Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa
File:                     2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa (raw, json)
Hash identifier:          WXIkKklL9mNbbT2XFimMi2SbZqpkGISUGkdRvax6rJQ=
Subject key identifier:   87:EB:20:85:17:EB:A7:96:0D:8B:81:FF:98:B3:B8:26:C9:CE:F0:DC
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A841239C12F4BA70B5D721C80
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        208.117.228.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:39:c1:2f:4b:a7:0b:5d:72:1c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=4eefebad-6f9e-404e-b1d4-d4da8d5598fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7e:89:5e:08:c6:8c:55:a6:96:45:f9:26:31:
                    21:6a:73:ca:3e:c5:7e:4a:06:8e:22:7f:8f:82:85:
                    82:a8:1a:db:9a:89:3d:e5:a8:8f:8c:ce:0b:b9:63:
                    f4:9d:f6:8a:63:38:a6:ae:31:07:78:a2:c7:89:db:
                    e6:dd:60:ec:64:7c:60:82:55:f1:42:9f:37:b7:55:
                    ee:a2:d5:91:18:92:ce:fe:75:79:94:82:35:d8:5f:
                    77:98:80:e1:32:e8:85:38:f1:8a:40:5a:46:3d:f8:
                    d2:c4:83:d4:cf:3d:14:cc:ea:c8:8c:ae:d9:ea:8d:
                    8c:8e:d1:48:f3:19:b8:f1:90:f1:2d:92:a9:cc:52:
                    c0:94:e2:01:63:35:4b:71:be:2f:2e:cf:05:f7:53:
                    a8:90:da:4f:0a:ca:5a:23:d0:7a:95:8c:0f:0a:02:
                    55:6f:0b:61:c0:a1:ac:e0:5f:8c:b7:6f:1b:e4:e2:
                    de:99:82:5a:7a:43:89:d2:b6:a2:f1:a6:e4:c7:93:
                    9e:bd:f0:30:5d:47:a8:f6:71:65:fe:d5:c3:57:b7:
                    b9:b4:36:31:39:4e:81:f8:49:c4:e7:fa:d2:49:24:
                    cc:73:46:62:d1:a1:54:82:05:1d:4e:81:19:52:ec:
                    89:78:77:be:71:c2:01:28:95:83:4d:68:d9:5a:68:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:EB:20:85:17:EB:A7:96:0D:8B:81:FF:98:B3:B8:26:C9:CE:F0:DC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/2f8f0cc3-fa6b-3e54-bb90-1371128df1aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.117.228.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:09:07:4e:8a:83:b3:aa:73:c1:ef:a8:9f:b9:9b:45:8a:2e:
         8e:73:4b:01:8c:e5:e1:be:09:9a:d5:9b:e9:68:99:15:05:a9:
         72:cf:74:1c:03:18:a9:f1:b2:49:32:83:65:a3:f2:9f:71:72:
         04:54:ae:18:ab:d3:80:90:0d:dd:86:9a:a1:b6:5b:d6:4d:5f:
         4d:a2:94:c3:ed:3b:0e:bd:29:d5:e8:a9:25:d7:b5:9c:73:1d:
         fd:b2:12:d6:5d:cc:66:93:cb:ea:a4:a7:8d:01:ae:eb:cc:63:
         f3:ab:a2:72:97:2c:bf:5b:00:8d:2b:af:cf:a3:74:ef:08:7b:
         25:b4:b8:bf:24:f1:23:fe:0f:81:11:bc:c3:51:fe:c8:e4:92:
         e6:84:04:fd:e3:95:50:bd:20:ec:38:d7:10:a5:61:41:21:e3:
         47:54:21:68:30:33:7d:2a:70:2e:e7:df:93:d5:fa:e9:d7:95:
         a2:56:d2:2b:2d:b6:d6:ca:ad:f8:21:f0:a1:ab:fb:78:88:15:
         6a:fb:a2:88:07:3b:d4:63:2e:be:e4:1a:91:0a:0e:30:d7:e5:
         ca:e8:dc:ce:c7:78:82:0d:46:5a:3a:3d:92:5e:c1:c0:c3:b3:
         b3:3e:59:dd:09:a9:0c:98:f4:01:6d:47:c0:4b:a1:e4:33:9b:
         c9:da:35:c4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEjnBL0unC11yHIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
NGVlZmViYWQtNmY5ZS00MDRlLWIxZDQtZDRkYThkNTU5OGZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmX6JXgjGjFWmlkX5JjEhanPKPsV+SgaOIn+P
goWCqBrbmok95aiPjM4LuWP0nfaKYzimrjEHeKLHidvm3WDsZHxgglXxQp83t1Xu
otWRGJLO/nV5lII12F93mIDhMuiFOPGKQFpGPfjSxIPUzz0UzOrIjK7Z6o2MjtFI
8xm48ZDxLZKpzFLAlOIBYzVLcb4vLs8F91OokNpPCspaI9B6lYwPCgJVbwthwKGs
4F+Mt28b5OLemYJaekOJ0rai8abkx5OevfAwXUeo9nFl/tXDV7e5tDYxOU6B+EnE
5/rSSSTMc0Zi0aFUggUdToEZUuyJeHe+ccIBKJWDTWjZWmgcewIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFIfrIIUX66eWDYuB/5izuCbJzvDcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvMmY4ZjBjYzMtZmE2Yi0z
ZTU0LWJiOTAtMTM3MTEyOGRmMWFhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0HXkMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAYJB06Kg7Oqc8HvqJ+5m0WKLo5zSwGM5eG+CZrVm+lomRUFqXLPdBwD
GKnxskkyg2Wj8p9xcgRUrhir04CQDd2GmqG2W9ZNX02ilMPtOw69KdXoqSXXtZxz
Hf2yEtZdzGaTy+qkp40BruvMY/OronKXLL9bAI0rr8+jdO8IeyW0uL8k8SP+D4ER
vMNR/sjkkuaEBP3jlVC9IOw41xClYUEh40dUIWgwM30qcC7n35PV+unXlaJW0ist
ttbKrfgh8KGr+3iIFWr7oogHO9RjLr7kGpEKDjDX5cro3M7HeIINRlo6PZJewcDD
s7M+Wd0JqQyY9AFtR8BLoeQzm8naNcQ=
-----END CERTIFICATE-----
Generated at Wed Aug 6 13:03:13 2025 by rpki-client