Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3f5bcee1-2f46-3407-8130-9481773138d9.roa
File:                     3f5bcee1-2f46-3407-8130-9481773138d9.roa (raw, json)
Hash identifier:          qx+T31h5/E8QatOT6T3P/jNeW2dYjemIjQaY7beC+HM=
Subject key identifier:   35:D8:77:87:FA:66:CD:0D:5D:DC:47:F5:35:68:3F:08:98:CC:15:7F
Certificate issuer:       /CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
Certificate serial:       010D0C9F4328584A23C0134591499F4C2C83E580
Authority key identifier: 66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3f5bcee1-2f46-3407-8130-9481773138d9.roa
Signing time:             Tue 10 Jun 2025 01:00:50 +0000
ROA not before:           Tue 10 Jun 2025 01:00:50 +0000
ROA not after:            Mon 08 Sep 2025 01:00:50 +0000
asID:                     4922
IP address blocks:        184.170.80.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 17 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:c0:13:45:91:49:9f:4c:2c:83:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8b6f22f9-3eb6-4534-af5e-9d5715ea3109
        Validity
            Not Before: Jun 10 01:00:50 2025 GMT
            Not After : Sep  8 01:00:50 2025 GMT
        Subject: CN=e0686f73-bf4f-4617-a199-c016aea966ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:80:18:f7:bf:de:2f:e1:9a:76:97:32:8d:c5:
                    ee:c9:5f:2a:64:9a:3a:96:0f:2e:da:1f:b5:04:47:
                    5a:07:e5:df:2d:c3:12:39:b8:9a:f2:bc:f7:64:86:
                    93:03:4f:91:49:18:e6:f4:57:65:a5:a3:f9:43:55:
                    0e:e4:81:86:9d:d7:58:f5:cf:31:20:e6:dc:d9:5a:
                    cd:76:fa:62:53:2b:47:fb:6b:46:dc:b5:ba:bd:60:
                    d3:68:23:12:38:a3:56:30:91:e8:fd:be:18:fc:c7:
                    db:a4:9d:12:ea:31:1e:e6:20:1c:7e:96:4e:bb:97:
                    65:27:f3:d8:8f:b5:5b:0b:de:85:3b:81:49:7f:82:
                    65:fe:a5:e7:12:4b:33:b2:d0:dd:cd:1a:e2:e1:f0:
                    ad:96:89:cc:a2:80:20:9e:85:0e:0c:e1:e6:50:82:
                    a4:e4:1f:56:20:47:a5:78:1b:6b:c9:81:b4:32:0f:
                    61:50:23:57:51:e5:16:b0:cb:f8:d8:50:c1:6b:3c:
                    3e:a5:ae:6e:45:77:4a:0f:2f:30:45:10:b8:19:b1:
                    41:a9:9e:fa:c3:52:56:f3:47:72:1b:9e:d1:6a:9e:
                    08:b0:d5:5c:e5:9d:74:73:b1:94:4c:d9:71:49:f1:
                    e1:2f:ff:ac:d9:9d:8c:da:60:b4:22:bf:de:e0:02:
                    e9:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:D8:77:87:FA:66:CD:0D:5D:DC:47:F5:35:68:3F:08:98:CC:15:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/3f5bcee1-2f46-3407-8130-9481773138d9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.crl

            X509v3 Authority Key Identifier:
                keyid:66:59:C3:7C:9B:41:02:86:F4:C7:CF:C2:66:8A:1B:37:16:C4:D6:15

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/8b6f22f9-3eb6-4534-af5e-9d5715ea3109.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.170.80.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ee:71:27:58:c2:83:e8:60:53:53:c4:9d:9f:67:06:e1:a4:
         1d:66:29:5a:5b:2e:3c:2c:ff:aa:89:7e:9c:48:6b:f0:b6:55:
         fe:2c:20:53:24:f8:be:27:d6:c3:38:8a:ef:21:17:7d:e1:15:
         a4:ee:a0:81:85:f5:09:77:4e:10:e6:d4:00:65:07:36:e8:39:
         a9:10:07:73:bc:5c:e0:4b:1c:78:f9:80:ad:bc:63:f6:c8:16:
         01:40:6d:f7:f9:b2:e6:71:42:9b:7a:6e:e3:7f:8c:c0:bd:27:
         ff:97:12:0c:2c:56:a9:b2:73:82:ef:58:2a:b8:59:e2:15:f5:
         93:55:32:58:80:eb:d5:6b:74:ab:d9:a2:25:d6:d8:0e:96:d6:
         37:4d:b6:58:89:26:d8:eb:d1:e6:59:e5:ba:1a:a9:b0:81:9d:
         10:e6:d0:41:60:8b:ee:bd:0e:f6:80:db:de:0e:2f:36:99:99:
         33:97:16:d2:c6:3b:63:da:20:e5:48:cb:09:96:15:69:83:86:
         a8:53:0e:af:d7:9e:90:02:5a:50:c7:ab:06:52:4d:0b:a5:0e:
         10:95:56:21:70:91:8b:80:0c:94:e1:4a:6d:32:7b:1d:43:a8:
         8d:b8:fd:e5:48:7a:85:63:2c:d9:64:7f:27:cf:cd:33:53:a9:
         78:64:56:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEojwBNFkUmfTCyD5YAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGI2ZjIyZjktM2ViNi00NTM0LWFmNWUtOWQ1NzE1ZWEz
MTA5MB4XDTI1MDYxMDAxMDA1MFoXDTI1MDkwODAxMDA1MFowLzEtMCsGA1UEAxMk
ZTA2ODZmNzMtYmY0Zi00NjE3LWExOTktYzAxNmFlYTk2NmNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj4AY97/eL+GadpcyjcXuyV8qZJo6lg8u2h+1
BEdaB+XfLcMSObia8rz3ZIaTA0+RSRjm9FdlpaP5Q1UO5IGGnddY9c8xIObc2VrN
dvpiUytH+2tG3LW6vWDTaCMSOKNWMJHo/b4Y/MfbpJ0S6jEe5iAcfpZOu5dlJ/PY
j7VbC96FO4FJf4Jl/qXnEkszstDdzRri4fCtlonMooAgnoUODOHmUIKk5B9WIEel
eBtryYG0Mg9hUCNXUeUWsMv42FDBazw+pa5uRXdKDy8wRRC4GbFBqZ76w1JW80dy
G57Rap4IsNVc5Z10c7GUTNlxSfHhL/+s2Z2M2mC0Ir/e4ALpIQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDXYd4f6Zs0NXdxH9TVoPwiYzBV/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS84YjZm
MjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3MTVlYTMxMDkvM2Y1YmNlZTEtMmY0Ni0z
NDA3LTgxMzAtOTQ4MTc3MzEzOGQ5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvOGI2ZjIyZjktM2ViNi00NTM0LWFm
NWUtOWQ1NzE1ZWEzMTA5LzhiNmYyMmY5LTNlYjYtNDUzNC1hZjVlLTlkNTcxNWVh
MzEwOS5jcmwwHwYDVR0jBBgwFoAUZlnDfJtBAob0x8/CZoobNxbE1hUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS84YjZmMjJmOS0zZWI2LTQ1MzQtYWY1ZS05ZDU3
MTVlYTMxMDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuKpQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3ucSdYwoPoYFNTxJ2fZwbhpB1mKVpbLjws/6qJfpxIa/C2Vf4sIFMk
+L4n1sM4iu8hF33hFaTuoIGF9Ql3ThDm1ABlBzboOakQB3O8XOBLHHj5gK28Y/bI
FgFAbff5suZxQpt6buN/jMC9J/+XEgwsVqmyc4LvWCq4WeIV9ZNVMliA69VrdKvZ
oiXW2A6W1jdNtliJJtjr0eZZ5boaqbCBnRDm0EFgi+69DvaA294OLzaZmTOXFtLG
O2PaIOVIywmWFWmDhqhTDq/XnpACWlDHqwZSTQulDhCVViFwkYuADJThSm0yex1D
qI24/eVIeoVjLNlkfyfPzTNTqXhkVsQ=
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:35:50 2025 by rpki-client