Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa
File:                     337ab377-36de-3e59-ab75-c15d6a3bec23.roa (raw, json)
Hash identifier:          UEk24RqTi0/h3SurwBiOj/nZLLAFUKPGaomSpJOffIM=
Subject key identifier:   B0:C1:06:92:A4:78:7A:C4:CA:CD:37:B1:DB:D2:8C:3C:10:A6:1D:B6
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F4328584AB651019357C7A856FF7A9AE0
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa
Signing time:             Fri 01 Aug 2025 13:00:41 +0000
ROA not before:           Fri 01 Aug 2025 13:00:41 +0000
ROA not after:            Thu 30 Oct 2025 13:00:41 +0000
asID:                     13768
IP address blocks:        69.28.255.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b6:51:01:93:57:c7:a8:56:ff:7a:9a:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: Aug  1 13:00:41 2025 GMT
            Not After : Oct 30 13:00:41 2025 GMT
        Subject: CN=0257afdb-ac47-4135-9e16-91fad5d09da8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:52:21:e2:9d:45:65:df:f5:b6:14:3d:27:93:
                    b3:6a:58:54:fd:fc:dc:25:74:49:93:40:59:ab:f5:
                    98:95:03:da:f0:63:a0:ef:f3:68:c2:6b:20:87:69:
                    ea:cb:0f:95:7a:54:7c:bb:90:44:48:34:b6:19:00:
                    fd:c4:a3:b7:0a:f2:72:d0:bf:59:79:d5:54:1b:d3:
                    e1:7c:da:d0:e5:fe:fc:5c:5b:db:a9:24:c3:f1:b6:
                    54:4c:46:9a:9b:c3:4c:da:c6:5c:f5:b2:07:7b:4a:
                    18:24:49:cc:9a:53:05:29:5d:b6:54:57:39:0d:41:
                    b8:e9:c2:3d:57:ef:f8:fa:77:66:7a:8a:56:a7:b1:
                    a5:ed:69:a4:08:34:6d:31:ae:04:5e:81:28:89:f7:
                    ef:35:9b:32:fd:d7:f4:a7:3c:0b:e9:f8:9c:b3:c7:
                    e2:45:a6:18:0b:fc:8f:38:ac:d6:15:91:f9:04:cf:
                    c7:56:a2:5c:d2:88:4d:20:ca:77:52:d4:14:3b:59:
                    37:41:92:1b:a3:d8:62:f1:44:c0:4c:fd:67:aa:77:
                    44:b8:a6:72:cc:1f:12:c2:27:77:24:3f:d3:16:cb:
                    82:84:a4:7f:35:ed:e4:a6:b6:cb:34:87:75:9f:93:
                    9e:45:f7:7e:ef:9b:81:de:04:01:90:a0:11:13:e4:
                    e2:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:C1:06:92:A4:78:7A:C4:CA:CD:37:B1:DB:D2:8C:3C:10:A6:1D:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/337ab377-36de-3e59-ab75-c15d6a3bec23.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.28.255.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         90:48:54:2d:84:ff:13:62:9f:42:c3:06:b9:4d:57:c5:18:16:
         22:89:4b:c2:08:85:d4:19:ad:8b:10:02:c6:68:be:c7:d7:e7:
         c6:eb:e5:21:ba:1b:1f:91:f6:83:c6:66:f4:f5:d0:13:cf:5e:
         7a:83:5c:02:e9:4d:af:0a:7c:fb:2c:80:92:bd:b0:c3:9d:ed:
         fd:0c:2b:10:fa:bd:03:5d:fc:f6:50:ef:49:0f:b1:55:8d:78:
         96:ea:c7:44:59:3b:47:99:72:6e:ae:87:9d:d6:24:b5:cb:5c:
         08:d5:9c:d5:c9:ed:74:ee:cd:49:75:5e:e9:8a:04:7a:53:3b:
         db:21:ec:58:1a:2a:b6:58:e0:bf:b5:48:16:a1:3e:cd:c7:ae:
         36:bf:d6:cb:72:5b:0b:cc:8c:b9:0d:1e:a2:04:5d:1f:0e:cf:
         bc:54:d2:24:25:24:02:fa:1a:9e:6d:f2:0c:e2:98:15:d4:46:
         d4:2a:62:fa:f6:ba:a2:c1:f7:49:82:1c:ea:03:4d:97:24:7f:
         d5:24:6a:73:51:31:bb:6d:7f:ab:b6:10:c4:00:e5:04:71:02:
         54:10:7f:4e:8a:12:e6:5c:c6:6a:7e:e0:ee:c1:de:2a:ab:7a:
         8d:0a:39:e7:a7:88:20:c0:10:a2:54:05:8c:55:2d:d5:92:ca:
         05:11:35:7a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq2UQGTV8eoVv96muAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDgwMTEzMDA0MVoXDTI1MTAzMDEzMDA0MVowLzEtMCsGA1UEAxMk
MDI1N2FmZGItYWM0Ny00MTM1LTllMTYtOTFmYWQ1ZDA5ZGE4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAilIh4p1FZd/1thQ9J5OzalhU/fzcJXRJk0BZ
q/WYlQPa8GOg7/Nowmsgh2nqyw+VelR8u5BESDS2GQD9xKO3CvJy0L9ZedVUG9Ph
fNrQ5f78XFvbqSTD8bZUTEaam8NM2sZc9bIHe0oYJEnMmlMFKV22VFc5DUG46cI9
V+/4+ndmeopWp7Gl7WmkCDRtMa4EXoEoiffvNZsy/df0pzwL6fics8fiRaYYC/yP
OKzWFZH5BM/HVqJc0ohNIMp3UtQUO1k3QZIbo9hi8UTATP1nqndEuKZyzB8Swid3
JD/TFsuChKR/Ne3kprbLNId1n5OeRfd+75uB3gQBkKARE+TiswIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLDBBpKkeHrEys03sdvSjDwQph22MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvMzM3YWIzNzctMzZkZS0z
ZTU5LWFiNzUtYzE1ZDZhM2JlYzIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRz/MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJBIVC2E/xNin0LDBrlNV8UYFiKJS8IIhdQZrYsQAsZovsfX58br5SG6
Gx+R9oPGZvT10BPPXnqDXALpTa8KfPssgJK9sMOd7f0MKxD6vQNd/PZQ70kPsVWN
eJbqx0RZO0eZcm6uh53WJLXLXAjVnNXJ7XTuzUl1XumKBHpTO9sh7FgaKrZY4L+1
SBahPs3Hrja/1styWwvMjLkNHqIEXR8Oz7xU0iQlJAL6Gp5t8gzimBXURtQqYvr2
uqLB90mCHOoDTZckf9UkanNRMbttf6u2EMQA5QRxAlQQf06KEuZcxmp+4O7B3iqr
eo0KOeeniCDAEKJUBYxVLdWSygURNXo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 01:18:40 2025 by rpki-client