Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
File:                     178a6549-7ccc-367b-90a4-a27631dfc341.roa (raw, json)
Hash identifier:          /5RvYHebnrff3cqyBNMrDw7f0r3WSZWaz/XGgZh8KaI=
Subject key identifier:   E7:31:6D:56:D8:31:62:75:60:0D:A0:45:85:22:BE:17:7F:E4:3D:CB
Certificate issuer:       /CN=06b2da7d-ae03-4c12-bd29-f0c285888740
Certificate serial:       010D0C9F4328584AC0162876C8293EDF40764040
Authority key identifier: B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa
Signing time:             Tue 05 Aug 2025 01:00:32 +0000
ROA not before:           Tue 05 Aug 2025 01:00:32 +0000
ROA not after:            Mon 03 Nov 2025 02:00:32 +0000
asID:                     26848
IP address blocks:        206.195.220.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c0:16:28:76:c8:29:3e:df:40:76:40:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06b2da7d-ae03-4c12-bd29-f0c285888740
        Validity
            Not Before: Aug  5 01:00:32 2025 GMT
            Not After : Nov  3 02:00:32 2025 GMT
        Subject: CN=a1d0ac00-1a29-43b5-a6c3-0c64c1a3b8bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:05:64:5d:5c:aa:19:a0:2e:64:ad:df:c6:f4:
                    01:71:cb:aa:e8:a9:78:23:20:57:8f:4f:78:5a:e6:
                    3a:6f:5c:93:27:f5:0d:1f:7b:e3:5d:55:ea:f8:2e:
                    15:74:69:e1:6b:81:a7:c3:78:cb:ea:e3:a9:ae:84:
                    ee:d7:2c:9c:9f:48:24:78:74:b6:2e:2e:ad:be:ef:
                    5a:ed:c5:18:53:49:5f:2b:07:da:b2:40:31:da:fc:
                    a7:2b:0f:46:94:0b:ab:5c:77:c3:25:40:57:fd:95:
                    8f:ac:71:49:21:bb:95:54:53:d8:91:05:81:fe:9e:
                    41:b9:1a:d3:75:f8:c5:e6:97:ed:c1:a6:52:cd:8b:
                    74:59:01:36:ec:5a:91:65:a4:3a:b9:66:85:d6:42:
                    2d:dd:5f:e7:06:2e:46:e4:e3:8e:f6:1d:4c:aa:e7:
                    49:79:37:df:42:bc:df:8a:f9:7d:1d:a7:7b:4e:49:
                    3e:b1:82:6c:3d:59:6e:6a:c0:c8:ec:e5:f7:89:06:
                    0d:7f:b7:51:2f:48:5e:5e:91:47:be:6c:11:59:1f:
                    65:0a:ff:67:d5:10:28:68:b2:ce:a4:75:ec:b6:e2:
                    dd:7a:2a:8c:24:66:3d:7e:22:ef:ca:2b:54:b0:47:
                    5a:ca:ac:49:e0:dc:2e:7b:d6:bf:bc:24:eb:d0:88:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:31:6D:56:D8:31:62:75:60:0D:A0:45:85:22:BE:17:7F:E4:3D:CB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/178a6549-7ccc-367b-90a4-a27631dfc341.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740/06b2da7d-ae03-4c12-bd29-f0c285888740.crl

            X509v3 Authority Key Identifier:
                keyid:B8:FD:89:4B:88:4F:53:16:18:88:90:87:6E:B8:1B:07:4D:27:4A:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/06b2da7d-ae03-4c12-bd29-f0c285888740.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.195.220.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:36:fa:a1:46:07:ce:d5:36:aa:e0:5b:f2:13:db:6c:a8:ca:
         b6:e0:6c:54:c5:2e:ac:c4:66:2d:66:9c:92:aa:9d:29:52:ae:
         54:86:7c:fb:2b:6e:3b:5c:41:3d:af:30:07:f4:b6:21:14:cc:
         29:4b:7e:6c:81:c2:c8:39:11:db:14:75:e4:c1:d8:f5:51:28:
         fd:83:14:78:90:d2:2e:df:fd:a9:f7:49:78:8c:c5:3c:86:47:
         21:61:7d:d2:f2:87:5f:9d:a3:c4:57:33:49:0a:fe:72:0b:f2:
         2b:d3:37:f8:fc:4f:b0:e4:8e:2a:27:0f:97:64:e8:0c:fb:a2:
         f6:2e:fb:49:fe:f9:ce:9a:6f:62:f1:4a:a0:fc:c4:ad:6d:96:
         cb:ae:5a:33:6c:6c:a7:d2:35:67:0c:ea:29:cd:4a:78:3b:9e:
         21:a9:0d:b2:9b:80:81:3c:9c:c9:86:a4:4a:93:be:fc:89:e5:
         49:ae:bf:81:7d:d4:a9:4c:4c:0c:75:72:2e:ac:02:11:e7:f1:
         fc:03:60:a7:e0:29:36:b6:1a:63:54:80:5a:98:ed:d2:6b:2c:
         31:2c:ac:e3:93:55:95:ab:3c:11:5a:64:55:ce:eb:07:8d:68:
         bd:e4:b4:41:73:78:3d:5c:ab:82:7d:9c:97:5f:1a:52:94:b0:
         e2:41:ba:39
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErAFih2yCk+30B2QEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDZiMmRhN2QtYWUwMy00YzEyLWJkMjktZjBjMjg1ODg4
NzQwMB4XDTI1MDgwNTAxMDAzMloXDTI1MTEwMzAyMDAzMlowLzEtMCsGA1UEAxMk
YTFkMGFjMDAtMWEyOS00M2I1LWE2YzMtMGM2NGMxYTNiOGJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkAVkXVyqGaAuZK3fxvQBccuq6Kl4IyBXj094
WuY6b1yTJ/UNH3vjXVXq+C4VdGnha4Gnw3jL6uOproTu1yycn0gkeHS2Li6tvu9a
7cUYU0lfKwfaskAx2vynKw9GlAurXHfDJUBX/ZWPrHFJIbuVVFPYkQWB/p5BuRrT
dfjF5pftwaZSzYt0WQE27FqRZaQ6uWaF1kIt3V/nBi5G5OOO9h1MqudJeTffQrzf
ivl9Had7Tkk+sYJsPVluasDI7OX3iQYNf7dRL0heXpFHvmwRWR9lCv9n1RAoaLLO
pHXstuLdeiqMJGY9fiLvyitUsEdayqxJ4Nwue9a/vCTr0IjIWQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFOcxbVbYMWJ1YA2gRYUivhd/5D3LMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIy
ZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMyODU4ODg3NDAvMTc4YTY1NDktN2NjYy0z
NjdiLTkwYTQtYTI3NjMxZGZjMzQxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMDZiMmRhN2QtYWUwMy00YzEyLWJk
MjktZjBjMjg1ODg4NzQwLzA2YjJkYTdkLWFlMDMtNGMxMi1iZDI5LWYwYzI4NTg4
ODc0MC5jcmwwHwYDVR0jBBgwFoAUuP2JS4hPUxYYiJCHbrgbB00nSmswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8wNmIyZGE3ZC1hZTAzLTRjMTItYmQyOS1mMGMy
ODU4ODg3NDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzsPcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABc2+qFGB87VNqrgW/IT22yoyrbgbFTFLqzEZi1mnJKqnSlSrlSGfPsr
bjtcQT2vMAf0tiEUzClLfmyBwsg5EdsUdeTB2PVRKP2DFHiQ0i7f/an3SXiMxTyG
RyFhfdLyh1+do8RXM0kK/nIL8ivTN/j8T7DkjionD5dk6Az7ovYu+0n++c6ab2Lx
SqD8xK1tlsuuWjNsbKfSNWcM6inNSng7niGpDbKbgIE8nMmGpEqTvvyJ5Umuv4F9
1KlMTAx1ci6sAhHn8fwDYKfgKTa2GmNUgFqY7dJrLDEsrOOTVZWrPBFaZFXO6weN
aL3ktEFzeD1cq4J9nJdfGlKUsOJBujk=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:25:20 2025 by rpki-client