Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
File:                     a646c31c-2719-3146-9260-c40f59eb735d.roa (raw, json)
Hash identifier:          3Y333qt1fIlAYuOZNmN6H7TOxOSObIlkklO+11wi4jk=
Subject key identifier:   CB:88:1A:4D:E4:EB:E7:1E:95:50:DC:CD:56:9A:D1:6B:76:B6:00:AD
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0B957A4ED52B0DF8A7D80
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        216.110.220.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b9:57:a4:ed:52:b0:df:8a:7d:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=8e5cb75b-aa5f-4571-9759-0928cd4ffc4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:c7:2d:29:ea:e9:9a:75:43:2f:51:8c:6a:bc:
                    c9:2e:05:c0:8e:a7:92:e3:c2:77:a4:3e:5b:08:d0:
                    29:15:09:00:7d:b7:59:ff:a5:c6:e9:49:9d:19:87:
                    2f:0e:89:db:6b:9f:a4:67:e4:83:3a:c2:89:05:dc:
                    29:87:ff:00:7e:39:3c:6f:7d:d1:28:b0:9f:38:5d:
                    2d:f4:b2:dd:6b:a0:0c:dc:b2:e5:ce:51:3f:c4:88:
                    65:c1:56:d7:9b:bc:dc:2f:ed:d9:9b:d2:f5:b3:2c:
                    1d:4e:72:74:83:3a:dd:41:58:e7:a0:07:00:42:e4:
                    d7:48:d4:d5:00:a0:17:bc:50:f2:62:43:50:47:c5:
                    94:fb:5b:5b:43:87:65:77:16:bf:fe:8c:8c:be:f3:
                    bc:b4:19:c4:11:ac:8a:15:18:82:ac:91:dc:74:95:
                    e5:89:66:80:d2:4c:79:1c:84:80:bc:0f:6a:6a:61:
                    4b:a6:eb:31:49:48:af:4f:bf:8d:0b:a5:70:63:cf:
                    5d:ea:44:60:90:64:97:71:fd:6a:5a:3b:7a:16:a4:
                    4b:70:a0:2c:aa:18:a8:41:18:e6:04:44:2b:59:db:
                    ab:70:99:2b:9b:d0:2a:9d:e7:9d:6e:6f:af:03:b0:
                    74:7d:06:38:25:34:ec:73:e3:95:3c:36:70:ca:2d:
                    42:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:1A:4D:E4:EB:E7:1E:95:50:DC:CD:56:9A:D1:6B:76:B6:00:AD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/a646c31c-2719-3146-9260-c40f59eb735d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.220.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         21:f4:b6:d7:66:bd:e1:d4:e7:ea:e9:a2:52:ed:a0:64:a1:cf:
         f0:ca:0c:c1:ca:70:2f:94:4c:30:d8:3e:72:7c:8e:85:78:a9:
         80:6d:03:85:fc:1e:a6:4b:1c:1e:f7:cb:bd:ca:bb:6c:e5:07:
         c0:05:3f:c0:99:28:7d:ca:d0:17:bb:b7:9b:ad:c5:46:2b:01:
         d6:86:91:dc:d9:a3:10:69:c0:45:0d:4d:4e:99:12:dc:c8:79:
         8e:6b:41:8a:b3:b8:c6:6a:40:01:38:c4:d0:b6:4d:ba:a1:58:
         63:aa:f4:55:35:5b:0b:10:b5:b1:7d:99:2f:21:e9:e7:d4:59:
         98:94:0d:89:3c:a1:87:b8:37:8c:71:20:d9:5d:2e:61:76:5f:
         7a:3c:f5:f2:22:2b:2c:07:f6:92:d0:f7:25:ae:1a:78:f3:4a:
         b3:2e:68:98:67:4e:15:4d:40:72:36:9c:df:f8:ca:85:f3:be:
         27:c0:8a:8c:04:c8:00:5b:77:d9:9d:79:a1:ef:58:53:d1:21:
         7a:d8:33:2c:e6:b6:54:b9:9a:f3:c4:fe:b4:e0:6d:b3:9b:3c:
         5b:8f:95:f9:fc:89:02:44:48:54:95:e8:d2:7b:fb:64:ee:c1:
         4f:cb:57:51:cf:2b:2b:ea:32:8a:e6:3e:45:29:63:24:69:e0:
         82:e5:01:e1
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLlXpO1SsN+KfYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
OGU1Y2I3NWItYWE1Zi00NTcxLTk3NTktMDkyOGNkNGZmYzRhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAusctKerpmnVDL1GMarzJLgXAjqeS48J3pD5b
CNApFQkAfbdZ/6XG6UmdGYcvDonba5+kZ+SDOsKJBdwph/8Afjk8b33RKLCfOF0t
9LLda6AM3LLlzlE/xIhlwVbXm7zcL+3Zm9L1sywdTnJ0gzrdQVjnoAcAQuTXSNTV
AKAXvFDyYkNQR8WU+1tbQ4dldxa//oyMvvO8tBnEEayKFRiCrJHcdJXliWaA0kx5
HISAvA9qamFLpusxSUivT7+NC6VwY89d6kRgkGSXcf1qWjt6FqRLcKAsqhioQRjm
BEQrWdurcJkrm9Aqneedbm+vA7B0fQY4JTTsc+OVPDZwyi1CcwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMuIGk3k6+celVDczVaa0Wt2tgCtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvYTY0NmMzMWMtMjcxOS0z
MTQ2LTkyNjAtYzQwZjU5ZWI3MzVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQB2G7cMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACH0ttdmveHU5+rpolLtoGShz/DKDMHKcC+UTDDYPnJ8joV4qYBtA4X8
HqZLHB73y73Ku2zlB8AFP8CZKH3K0Be7t5utxUYrAdaGkdzZoxBpwEUNTU6ZEtzI
eY5rQYqzuMZqQAE4xNC2TbqhWGOq9FU1WwsQtbF9mS8h6efUWZiUDYk8oYe4N4xx
INldLmF2X3o89fIiKywH9pLQ9yWuGnjzSrMuaJhnThVNQHI2nN/4yoXzvifAiowE
yABbd9mdeaHvWFPRIXrYMyzmtlS5mvPE/rTgbbObPFuPlfn8iQJESFSV6NJ7+2Tu
wU/LV1HPKyvqMormPkUpYyRp4ILlAeE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:45:10 2025 by rpki-client