Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/bfe34e8a-ad4a-34bc-8ce3-4a5e668e335b.roa
File:                     bfe34e8a-ad4a-34bc-8ce3-4a5e668e335b.roa (raw, json)
Hash identifier:          sltEt7pDzyxAfY3Vj9B8Aqf6y1x0JYaCtDR3z6/uRKA=
Subject key identifier:   89:0F:F2:3F:29:78:DE:AB:CC:7F:7D:E0:03:13:43:E6:7B:4B:B9:CD
Certificate issuer:       /CN=9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5
Certificate serial:       010D0C9F43285849F9DFD186BE419655AE69E860
Authority key identifier: 6A:5F:E4:F2:92:5F:46:BD:50:3D:BE:48:2A:1F:2B:7B:90:F9:D7:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/bfe34e8a-ad4a-34bc-8ce3-4a5e668e335b.roa
Signing time:             Mon 26 May 2025 01:00:50 +0000
ROA not before:           Mon 26 May 2025 01:00:50 +0000
ROA not after:            Sun 24 Aug 2025 01:00:50 +0000
asID:                     26693
IP address blocks:        216.122.0.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:f9:df:d1:86:be:41:96:55:ae:69:e8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5
        Validity
            Not Before: May 26 01:00:50 2025 GMT
            Not After : Aug 24 01:00:50 2025 GMT
        Subject: CN=f7c4407e-c5f3-4cbc-9193-91eedb77c806
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:26:1b:48:29:51:f0:cc:c3:b6:d3:f2:e2:41:
                    0a:ea:db:48:91:6c:26:fe:15:df:42:04:d1:35:93:
                    54:63:bd:ef:0d:b4:21:cd:8d:c4:c8:51:29:21:65:
                    70:d7:57:71:bc:50:b4:38:e3:5c:3a:26:b8:06:1f:
                    97:fd:6b:af:d7:4d:54:64:7a:a1:3b:a3:2a:bf:61:
                    f5:d8:e5:22:f2:fe:89:31:94:34:58:77:8f:ec:6c:
                    4b:72:11:5c:55:c9:d3:0c:4f:96:c6:c3:5d:cb:04:
                    d8:f7:18:c8:7f:0a:44:2b:19:ce:46:41:d2:cc:f0:
                    6c:60:ed:7c:94:15:dd:af:cc:d6:b9:8e:2b:05:66:
                    78:45:c1:36:68:0c:2a:e8:e9:dd:cf:8f:bd:99:fd:
                    1d:a7:da:78:9b:38:89:a3:4f:4b:e1:1d:5b:da:09:
                    86:c0:db:06:ad:0d:b8:a0:31:71:6d:56:29:9e:1b:
                    af:1f:2e:ed:03:a7:15:de:8d:4a:4b:0d:70:2b:03:
                    e1:06:c7:a8:94:92:03:d5:37:ac:89:0b:88:a5:be:
                    1d:bf:ca:78:7c:78:6d:f0:4e:b4:6c:80:b4:35:bf:
                    97:61:5b:18:f0:ad:c1:e4:cf:4a:42:b7:29:33:c1:
                    68:c7:4f:06:29:7b:b6:bd:41:d8:61:1b:19:17:89:
                    f3:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0F:F2:3F:29:78:DE:AB:CC:7F:7D:E0:03:13:43:E6:7B:4B:B9:CD
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/bfe34e8a-ad4a-34bc-8ce3-4a5e668e335b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.crl

            X509v3 Authority Key Identifier:
                keyid:6A:5F:E4:F2:92:5F:46:BD:50:3D:BE:48:2A:1F:2B:7B:90:F9:D7:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/9eee0f99-fc8f-4cdb-aa86-7d2a122ac2f5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.122.0.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:0a:ef:b1:e8:80:a4:17:bf:51:59:7e:1e:b0:e6:bd:a4:b1:
         af:d4:f7:72:83:52:5e:a7:93:b1:da:da:7b:b3:36:f9:97:6b:
         2e:4d:22:b6:15:54:90:f8:40:3a:0b:66:0f:27:c8:37:a1:77:
         6c:78:8a:e6:7c:2e:ce:cb:67:a7:55:9d:53:00:33:01:11:d9:
         e4:9e:e3:4c:ea:2b:e2:12:b7:73:08:bc:d2:88:a1:52:54:44:
         b9:25:f0:84:cc:3c:cc:f5:dc:3b:bb:86:45:59:4f:39:5f:d6:
         bb:38:49:87:39:04:ec:46:16:4f:db:9c:b0:e4:6e:f9:5f:cf:
         3f:90:59:9f:f4:99:5e:ce:a5:3e:11:34:02:2a:30:90:62:19:
         44:1b:b6:2f:42:39:ef:99:c0:39:7b:32:ea:7c:4c:c0:de:ff:
         00:7f:a3:d2:e5:b3:1b:a2:dc:cc:f1:56:24:83:8e:07:a3:a6:
         8d:77:44:d8:21:83:e5:a1:10:88:d2:1c:a0:dc:36:c5:1a:e6:
         da:99:47:a4:0a:31:8c:2a:14:d1:40:c3:cf:0c:2b:56:15:ea:
         83:3e:d6:fc:55:ee:0f:6b:98:b0:09:0c:bc:31:0f:c4:80:5a:
         d8:7d:82:a5:88:70:ab:ca:59:18:60:c1:db:5b:31:d9:ec:ab:
         58:7c:de:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn539GGvkGWVa5p6GAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWVlZTBmOTktZmM4Zi00Y2RiLWFhODYtN2QyYTEyMmFj
MmY1MB4XDTI1MDUyNjAxMDA1MFoXDTI1MDgyNDAxMDA1MFowLzEtMCsGA1UEAxMk
ZjdjNDQwN2UtYzVmMy00Y2JjLTkxOTMtOTFlZWRiNzdjODA2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4iYbSClR8MzDttPy4kEK6ttIkWwm/hXfQgTR
NZNUY73vDbQhzY3EyFEpIWVw11dxvFC0OONcOia4Bh+X/Wuv101UZHqhO6Mqv2H1
2OUi8v6JMZQ0WHeP7GxLchFcVcnTDE+WxsNdywTY9xjIfwpEKxnORkHSzPBsYO18
lBXdr8zWuY4rBWZ4RcE2aAwq6Ondz4+9mf0dp9p4mziJo09L4R1b2gmGwNsGrQ24
oDFxbVYpnhuvHy7tA6cV3o1KSw1wKwPhBseolJID1TesiQuIpb4dv8p4fHht8E60
bIC0Nb+XYVsY8K3B5M9KQrcpM8Fox08GKXu2vUHYYRsZF4nzkQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIkP8j8peN6rzH994AMTQ+Z7S7nNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS85ZWVl
MGY5OS1mYzhmLTRjZGItYWE4Ni03ZDJhMTIyYWMyZjUvYmZlMzRlOGEtYWQ0YS0z
NGJjLThjZTMtNGE1ZTY2OGUzMzViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOWVlZTBmOTktZmM4Zi00Y2RiLWFh
ODYtN2QyYTEyMmFjMmY1LzllZWUwZjk5LWZjOGYtNGNkYi1hYTg2LTdkMmExMjJh
YzJmNS5jcmwwHwYDVR0jBBgwFoAUal/k8pJfRr1QPb5IKh8re5D517kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS85ZWVlMGY5OS1mYzhmLTRjZGItYWE4Ni03ZDJh
MTIyYWMyZjUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2HoAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAkK77HogKQXv1FZfh6w5r2ksa/U93KDUl6nk7Ha2nuzNvmXay5NIrYV
VJD4QDoLZg8nyDehd2x4iuZ8Ls7LZ6dVnVMAMwER2eSe40zqK+ISt3MIvNKIoVJU
RLkl8ITMPMz13Du7hkVZTzlf1rs4SYc5BOxGFk/bnLDkbvlfzz+QWZ/0mV7OpT4R
NAIqMJBiGUQbti9COe+ZwDl7Mup8TMDe/wB/o9Llsxui3MzxViSDjgejpo13RNgh
g+WhEIjSHKDcNsUa5tqZR6QKMYwqFNFAw88MK1YV6oM+1vxV7g9rmLAJDLwxD8SA
Wth9gqWIcKvKWRhgwdtbMdnsq1h83uo=
-----END CERTIFICATE-----
Generated at Mon Jun 16 03:39:45 2025 by rpki-client