ee:3f:57:
                    c4:22:05:d1:64:5a:18:a7:45:46:42:38:28:92:71:
                    47:65:5e:e3:c0:58:6a:0f:a3:0c:0e:07:49:5f:ad:
                    cf:f7:e2:07:2e:4a:7c:6c:21:6b:1a:77:80:b4:ad:
                    16:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:79:77:BC:33:78:AA:93:43:90:90:A3:EA:80:8C:C3:DC:04:79:82
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/4db4e1cf-46a5-3c69-bd9a-91b95bbabc9b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982/5dc12714-5247-41c5-b244-d0edceb32982.crl

            X509v3 Authority Key Identifier:
                keyid:1D:F2:65:5D:FA:A6:94:E2:F8:5F:02:FD:43:1D:AE:D7:53:97:1A:55

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/5dc12714-5247-41c5-b244-d0edceb32982.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.213.0/24
                  209.237.153.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:c5:99:f7:05:09:7d:0a:88:a0:5f:14:32:46:12:b9:9a:28:
         c4:44:97:d1:6c:f7:a5:ea:6a:f3:68:10:e6:7a:6b:4b:dd:11:
         87:79:78:3e:2f:ae:a5:89:fe:61:f7:b9:42:62:50:3a:3a:19:
         ea:04:a6:15:47:a6:0a:35:88:4a:74:51:bd:54:27:f8:17:ba:
         3e:75:33:de:ff:cc:1e:51:12:51:5c:1b:a1:0c:66:d4:fc:fb:
         40:76:0e:4d:d5:c3:8a:10:29:e8:6d:f2:4c:8e:5a:c5:a8:ae:
         88:2d:1c:e9:a9:72:05:74:9d:cd:3e:34:37:1d:ce:57:53:eb:
         c0:ac:95:94:d8:bb:5e:57:6d:e7:2f:70:94:94:c7:aa:53:b6:
         7f:cd:5b:88:58:5e:d8:22:86:65:e4:b7:83:46:5d:bc:f3:aa:
         25:34:ef:59:cb:11:29:4b:31:9b:4d:26:f3:16:79:1f:c0:5a:
         84:3b:0b:76:a6:5d:ed:8f:3b:8b:61:ec:6a:62:c7:84:c0:10:
         e8:ff:76:79:97:41:71:16:78:93:92:e5:56:a0:ac:8d:dc:8d:
         cb:1e:96:d1:41:61:14:27:37:7d:31:75:d2:d9:9c:d3:c7:23:
         19:0e:4f:21:c4:8b:df:a6:06:1d:83:de:10:06:47:6a:d4:34:
         ec:fd:c2:26
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqG23cy0p2KdenjZAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjMTI3MTQtNTI0Ny00MWM1LWIyNDQtZDBlZGNlYjMy
OTgyMB4XDTI1MDcxNTEzMDEwNFoXDTI1MTAxMzEzMDEwNFowLzEtMCsGA1UEAxMk
ZGY5OGFhNTEtNjJhZS00ZDgxLWE0MTUtZGYyZmUxMWUwNDYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmtnZAgJ+6YT/mCeFRXnhaEvSh05ZMGkbSLLr
NA1pDBQJ+VNLgT+LTZZikvFKXKAnbq4QFUvF/zh/HxGaZcAkdXlsjnn1zvy0bJZB
A5j52jzPRyINuCkWtZ2SvEFPZjnLpXhxSLH7l46c8vCzNyJHp95YpW0cfamy8gSG
viLtPybXZpud6dJanNwO8cyg6vUX7jByikm0VpFJmLtiwqSQ/elroinjeDgVEY8d
2WFZfwBCMoYZOfWvDBf7xRPSt0GyJthPWwbXnlXFyJXcKWHuP1fEIgXRZFoYp0VG
QjgoknFHZV7jwFhqD6MMDgdJX63P9+IHLkp8bCFrGneAtK0WwwIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFO15d7wzeKqTQ5CQo+qAjMPcBHmCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC81ZGMx
MjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVkY2ViMzI5ODIvNGRiNGUxY2YtNDZhNS0z
YzY5LWJkOWEtOTFiOTViYmFiYzliLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvNWRjMTI3MTQtNTI0Ny00MWM1LWIy
NDQtZDBlZGNlYjMyOTgyLzVkYzEyNzE0LTUyNDctNDFjNS1iMjQ0LWQwZWRjZWIz
Mjk4Mi5jcmwwHwYDVR0jBBgwFoAUHfJlXfqmlOL4XwL9Qx2u11OXGlUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC81ZGMxMjcxNC01MjQ3LTQxYzUtYjI0NC1kMGVk
Y2ViMzI5ODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzqbVAwQA
0e2ZMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBABfFmfcFCX0KiKBfFDJGErmaKMREl9Fs96XqavNoEOZ6a0vd
EYd5eD4vrqWJ/mH3uUJiUDo6GeoEphVHpgo1iEp0Ub1UJ/gXuj51M97/zB5RElFc
G6EMZtT8+0B2Dk3Vw4oQKeht8kyOWsWorogtHOmpcgV0nc0+NDcdzldT68CslZTY
u15XbecvcJSUx6pTtn/NW4hYXtgihmXkt4NGXbzzqiU071nLESlLMZtNJvMWeR/A
WoQ7C3amXe2PO4th7Gpix4TAEOj/dnmXQXEWeJOS5VagrI3cjcseltFBYRQnN30x
ddLZnNPHIxkOTyHEi9+mBh2D3hAGR2rUNOz9wiY=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:00:15 2025 by rpki-client