Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2585b6f4-0e9b-35fc-8812-f0eeb4ae9bed.roa
File:                     2585b6f4-0e9b-35fc-8812-f0eeb4ae9bed.roa (raw, json)
Hash identifier:          AGjQmx8yOO1CWElhbOERVsgP3Q4Im2b2WPMtdXX7NU4=
Subject key identifier:   36:C0:C9:BE:31:C7:9F:68:C9:A5:4A:17:AC:F9:3B:E4:37:89:1E:6E
Certificate issuer:       /CN=5ccc6d6f-2606-494d-a559-67c452762d98
Certificate serial:       010D0C9F43285849B6DF5F2E4B1054037AE88980
Authority key identifier: A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2585b6f4-0e9b-35fc-8812-f0eeb4ae9bed.roa
Signing time:             Fri 02 May 2025 01:00:47 +0000
ROA not before:           Fri 02 May 2025 01:00:47 +0000
ROA not after:            Thu 31 Jul 2025 01:00:47 +0000
asID:                     376
IP address blocks:        206.167.199.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:b6:df:5f:2e:4b:10:54:03:7a:e8:89:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5ccc6d6f-2606-494d-a559-67c452762d98
        Validity
            Not Before: May  2 01:00:47 2025 GMT
            Not After : Jul 31 01:00:47 2025 GMT
        Subject: CN=e2f99c7c-6ef2-4b32-bf0a-c292a8ac6ef0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0f:5c:70:f2:46:fc:2b:e0:70:14:dc:fa:f5:
                    40:62:70:ad:fc:3f:72:41:4c:6e:fe:a1:3f:da:7e:
                    35:7f:0a:41:e2:27:6d:c9:68:f5:4c:d7:9e:00:3f:
                    d2:c7:a4:9c:5b:bb:b4:0b:fb:b0:84:25:c4:3e:27:
                    02:55:90:16:dd:13:f1:4d:82:ca:9a:77:63:52:4a:
                    be:66:e5:fa:a3:80:bc:74:2e:c0:50:54:f3:4d:42:
                    ed:2a:f3:79:3b:ea:0e:72:96:13:45:6a:16:ce:5d:
                    d2:32:4c:a1:05:49:42:74:b5:4a:04:87:05:b3:59:
                    cc:1c:b2:04:36:0e:25:7c:bf:ce:a9:95:b5:15:54:
                    ad:6c:70:ab:40:be:29:77:b0:9f:a3:6b:7b:59:dc:
                    3a:2a:0b:b1:5c:39:f1:de:e2:f8:65:c1:f1:7d:bf:
                    0a:a6:e7:da:8c:b5:0a:7f:9b:3d:9e:93:b1:19:67:
                    a3:6b:49:59:73:4f:90:ba:e8:88:6a:46:2b:9e:ce:
                    77:10:50:47:47:2b:cf:a0:f8:31:de:ad:10:4e:c0:
                    7b:55:dc:14:48:48:38:76:e3:9a:72:8e:47:31:2c:
                    1a:ce:0e:0b:8e:37:1d:11:65:ce:74:6b:ad:e5:bb:
                    98:00:53:b4:44:9b:3b:98:74:ff:ca:04:1f:89:81:
                    c7:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:C0:C9:BE:31:C7:9F:68:C9:A5:4A:17:AC:F9:3B:E4:37:89:1E:6E
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/2585b6f4-0e9b-35fc-8812-f0eeb4ae9bed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98/5ccc6d6f-2606-494d-a559-67c452762d98.crl

            X509v3 Authority Key Identifier:
                keyid:A6:37:C0:CC:BB:3A:58:12:51:53:17:04:FE:7C:A5:91:6B:25:D6:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5ccc6d6f-2606-494d-a559-67c452762d98.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.167.199.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:db:e7:0a:1d:49:55:b8:cc:04:b2:82:2d:27:1c:83:12:6e:
         55:10:6b:1f:95:f3:13:f9:c5:ea:b0:47:50:50:24:ae:92:36:
         1c:fd:89:f2:cc:d2:42:17:90:1a:49:ad:26:29:d3:e1:8b:11:
         3b:69:b4:27:c3:90:93:6e:86:68:ad:8d:f5:9d:e3:8c:c8:41:
         6d:a9:4b:39:42:b4:07:81:70:76:21:71:1b:d8:ab:e9:9f:34:
         41:e5:b9:c0:9b:f3:03:e2:0d:a5:b5:01:eb:b1:ea:3a:61:fc:
         2e:00:c9:ca:31:cd:f1:08:29:ab:a6:d5:9c:04:b2:da:d9:43:
         a3:64:ab:e9:e0:47:3d:bf:0b:1c:af:49:6d:9e:d8:da:39:a1:
         1b:86:10:b4:54:68:a9:f2:15:28:36:34:97:6f:96:05:c8:60:
         7c:2f:7d:fb:8c:65:c2:b3:7c:4a:96:cf:bb:d4:f5:0c:e8:37:
         09:91:11:6d:9c:a2:a4:ab:bd:db:98:97:38:eb:a4:28:b0:14:
         52:74:43:f5:78:8b:61:1e:0e:c8:fd:b3:7b:70:b6:b9:e4:f3:
         e5:00:78:99:47:08:19:1d:7e:0d:8e:5e:c8:22:4c:ea:cc:76:
         ea:35:ef:b8:5a:ee:c9:f2:4d:ee:d7:63:94:43:53:d3:e3:e9:
         ac:55:aa:8e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEm2318uSxBUA3roiYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWNjYzZkNmYtMjYwNi00OTRkLWE1NTktNjdjNDUyNzYy
ZDk4MB4XDTI1MDUwMjAxMDA0N1oXDTI1MDczMTAxMDA0N1owLzEtMCsGA1UEAxMk
ZTJmOTljN2MtNmVmMi00YjMyLWJmMGEtYzI5MmE4YWM2ZWYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQ9ccPJG/CvgcBTc+vVAYnCt/D9yQUxu/qE/
2n41fwpB4idtyWj1TNeeAD/Sx6ScW7u0C/uwhCXEPicCVZAW3RPxTYLKmndjUkq+
ZuX6o4C8dC7AUFTzTULtKvN5O+oOcpYTRWoWzl3SMkyhBUlCdLVKBIcFs1nMHLIE
Ng4lfL/OqZW1FVStbHCrQL4pd7Cfo2t7Wdw6KguxXDnx3uL4ZcHxfb8KpufajLUK
f5s9npOxGWeja0lZc0+QuuiIakYrns53EFBHRyvPoPgx3q0QTsB7VdwUSEg4duOa
co5HMSwazg4LjjcdEWXOdGut5buYAFO0RJs7mHT/ygQfiYHHJwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDbAyb4xx59oyaVKF6z5O+Q3iR5uMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi81Y2Nj
NmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0NTI3NjJkOTgvMjU4NWI2ZjQtMGU5Yi0z
NWZjLTg4MTItZjBlZWI0YWU5YmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNWNjYzZkNmYtMjYwNi00OTRkLWE1
NTktNjdjNDUyNzYyZDk4LzVjY2M2ZDZmLTI2MDYtNDk0ZC1hNTU5LTY3YzQ1Mjc2
MmQ5OC5jcmwwHwYDVR0jBBgwFoAUpjfAzLs6WBJRUxcE/nylkWsl1ocwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi81Y2NjNmQ2Zi0yNjA2LTQ5NGQtYTU1OS02N2M0
NTI3NjJkOTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzqfHMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHHb5wodSVW4zASygi0nHIMSblUQax+V8xP5xeqwR1BQJK6SNhz9ifLM
0kIXkBpJrSYp0+GLETtptCfDkJNuhmitjfWd44zIQW2pSzlCtAeBcHYhcRvYq+mf
NEHlucCb8wPiDaW1Aeux6jph/C4AycoxzfEIKaum1ZwEstrZQ6Nkq+ngRz2/Cxyv
SW2e2No5oRuGELRUaKnyFSg2NJdvlgXIYHwvffuMZcKzfEqWz7vU9QzoNwmREW2c
oqSrvduYlzjrpCiwFFJ0Q/V4i2EeDsj9s3twtrnk8+UAeJlHCBkdfg2OXsgiTOrM
duo177ha7snyTe7XY5RDU9Pj6axVqo4=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:29:03 2025 by rpki-client