Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa
File:                     144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa (raw, json)
Hash identifier:          OfPRgHRhR1lQQDvDjGBII5iYAQ02UjFuTBXGn/V8M7Q=
Subject key identifier:   E0:2E:A7:54:9A:8D:68:69:B2:DC:94:68:43:CF:0B:4F:3B:8C:48:4C
Certificate issuer:       /CN=fd356b15-92b2-4e72-b8d9-fa490480d177
Certificate serial:       010D0C9F4328584AB4EB6CBB81A1283CCE258F00
Authority key identifier: 1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa
Signing time:             Fri 01 Aug 2025 01:00:31 +0000
ROA not before:           Fri 01 Aug 2025 01:00:31 +0000
ROA not after:            Thu 30 Oct 2025 01:00:31 +0000
asID:                     33076
IP address blocks:        199.6.8.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b4:eb:6c:bb:81:a1:28:3c:ce:25:8f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd356b15-92b2-4e72-b8d9-fa490480d177
        Validity
            Not Before: Aug  1 01:00:31 2025 GMT
            Not After : Oct 30 01:00:31 2025 GMT
        Subject: CN=d8770006-e48e-4ab7-8a9a-f0c5cdb961b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:63:44:ba:65:72:c7:45:1c:43:a6:1d:91:ce:
                    26:5e:94:5f:5c:30:64:78:bd:54:c9:ca:fc:2e:35:
                    22:f0:2a:0d:68:24:77:f6:61:60:45:be:a2:dc:ff:
                    b4:58:7b:0f:6a:1f:00:de:41:b5:20:bb:cc:e3:2b:
                    dc:bb:33:2b:22:b7:5a:a6:11:9b:72:3d:30:9e:60:
                    55:de:35:ad:3d:a9:7e:e2:28:9f:6b:a6:6b:1d:6e:
                    64:33:3d:4f:19:65:8f:48:91:9b:d0:0c:4f:65:48:
                    e8:f9:b3:db:1c:56:4f:36:f7:83:e6:40:2a:01:c2:
                    00:b9:45:3c:f7:fb:b8:65:3f:f9:57:6c:8f:6d:be:
                    8f:53:35:aa:a7:19:2f:4b:6a:69:87:00:a4:6d:37:
                    91:45:8c:2d:91:cf:22:d5:ee:e8:a4:4e:6b:8a:7f:
                    3d:ce:cd:7a:66:04:5f:59:db:65:4f:f5:38:ee:22:
                    c3:22:f1:3a:d2:c8:cf:bd:45:8d:c3:0d:53:69:11:
                    39:10:a0:84:b6:cf:79:2a:da:ba:c4:b2:de:0d:a3:
                    37:0c:2c:ee:e5:9d:01:c2:03:e7:a7:9e:f5:b1:33:
                    8b:69:ea:13:f1:a9:a5:0c:26:90:9b:d9:2f:6f:9a:
                    e8:a0:57:f2:45:42:43:d2:86:18:0b:f8:50:4f:de:
                    da:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:2E:A7:54:9A:8D:68:69:B2:DC:94:68:43:CF:0B:4F:3B:8C:48:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/144f4ef9-f281-3e6b-ab5f-0dcdfe830052.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177/fd356b15-92b2-4e72-b8d9-fa490480d177.crl

            X509v3 Authority Key Identifier:
                keyid:1F:65:AB:B2:3C:03:E8:AB:41:01:11:94:18:40:5F:17:97:C2:02:25

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/fd356b15-92b2-4e72-b8d9-fa490480d177.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.6.8.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         84:05:c4:d4:68:df:c5:f5:75:d7:87:dd:36:51:ec:eb:4f:55:
         36:ca:f2:a4:fa:52:c1:13:7a:b5:1c:70:9f:b9:bb:8c:af:66:
         45:36:7c:a1:da:c8:0f:36:51:2c:f9:6a:bd:28:49:3d:8d:64:
         4d:bf:c3:b7:ce:b7:2b:1d:96:f1:12:71:4d:61:a5:5d:31:47:
         dc:c2:0b:ed:5a:0a:99:7a:dd:a4:4c:8c:99:05:13:aa:b2:85:
         13:59:14:d0:79:ec:83:87:5f:9a:0e:15:aa:2c:15:8d:db:de:
         4b:21:3c:12:95:3a:1b:82:13:c5:09:d9:2b:6c:3a:d8:63:40:
         cf:09:1e:3b:c2:c3:18:85:68:7d:cc:e1:28:3e:05:fd:17:db:
         d6:6e:66:52:b9:5e:e0:e4:29:08:82:f5:02:81:6e:b1:59:2f:
         38:22:a3:09:39:8f:f7:22:1e:9e:24:59:0f:5d:c4:42:d1:c4:
         a1:a3:15:bb:c5:e8:ae:d4:0d:4d:2b:bc:c0:8d:d5:28:7b:40:
         7e:be:00:1e:36:28:63:b5:03:24:e6:b7:9f:2d:7d:06:ad:e1:
         fd:67:e1:82:0f:cd:e2:c1:93:23:63:f6:5a:ce:c6:c2:9c:19:
         d1:ad:be:db:3b:5c:24:1b:7e:e7:4b:1a:6c:41:60:f3:04:1a:
         92:98:99:c6
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEq062y7gaEoPM4ljwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQzNTZiMTUtOTJiMi00ZTcyLWI4ZDktZmE0OTA0ODBk
MTc3MB4XDTI1MDgwMTAxMDAzMVoXDTI1MTAzMDAxMDAzMVowLzEtMCsGA1UEAxMk
ZDg3NzAwMDYtZTQ4ZS00YWI3LThhOWEtZjBjNWNkYjk2MWIwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqGNEumVyx0UcQ6Ydkc4mXpRfXDBkeL1Uycr8
LjUi8CoNaCR39mFgRb6i3P+0WHsPah8A3kG1ILvM4yvcuzMrIrdaphGbcj0wnmBV
3jWtPal+4iifa6ZrHW5kMz1PGWWPSJGb0AxPZUjo+bPbHFZPNveD5kAqAcIAuUU8
9/u4ZT/5V2yPbb6PUzWqpxkvS2pphwCkbTeRRYwtkc8i1e7opE5rin89zs16ZgRf
WdtlT/U47iLDIvE60sjPvUWNww1TaRE5EKCEts95Ktq6xLLeDaM3DCzu5Z0BwgPn
p571sTOLaeoT8amlDCaQm9kvb5rooFfyRUJD0oYYC/hQT97auwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOAup1SajWhpstyUaEPPC087jEhMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1
NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5MDQ4MGQxNzcvMTQ0ZjRlZjktZjI4MS0z
ZTZiLWFiNWYtMGRjZGZlODMwMDUyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZmQzNTZiMTUtOTJiMi00ZTcyLWI4
ZDktZmE0OTA0ODBkMTc3L2ZkMzU2YjE1LTkyYjItNGU3Mi1iOGQ5LWZhNDkwNDgw
ZDE3Ny5jcmwwHwYDVR0jBBgwFoAUH2WrsjwD6KtBARGUGEBfF5fCAiUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9mZDM1NmIxNS05MmIyLTRlNzItYjhkOS1mYTQ5
MDQ4MGQxNzcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxwYIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIQFxNRo38X1ddeH3TZR7OtPVTbK8qT6UsETerUccJ+5u4yvZkU2fKHa
yA82USz5ar0oST2NZE2/w7fOtysdlvEScU1hpV0xR9zCC+1aCpl63aRMjJkFE6qy
hRNZFNB57IOHX5oOFaosFY3b3kshPBKVOhuCE8UJ2StsOthjQM8JHjvCwxiFaH3M
4Sg+Bf0X29ZuZlK5XuDkKQiC9QKBbrFZLzgiowk5j/ciHp4kWQ9dxELRxKGjFbvF
6K7UDU0rvMCN1Sh7QH6+AB42KGO1AyTmt58tfQat4f1n4YIPzeLBkyNj9lrOxsKc
GdGtvts7XCQbfudLGmxBYPMEGpKYmcY=
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:31:46 2025 by rpki-client