Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa
File:                     8b48a01c-43a6-3fec-9950-67a40504b55d.roa (raw, json)
Hash identifier:          WWhm0oIkcYg7e93YXz9xVcu0ZbYbFDlxpEie6wdnyP0=
Subject key identifier:   FB:81:38:DE:FF:9D:68:80:51:28:0A:C6:6E:A8:EF:12:A2:CD:06:5D
Certificate issuer:       /CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36
Certificate serial:       010D0C9F4328584A5E6063C71CDA1D84E435BED0
Authority key identifier: B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa
Signing time:             Tue 01 Jul 2025 01:00:50 +0000
ROA not before:           Tue 01 Jul 2025 01:00:50 +0000
ROA not after:            Mon 29 Sep 2025 01:00:50 +0000
asID:                     395064
IP address blocks:        140.161.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:5e:60:63:c7:1c:da:1d:84:e4:35:be:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b7ac9cc8-4173-45cf-bc59-200a8d6d9b36
        Validity
            Not Before: Jul  1 01:00:50 2025 GMT
            Not After : Sep 29 01:00:50 2025 GMT
        Subject: CN=ac54ad1b-4a5a-4c98-90eb-4dc3b5139288
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:cb:de:10:07:e2:6c:4c:41:a9:97:c0:11:e7:
                    1d:fd:c2:35:6c:70:7b:9d:cd:04:5a:30:5c:9d:b4:
                    62:9c:51:86:3d:e1:ee:53:6b:86:39:56:c7:f0:39:
                    1d:d4:70:39:23:ae:c4:bd:07:be:fe:00:86:c9:23:
                    a5:33:4e:a8:17:49:de:50:c5:93:80:5a:50:32:f1:
                    d7:c2:54:c8:40:2c:d2:0f:d7:16:6c:d3:0c:82:a2:
                    36:42:35:18:e5:bd:7e:25:1f:4d:0e:66:d6:9c:0a:
                    72:00:90:c9:cd:85:76:d4:80:ae:a9:57:2b:61:1d:
                    31:40:91:88:78:28:36:56:28:0c:dc:08:4c:b2:e5:
                    46:f3:c6:2c:5d:64:5c:d5:10:19:bc:84:d4:51:ab:
                    1c:36:d3:cf:2f:6f:1e:b0:3a:98:5b:74:2a:b8:6c:
                    a6:e4:f0:83:70:98:e0:a8:62:5c:6e:5f:ee:63:44:
                    27:6b:7a:6d:e5:7e:0b:18:a7:81:e2:99:a2:33:34:
                    26:64:e0:bc:17:42:76:4c:85:2d:b2:75:c5:3e:7e:
                    92:d9:01:cf:3c:80:48:9a:17:2c:42:c1:4c:a6:13:
                    dc:fa:b4:3e:2d:4a:e2:e2:d2:de:29:52:7a:e1:63:
                    5f:8e:c3:15:7a:39:1e:30:1a:e8:20:41:17:2c:cc:
                    a1:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:81:38:DE:FF:9D:68:80:51:28:0A:C6:6E:A8:EF:12:A2:CD:06:5D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/8b48a01c-43a6-3fec-9950-67a40504b55d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.crl

            X509v3 Authority Key Identifier:
                keyid:B7:E1:11:80:E3:B1:3C:E1:0B:71:DF:DF:FD:00:0E:83:83:40:11:7E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/b7ac9cc8-4173-45cf-bc59-200a8d6d9b36.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.161.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         16:50:6b:c0:37:b5:59:a9:42:bb:07:40:8f:53:96:00:8a:99:
         f9:8f:6a:69:8b:f4:d8:da:ad:a6:ba:6f:8a:74:93:8c:6e:57:
         2e:83:72:fc:5f:a9:b1:1f:6a:58:b5:14:83:03:64:f2:4b:a0:
         1f:a0:7a:a6:66:73:49:a7:00:86:68:cf:ee:9e:d1:d8:06:c4:
         45:37:21:cd:28:dd:37:7f:d2:a0:09:d4:91:37:a0:ff:06:dd:
         42:11:52:02:3b:1b:b1:a8:59:ba:81:23:54:86:ee:2c:e7:a7:
         9c:49:74:7b:cb:10:f2:32:3f:de:5f:9f:d4:02:0b:37:19:ff:
         42:89:6b:47:1d:4d:fd:73:54:a0:d3:92:1f:b5:9f:61:1f:2f:
         fc:58:01:ee:db:1e:6d:96:87:5c:f8:12:28:35:ee:60:f1:af:
         d9:40:bd:c1:bb:18:31:22:8b:ab:b0:ee:f2:52:e2:40:a8:11:
         74:a3:76:b8:a0:31:9b:aa:b0:6b:d7:67:86:00:db:2c:50:cc:
         f6:67:e2:df:e8:99:6e:67:e0:76:2b:36:80:c8:60:4d:5a:36:
         13:6f:0a:be:27:a0:d2:57:0e:ff:74:6d:af:a7:67:d8:81:1a:
         32:df:b3:a0:68:77:17:b3:b8:ff:49:fe:2c:d9:85:e0:47:7c:
         e4:13:75:7f
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWEpeYGPHHNodhOQ1vtAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjdhYzljYzgtNDE3My00NWNmLWJjNTktMjAwYThkNmQ5
YjM2MB4XDTI1MDcwMTAxMDA1MFoXDTI1MDkyOTAxMDA1MFowLzEtMCsGA1UEAxMk
YWM1NGFkMWItNGE1YS00Yzk4LTkwZWItNGRjM2I1MTM5Mjg4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtsveEAfibExBqZfAEecd/cI1bHB7nc0EWjBc
nbRinFGGPeHuU2uGOVbH8Dkd1HA5I67EvQe+/gCGySOlM06oF0neUMWTgFpQMvHX
wlTIQCzSD9cWbNMMgqI2QjUY5b1+JR9NDmbWnApyAJDJzYV21ICuqVcrYR0xQJGI
eCg2VigM3AhMsuVG88YsXWRc1RAZvITUUascNtPPL28esDqYW3QquGym5PCDcJjg
qGJcbl/uY0Qna3pt5X4LGKeB4pmiMzQmZOC8F0J2TIUtsnXFPn6S2QHPPIBImhcs
QsFMphPc+rQ+LUri4tLeKVJ64WNfjsMVejkeMBroIEEXLMyhlwIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFPuBON7/nWiAUSgKxm6o7xKizQZdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9iN2Fj
OWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBhOGQ2ZDliMzYvOGI0OGEwMWMtNDNhNi0z
ZmVjLTk5NTAtNjdhNDA1MDRiNTVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvYjdhYzljYzgtNDE3My00NWNmLWJj
NTktMjAwYThkNmQ5YjM2L2I3YWM5Y2M4LTQxNzMtNDVjZi1iYzU5LTIwMGE4ZDZk
OWIzNi5jcmwwHwYDVR0jBBgwFoAUt+ERgOOxPOELcd/f/QAOg4NAEX4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9iN2FjOWNjOC00MTczLTQ1Y2YtYmM1OS0yMDBh
OGQ2ZDliMzYuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAjKEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAFlBrwDe1WalCuwdAj1OWAIqZ+Y9qaYv02NqtprpvinSTjG5XLoNy/F+p
sR9qWLUUgwNk8kugH6B6pmZzSacAhmjP7p7R2AbERTchzSjdN3/SoAnUkTeg/wbd
QhFSAjsbsahZuoEjVIbuLOennEl0e8sQ8jI/3l+f1AILNxn/QolrRx1N/XNUoNOS
H7WfYR8v/FgB7tsebZaHXPgSKDXuYPGv2UC9wbsYMSKLq7Du8lLiQKgRdKN2uKAx
m6qwa9dnhgDbLFDM9mfi3+iZbmfgdis2gMhgTVo2E28Kvieg0lcO/3Rtr6dn2IEa
Mt+zoGh3F7O4/0n+LNmF4Ed85BN1fw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 07:19:49 2025 by rpki-client