Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90563a0e-f545-3506-90ed-95e968283598.roa
File:                     90563a0e-f545-3506-90ed-95e968283598.roa (raw, json)
Hash identifier:          6/ecW1+xzxLBdxry5NGsZjB1h7BZVsLXat5pXxoH0Cw=
Subject key identifier:   D4:9C:F0:40:82:19:FC:48:3E:EE:0E:9F:97:61:23:3F:2D:52:09:FB
Certificate issuer:       /CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
Certificate serial:       010D0C9F4328584AC2E0DEF0FE179239C7518F80
Authority key identifier: EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90563a0e-f545-3506-90ed-95e968283598.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     61317
IP address blocks:        216.185.55.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:de:f0:fe:17:92:39:c7:51:8f:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7b390a0e-7d57-412d-b8cd-d045bcafd5ee
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=6242f5b8-8b35-47e7-ad49-a7b21d705454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:af:d1:5d:0b:eb:af:70:34:78:45:12:97:7c:
                    1e:41:00:bb:7b:1c:13:2d:fe:a5:bd:31:36:49:1e:
                    a9:e8:a9:1e:08:a1:1b:c2:c8:a5:77:a0:83:14:92:
                    3f:6f:1b:25:0f:c7:7e:44:c8:fd:f9:17:17:ed:0b:
                    e5:67:e1:6c:e0:68:99:ca:26:e8:83:92:79:39:5b:
                    d0:12:04:55:f7:79:ee:04:3a:1a:29:b0:b4:3c:0d:
                    d5:25:fa:07:8c:f6:f8:22:4f:80:1a:37:1e:f0:88:
                    90:d4:40:38:d9:38:d3:c1:51:04:c7:54:44:c8:9f:
                    df:31:dc:09:b4:77:b7:8a:51:01:f7:18:36:b1:e5:
                    f2:4f:27:11:4d:c2:8d:84:a5:a2:9f:e9:6f:7c:ac:
                    d1:f6:11:03:f6:d8:4f:e9:37:52:f0:4e:c3:ee:87:
                    59:8c:58:8f:cd:a5:2e:72:ad:e6:f8:14:f3:e1:66:
                    cd:24:14:1f:06:32:fd:2f:30:21:2b:40:22:bf:b3:
                    92:8a:49:d7:3e:2e:24:e8:c0:00:59:b3:98:9e:a3:
                    47:0c:6d:c1:eb:fe:56:bf:75:47:e1:77:44:08:c6:
                    98:a1:a7:fe:7c:b5:33:86:e9:67:b5:2a:0c:04:c1:
                    42:2e:e2:04:39:47:07:bb:d6:a2:b7:00:c7:b6:b8:
                    99:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:9C:F0:40:82:19:FC:48:3E:EE:0E:9F:97:61:23:3F:2D:52:09:FB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/90563a0e-f545-3506-90ed-95e968283598.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.crl

            X509v3 Authority Key Identifier:
                keyid:EC:56:A3:C0:36:F8:D6:3A:F9:AC:9C:0F:9C:9B:7B:DF:B2:37:82:A0

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7b390a0e-7d57-412d-b8cd-d045bcafd5ee.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.185.55.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6d:d3:68:68:73:9f:e4:b9:5c:7e:68:23:59:76:a4:80:df:00:
         81:35:32:dd:3d:39:4d:6a:07:c2:e1:6c:fa:ca:c9:e2:d2:ee:
         97:f5:2b:a4:f0:14:0f:61:8a:2a:03:9c:c9:34:9b:34:87:d9:
         0c:3f:a4:f0:dd:c6:93:9c:7b:13:61:6a:78:73:8c:b5:bc:06:
         86:ba:cf:9d:50:3c:7b:43:fd:16:39:06:07:1d:72:38:0e:ca:
         73:51:10:56:56:5e:7a:ca:3b:68:89:1b:0c:60:7b:c8:08:43:
         1b:5e:33:1d:0a:bd:7e:22:9a:ab:c7:b8:08:d6:7f:a0:9d:59:
         8a:43:c2:3a:90:18:90:b6:f8:4c:c3:38:f5:9c:c2:aa:df:2c:
         f3:de:df:e6:8f:97:da:f3:9c:cf:4c:db:a2:2e:d6:50:1f:09:
         c2:98:a4:04:f2:a3:cd:1d:26:19:55:ac:15:ff:67:38:1f:75:
         d7:e1:d6:3d:6d:1f:f3:7f:d5:54:0f:e7:7e:6d:43:40:c6:60:
         82:3d:4b:42:d3:c5:39:fa:d2:d0:fb:7c:4c:d6:c9:d4:23:e4:
         4d:e9:ec:28:31:f0:c5:63:8b:60:b6:51:f6:37:b3:57:aa:84:
         ac:37:e9:89:19:fe:93:17:fb:41:60:c1:fe:12:be:f3:2d:8a:
         24:58:a6:08
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4N7w/heSOcdRj4AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2IzOTBhMGUtN2Q1Ny00MTJkLWI4Y2QtZDA0NWJjYWZk
NWVlMB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjI0MmY1YjgtOGIzNS00N2U3LWFkNDktYTdiMjFkNzA1NDU0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoq/RXQvrr3A0eEUSl3weQQC7exwTLf6lvTE2
SR6p6KkeCKEbwsild6CDFJI/bxslD8d+RMj9+RcX7QvlZ+Fs4GiZyibog5J5OVvQ
EgRV93nuBDoaKbC0PA3VJfoHjPb4Ik+AGjce8IiQ1EA42TjTwVEEx1REyJ/fMdwJ
tHe3ilEB9xg2seXyTycRTcKNhKWin+lvfKzR9hED9thP6TdS8E7D7odZjFiPzaUu
cq3m+BTz4WbNJBQfBjL9LzAhK0Aiv7OSiknXPi4k6MAAWbOYnqNHDG3B6/5Wv3VH
4XdECMaYoaf+fLUzhulntSoMBMFCLuIEOUcHu9aitwDHtriZFwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNSc8ECCGfxIPu4On5dhIz8tUgn7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5
MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1YmNhZmQ1ZWUvOTA1NjNhMGUtZjU0NS0z
NTA2LTkwZWQtOTVlOTY4MjgzNTk4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2IzOTBhMGUtN2Q1Ny00MTJkLWI4
Y2QtZDA0NWJjYWZkNWVlLzdiMzkwYTBlLTdkNTctNDEyZC1iOGNkLWQwNDViY2Fm
ZDVlZS5jcmwwHwYDVR0jBBgwFoAU7FajwDb41jr5rJwPnJt737I3gqAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YjM5MGEwZS03ZDU3LTQxMmQtYjhjZC1kMDQ1
YmNhZmQ1ZWUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Lk3MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAG3TaGhzn+S5XH5oI1l2pIDfAIE1Mt09OU1qB8LhbPrKyeLS7pf1K6Tw
FA9hiioDnMk0mzSH2Qw/pPDdxpOcexNhanhzjLW8Boa6z51QPHtD/RY5BgcdcjgO
ynNREFZWXnrKO2iJGwxge8gIQxteMx0KvX4imqvHuAjWf6CdWYpDwjqQGJC2+EzD
OPWcwqrfLPPe3+aPl9rznM9M26Iu1lAfCcKYpATyo80dJhlVrBX/Zzgfddfh1j1t
H/N/1VQP535tQ0DGYII9S0LTxTn60tD7fEzWydQj5E3p7Cgx8MVji2C2UfY3s1eq
hKw36YkZ/pMX+0Fgwf4SvvMtiiRYpgg=
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:51:02 2025 by rpki-client