Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/dd1f1391-e407-3d74-9129-eaba36090a2f.roa
File:                     dd1f1391-e407-3d74-9129-eaba36090a2f.roa (raw, json)
Hash identifier:          MKzDmxz5BDrL5CrHSUuVWR9qHrecnBVJ6uO4lmJPt80=
Subject key identifier:   A0:86:F5:84:F9:E4:96:5C:80:39:11:B1:BE:BA:B8:81:BE:E7:11:CA
Certificate issuer:       /CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
Certificate serial:       010D0C9F4328584A90A0B8E64C5755A63AC12EB8
Authority key identifier: 0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/dd1f1391-e407-3d74-9129-eaba36090a2f.roa
Signing time:             Sat 19 Jul 2025 01:00:49 +0000
ROA not before:           Sat 19 Jul 2025 01:00:49 +0000
ROA not after:            Fri 17 Oct 2025 01:00:49 +0000
asID:                     13692
IP address blocks:        216.110.208.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:90:a0:b8:e6:4c:57:55:a6:3a:c1:2e:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f625f96a-a9b1-47b1-bde0-dfcebffd40af
        Validity
            Not Before: Jul 19 01:00:49 2025 GMT
            Not After : Oct 17 01:00:49 2025 GMT
        Subject: CN=60b6b92e-dd2c-4d57-8093-77bce03b27cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:fd:e6:02:e8:59:3c:72:d0:3a:b4:0e:d3:
                    b0:9e:34:f8:51:1c:a3:7a:0b:ad:52:5c:54:53:6e:
                    3f:7c:ac:56:f2:e6:1f:f3:5c:57:6c:96:fa:ca:3b:
                    28:9d:13:05:db:2d:05:a5:53:c5:d9:2a:c1:90:3e:
                    f6:9e:08:52:e6:c7:0b:41:79:40:80:62:15:72:dc:
                    60:1b:16:26:43:fd:5f:78:48:44:64:44:ac:36:54:
                    c7:1f:35:1f:9a:10:b4:e4:80:74:81:3f:db:f8:b0:
                    ed:89:a0:af:24:4e:af:02:b7:2e:0a:e9:f0:e7:cd:
                    da:cb:eb:19:5a:87:ed:39:92:21:ab:48:90:9d:d1:
                    77:4e:63:8a:57:6b:fd:fb:cb:e0:da:39:af:75:97:
                    88:ec:47:db:be:4f:84:ab:e3:93:28:b1:0c:e1:b6:
                    55:9d:c4:5b:9b:83:36:5a:d2:0c:fe:ae:a9:f0:48:
                    c8:a8:2a:80:eb:02:4f:9d:c9:b7:e2:2f:32:72:a7:
                    1e:0b:28:0c:d6:46:dd:b7:f8:08:74:61:59:19:b3:
                    6b:36:9e:d9:e1:4e:29:b0:53:9e:68:14:bc:91:54:
                    94:41:92:28:d2:94:e0:bc:00:a3:82:50:80:ba:b6:
                    45:51:f3:7a:11:86:d8:86:a7:0d:82:50:e7:7d:d3:
                    b4:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:86:F5:84:F9:E4:96:5C:80:39:11:B1:BE:BA:B8:81:BE:E7:11:CA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/dd1f1391-e407-3d74-9129-eaba36090a2f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af/f625f96a-a9b1-47b1-bde0-dfcebffd40af.crl

            X509v3 Authority Key Identifier:
                keyid:0A:59:03:CC:23:D7:15:3E:FD:B2:EC:A7:2A:10:0C:41:91:AB:74:64

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f625f96a-a9b1-47b1-bde0-dfcebffd40af.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.110.208.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         60:12:35:8f:31:af:1f:10:5c:b8:8e:2f:0c:b3:be:f3:a3:99:
         06:1b:97:59:65:76:70:04:d3:6e:4a:59:ef:85:5f:e3:95:3f:
         8a:13:66:17:33:07:de:cb:b1:45:4d:de:37:fd:a1:3f:48:1b:
         e4:d1:60:65:d2:2a:7b:86:46:6f:f1:10:2a:cc:06:16:74:61:
         78:cc:82:4a:6d:13:74:8a:78:11:0c:e2:f6:5a:4d:e6:a3:81:
         26:12:16:2b:9c:78:49:2a:51:c8:dd:36:92:bd:7f:cc:68:e3:
         d1:c4:19:c1:40:31:b6:e0:bc:56:c2:bf:33:10:dd:fb:9e:76:
         d6:50:ce:6a:f4:8c:51:49:4c:36:c6:3a:e1:88:16:69:ed:86:
         7f:10:fb:a5:da:89:e0:29:e0:98:73:33:5b:c7:de:56:b8:36:
         ac:b5:bb:2c:cc:e1:a2:e4:d2:7a:26:e4:ba:5d:3d:c6:ec:62:
         ac:6f:ca:6e:5e:6a:af:e3:21:d6:17:01:3a:16:be:b8:63:e1:
         1c:e0:fd:1f:ad:8f:eb:24:de:2d:c4:fd:ff:cb:0d:20:dc:b5:
         76:52:b7:bf:02:b1:79:25:06:59:f6:d6:c2:e6:5b:ae:7f:a3:
         4b:be:eb:1d:d6:a9:8f:2e:46:58:6d:e4:a4:4b:16:60:4b:a4:
         a8:4f:d6:5b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqQoLjmTFdVpjrBLrgwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjYyNWY5NmEtYTliMS00N2IxLWJkZTAtZGZjZWJmZmQ0
MGFmMB4XDTI1MDcxOTAxMDA0OVoXDTI1MTAxNzAxMDA0OVowLzEtMCsGA1UEAxMk
NjBiNmI5MmUtZGQyYy00ZDU3LTgwOTMtNzdiY2UwM2IyN2NkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoXv95gLoWTxy0Dq0DtOwnjT4URyjegutUlxU
U24/fKxW8uYf81xXbJb6yjsonRMF2y0FpVPF2SrBkD72nghS5scLQXlAgGIVctxg
GxYmQ/1feEhEZESsNlTHHzUfmhC05IB0gT/b+LDtiaCvJE6vArcuCunw583ay+sZ
WoftOZIhq0iQndF3TmOKV2v9+8vg2jmvdZeI7Efbvk+Eq+OTKLEM4bZVncRbm4M2
WtIM/q6p8EjIqCqA6wJPncm34i8ycqceCygM1kbdt/gIdGFZGbNrNp7Z4U4psFOe
aBS8kVSUQZIo0pTgvACjglCAurZFUfN6EYbYhqcNglDnfdO0FwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKCG9YT55JZcgDkRsb66uIG+5xHKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1
Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNlYmZmZDQwYWYvZGQxZjEzOTEtZTQwNy0z
ZDc0LTkxMjktZWFiYTM2MDkwYTJmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjYyNWY5NmEtYTliMS00N2IxLWJk
ZTAtZGZjZWJmZmQ0MGFmL2Y2MjVmOTZhLWE5YjEtNDdiMS1iZGUwLWRmY2ViZmZk
NDBhZi5jcmwwHwYDVR0jBBgwFoAUClkDzCPXFT79suynKhAMQZGrdGQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mNjI1Zjk2YS1hOWIxLTQ3YjEtYmRlMC1kZmNl
YmZmZDQwYWYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2G7QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGASNY8xrx8QXLiOLwyzvvOjmQYbl1lldnAE025KWe+FX+OVP4oTZhcz
B97LsUVN3jf9oT9IG+TRYGXSKnuGRm/xECrMBhZ0YXjMgkptE3SKeBEM4vZaTeaj
gSYSFiuceEkqUcjdNpK9f8xo49HEGcFAMbbgvFbCvzMQ3fuedtZQzmr0jFFJTDbG
OuGIFmnthn8Q+6XaieAp4JhzM1vH3la4Nqy1uyzM4aLk0nom5LpdPcbsYqxvym5e
aq/jIdYXAToWvrhj4Rzg/R+tj+sk3i3E/f/LDSDctXZSt78CsXklBln21sLmW65/
o0u+6x3WqY8uRlht5KRLFmBLpKhP1ls=
-----END CERTIFICATE-----
Generated at Mon Aug 4 21:50:39 2025 by rpki-client