Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa
File:                     25745d9d-a262-31c5-9f54-eb1bbc09604e.roa (raw, json)
Hash identifier:          NOk8Nukrz5bylRgeRn9KkszD/2yi3yaXRDNIIbhz9XA=
Subject key identifier:   11:F9:5D:5F:99:F7:9E:6C:A1:CB:1F:96:C0:DA:63:D2:45:A7:96:41
Certificate issuer:       /CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
Certificate serial:       010D0C9F4328584A89A61042AD5CFDDA03464B40
Authority key identifier: C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa
Signing time:             Wed 16 Jul 2025 13:01:03 +0000
ROA not before:           Wed 16 Jul 2025 13:01:03 +0000
ROA not after:            Tue 14 Oct 2025 13:01:03 +0000
asID:                     6994
IP address blocks:        216.38.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:89:a6:10:42:ad:5c:fd:da:03:46:4b:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e6beedf-bc99-4d7c-9a20-60ec913a6a17
        Validity
            Not Before: Jul 16 13:01:03 2025 GMT
            Not After : Oct 14 13:01:03 2025 GMT
        Subject: CN=42066dbe-b197-47fb-bed9-8dfc13bd9de5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:00:ca:db:35:47:d7:9d:81:8d:87:94:c9:b1:
                    97:1f:8f:08:a4:8c:56:d8:11:ef:2a:1d:c4:03:28:
                    55:a6:9b:c7:96:d2:56:78:48:9a:d4:cb:de:7d:49:
                    6e:eb:97:22:2c:de:e0:23:2a:c2:4c:ce:55:91:69:
                    d5:e3:f7:48:57:88:b8:78:af:70:c4:0b:0d:f5:9b:
                    45:f3:f1:3c:ec:a3:ba:5a:ab:bd:b8:af:7d:f8:f8:
                    69:bb:4c:18:5b:f8:e8:71:d8:29:0e:6a:3b:9d:bc:
                    c4:46:c2:0a:ef:be:9b:3c:67:f3:b6:0e:b9:07:77:
                    3e:78:b7:46:3a:9d:fa:fe:2e:d7:3b:b3:c7:db:d5:
                    82:e8:0f:d8:11:29:85:25:2c:d9:df:3e:7a:50:f1:
                    8d:c1:20:4b:7b:64:ab:2b:28:6f:a9:f7:b8:b7:87:
                    0b:84:e0:3b:0a:88:f0:cb:df:db:83:d3:7e:55:31:
                    7c:51:f8:2e:a1:04:7a:25:ba:a1:74:91:65:df:28:
                    4b:e7:d7:0e:0f:32:1c:c8:1c:04:ba:a3:43:78:86:
                    7f:f4:ca:26:b2:2f:7d:37:f9:3f:92:07:8f:b4:f3:
                    b9:83:95:4b:f3:6f:e2:c6:0b:87:dc:6a:81:eb:f9:
                    75:d2:fc:74:6a:93:0d:09:c5:77:c8:57:66:22:0d:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:F9:5D:5F:99:F7:9E:6C:A1:CB:1F:96:C0:DA:63:D2:45:A7:96:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/25745d9d-a262-31c5-9f54-eb1bbc09604e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.crl

            X509v3 Authority Key Identifier:
                keyid:C9:0E:21:1D:65:F0:29:7C:02:B2:39:2F:9F:36:4D:F5:8E:42:56:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/4e6beedf-bc99-4d7c-9a20-60ec913a6a17.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.38.128.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:62:08:de:7c:a1:c4:0f:b9:a1:0d:54:35:92:68:19:9d:b9:
         6b:62:6a:48:15:2c:ba:9b:ab:5e:3f:28:a9:f1:ce:94:d1:b2:
         2c:8e:f3:11:8b:69:9d:07:1f:ff:9e:0b:a5:73:a3:52:f7:88:
         48:9d:4d:60:0c:49:d4:33:49:a1:3b:8b:45:af:7f:3e:bc:94:
         8a:5f:3d:5a:bc:ff:bb:5f:41:35:17:22:f6:67:8f:8b:1a:c9:
         de:02:43:89:08:8b:c8:1e:03:42:ca:8c:47:9e:37:91:3b:06:
         a4:6e:53:84:5b:e5:29:99:a0:59:39:6c:2c:23:5e:0b:ca:64:
         2b:95:79:e3:07:0f:8b:48:93:e2:03:9a:42:f4:84:e8:20:07:
         54:7d:40:ac:95:c8:d2:86:dd:41:d4:d4:51:61:c3:07:e8:3b:
         19:fe:b0:cd:a3:42:41:8b:02:d3:99:8d:42:67:66:e8:f7:12:
         96:cd:2d:c0:c2:c7:cd:57:f0:2c:c8:93:9b:fb:7c:82:bb:9b:
         26:e1:94:36:f9:60:28:57:59:fe:c9:ac:9a:af:ea:98:17:ca:
         8f:56:e1:78:8f:35:20:8c:e1:e5:81:ba:aa:a5:52:42:6f:de:
         28:7e:81:29:6d:64:3b:f3:3f:b0:aa:05:13:07:9d:04:e1:bb:
         a3:09:b0:87
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqJphBCrVz92gNGS0AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGU2YmVlZGYtYmM5OS00ZDdjLTlhMjAtNjBlYzkxM2E2
YTE3MB4XDTI1MDcxNjEzMDEwM1oXDTI1MTAxNDEzMDEwM1owLzEtMCsGA1UEAxMk
NDIwNjZkYmUtYjE5Ny00N2ZiLWJlZDktOGRmYzEzYmQ5ZGU1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkwDK2zVH152BjYeUybGXH48IpIxW2BHvKh3E
AyhVppvHltJWeEia1MvefUlu65ciLN7gIyrCTM5VkWnV4/dIV4i4eK9wxAsN9ZtF
8/E87KO6Wqu9uK99+Phpu0wYW/jocdgpDmo7nbzERsIK776bPGfztg65B3c+eLdG
Op36/i7XO7PH29WC6A/YESmFJSzZ3z56UPGNwSBLe2SrKyhvqfe4t4cLhOA7Cojw
y9/bg9N+VTF8UfguoQR6JbqhdJFl3yhL59cODzIcyBwEuqNDeIZ/9Momsi99N/k/
kgePtPO5g5VL82/ixguH3GqB6/l10vx0apMNCcV3yFdmIg38cwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBH5XV+Z955socsflsDaY9JFp5ZBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS80ZTZi
ZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVjOTEzYTZhMTcvMjU3NDVkOWQtYTI2Mi0z
MWM1LTlmNTQtZWIxYmJjMDk2MDRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNGU2YmVlZGYtYmM5OS00ZDdjLTlh
MjAtNjBlYzkxM2E2YTE3LzRlNmJlZWRmLWJjOTktNGQ3Yy05YTIwLTYwZWM5MTNh
NmExNy5jcmwwHwYDVR0jBBgwFoAUyQ4hHWXwKXwCsjkvnzZN9Y5CVlowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS80ZTZiZWVkZi1iYzk5LTRkN2MtOWEyMC02MGVj
OTEzYTZhMTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2CaAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFRiCN58ocQPuaENVDWSaBmduWtiakgVLLqbq14/KKnxzpTRsiyO8xGL
aZ0HH/+eC6Vzo1L3iEidTWAMSdQzSaE7i0Wvfz68lIpfPVq8/7tfQTUXIvZnj4sa
yd4CQ4kIi8geA0LKjEeeN5E7BqRuU4Rb5SmZoFk5bCwjXgvKZCuVeeMHD4tIk+ID
mkL0hOggB1R9QKyVyNKG3UHU1FFhwwfoOxn+sM2jQkGLAtOZjUJnZuj3EpbNLcDC
x81X8CzIk5v7fIK7mybhlDb5YChXWf7JrJqv6pgXyo9W4XiPNSCM4eWBuqqlUkJv
3ih+gSltZDvzP7CqBRMHnQThu6MJsIc=
-----END CERTIFICATE-----
Generated at Mon Aug 4 18:28:00 2025 by rpki-client