Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa
File:                     f12da5d4-e3ff-3692-ac55-e77952805d6b.roa (raw, json)
Hash identifier:          IsQdYGmIvrPnatckAluxPwuLsBIQLF3F3KPADtitwvs=
Subject key identifier:   FD:85:B9:47:CE:22:89:9B:C0:2A:8A:C4:54:B1:1A:35:DD:C4:8D:21
Certificate issuer:       /CN=61076595-f39c-462e-b686-d3fcac2df32b
Certificate serial:       010D0C9F43285849A61F46CDDA115C9420689DC0
Authority key identifier: 34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa
Signing time:             Sat 26 Apr 2025 01:00:47 +0000
ROA not before:           Sat 26 Apr 2025 01:00:47 +0000
ROA not after:            Fri 25 Jul 2025 01:00:47 +0000
asID:                     36222
IP address blocks:        208.65.216.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 22:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:a6:1f:46:cd:da:11:5c:94:20:68:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=61076595-f39c-462e-b686-d3fcac2df32b
        Validity
            Not Before: Apr 26 01:00:47 2025 GMT
            Not After : Jul 25 01:00:47 2025 GMT
        Subject: CN=7ce802f6-7958-41a6-88cf-976f36a7e1b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:5e:6b:b1:42:2f:85:ae:db:59:fd:92:fe:bf:
                    ee:9c:99:0f:f8:75:fa:d7:6b:eb:46:b6:13:e0:dc:
                    6b:54:e1:e1:73:a6:d1:6d:a3:13:ec:93:a8:fb:fe:
                    8c:fa:19:e6:33:a7:7b:0e:9d:c8:0e:2b:11:51:df:
                    ea:11:9b:5a:c3:65:a9:90:7a:d0:56:8d:3c:eb:a4:
                    46:52:3b:56:55:99:05:90:82:92:b9:eb:30:c9:05:
                    c5:47:36:d0:65:84:7d:e7:c6:99:64:dc:14:68:ab:
                    f0:b8:f8:8a:c5:1b:5b:46:34:7b:a5:fb:13:56:0c:
                    44:ca:1f:27:5d:9e:8d:32:04:4a:28:3f:0e:dc:df:
                    7a:10:da:2f:fb:25:be:dd:61:40:bc:dd:95:34:d0:
                    bc:85:d0:62:28:ac:ba:b4:46:99:31:8c:fb:36:28:
                    d4:74:ff:46:6b:9a:e4:d8:d8:b0:66:6c:fe:a6:ea:
                    0a:7a:6f:1e:cb:1f:b3:d5:72:10:75:ed:37:38:65:
                    10:5b:2c:59:3c:c1:41:58:59:f7:03:0a:2b:0c:93:
                    d4:fa:7d:9c:50:47:e0:8a:5c:4f:77:17:62:b7:6e:
                    28:1b:48:b7:8d:af:70:7b:7d:84:2b:31:5c:ce:12:
                    d3:ce:b0:8a:df:3e:7d:2d:13:f1:d3:0d:d0:d3:94:
                    f9:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:85:B9:47:CE:22:89:9B:C0:2A:8A:C4:54:B1:1A:35:DD:C4:8D:21
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/f12da5d4-e3ff-3692-ac55-e77952805d6b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b/61076595-f39c-462e-b686-d3fcac2df32b.crl

            X509v3 Authority Key Identifier:
                keyid:34:ED:15:72:96:38:6D:CD:BE:10:46:E7:8E:8B:75:5C:89:B2:14:DF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/61076595-f39c-462e-b686-d3fcac2df32b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.216.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:4f:38:5e:ca:58:ce:c3:e4:a7:ae:89:d6:2a:cc:a3:3c:46:
         e8:6e:e0:d5:14:ac:5e:0a:39:70:cb:51:0e:d2:1f:ba:8c:a9:
         f0:5e:b7:79:5c:9a:b3:f4:b2:72:dc:de:dd:c0:18:54:0d:52:
         ed:dd:65:4b:3d:4c:48:79:91:ca:b8:82:60:5d:1c:dc:57:1a:
         90:e1:ac:5f:15:d8:e7:8d:67:02:56:91:23:19:25:ae:0d:0d:
         db:92:73:43:4c:e7:5c:8f:86:f0:c4:11:a5:5a:fe:41:fc:fb:
         60:55:ae:69:cb:04:7b:39:10:b8:d9:60:2d:54:df:5c:ac:a7:
         81:bb:1b:23:3b:79:fc:5f:ec:69:24:b4:d3:a9:f1:b7:10:16:
         c4:cb:d1:11:10:c4:7d:be:56:02:2c:66:3a:d9:c7:8e:19:22:
         70:45:10:95:78:98:35:52:d2:59:09:f9:2e:7b:ae:ac:ed:fa:
         ea:60:98:18:7d:bf:66:33:4e:55:b9:51:ce:89:6d:f5:f8:a8:
         d1:11:a2:b3:41:11:4f:e6:ca:ab:51:a4:42:37:7f:38:4b:69:
         8e:67:b7:79:1f:89:5b:6b:20:00:5f:81:41:42:63:a2:4f:34:
         ac:fd:af:4f:ab:fd:31:2a:ec:ad:ac:3e:21:7e:e0:ae:bb:52:
         e6:bf:27:d1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmmH0bN2hFclCBoncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjEwNzY1OTUtZjM5Yy00NjJlLWI2ODYtZDNmY2FjMmRm
MzJiMB4XDTI1MDQyNjAxMDA0N1oXDTI1MDcyNTAxMDA0N1owLzEtMCsGA1UEAxMk
N2NlODAyZjYtNzk1OC00MWE2LTg4Y2YtOTc2ZjM2YTdlMWI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApV5rsUIvha7bWf2S/r/unJkP+HX612vrRrYT
4NxrVOHhc6bRbaMT7JOo+/6M+hnmM6d7Dp3IDisRUd/qEZtaw2WpkHrQVo0866RG
UjtWVZkFkIKSueswyQXFRzbQZYR958aZZNwUaKvwuPiKxRtbRjR7pfsTVgxEyh8n
XZ6NMgRKKD8O3N96ENov+yW+3WFAvN2VNNC8hdBiKKy6tEaZMYz7NijUdP9Ga5rk
2NiwZmz+puoKem8eyx+z1XIQde03OGUQWyxZPMFBWFn3AworDJPU+n2cUEfgilxP
dxdit24oG0i3ja9we32EKzFczhLTzrCK3z59LRPx0w3Q05T5ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP2FuUfOIombwCqKxFSxGjXdxI0hMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3
NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2ZjYWMyZGYzMmIvZjEyZGE1ZDQtZTNmZi0z
NjkyLWFjNTUtZTc3OTUyODA1ZDZiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvNjEwNzY1OTUtZjM5Yy00NjJlLWI2
ODYtZDNmY2FjMmRmMzJiLzYxMDc2NTk1LWYzOWMtNDYyZS1iNjg2LWQzZmNhYzJk
ZjMyYi5jcmwwHwYDVR0jBBgwFoAUNO0VcpY4bc2+EEbnjot1XImyFN8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi82MTA3NjU5NS1mMzljLTQ2MmUtYjY4Ni1kM2Zj
YWMyZGYzMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EHYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ5POF7KWM7D5KeuidYqzKM8Ruhu4NUUrF4KOXDLUQ7SH7qMqfBet3lc
mrP0snLc3t3AGFQNUu3dZUs9TEh5kcq4gmBdHNxXGpDhrF8V2OeNZwJWkSMZJa4N
DduSc0NM51yPhvDEEaVa/kH8+2BVrmnLBHs5ELjZYC1U31ysp4G7GyM7efxf7Gkk
tNOp8bcQFsTL0REQxH2+VgIsZjrZx44ZInBFEJV4mDVS0lkJ+S57rqzt+upgmBh9
v2YzTlW5Uc6JbfX4qNERorNBEU/myqtRpEI3fzhLaY5nt3kfiVtrIABfgUFCY6JP
NKz9r0+r/TEq7K2sPiF+4K67Uua/J9E=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:53:29 2025 by rpki-client