Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
File:                     efa85352-f35c-30e0-843c-54ae2ccbec9a.roa (raw, json)
Hash identifier:          dtQuci0BWZWxat9ZiqUYzth+Ok/CVj1ppwchJ9UWSMw=
Subject key identifier:   CA:C7:CF:E3:13:17:E4:A9:0A:3C:73:01:2B:0E:0A:8A:C7:A2:5F:9C
Certificate issuer:       /CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
Certificate serial:       010D0C9F4328584A14656F5A1D9586F07AC6C820
Authority key identifier: 0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa
Signing time:             Wed 04 Jun 2025 13:01:04 +0000
ROA not before:           Wed 04 Jun 2025 13:01:04 +0000
ROA not after:            Tue 02 Sep 2025 13:01:04 +0000
asID:                     56274
IP address blocks:        198.208.9.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 11:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:14:65:6f:5a:1d:95:86:f0:7a:c6:c8:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4
        Validity
            Not Before: Jun  4 13:01:04 2025 GMT
            Not After : Sep  2 13:01:04 2025 GMT
        Subject: CN=78aec1a1-68ee-4e01-bf96-582edff7747e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:15:c1:4c:3c:61:72:77:f2:62:aa:a7:7d:3b:
                    91:d4:a5:5f:1c:4a:2e:36:12:fc:ef:de:ea:86:f7:
                    ad:1a:56:75:75:67:8a:65:89:53:b1:14:c0:50:4d:
                    8a:58:db:f0:1e:27:3d:60:c5:f3:22:d0:89:23:ca:
                    77:48:ed:00:f9:a1:fb:4a:1a:ca:a3:05:5a:18:18:
                    34:a0:4c:6b:80:61:61:0f:34:42:e0:cf:3a:a5:4e:
                    47:24:0f:0e:e4:56:2b:c5:fe:3c:6d:99:3c:3d:71:
                    cf:e3:14:27:f7:07:26:7b:1c:1d:bd:39:cb:c1:64:
                    d2:c3:cc:7d:3c:4b:a3:08:59:b4:8b:3d:95:9a:72:
                    23:fc:52:96:7d:6a:1d:8a:73:08:45:b6:e5:48:01:
                    b0:d4:ae:a4:a6:fa:af:23:55:a2:32:3f:15:19:37:
                    e8:56:5c:f3:ec:8d:6a:25:a4:4f:0c:f8:6b:e1:be:
                    52:f0:4e:54:3d:06:f5:e0:7e:62:9d:64:b5:3b:e1:
                    7b:73:71:a9:ed:cf:76:29:03:d1:bd:99:13:ec:ab:
                    08:45:bf:52:35:51:e3:92:05:77:5a:8e:b1:5b:41:
                    a5:3c:97:17:99:68:0a:9b:0b:e7:6a:28:2c:47:3c:
                    94:c2:4a:fe:89:80:da:de:0d:3c:25:65:ef:e5:d3:
                    51:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:C7:CF:E3:13:17:E4:A9:0A:3C:73:01:2B:0E:0A:8A:C7:A2:5F:9C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/efa85352-f35c-30e0-843c-54ae2ccbec9a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.crl

            X509v3 Authority Key Identifier:
                keyid:0E:77:04:0D:72:45:FD:5A:B0:D9:5C:ED:0F:6E:52:37:1D:75:2E:1E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/d7d67e54-7dd7-40ba-afa3-5e8c4954e3e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.208.9.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         12:c1:55:c3:84:42:6f:5a:f2:c3:68:b4:d3:eb:e4:21:88:4e:
         7f:2b:89:1d:ed:76:6f:96:cc:7d:43:f6:dc:7c:5f:a6:6a:84:
         27:4d:2c:e4:57:f2:84:12:8a:d0:19:06:eb:bf:7b:0c:28:67:
         c9:19:31:ce:fa:2a:de:3e:25:c9:46:df:a5:8b:4c:e0:39:08:
         f2:28:fe:e8:b0:a0:89:b0:63:c4:bc:b5:38:14:d3:8a:cb:1a:
         41:33:d4:46:ac:79:3d:7a:b8:ec:33:e2:e9:c2:3c:b7:9d:22:
         d2:70:a9:6f:7d:f0:c8:65:8e:8d:ff:47:4d:7d:12:f5:bb:7f:
         ae:d0:79:dc:b6:61:b2:6d:7e:98:d0:85:92:60:a6:25:8a:f0:
         36:99:e3:da:28:40:4c:f5:69:7c:d8:1f:65:2b:76:fb:a6:77:
         19:33:44:8d:1e:56:a2:b8:f2:94:54:42:e1:d2:e5:90:c7:b4:
         89:c6:fa:2a:d9:50:e8:27:9c:ee:8c:e4:97:b4:4a:ab:e8:21:
         19:35:72:53:59:67:d3:03:bf:7d:7f:03:84:a9:d3:6b:48:45:
         89:36:f2:b7:6c:1c:54:d8:5a:da:1c:63:b1:88:a5:cd:8c:62:
         8b:23:74:91:9c:9f:8c:0d:f9:e5:8f:1a:6c:48:c1:d7:1b:9b:
         0a:19:f3:98
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoUZW9aHZWG8HrGyCAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDdkNjdlNTQtN2RkNy00MGJhLWFmYTMtNWU4YzQ5NTRl
M2U0MB4XDTI1MDYwNDEzMDEwNFoXDTI1MDkwMjEzMDEwNFowLzEtMCsGA1UEAxMk
NzhhZWMxYTEtNjhlZS00ZTAxLWJmOTYtNTgyZWRmZjc3NDdlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlRXBTDxhcnfyYqqnfTuR1KVfHEouNhL8797q
hvetGlZ1dWeKZYlTsRTAUE2KWNvwHic9YMXzItCJI8p3SO0A+aH7ShrKowVaGBg0
oExrgGFhDzRC4M86pU5HJA8O5FYrxf48bZk8PXHP4xQn9wcmexwdvTnLwWTSw8x9
PEujCFm0iz2VmnIj/FKWfWodinMIRbblSAGw1K6kpvqvI1WiMj8VGTfoVlzz7I1q
JaRPDPhr4b5S8E5UPQb14H5inWS1O+F7c3Gp7c92KQPRvZkT7KsIRb9SNVHjkgV3
Wo6xW0GlPJcXmWgKmwvnaigsRzyUwkr+iYDa3g08JWXv5dNR6QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMrHz+MTF+SpCjxzASsOCorHol+cMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2
N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThjNDk1NGUzZTQvZWZhODUzNTItZjM1Yy0z
MGUwLTg0M2MtNTRhZTJjY2JlYzlhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZDdkNjdlNTQtN2RkNy00MGJhLWFm
YTMtNWU4YzQ5NTRlM2U0L2Q3ZDY3ZTU0LTdkZDctNDBiYS1hZmEzLTVlOGM0OTU0
ZTNlNC5jcmwwHwYDVR0jBBgwFoAUDncEDXJF/Vqw2VztD25SNx11Lh4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9kN2Q2N2U1NC03ZGQ3LTQwYmEtYWZhMy01ZThj
NDk1NGUzZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtAJMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABLBVcOEQm9a8sNotNPr5CGITn8riR3tdm+WzH1D9tx8X6ZqhCdNLORX
8oQSitAZBuu/ewwoZ8kZMc76Kt4+JclG36WLTOA5CPIo/uiwoImwY8S8tTgU04rL
GkEz1EaseT16uOwz4unCPLedItJwqW998Mhljo3/R019EvW7f67Qedy2YbJtfpjQ
hZJgpiWK8DaZ49ooQEz1aXzYH2UrdvumdxkzRI0eVqK48pRUQuHS5ZDHtInG+irZ
UOgnnO6M5Je0SqvoIRk1clNZZ9MDv31/A4Sp02tIRYk28rdsHFTYWtocY7GIpc2M
YosjdJGcn4wN+eWPGmxIwdcbmwoZ85g=
-----END CERTIFICATE-----
Generated at Tue Jun 17 12:30:14 2025 by rpki-client