Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
File:                     6740c892-d540-3efa-a786-63007c9c57ce.roa (raw, json)
Hash identifier:          VgYxLd5VHUZzz9iEOAuEgBcyUHqxPG4ciOvhnqf16T4=
Subject key identifier:   4C:F4:4F:75:0C:A9:4F:2B:0A:D8:99:5D:87:46:14:03:39:2D:F9:1F
Certificate issuer:       /CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
Certificate serial:       010D0C9F4328584A2ABAE1E8AD619BD1577AC0C0
Authority key identifier: E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     16509
IP address blocks:        216.250.2.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:e1:e8:ad:61:9b:d1:57:7a:c0:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=201892bf-bbaa-486f-820e-969d6eecf53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:0b:d8:23:c0:14:d7:84:e2:ea:84:64:c8:d8:
                    6f:68:76:52:ea:d7:52:ab:09:ea:d8:97:a7:b6:61:
                    4a:8a:a5:a6:22:69:48:4a:d5:50:a6:db:16:e8:11:
                    d6:57:d7:1d:a4:41:18:da:07:59:7f:72:7c:ae:e1:
                    5f:d7:dd:7e:d7:06:38:0e:a9:48:09:5b:27:0c:82:
                    dd:c0:2e:68:3b:16:3a:5f:f8:a0:ff:40:04:1a:2f:
                    0c:18:5a:3f:27:b1:1f:1a:03:fc:b8:61:e1:8b:22:
                    e0:65:e6:88:51:81:ca:9c:c4:7c:2c:fa:f8:a1:98:
                    07:79:97:cf:99:10:d7:7f:6e:85:c3:df:43:b5:f4:
                    0c:98:82:1d:90:ff:ab:96:f6:26:b0:e5:8e:94:51:
                    06:83:cf:ca:71:ec:0d:2d:ca:eb:d6:8d:f0:c4:5b:
                    04:88:58:3f:aa:1a:7e:7a:b7:2e:f6:dc:93:bf:eb:
                    f4:cc:59:e3:01:a9:65:ab:ff:ad:e6:63:79:f2:66:
                    55:f6:fa:25:92:e0:72:cc:b7:f7:73:7d:ab:5a:93:
                    9e:21:38:03:72:f6:62:75:2a:47:68:c4:1a:96:7b:
                    a0:b1:34:a1:44:f7:4e:38:c5:49:1d:fa:70:3f:c1:
                    6b:f0:12:1a:b5:46:76:0e:82:8f:3f:2f:4a:b0:06:
                    f4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F4:4F:75:0C:A9:4F:2B:0A:D8:99:5D:87:46:14:03:39:2D:F9:1F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/6740c892-d540-3efa-a786-63007c9c57ce.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.crl

            X509v3 Authority Key Identifier:
                keyid:E0:74:39:2A:DB:94:E6:D4:23:34:5D:A9:61:BB:0F:28:E4:B2:76:D8

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/8ee52b0d-b15c-4b9c-aa3a-3d4a4d36ad21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.250.2.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:44:83:b4:d1:5b:fe:90:d4:6c:0f:99:0e:f5:be:57:44:17:
         cb:00:0b:c3:1f:25:2e:83:5f:f7:d8:7f:da:85:33:c5:d2:31:
         0d:ae:a0:85:a9:92:1c:77:24:4f:cb:85:c8:62:36:45:0a:79:
         53:57:ee:0e:67:4a:30:9c:2d:37:ef:83:86:74:c3:22:12:4a:
         52:8b:fe:e6:39:dc:c4:c4:45:75:45:2b:d3:ab:64:72:de:bc:
         0c:65:17:1e:3a:4a:89:ca:8e:ab:f2:da:47:09:5b:6b:e5:07:
         ef:45:88:73:c8:4e:3f:a7:dc:ef:54:0e:c1:f1:7c:90:be:3c:
         0f:3d:0b:71:fd:07:68:31:e2:0f:b7:8b:ee:b5:c8:e8:a2:22:
         3f:6b:5f:3a:61:7d:28:86:2e:1d:8c:78:fd:c6:03:ef:08:91:
         d0:28:6f:2a:a1:24:5f:ca:20:1d:1e:90:86:26:49:00:d3:53:
         14:af:8e:a6:e4:1f:e3:94:ce:0d:76:58:13:2c:f5:e9:01:db:
         3b:54:6e:dc:9e:b1:6e:42:d8:2b:ff:06:46:e8:7d:a9:8a:e2:
         bc:60:0d:6b:b8:1b:69:86:b5:13:06:a6:61:2d:a0:08:47:96:
         be:46:91:70:e0:f0:f7:3b:ff:f2:ab:47:70:66:08:9b:33:17:
         25:12:37:ca
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquuHorWGb0Vd6wMAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGVlNTJiMGQtYjE1Yy00YjljLWFhM2EtM2Q0YTRkMzZh
ZDIxMB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
MjAxODkyYmYtYmJhYS00ODZmLTgyMGUtOTY5ZDZlZWNmNTNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugvYI8AU14Ti6oRkyNhvaHZS6tdSqwnq2Jen
tmFKiqWmImlIStVQptsW6BHWV9cdpEEY2gdZf3J8ruFf191+1wY4DqlICVsnDILd
wC5oOxY6X/ig/0AEGi8MGFo/J7EfGgP8uGHhiyLgZeaIUYHKnMR8LPr4oZgHeZfP
mRDXf26Fw99DtfQMmIIdkP+rlvYmsOWOlFEGg8/KcewNLcrr1o3wxFsEiFg/qhp+
ercu9tyTv+v0zFnjAallq/+t5mN58mZV9volkuByzLf3c32rWpOeITgDcvZidSpH
aMQalnugsTShRPdOOMVJHfpwP8Fr8BIatUZ2DoKPPy9KsAb0VQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEz0T3UMqU8rCtiZXYdGFAM5LfkfMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1
MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRhNGQzNmFkMjEvNjc0MGM4OTItZDU0MC0z
ZWZhLWE3ODYtNjMwMDdjOWM1N2NlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOGVlNTJiMGQtYjE1Yy00YjljLWFh
M2EtM2Q0YTRkMzZhZDIxLzhlZTUyYjBkLWIxNWMtNGI5Yy1hYTNhLTNkNGE0ZDM2
YWQyMS5jcmwwHwYDVR0jBBgwFoAU4HQ5KtuU5tQjNF2pYbsPKOSydtgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi84ZWU1MmIwZC1iMTVjLTRiOWMtYWEzYS0zZDRh
NGQzNmFkMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2PoCMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhEg7TRW/6Q1GwPmQ71vldEF8sAC8MfJS6DX/fYf9qFM8XSMQ2uoIWp
khx3JE/LhchiNkUKeVNX7g5nSjCcLTfvg4Z0wyISSlKL/uY53MTERXVFK9OrZHLe
vAxlFx46SonKjqvy2kcJW2vlB+9FiHPITj+n3O9UDsHxfJC+PA89C3H9B2gx4g+3
i+61yOiiIj9rXzphfSiGLh2MeP3GA+8IkdAobyqhJF/KIB0ekIYmSQDTUxSvjqbk
H+OUzg12WBMs9ekB2ztUbtyesW5C2Cv/BkbofamK4rxgDWu4G2mGtRMGpmEtoAhH
lr5GkXDg8Pc7//KrR3BmCJszFyUSN8o=
-----END CERTIFICATE-----
Generated at Sat Jun 14 06:10:37 2025 by rpki-client