Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/aa0b8a82-d46d-3df8-b45c-b3c2e53486ec.roa
File:                     aa0b8a82-d46d-3df8-b45c-b3c2e53486ec.roa (raw, json)
Hash identifier:          nXZ8/sI0QrZ2q0UphD7KXlzZUKLLyahqNyTZPxR7Xng=
Subject key identifier:   22:0A:44:73:3E:DF:38:2C:30:BF:FE:83:40:FD:23:D4:8B:A4:E0:2B
Certificate issuer:       /CN=5e808969-feb0-49b4-9189-5a46fde472b7
Certificate serial:       010D0C9F4328584A841228A7B3B3B2F16FA95140
Authority key identifier: 4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/aa0b8a82-d46d-3df8-b45c-b3c2e53486ec.roa
Signing time:             Mon 14 Jul 2025 13:01:04 +0000
ROA not before:           Mon 14 Jul 2025 13:01:04 +0000
ROA not after:            Sun 12 Oct 2025 13:01:04 +0000
asID:                     36040
IP address blocks:        208.65.154.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:84:12:28:a7:b3:b3:b2:f1:6f:a9:51:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5e808969-feb0-49b4-9189-5a46fde472b7
        Validity
            Not Before: Jul 14 13:01:04 2025 GMT
            Not After : Oct 12 13:01:04 2025 GMT
        Subject: CN=3b0d5f1d-0019-4a9c-9885-92d6ba72a525
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:3e:10:c2:68:a4:44:ff:49:7e:6b:e0:fd:
                    4e:b6:0e:22:bd:5c:17:da:43:37:2a:d6:ff:3e:34:
                    7f:e0:45:86:3d:b0:67:7a:4a:4b:18:51:4c:81:8f:
                    c6:13:c8:3f:85:33:07:c4:45:89:6a:67:d4:f8:47:
                    1c:5d:c1:04:1b:48:07:67:3c:1e:30:b0:53:51:12:
                    af:60:d0:a0:0f:b3:43:fd:7d:0c:65:2b:46:5a:9d:
                    fe:6c:ed:ae:85:5e:ae:55:86:2f:60:f9:78:2b:42:
                    b6:88:e7:e5:0d:7a:1b:9e:dd:91:6c:aa:b9:6a:4c:
                    c0:fd:f6:b6:ce:d1:6e:14:02:3a:a3:19:39:81:d6:
                    ad:9e:9d:8c:70:b7:a0:3d:98:f8:5d:bd:94:6f:ab:
                    94:1b:ad:fc:fe:f4:04:e2:12:38:1c:77:6f:38:27:
                    14:a9:17:9d:26:cd:df:92:9d:b4:f0:a5:f8:e4:23:
                    97:14:d2:05:74:33:03:7b:fb:7d:bb:ef:a6:e3:1b:
                    95:aa:15:68:e4:54:53:a5:7c:e6:5c:5b:3e:dd:b0:
                    f6:2c:52:26:56:5b:26:40:80:db:c8:5b:46:cc:57:
                    ee:93:c4:5e:31:57:bd:c3:8e:3c:33:fa:3a:54:07:
                    21:a9:66:13:26:41:be:57:28:4c:a0:fb:75:b9:36:
                    d7:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0A:44:73:3E:DF:38:2C:30:BF:FE:83:40:FD:23:D4:8B:A4:E0:2B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/aa0b8a82-d46d-3df8-b45c-b3c2e53486ec.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7/5e808969-feb0-49b4-9189-5a46fde472b7.crl

            X509v3 Authority Key Identifier:
                keyid:4F:33:B9:EE:F5:E8:97:B3:83:9E:F3:13:91:AC:76:E9:83:52:C8:C0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/5e808969-feb0-49b4-9189-5a46fde472b7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.65.154.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:c7:c6:16:67:b1:4c:ba:d9:57:ef:e4:b7:15:2f:48:0e:9d:
         24:dc:a2:44:8f:b0:d0:df:96:d9:7e:d8:6e:b9:3f:6c:c3:79:
         51:8b:f3:1b:9e:c3:7f:19:63:1e:df:c8:a1:8e:76:b4:60:e9:
         3d:e9:e0:0a:4c:43:34:d7:21:5f:3f:99:5c:ae:db:77:6b:3d:
         b0:1c:8c:21:0c:a1:95:c8:93:54:d6:ae:61:16:fb:ff:02:94:
         17:4c:7c:63:de:3f:a7:cb:5e:02:10:df:fe:77:46:e1:6c:22:
         cf:52:0e:d2:b8:cc:66:48:ad:4a:e4:0c:7a:32:40:45:f4:b3:
         0b:09:1a:ba:e0:d9:1b:82:74:51:0a:4f:29:dd:e9:94:11:2d:
         31:37:c8:3d:94:43:c0:7e:6e:7b:93:35:c9:12:db:f6:ee:d8:
         ff:17:d1:6c:5b:4e:a1:1a:6c:ef:9f:18:7d:5c:13:db:19:aa:
         0c:24:e0:c1:ad:b8:17:e4:be:d6:be:cc:31:70:52:be:80:d7:
         de:f6:d1:6a:2a:50:1c:b2:24:5e:e1:7a:3b:a9:ee:24:77:cf:
         e4:64:8a:b8:55:a8:72:24:c4:ef:78:22:62:b6:b8:0f:ad:21:
         fc:3c:04:5c:0c:23:ab:22:77:ba:f8:43:b8:80:5d:77:30:72:
         3a:76:68:7b
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqEEiins7Oy8W+pUUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWU4MDg5NjktZmViMC00OWI0LTkxODktNWE0NmZkZTQ3
MmI3MB4XDTI1MDcxNDEzMDEwNFoXDTI1MTAxMjEzMDEwNFowLzEtMCsGA1UEAxMk
M2IwZDVmMWQtMDAxOS00YTljLTk4ODUtOTJkNmJhNzJhNTI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApis+EMJopET/SX5r4P1Otg4ivVwX2kM3Ktb/
PjR/4EWGPbBnekpLGFFMgY/GE8g/hTMHxEWJamfU+EccXcEEG0gHZzweMLBTURKv
YNCgD7ND/X0MZStGWp3+bO2uhV6uVYYvYPl4K0K2iOflDXobnt2RbKq5akzA/fa2
ztFuFAI6oxk5gdatnp2McLegPZj4Xb2Ub6uUG638/vQE4hI4HHdvOCcUqRedJs3f
kp208KX45COXFNIFdDMDe/t9u++m4xuVqhVo5FRTpXzmXFs+3bD2LFImVlsmQIDb
yFtGzFfuk8ReMVe9w448M/o6VAchqWYTJkG+VyhMoPt1uTbXlQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCIKRHM+3zgsML/+g0D9I9SLpOArMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgw
ODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2ZmRlNDcyYjcvYWEwYjhhODItZDQ2ZC0z
ZGY4LWI0NWMtYjNjMmU1MzQ4NmVjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNWU4MDg5NjktZmViMC00OWI0LTkx
ODktNWE0NmZkZTQ3MmI3LzVlODA4OTY5LWZlYjAtNDliNC05MTg5LTVhNDZmZGU0
NzJiNy5jcmwwHwYDVR0jBBgwFoAUTzO57vXol7ODnvMTkax26YNSyMAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81ZTgwODk2OS1mZWIwLTQ5YjQtOTE4OS01YTQ2
ZmRlNDcyYjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EGaMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3HxhZnsUy62Vfv5LcVL0gOnSTcokSPsNDfltl+2G65P2zDeVGL8xue
w38ZYx7fyKGOdrRg6T3p4ApMQzTXIV8/mVyu23drPbAcjCEMoZXIk1TWrmEW+/8C
lBdMfGPeP6fLXgIQ3/53RuFsIs9SDtK4zGZIrUrkDHoyQEX0swsJGrrg2RuCdFEK
Tynd6ZQRLTE3yD2UQ8B+bnuTNckS2/bu2P8X0WxbTqEabO+fGH1cE9sZqgwk4MGt
uBfkvta+zDFwUr6A19720WoqUByyJF7hejup7iR3z+RkirhVqHIkxO94ImK2uA+t
Ifw8BFwMI6sid7r4Q7iAXXcwcjp2aHs=
-----END CERTIFICATE-----
Generated at Mon Aug 4 22:17:23 2025 by rpki-client