Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa
File:                     8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa (raw, json)
Hash identifier:          yHYeurwUFR9Usi+a/XF2zH/OHGfbcPxlbuVkte4ZCZo=
Subject key identifier:   D1:CD:0A:52:D7:9D:E0:9E:97:8E:5A:B8:83:B3:00:64:5B:FD:7A:E5
Certificate issuer:       /CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
Certificate serial:       010D0C9F4328584AB4EB77FB26AD3C398166DA00
Authority key identifier: 34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     8560
IP address blocks:        216.225.192.0/20 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:77:fb:26:ad:3c:39:81:66:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ba79988-80bc-4fcb-8faf-624400d5f1ce
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d66c5558-6c38-4f7e-9100-a83a2a12e627
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:8d:3d:05:53:e3:85:ea:b2:3b:ec:73:d0:61:
                    52:25:97:15:21:f4:0b:3e:e9:52:5a:11:a7:9d:c6:
                    bc:f1:5b:89:3d:00:55:50:a1:79:90:f9:f9:c4:9b:
                    0f:12:68:a9:ab:fc:98:5b:12:75:1c:c9:3c:60:4a:
                    e5:57:e8:77:db:64:62:98:0b:73:f6:71:33:32:cf:
                    89:96:7b:b5:eb:af:68:01:a5:4c:9c:45:d4:b5:00:
                    9e:c0:ff:b6:96:f0:47:1f:cc:8c:95:82:cd:22:76:
                    ea:92:b1:b8:b8:02:be:e3:23:3e:1c:5d:c4:46:d8:
                    dc:20:c1:69:cb:22:3d:b9:e8:3b:c0:03:79:b0:51:
                    d2:47:8e:1b:5f:e2:d6:14:5b:01:e1:87:84:52:10:
                    4a:8f:bf:5d:44:68:d0:46:5a:aa:17:02:c2:68:ad:
                    81:32:a9:76:d6:59:c7:20:51:00:2b:c7:0d:b9:59:
                    74:59:4e:46:22:9a:7d:75:c5:89:7b:df:b0:fb:d3:
                    6a:b3:d9:48:e7:56:3b:9f:c3:44:37:b1:80:e6:7d:
                    e7:7d:8e:60:a5:fa:18:fd:dc:f9:b3:ef:c4:fd:63:
                    ee:43:9d:01:84:97:8a:c8:7c:af:b6:80:3b:f9:5f:
                    d2:d6:6c:ce:3d:ed:de:78:3b:ff:87:13:18:51:cd:
                    c9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:CD:0A:52:D7:9D:E0:9E:97:8E:5A:B8:83:B3:00:64:5B:FD:7A:E5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/8fdb91f6-8913-3b36-bef0-037fc913f1eb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce/7ba79988-80bc-4fcb-8faf-624400d5f1ce.crl

            X509v3 Authority Key Identifier:
                keyid:34:17:BC:BF:6B:4A:63:0A:CA:A3:C5:88:BC:45:0F:E5:94:79:C4:5A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/7ba79988-80bc-4fcb-8faf-624400d5f1ce.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.225.192.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bc:16:8f:f7:ca:ff:da:ef:cb:91:4e:64:8f:2e:18:94:62:2c:
         27:44:a7:08:fc:08:9e:c5:e2:eb:88:86:12:c2:a5:68:55:2d:
         5e:71:c5:84:75:20:a0:3b:a7:62:13:2d:ac:a8:a5:94:e8:24:
         d6:3c:1d:dd:c8:b8:15:f3:5f:2d:00:22:64:2a:ae:69:ac:ad:
         84:32:ab:aa:a9:62:4c:30:95:f2:b5:ee:f6:80:87:93:ee:50:
         bd:b7:a3:f3:2f:15:ed:e1:29:e6:9e:7c:3c:f5:61:69:cd:48:
         97:ab:c5:93:db:14:7f:8b:c8:4e:1f:f4:72:99:3c:7e:2a:e4:
         d0:a2:4f:b8:30:7e:22:d6:e6:3e:2e:8e:23:43:50:94:82:7f:
         a1:6c:09:8e:3a:4b:bd:1c:39:37:3b:ff:8f:d2:25:c2:3c:37:
         b0:15:bf:bf:34:82:51:73:5c:4e:5d:82:dc:5b:4a:57:8e:bc:
         e5:83:29:e0:4b:52:42:54:09:f4:e5:b9:b0:84:7b:59:d2:cd:
         e5:a0:4d:99:be:68:52:5a:de:23:d9:dd:70:c4:8d:12:5a:c6:
         a1:e6:b7:9e:83:8c:ed:24:30:68:43:97:af:5d:6f:9e:cc:3d:
         f2:f4:fd:66:1e:84:96:6b:8d:69:ac:b9:4d:8f:c4:20:5d:9e:
         e3:a4:ce:47
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq063f7Jq08OYFm2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2JhNzk5ODgtODBiYy00ZmNiLThmYWYtNjI0NDAwZDVm
MWNlMB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZDY2YzU1NTgtNmMzOC00ZjdlLTkxMDAtYTgzYTJhMTJlNjI3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi409BVPjheqyO+xz0GFSJZcVIfQLPulSWhGn
nca88VuJPQBVUKF5kPn5xJsPEmipq/yYWxJ1HMk8YErlV+h322RimAtz9nEzMs+J
lnu1669oAaVMnEXUtQCewP+2lvBHH8yMlYLNInbqkrG4uAK+4yM+HF3ERtjcIMFp
yyI9ueg7wAN5sFHSR44bX+LWFFsB4YeEUhBKj79dRGjQRlqqFwLCaK2BMql21lnH
IFEAK8cNuVl0WU5GIpp9dcWJe9+w+9Nqs9lI51Y7n8NEN7GA5n3nfY5gpfoY/dz5
s+/E/WPuQ50BhJeKyHyvtoA7+V/S1mzOPe3eeDv/hxMYUc3JmQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNHNClLXneCel45auIOzAGRb/XrlMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3
OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0MDBkNWYxY2UvOGZkYjkxZjYtODkxMy0z
YjM2LWJlZjAtMDM3ZmM5MTNmMWViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvN2JhNzk5ODgtODBiYy00ZmNiLThm
YWYtNjI0NDAwZDVmMWNlLzdiYTc5OTg4LTgwYmMtNGZjYi04ZmFmLTYyNDQwMGQ1
ZjFjZS5jcmwwHwYDVR0jBBgwFoAUNBe8v2tKYwrKo8WIvEUP5ZR5xFowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC83YmE3OTk4OC04MGJjLTRmY2ItOGZhZi02MjQ0
MDBkNWYxY2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2OHAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBALwWj/fK/9rvy5FOZI8uGJRiLCdEpwj8CJ7F4uuIhhLCpWhVLV5xxYR1
IKA7p2ITLayopZToJNY8Hd3IuBXzXy0AImQqrmmsrYQyq6qpYkwwlfK17vaAh5Pu
UL23o/MvFe3hKeaefDz1YWnNSJerxZPbFH+LyE4f9HKZPH4q5NCiT7gwfiLW5j4u
jiNDUJSCf6FsCY46S70cOTc7/4/SJcI8N7AVv780glFzXE5dgtxbSleOvOWDKeBL
UkJUCfTlubCEe1nSzeWgTZm+aFJa3iPZ3XDEjRJaxqHmt56DjO0kMGhDl69db57M
PfL0/WYehJZrjWmsuU2PxCBdnuOkzkc=
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:20:05 2025 by rpki-client