Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
File:                     9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa (raw, json)
Hash identifier:          xeWbiATrrUnq0i6FdqS8GJOuY1tDGmnw/0iXEI67PWg=
Subject key identifier:   2D:96:45:15:2E:D0:56:4B:FB:12:A6:6E:4D:40:44:A3:DF:18:D2:2C
Certificate issuer:       /CN=6d271821-206b-40ae-ba11-9112dbf17eb4
Certificate serial:       010D0C9F4328584AC2E0EBD3AC7F3B6C2D1BD200
Authority key identifier: F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa
Signing time:             Wed 06 Aug 2025 01:00:33 +0000
ROA not before:           Wed 06 Aug 2025 01:00:33 +0000
ROA not after:            Tue 04 Nov 2025 02:00:33 +0000
asID:                     12129
IP address blocks:        192.96.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c2:e0:eb:d3:ac:7f:3b:6c:2d:1b:d2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6d271821-206b-40ae-ba11-9112dbf17eb4
        Validity
            Not Before: Aug  6 01:00:33 2025 GMT
            Not After : Nov  4 02:00:33 2025 GMT
        Subject: CN=21112531-1d49-4cb3-b938-b4e2cbb6f0d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2a:44:8d:48:61:60:6d:d7:59:ae:a8:11:f6:
                    9d:d9:11:a8:71:31:4e:0a:33:96:dd:a7:b3:aa:cb:
                    80:0b:e4:cf:3f:25:24:96:63:af:e9:4f:f9:ee:c1:
                    bc:16:2a:dc:38:57:a0:58:0e:79:04:a1:63:6f:77:
                    d8:4b:8b:3b:f5:52:74:5b:52:8a:a6:40:37:3e:8d:
                    2d:ba:11:4e:9a:ee:c9:a9:dd:72:a8:e7:86:50:3a:
                    10:a1:cb:57:eb:f1:31:fe:c3:03:38:54:3e:36:9b:
                    1c:85:b5:48:a7:12:54:8f:29:e6:24:b0:57:35:2d:
                    7b:6a:34:35:af:8b:61:35:62:eb:89:cc:e0:22:8b:
                    b0:52:dd:5d:82:c0:af:e2:62:f2:76:e7:b2:ea:8a:
                    00:20:e3:bb:92:cc:47:34:04:35:7d:88:dc:1f:71:
                    2c:66:42:40:a8:62:0a:a5:4c:7a:3c:ff:f4:30:86:
                    3a:fb:fb:23:91:ed:50:c1:15:b3:3c:fd:6a:c1:aa:
                    16:41:2f:8e:54:96:5a:39:c7:1c:9d:8a:e1:42:f5:
                    07:87:b5:af:01:41:02:e2:99:8f:51:86:9b:05:42:
                    04:41:31:5b:9f:b1:bc:86:9f:0d:9f:9d:84:89:7a:
                    a4:3e:8a:c5:de:81:8c:d6:3b:69:5c:5b:07:39:63:
                    7e:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:96:45:15:2E:D0:56:4B:FB:12:A6:6E:4D:40:44:A3:DF:18:D2:2C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/9590b383-c1c7-3c0d-b0b8-8ccae87344e1.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4/6d271821-206b-40ae-ba11-9112dbf17eb4.crl

            X509v3 Authority Key Identifier:
                keyid:F0:B1:B3:76:BD:03:1E:E4:96:FB:DA:41:D8:7B:69:95:83:2E:A0:62

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/6d271821-206b-40ae-ba11-9112dbf17eb4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.96.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:94:eb:5a:22:ae:5b:7d:e2:11:ab:72:90:2b:be:dc:b8:31:
         0e:52:a7:3d:24:5d:b5:13:ea:c3:17:86:cd:51:ba:97:e9:64:
         93:7c:0c:f6:5c:5b:d6:8c:04:e7:28:0d:90:62:c1:b1:64:56:
         37:98:b9:8a:ae:32:f5:d7:8e:48:74:ff:19:b2:dd:16:3e:6c:
         51:fb:5a:67:44:0d:25:38:da:27:74:3a:4b:19:df:1c:51:f2:
         e3:fc:09:72:98:f7:14:c6:f6:a1:5e:f5:d8:bd:57:7b:6e:3c:
         c6:27:43:0f:db:0f:ea:e1:9d:e5:3b:bc:c2:8f:4b:33:66:b3:
         b3:f8:ae:8f:92:7a:c8:b8:89:b9:64:51:d6:d5:84:e7:ad:fb:
         79:58:b3:6c:5f:13:53:14:d4:48:d7:63:2e:5b:d3:09:9b:87:
         ac:92:39:ca:ee:66:0c:8d:08:fb:95:2c:83:e8:1c:18:7d:eb:
         95:53:c6:65:59:a5:76:22:4e:e6:ed:dd:48:3d:19:c3:67:a9:
         4f:83:fb:53:4c:66:a8:ff:03:e2:ee:75:b8:1c:6e:da:32:66:
         42:9b:9e:89:60:96:46:f7:df:50:1a:74:85:56:f0:d8:f1:9a:
         08:e7:5d:02:8d:64:71:ed:6b:b8:e5:ab:02:5b:48:a9:39:91:
         da:dc:f6:f8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErC4OvTrH87bC0b0gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmQyNzE4MjEtMjA2Yi00MGFlLWJhMTEtOTExMmRiZjE3
ZWI0MB4XDTI1MDgwNjAxMDAzM1oXDTI1MTEwNDAyMDAzM1owLzEtMCsGA1UEAxMk
MjExMTI1MzEtMWQ0OS00Y2IzLWI5MzgtYjRlMmNiYjZmMGQ0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEArypEjUhhYG3XWa6oEfad2RGocTFOCjOW3aez
qsuAC+TPPyUklmOv6U/57sG8FircOFegWA55BKFjb3fYS4s79VJ0W1KKpkA3Po0t
uhFOmu7Jqd1yqOeGUDoQoctX6/Ex/sMDOFQ+NpschbVIpxJUjynmJLBXNS17ajQ1
r4thNWLriczgIouwUt1dgsCv4mLyduey6ooAIOO7ksxHNAQ1fYjcH3EsZkJAqGIK
pUx6PP/0MIY6+/sjke1QwRWzPP1qwaoWQS+OVJZaOcccnYrhQvUHh7WvAUEC4pmP
UYabBUIEQTFbn7G8hp8Nn52EiXqkPorF3oGM1jtpXFsHOWN+RwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFC2WRRUu0FZL+xKmbk1ARKPfGNIsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDI3
MTgyMS0yMDZiLTQwYWUtYmExMS05MTEyZGJmMTdlYjQvOTU5MGIzODMtYzFjNy0z
YzBkLWIwYjgtOGNjYWU4NzM0NGUxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvNmQyNzE4MjEtMjA2Yi00MGFlLWJh
MTEtOTExMmRiZjE3ZWI0LzZkMjcxODIxLTIwNmItNDBhZS1iYTExLTkxMTJkYmYx
N2ViNC5jcmwwHwYDVR0jBBgwFoAU8LGzdr0DHuSW+9pB2HtplYMuoGIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS82ZDI3MTgyMS0yMDZiLTQwYWUtYmExMS05MTEy
ZGJmMTdlYjQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEwGDQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIKU61oirlt94hGrcpArvty4MQ5Spz0kXbUT6sMXhs1RupfpZJN8DPZc
W9aMBOcoDZBiwbFkVjeYuYquMvXXjkh0/xmy3RY+bFH7WmdEDSU42id0OksZ3xxR
8uP8CXKY9xTG9qFe9di9V3tuPMYnQw/bD+rhneU7vMKPSzNms7P4ro+Sesi4iblk
UdbVhOet+3lYs2xfE1MU1EjXYy5b0wmbh6ySOcruZgyNCPuVLIPoHBh965VTxmVZ
pXYiTubt3Ug9GcNnqU+D+1NMZqj/A+LudbgcbtoyZkKbnolglkb331AadIVW8Njx
mgjnXQKNZHHta7jlqwJbSKk5kdrc9vg=
-----END CERTIFICATE-----
Generated at Wed Aug 6 05:24:58 2025 by rpki-client