Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa
File:                     c719f4fc-a020-37cd-a928-024c35ffa598.roa (raw, json)
Hash identifier:          QDIPYJA+Giq0o76UrtKf1l+3BKKghoWLlPRJjemqca0=
Subject key identifier:   67:20:1E:9D:51:02:D8:75:00:54:DA:75:71:C1:24:5C:84:5A:65:B5
Certificate issuer:       /CN=3f6f9653-9fda-4d20-925a-51db772aeb24
Certificate serial:       010D0C9F432858498CFF0605762FE3954E591300
Authority key identifier: 70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa
Signing time:             Thu 17 Apr 2025 01:00:45 +0000
ROA not before:           Thu 17 Apr 2025 01:00:45 +0000
ROA not after:            Wed 16 Jul 2025 01:00:45 +0000
asID:                     376
IP address blocks:        206.116.86.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 28 Apr 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:8c:ff:06:05:76:2f:e3:95:4e:59:13:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3f6f9653-9fda-4d20-925a-51db772aeb24
        Validity
            Not Before: Apr 17 01:00:45 2025 GMT
            Not After : Jul 16 01:00:45 2025 GMT
        Subject: CN=482b9357-8d92-44d9-97ad-dbfec69e529d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:34:9c:5a:e6:b3:2f:f3:9d:6b:4a:16:3c:45:
                    14:80:49:cb:b5:dc:bb:6a:ed:48:85:21:96:72:c6:
                    b2:20:06:5a:d5:2a:d6:98:b1:38:d7:a6:8e:05:e7:
                    8f:b1:66:a4:0e:20:b1:96:d3:97:e1:1b:ab:aa:14:
                    1b:ae:4a:78:c1:93:45:42:6e:13:7f:ca:0d:4e:e9:
                    df:fd:0c:c5:95:1a:95:08:93:d5:61:01:72:c7:6f:
                    01:06:bb:46:d1:bc:17:43:69:11:5d:75:5e:3d:ea:
                    40:97:ac:c3:8a:32:79:62:3d:84:c5:d6:5a:87:b7:
                    ec:0c:7e:16:ed:1e:c9:b0:bd:02:47:58:f8:fe:a1:
                    a4:16:4e:fb:73:f0:84:37:cb:ef:a8:21:46:38:9f:
                    81:e9:4e:05:89:4b:76:fa:1b:5c:9f:2d:9c:a4:81:
                    78:58:ed:f0:0d:49:d1:23:b9:ea:70:d3:b6:8e:9c:
                    0e:0b:3b:26:27:9c:b3:89:10:28:7b:89:39:50:79:
                    3b:f7:7a:3c:75:97:44:8b:33:ee:bc:c3:19:60:40:
                    9e:15:01:46:d1:d8:1a:00:1c:7a:bd:aa:d7:8f:1a:
                    de:63:4e:e5:33:00:85:f3:c1:1b:37:4e:5e:17:44:
                    1b:f2:38:94:5f:8f:b2:a1:7d:5b:ff:be:6d:03:bd:
                    8a:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:20:1E:9D:51:02:D8:75:00:54:DA:75:71:C1:24:5C:84:5A:65:B5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/c719f4fc-a020-37cd-a928-024c35ffa598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24/3f6f9653-9fda-4d20-925a-51db772aeb24.crl

            X509v3 Authority Key Identifier:
                keyid:70:26:53:EC:95:EF:B6:61:20:47:4D:9A:22:EB:01:74:7E:A5:10:1F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/3f6f9653-9fda-4d20-925a-51db772aeb24.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.116.86.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         f6:d5:27:38:a7:72:0d:67:44:92:ea:df:d5:38:2a:19:4d:19:
         80:c8:dd:43:4d:d4:31:4f:57:03:63:29:90:72:4f:73:27:64:
         4f:c6:37:f8:51:22:30:fa:22:bd:26:e1:b8:a6:cd:b3:b8:52:
         cd:bb:ce:74:c4:20:15:e6:f0:44:37:92:a9:45:cf:1d:d7:e3:
         9d:1b:14:e4:fb:d8:25:d6:a8:2b:8e:15:46:f4:66:52:b2:7d:
         54:18:05:98:13:98:fc:cc:35:73:65:bb:ca:11:26:d9:a1:1a:
         1c:28:22:75:a6:f5:34:4f:63:1c:c4:14:ae:55:6a:27:fe:5a:
         ae:92:1f:9d:b9:c3:3d:87:43:63:51:a1:6d:cb:7d:ae:3a:f7:
         68:38:75:88:f7:5b:24:29:ab:29:fb:ff:e2:b9:67:19:2e:14:
         34:f0:45:37:a9:f0:7d:54:99:b1:a0:7a:56:a1:8d:bd:1a:84:
         57:7a:56:5b:dd:e2:47:d0:af:47:ae:9e:af:10:fb:ad:12:f0:
         a3:64:54:e7:f9:95:82:2f:b6:b7:e0:55:92:52:e1:52:de:6b:
         68:77:59:ef:84:fa:68:9c:96:17:c2:89:77:1d:83:b2:15:b8:
         33:a4:bc:b5:6f:4c:54:52:84:06:47:eb:f3:9a:5f:f5:a3:06:
         0f:b2:7d:cc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEmM/wYFdi/jlU5ZEwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2Y2Zjk2NTMtOWZkYS00ZDIwLTkyNWEtNTFkYjc3MmFl
YjI0MB4XDTI1MDQxNzAxMDA0NVoXDTI1MDcxNjAxMDA0NVowLzEtMCsGA1UEAxMk
NDgyYjkzNTctOGQ5Mi00NGQ5LTk3YWQtZGJmZWM2OWU1MjlkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzTScWuazL/Oda0oWPEUUgEnLtdy7au1IhSGW
csayIAZa1SrWmLE416aOBeePsWakDiCxltOX4RurqhQbrkp4wZNFQm4Tf8oNTunf
/QzFlRqVCJPVYQFyx28BBrtG0bwXQ2kRXXVePepAl6zDijJ5Yj2ExdZah7fsDH4W
7R7JsL0CR1j4/qGkFk77c/CEN8vvqCFGOJ+B6U4FiUt2+htcny2cpIF4WO3wDUnR
I7nqcNO2jpwOCzsmJ5yziRAoe4k5UHk793o8dZdEizPuvMMZYECeFQFG0dgaABx6
varXjxreY07lMwCF88EbN05eF0Qb8jiUX4+yoX1b/75tA72KwQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGcgHp1RAth1AFTadXHBJFyEWmW1MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZm
OTY1My05ZmRhLTRkMjAtOTI1YS01MWRiNzcyYWViMjQvYzcxOWY0ZmMtYTAyMC0z
N2NkLWE5MjgtMDI0YzM1ZmZhNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvM2Y2Zjk2NTMtOWZkYS00ZDIwLTky
NWEtNTFkYjc3MmFlYjI0LzNmNmY5NjUzLTlmZGEtNGQyMC05MjVhLTUxZGI3NzJh
ZWIyNC5jcmwwHwYDVR0jBBgwFoAUcCZT7JXvtmEgR02aIusBdH6lEB8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC8zZjZmOTY1My05ZmRhLTRkMjAtOTI1YS01MWRi
NzcyYWViMjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBznRWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAPbVJzincg1nRJLq39U4KhlNGYDI3UNN1DFPVwNjKZByT3MnZE/GN/hR
IjD6Ir0m4bimzbO4Us27znTEIBXm8EQ3kqlFzx3X450bFOT72CXWqCuOFUb0ZlKy
fVQYBZgTmPzMNXNlu8oRJtmhGhwoInWm9TRPYxzEFK5Vaif+Wq6SH525wz2HQ2NR
oW3Lfa4692g4dYj3WyQpqyn7/+K5ZxkuFDTwRTep8H1UmbGgelahjb0ahFd6Vlvd
4kfQr0eunq8Q+60S8KNkVOf5lYIvtrfgVZJS4VLea2h3We+E+miclhfCiXcdg7IV
uDOkvLVvTFRShAZH6/OaX/WjBg+yfcw=
-----END CERTIFICATE-----
Generated at Sat Apr 26 22:08:18 2025 by rpki-client