Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
File:                     7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa (raw, json)
Hash identifier:          O9jn1me00xUGDu46+iNFKK3BiOa0s1ulf8HnWq6pISQ=
Subject key identifier:   75:BE:41:AF:03:4C:C0:8A:66:33:7C:EE:8E:5C:2D:51:02:3A:2A:4F
Certificate issuer:       /CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
Certificate serial:       010D0C9F43285849FE0FF89AC5628EA908BF5680
Authority key identifier: 5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     30698
IP address blocks:        216.213.56.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:f8:9a:c5:62:8e:a9:08:bf:56:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=55e6e2b9-6fc8-49ce-a7d2-a4b3688fc6bb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:cd:16:62:74:c1:b9:9b:9e:e2:5a:06:c3:
                    ee:e5:be:5c:bf:4c:c6:3c:a3:83:34:a4:f2:14:76:
                    be:0a:71:88:89:65:7b:28:13:e9:1c:a5:0c:46:8f:
                    86:32:35:b1:03:9a:13:3d:f8:71:13:85:f9:3b:6a:
                    c3:47:df:9c:ff:ac:90:15:4f:2a:35:a0:e7:37:50:
                    0e:fd:a7:b5:6e:65:7e:4d:5f:7a:b5:08:3c:61:75:
                    66:46:a6:22:ec:3d:9f:41:66:08:44:06:3a:ec:3f:
                    dd:c2:33:4d:1a:a4:54:7e:55:2f:8c:37:89:3c:0d:
                    25:fa:50:e6:18:63:0b:c4:81:ad:73:8d:23:2e:d2:
                    95:9e:6d:ac:1b:14:64:62:05:0a:88:af:27:3a:09:
                    63:7e:e1:fa:e4:48:55:10:0e:76:d3:57:17:ce:dc:
                    44:ea:ba:43:d5:55:5f:58:ee:d7:b2:a4:3e:49:40:
                    27:59:6a:5a:83:55:d1:f7:30:98:b8:74:cb:57:9f:
                    43:f5:9b:78:d0:40:3c:ae:23:fc:80:17:52:de:ca:
                    ce:eb:e0:b1:3f:d6:4a:b8:ee:41:4c:b1:a6:81:0a:
                    0d:ec:27:0d:28:9d:47:db:1f:9b:43:b5:1d:03:fe:
                    a0:2a:05:e7:cd:83:4f:33:93:3e:d5:82:5d:29:8f:
                    89:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:BE:41:AF:03:4C:C0:8A:66:33:7C:EE:8E:5C:2D:51:02:3A:2A:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/7e14ec4f-daa8-300f-a9a9-392c65ee796a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.crl

            X509v3 Authority Key Identifier:
                keyid:5B:FA:7D:6D:51:BC:71:AD:7E:B6:ED:F9:08:82:F7:AC:5F:52:2B:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/fd5491fe-3c11-4ea3-8ea8-7e403a6eeb49.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.213.56.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9b:41:c1:25:67:47:e2:35:02:a0:8a:ba:85:1e:82:b0:19:e7:
         ff:0c:18:16:7d:05:52:36:ce:2a:59:60:0d:db:05:51:45:d1:
         06:70:4a:39:74:5f:ce:b7:f6:2e:6c:90:76:15:8d:69:5c:c1:
         d2:86:3a:9d:2d:d3:3c:50:f6:80:c1:2b:9a:15:63:54:ab:d2:
         a5:eb:3a:28:91:57:61:52:41:62:e9:11:14:be:ac:31:8e:65:
         7d:4e:a6:c1:a3:81:0f:b8:b1:01:17:e4:bc:4d:20:20:ab:07:
         df:39:f6:7f:63:e1:0b:c2:55:b0:02:d4:fd:9d:d4:36:fb:a8:
         1c:be:82:3d:d4:d5:4e:2b:55:fa:2c:a6:f1:45:82:b3:b4:d3:
         f8:e8:9e:7b:44:a7:f4:64:97:e7:1b:2d:16:21:88:7e:b8:ec:
         e8:3f:8c:e0:20:47:18:9e:93:32:bc:53:d0:5b:0e:1f:83:27:
         ef:ca:d3:21:9d:f6:d1:f3:99:ac:1c:c2:19:74:ca:6c:9e:69:
         62:34:43:14:a7:a9:07:9b:33:af:69:66:07:7b:96:1a:fd:8e:
         e8:e1:87:95:b0:2a:55:c6:64:fd:e8:e2:cc:5b:9f:59:59:49:
         42:09:c8:b9:b0:09:c5:c5:a3:f4:05:62:d1:6e:c5:bd:0d:5a:
         ea:d2:4c:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D/iaxWKOqQi/VoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmQ1NDkxZmUtM2MxMS00ZWEzLThlYTgtN2U0MDNhNmVl
YjQ5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
NTVlNmUyYjktNmZjOC00OWNlLWE3ZDItYTRiMzY4OGZjNmJiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1/NFmJ0wbmbnuJaBsPu5b5cv0zGPKODNKTy
FHa+CnGIiWV7KBPpHKUMRo+GMjWxA5oTPfhxE4X5O2rDR9+c/6yQFU8qNaDnN1AO
/ae1bmV+TV96tQg8YXVmRqYi7D2fQWYIRAY67D/dwjNNGqRUflUvjDeJPA0l+lDm
GGMLxIGtc40jLtKVnm2sGxRkYgUKiK8nOgljfuH65EhVEA5201cXztxE6rpD1VVf
WO7XsqQ+SUAnWWpag1XR9zCYuHTLV59D9Zt40EA8riP8gBdS3srO6+CxP9ZKuO5B
TLGmgQoN7CcNKJ1H2x+bQ7UdA/6gKgXnzYNPM5M+1YJdKY+JFQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHW+Qa8DTMCKZjN87o5cLVECOipPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0
OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQwM2E2ZWViNDkvN2UxNGVjNGYtZGFhOC0z
MDBmLWE5YTktMzkyYzY1ZWU3OTZhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZmQ1NDkxZmUtM2MxMS00ZWEzLThl
YTgtN2U0MDNhNmVlYjQ5L2ZkNTQ5MWZlLTNjMTEtNGVhMy04ZWE4LTdlNDAzYTZl
ZWI0OS5jcmwwHwYDVR0jBBgwFoAUW/p9bVG8ca1+tu35CIL3rF9SK3YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mZDU0OTFmZS0zYzExLTRlYTMtOGVhOC03ZTQw
M2E2ZWViNDkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQD2NU4MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJtBwSVnR+I1AqCKuoUegrAZ5/8MGBZ9BVI2zipZYA3bBVFF0QZwSjl0
X8639i5skHYVjWlcwdKGOp0t0zxQ9oDBK5oVY1Sr0qXrOiiRV2FSQWLpERS+rDGO
ZX1OpsGjgQ+4sQEX5LxNICCrB9859n9j4QvCVbAC1P2d1Db7qBy+gj3U1U4rVfos
pvFFgrO00/jonntEp/Rkl+cbLRYhiH647Og/jOAgRxiekzK8U9BbDh+DJ+/K0yGd
9tHzmawcwhl0ymyeaWI0QxSnqQebM69pZgd7lhr9jujhh5WwKlXGZP3o4sxbn1lZ
SUIJyLmwCcXFo/QFYtFuxb0NWurSTBA=
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:30:01 2025 by rpki-client