Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
File:                     1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa (raw, json)
Hash identifier:          2IUCfa0aJVmw6K/1qBma1W2GCVT6CLA1yBfH5oFiQ9I=
Subject key identifier:   B0:3E:A8:81:29:49:2C:D3:75:D4:42:1B:27:6B:B8:20:70:A2:DB:5A
Certificate issuer:       /CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
Certificate serial:       010D0C9F4328584A331AF5C4A7322F99DA7977C0
Authority key identifier: 1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     11290
IP address blocks:        162.212.8.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 20 Jun 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:f5:c4:a7:32:2f:99:da:79:77:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40f3ac5c-7da7-444c-beb6-b2ccfa93905f
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=cb132caa-897a-48d5-b830-10917d43d299
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:ba:e6:f7:db:a6:f0:8a:c9:b3:36:89:75:ca:
                    a9:64:26:6d:92:0f:64:bc:e5:66:73:64:b3:1d:e5:
                    00:4c:b7:55:0f:e6:60:09:c6:15:92:9b:55:95:68:
                    c8:76:66:3e:2c:2f:b6:5f:e7:4b:24:65:8b:a1:e0:
                    e4:ee:9e:6e:71:1b:a3:0a:dd:bf:1d:01:81:7d:6f:
                    f3:81:11:a3:9f:41:3e:8e:7a:87:b5:09:48:ed:df:
                    a9:bd:3e:d5:fd:20:c3:b4:ad:fa:99:b5:e6:1f:e7:
                    41:2a:40:e4:94:ca:56:03:4b:62:fc:02:9a:eb:72:
                    ee:72:be:86:f0:3b:f5:fa:df:2e:73:5f:46:5f:a3:
                    b0:d5:1d:bf:e1:f2:1b:46:9e:00:18:15:ea:62:84:
                    9c:98:42:fc:cf:1f:ae:9f:aa:29:1e:8f:79:00:f5:
                    ba:17:e2:c2:e5:95:30:cc:60:57:de:bb:49:40:3a:
                    05:4c:6e:bc:98:87:cc:14:75:71:2a:81:a8:09:72:
                    19:6b:4c:25:f3:2c:1c:1e:45:84:38:cd:3e:a4:76:
                    c2:ad:c4:d5:60:f0:78:7f:7a:53:37:98:64:c7:31:
                    00:7c:8b:76:59:e5:14:db:41:ea:05:1a:11:cd:45:
                    da:e8:a1:98:c9:de:36:0e:63:20:6c:60:61:d5:46:
                    c1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:3E:A8:81:29:49:2C:D3:75:D4:42:1B:27:6B:B8:20:70:A2:DB:5A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/1b2b9df9-06ca-323a-b5c8-1ef1dd59694a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.crl

            X509v3 Authority Key Identifier:
                keyid:1E:EC:BD:A0:4A:62:2B:4B:71:20:6F:5A:8C:8C:6F:EE:F0:06:16:6F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/40f3ac5c-7da7-444c-beb6-b2ccfa93905f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.212.8.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:da:b1:eb:6f:3f:21:b3:fe:9b:59:29:c9:a0:01:8a:4e:b1:
         25:a3:46:ba:d4:40:f3:54:c9:20:3b:85:b6:ef:5c:fb:e9:c4:
         0f:a5:07:2b:6a:db:6d:36:81:67:da:8c:07:a7:d3:b2:8e:2c:
         a3:85:b8:b2:79:e6:a1:94:69:4b:c3:fd:2b:4f:9d:2a:10:80:
         d8:b6:64:ca:9c:49:cc:d3:49:59:bc:2c:de:1a:48:65:f0:fd:
         ad:e1:a7:29:50:6f:ca:f0:f9:e5:38:6c:1d:9d:c1:3e:d2:a6:
         4c:c7:8e:a8:ac:88:af:58:19:bb:30:e3:1a:2a:53:fd:cb:e3:
         93:e9:03:ca:1d:d8:b8:09:03:ba:dc:7d:a7:f6:d5:f8:9d:d3:
         30:d5:ce:3c:37:c2:5b:b3:af:66:b7:e4:09:a1:8d:8f:d3:ca:
         6f:6c:07:39:b7:81:3b:99:9a:c2:9c:7e:29:81:29:41:06:65:
         d5:3e:a5:30:1e:8f:63:a6:de:d2:a6:ad:ed:02:44:f6:87:7e:
         ae:ba:50:b8:bf:78:3d:b8:dd:60:7e:4a:ec:83:ad:fb:45:c1:
         53:82:87:dc:b3:06:0a:2a:db:d3:17:f3:cb:83:34:69:db:2e:
         17:46:95:39:4d:7d:e3:ce:b4:43:ad:31:a2:86:fb:d8:4c:4f:
         56:35:b9:7f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGvXEpzIvmdp5d8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDBmM2FjNWMtN2RhNy00NDRjLWJlYjYtYjJjY2ZhOTM5
MDVmMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
Y2IxMzJjYWEtODk3YS00OGQ1LWI4MzAtMTA5MTdkNDNkMjk5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn7rm99um8IrJszaJdcqpZCZtkg9kvOVmc2Sz
HeUATLdVD+ZgCcYVkptVlWjIdmY+LC+2X+dLJGWLoeDk7p5ucRujCt2/HQGBfW/z
gRGjn0E+jnqHtQlI7d+pvT7V/SDDtK36mbXmH+dBKkDklMpWA0ti/AKa63Lucr6G
8Dv1+t8uc19GX6Ow1R2/4fIbRp4AGBXqYoScmEL8zx+un6opHo95APW6F+LC5ZUw
zGBX3rtJQDoFTG68mIfMFHVxKoGoCXIZa0wl8ywcHkWEOM0+pHbCrcTVYPB4f3pT
N5hkxzEAfIt2WeUU20HqBRoRzUXa6KGYyd42DmMgbGBh1UbB3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLA+qIEpSSzTddRCGydruCBwottaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi80MGYz
YWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNjZmE5MzkwNWYvMWIyYjlkZjktMDZjYS0z
MjNhLWI1YzgtMWVmMWRkNTk2OTRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNDBmM2FjNWMtN2RhNy00NDRjLWJl
YjYtYjJjY2ZhOTM5MDVmLzQwZjNhYzVjLTdkYTctNDQ0Yy1iZWI2LWIyY2NmYTkz
OTA1Zi5jcmwwHwYDVR0jBBgwFoAUHuy9oEpiK0txIG9ajIxv7vAGFm8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi80MGYzYWM1Yy03ZGE3LTQ0NGMtYmViNi1iMmNj
ZmE5MzkwNWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCotQIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHasetvPyGz/ptZKcmgAYpOsSWjRrrUQPNUySA7hbbvXPvpxA+lBytq
2202gWfajAen07KOLKOFuLJ55qGUaUvD/StPnSoQgNi2ZMqcSczTSVm8LN4aSGXw
/a3hpylQb8rw+eU4bB2dwT7SpkzHjqisiK9YGbsw4xoqU/3L45PpA8od2LgJA7rc
faf21fid0zDVzjw3wluzr2a35AmhjY/Tym9sBzm3gTuZmsKcfimBKUEGZdU+pTAe
j2Om3tKmre0CRPaHfq66ULi/eD243WB+SuyDrftFwVOCh9yzBgoq29MX88uDNGnb
LhdGlTlNfePOtEOtMaKG+9hMT1Y1uX8=
-----END CERTIFICATE-----
Generated at Wed Jun 18 22:52:07 2025 by rpki-client