Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa
File:                     40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa (raw, json)
Hash identifier:          yaUl14+F1DO9T2t/KXm28Ue3PNFeowzeWG9G7az1ois=
Subject key identifier:   FC:AB:01:B4:56:2A:DC:1F:FA:77:73:FE:3C:04:AF:9F:8C:03:0D:C0
Certificate issuer:       /CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
Certificate serial:       010D0C9F43285849F9DFD0220FD5D6F048595B80
Authority key identifier: A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     13768
IP address blocks:        216.187.122.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d0:22:0f:d5:d6:f0:48:59:5b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=908791ae-8a38-4ae8-a4af-e3de68a5db10
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=556c7462-19be-47b1-879c-421d531ba08a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:54:ba:ce:41:78:04:94:7d:4f:34:37:00:01:
                    69:e3:4e:cf:1b:ea:e9:ed:5a:f4:0d:fd:69:8c:4c:
                    24:62:ef:cc:19:f4:a2:6f:6f:48:70:9e:14:27:79:
                    bf:3e:53:10:9b:fa:c7:61:e4:d6:5a:df:4d:5f:40:
                    d2:29:f7:4c:89:36:1d:4f:5d:50:60:77:8e:54:f0:
                    2b:55:f7:ff:45:c0:3c:c1:ac:a9:95:7c:bd:b3:3b:
                    14:22:e3:9b:c1:92:ce:d1:6e:9f:b4:fd:47:e0:13:
                    21:4d:0b:a4:47:10:82:80:88:39:22:51:95:36:b6:
                    a8:82:bb:6c:e3:a2:66:e5:54:15:1d:0b:e9:53:44:
                    2b:d6:b0:cb:0e:af:ae:69:6b:c5:06:1e:3e:f6:8a:
                    97:0a:97:a0:49:e6:06:14:e3:8d:a5:46:1c:58:95:
                    0c:d4:d8:c7:64:53:03:a6:24:b2:91:b9:1a:74:3c:
                    e8:99:c6:eb:e5:1b:f6:4c:ea:55:e2:e8:85:c6:89:
                    71:b6:b2:ca:81:25:35:ec:eb:9a:99:3f:91:52:cd:
                    58:77:02:60:f0:23:43:fb:c4:ce:b2:28:78:6f:21:
                    d3:83:15:e3:58:dd:38:bd:7a:a4:64:44:85:32:fa:
                    af:35:a2:ba:fa:3e:76:b4:4a:45:c7:40:eb:ee:31:
                    a0:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:AB:01:B4:56:2A:DC:1F:FA:77:73:FE:3C:04:AF:9F:8C:03:0D:C0
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/40c9501a-2aa7-30a5-b202-677f56dc9fa3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10/908791ae-8a38-4ae8-a4af-e3de68a5db10.crl

            X509v3 Authority Key Identifier:
                keyid:A0:02:D7:1A:A0:F0:1F:AE:A9:96:C2:DF:30:3D:CA:14:2B:17:8E:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/908791ae-8a38-4ae8-a4af-e3de68a5db10.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.187.122.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:10:00:5c:66:b8:5e:86:03:d7:8b:3e:7e:8a:98:95:c3:ff:
         65:f0:be:7e:d5:c0:e8:47:22:8e:da:e0:42:2a:19:bf:2c:e0:
         90:df:99:0c:3d:fe:3e:30:82:bf:53:0f:22:f3:de:99:d4:cc:
         f1:57:a0:e4:5b:fa:ff:86:b5:2a:bd:1d:be:fe:65:44:bb:2d:
         7a:7c:af:51:3d:c1:72:61:10:b4:2f:75:dd:dd:69:31:06:88:
         8e:92:e4:f6:c7:5a:28:7b:a1:7e:62:c0:78:13:e1:e2:a3:42:
         c7:3f:a3:68:78:e6:39:20:8f:33:f5:9c:1c:f2:5c:99:b8:ed:
         6d:a6:0b:1b:90:a5:8b:c3:49:a1:55:94:8c:8f:dc:30:06:d5:
         58:6e:1f:e9:30:05:55:fb:db:40:40:8f:2c:e6:08:74:63:3a:
         95:f7:07:2c:e5:b5:a7:30:aa:7a:25:e1:4c:e5:e1:ae:42:85:
         db:35:02:75:15:52:e8:e3:7b:76:dc:ae:3d:c4:c3:d4:0d:ce:
         85:9f:86:88:67:f0:ce:57:56:d4:9f:96:f9:be:b2:21:58:40:
         8f:7a:52:c6:f1:46:8c:76:ce:d1:d4:00:c7:4d:83:72:f0:e0:
         94:ab:85:39:d8:ca:61:46:f6:c0:1e:d8:d4:75:39:c1:3f:2f:
         e5:58:b6:dc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539AiD9XW8EhZW4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTA4NzkxYWUtOGEzOC00YWU4LWE0YWYtZTNkZTY4YTVk
YjEwMB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
NTU2Yzc0NjItMTliZS00N2IxLTg3OWMtNDIxZDUzMWJhMDhhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAplS6zkF4BJR9TzQ3AAFp407PG+rp7Vr0Df1p
jEwkYu/MGfSib29IcJ4UJ3m/PlMQm/rHYeTWWt9NX0DSKfdMiTYdT11QYHeOVPAr
Vff/RcA8wayplXy9szsUIuObwZLO0W6ftP1H4BMhTQukRxCCgIg5IlGVNraogrts
46Jm5VQVHQvpU0Qr1rDLDq+uaWvFBh4+9oqXCpegSeYGFOONpUYcWJUM1NjHZFMD
piSykbkadDzomcbr5Rv2TOpV4uiFxolxtrLKgSU17OuamT+RUs1YdwJg8CND+8TO
sih4byHTgxXjWN04vXqkZESFMvqvNaK6+j52tEpFx0Dr7jGgqwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPyrAbRWKtwf+ndz/jwEr5+MAw3AMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC85MDg3
OTFhZS04YTM4LTRhZTgtYTRhZi1lM2RlNjhhNWRiMTAvNDBjOTUwMWEtMmFhNy0z
MGE1LWIyMDItNjc3ZjU2ZGM5ZmEzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvOTA4NzkxYWUtOGEzOC00YWU4LWE0
YWYtZTNkZTY4YTVkYjEwLzkwODc5MWFlLThhMzgtNGFlOC1hNGFmLWUzZGU2OGE1
ZGIxMC5jcmwwHwYDVR0jBBgwFoAUoALXGqDwH66plsLfMD3KFCsXjvYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC85MDg3OTFhZS04YTM4LTRhZTgtYTRhZi1lM2Rl
NjhhNWRiMTAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2Lt6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABcQAFxmuF6GA9eLPn6KmJXD/2Xwvn7VwOhHIo7a4EIqGb8s4JDfmQw9
/j4wgr9TDyLz3pnUzPFXoORb+v+GtSq9Hb7+ZUS7LXp8r1E9wXJhELQvdd3daTEG
iI6S5PbHWih7oX5iwHgT4eKjQsc/o2h45jkgjzP1nBzyXJm47W2mCxuQpYvDSaFV
lIyP3DAG1VhuH+kwBVX720BAjyzmCHRjOpX3Byzltacwqnol4Uzl4a5Chds1AnUV
Uujje3bcrj3Ew9QNzoWfhohn8M5XVtSflvm+siFYQI96UsbxRox2ztHUAMdNg3Lw
4JSrhTnYymFG9sAe2NR1OcE/L+VYttw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:24:54 2025 by rpki-client