Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
File:                     6704a8d1-6da5-334b-b43f-c6a6426940b7.roa (raw, json)
Hash identifier:          O4zQHemNCiFkgE1YuMUKn+3xlEOpbrR2iDYxhgcvvek=
Subject key identifier:   91:57:CB:D2:93:49:82:76:F0:2E:3E:39:63:35:65:B8:45:74:9D:77
Certificate issuer:       /CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
Certificate serial:       010D0C9F4328584A1B600EF15D92271478897380
Authority key identifier: 95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa
Signing time:             Sat 07 Jun 2025 01:00:50 +0000
ROA not before:           Sat 07 Jun 2025 01:00:50 +0000
ROA not after:            Fri 05 Sep 2025 01:00:50 +0000
asID:                     13576
IP address blocks:        204.15.52.0/22 maxlen: 22
                          204.15.52.0/23 maxlen: 23
                          204.15.52.0/24 maxlen: 24
                          204.15.53.0/24 maxlen: 24
                          204.15.54.0/23 maxlen: 23
                          204.15.54.0/24 maxlen: 24
                          204.15.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:1b:60:0e:f1:5d:92:27:14:78:89:73:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8a4c70a4-33da-4843-a3c7-c8f8d88d8035
        Validity
            Not Before: Jun  7 01:00:50 2025 GMT
            Not After : Sep  5 01:00:50 2025 GMT
        Subject: CN=93d9bb4d-c674-4f66-812d-dc80642fb44e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:80:6b:fd:20:a8:f3:21:cf:33:7b:59:a9:05:
                    73:69:b2:d3:9e:15:38:13:1b:97:70:cb:96:a6:ac:
                    b1:b5:8a:e1:6c:8c:23:97:63:92:51:b1:5e:aa:71:
                    1a:43:4f:34:60:06:d0:ff:36:9b:01:7c:f1:09:92:
                    c1:2c:0b:17:d8:91:59:a2:af:d7:f2:c9:7d:9f:3e:
                    97:e7:a6:d6:00:27:8e:b3:66:45:a7:38:f3:72:65:
                    26:f4:ca:9b:86:9b:33:08:cd:0f:cd:c1:93:42:16:
                    a2:3e:6f:ff:40:01:3c:00:f2:8c:ad:c8:ee:9e:30:
                    27:b8:36:ad:b2:b4:73:c8:7b:3b:70:33:47:b0:67:
                    1b:1d:ad:03:4a:70:d1:74:ab:43:1c:c9:0f:2b:be:
                    ed:82:d5:a7:d8:02:21:c0:e6:87:d4:c8:25:58:3b:
                    a2:af:6a:e2:f8:c4:11:55:6f:c6:ab:47:39:ab:94:
                    05:28:4f:2d:a5:a7:15:65:f5:fa:f3:36:5f:45:eb:
                    af:1b:7d:d0:49:08:e0:f7:ee:1a:12:7f:b0:4a:83:
                    6b:5b:65:47:64:bc:58:c7:28:87:c3:d9:3e:41:8a:
                    d4:e7:14:1f:ed:49:67:8b:71:f1:5a:6c:19:7b:7e:
                    1d:2c:f1:55:d7:93:a6:ea:9e:dd:fe:1c:8f:b8:f7:
                    dc:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:57:CB:D2:93:49:82:76:F0:2E:3E:39:63:35:65:B8:45:74:9D:77
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/6704a8d1-6da5-334b-b43f-c6a6426940b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.crl

            X509v3 Authority Key Identifier:
                keyid:95:77:6A:09:B0:68:BA:99:B1:1C:E2:0C:CE:E3:00:FE:B6:52:AD:46

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8a4c70a4-33da-4843-a3c7-c8f8d88d8035.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.15.52.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         99:b7:ce:61:cd:56:43:64:ea:ec:10:b5:09:05:34:00:48:71:
         bb:be:34:45:10:79:2f:20:c8:c1:50:c4:cf:ab:35:4b:98:dd:
         a6:cb:63:18:5a:af:97:d3:b8:78:34:d0:fb:54:7a:94:7d:df:
         16:ff:cd:6e:07:91:88:79:c2:8b:cd:13:52:4c:c4:7e:76:c5:
         55:30:7b:77:00:e2:1f:1c:87:c5:47:c7:5f:f6:9b:c4:75:0d:
         e0:59:9a:ed:54:12:a3:45:fe:58:93:30:15:de:1e:35:64:ee:
         e4:ab:0b:bc:ee:6a:61:fa:a2:51:af:fb:f9:ee:7b:7d:98:4a:
         dd:d4:a7:27:77:3d:2d:91:a6:4f:3f:db:95:e9:3b:5b:36:90:
         ae:c8:9a:d0:4c:16:a8:b4:90:6f:03:d8:03:26:5d:ac:14:3f:
         7e:c7:93:3d:29:ae:e9:6a:82:f1:ed:67:01:2d:78:25:da:05:
         32:8d:ec:df:ae:fd:07:07:5c:5b:a1:13:64:31:f5:e6:05:fb:
         94:26:8a:d8:c4:4e:90:60:98:9d:17:0b:d7:fb:19:2f:e9:69:
         09:7d:f3:fc:4a:65:d7:32:7d:7b:e6:fb:9f:27:55:7f:30:71:
         bf:6c:67:f6:78:8e:b3:b8:1a:bc:63:a5:96:47:64:b2:e9:70:
         bf:69:e9:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEobYA7xXZInFHiJc4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGE0YzcwYTQtMzNkYS00ODQzLWEzYzctYzhmOGQ4OGQ4
MDM1MB4XDTI1MDYwNzAxMDA1MFoXDTI1MDkwNTAxMDA1MFowLzEtMCsGA1UEAxMk
OTNkOWJiNGQtYzY3NC00ZjY2LTgxMmQtZGM4MDY0MmZiNDRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuIBr/SCo8yHPM3tZqQVzabLTnhU4ExuXcMuW
pqyxtYrhbIwjl2OSUbFeqnEaQ080YAbQ/zabAXzxCZLBLAsX2JFZoq/X8sl9nz6X
56bWACeOs2ZFpzjzcmUm9MqbhpszCM0PzcGTQhaiPm//QAE8APKMrcjunjAnuDat
srRzyHs7cDNHsGcbHa0DSnDRdKtDHMkPK77tgtWn2AIhwOaH1MglWDuir2ri+MQR
VW/Gq0c5q5QFKE8tpacVZfX68zZfReuvG33QSQjg9+4aEn+wSoNrW2VHZLxYxyiH
w9k+QYrU5xQf7Ulni3HxWmwZe34dLPFV15Om6p7d/hyPuPfcOQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJFXy9KTSYJ28C4+OWM1ZbhFdJ13MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84YTRj
NzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4ZDg4ZDgwMzUvNjcwNGE4ZDEtNmRhNS0z
MzRiLWI0M2YtYzZhNjQyNjk0MGI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGE0YzcwYTQtMzNkYS00ODQzLWEz
YzctYzhmOGQ4OGQ4MDM1LzhhNGM3MGE0LTMzZGEtNDg0My1hM2M3LWM4ZjhkODhk
ODAzNS5jcmwwHwYDVR0jBBgwFoAUlXdqCbBoupmxHOIMzuMA/rZSrUYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84YTRjNzBhNC0zM2RhLTQ4NDMtYTNjNy1jOGY4
ZDg4ZDgwMzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzA80MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJm3zmHNVkNk6uwQtQkFNABIcbu+NEUQeS8gyMFQxM+rNUuY3abLYxha
r5fTuHg00PtUepR93xb/zW4HkYh5wovNE1JMxH52xVUwe3cA4h8ch8VHx1/2m8R1
DeBZmu1UEqNF/liTMBXeHjVk7uSrC7zuamH6olGv+/nue32YSt3Upyd3PS2Rpk8/
25XpO1s2kK7ImtBMFqi0kG8D2AMmXawUP37Hkz0prulqgvHtZwEteCXaBTKN7N+u
/QcHXFuhE2Qx9eYF+5QmitjETpBgmJ0XC9f7GS/paQl98/xKZdcyfXvm+58nVX8w
cb9sZ/Z4jrO4GrxjpZZHZLLpcL9p6UE=
-----END CERTIFICATE-----
Generated at Mon Jun 16 21:29:45 2025 by rpki-client