Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa
File:                     896b34a0-7255-3d97-889e-4198edcd6b5b.roa (raw, json)
Hash identifier:          kavXRBwCF/jUIYRyfzGKHO4+G7j0IGvTaEfxcxrDFBM=
Subject key identifier:   DA:BA:1B:20:F1:47:90:22:C3:66:79:5A:B5:DE:A3:95:84:47:E5:07
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F43285849D85F999A61103F9DB1210580
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa
Signing time:             Wed 14 May 2025 01:00:47 +0000
ROA not before:           Wed 14 May 2025 01:00:47 +0000
ROA not after:            Tue 12 Aug 2025 01:00:47 +0000
asID:                     271
IP address blocks:        206.12.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 15 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:d8:5f:99:9a:61:10:3f:9d:b1:21:05:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: May 14 01:00:47 2025 GMT
            Not After : Aug 12 01:00:47 2025 GMT
        Subject: CN=539735cb-c38b-4862-87cd-2f180af367b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:46:58:25:1c:97:47:48:03:79:23:69:c2:f0:
                    8d:aa:2f:3a:d4:14:a2:bd:67:d7:c0:a6:44:56:22:
                    74:44:d8:aa:52:a5:ac:c9:5d:5b:33:7f:54:5d:ec:
                    d8:3b:fc:0e:c5:59:08:84:3f:7e:63:d1:da:07:c9:
                    13:89:7b:68:9c:8a:9d:16:aa:19:30:03:f0:74:fe:
                    0a:d7:a9:e2:9d:01:f7:56:91:95:56:9c:f8:fe:1a:
                    d7:0e:fe:04:74:e4:11:c2:58:98:d7:7a:9e:d6:dd:
                    eb:bc:98:c1:05:ea:c5:f8:46:88:0d:30:9f:d5:d0:
                    51:60:52:d0:d5:9a:23:35:da:b4:59:ac:f0:ab:f1:
                    aa:01:cb:bc:4d:db:ec:dc:2c:38:4e:ef:ca:85:5c:
                    00:e1:c2:75:43:3f:8e:61:7d:ee:49:58:df:1e:34:
                    1b:04:b2:3c:1d:78:7c:6c:cd:b5:84:05:ac:2e:cd:
                    ce:fe:a3:ef:36:f1:85:c4:5d:d0:d6:9e:9e:3e:4e:
                    60:2b:8b:d3:eb:f1:5e:51:d1:b6:7c:5a:de:e4:cc:
                    9d:da:8a:a2:c4:61:2a:c4:1d:b9:cb:0b:ed:f3:ae:
                    d7:48:49:66:67:96:c2:4b:f5:69:1f:8b:fa:ae:0f:
                    f9:83:58:77:5c:e7:2f:f5:05:d7:25:9e:0c:ba:eb:
                    92:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:BA:1B:20:F1:47:90:22:C3:66:79:5A:B5:DE:A3:95:84:47:E5:07
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/896b34a0-7255-3d97-889e-4198edcd6b5b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.5.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         35:ff:8a:0a:25:e7:38:94:e6:20:22:4e:ac:86:6e:8f:41:03:
         73:e5:a5:f5:f8:90:69:95:48:06:ec:f5:59:e9:6f:86:7f:dc:
         c2:32:01:b3:db:1d:63:ce:7e:df:2d:07:4b:58:93:db:91:06:
         d3:5c:e0:f6:ea:d8:67:88:9c:05:bf:2a:24:f7:75:e0:bf:bf:
         ce:3b:ba:e0:9b:d3:dc:be:1e:99:2f:d2:c7:f7:a0:08:f3:75:
         04:fd:bd:96:0f:01:3f:0e:0c:a9:67:27:d6:c6:78:f7:cd:5a:
         33:c0:d9:7b:c7:c8:2a:49:95:27:6a:6f:0c:2a:e7:dd:8f:36:
         08:75:73:99:8d:27:15:1e:8f:06:2f:27:f0:78:23:bc:23:01:
         e9:fe:3e:e1:54:7b:f9:47:ef:7a:b1:f8:61:ae:7a:f3:fe:b6:
         df:45:b8:ee:67:79:0a:98:62:13:87:42:e0:b2:dc:80:2d:8e:
         39:c9:b4:24:02:22:a4:85:e8:6a:d3:92:13:5f:b2:9b:79:49:
         f7:e1:af:14:d7:e9:59:97:1e:93:83:69:07:d4:62:bc:87:d2:
         c3:6f:5a:53:7a:67:16:b0:36:84:56:36:a3:88:5c:75:25:8c:
         46:a3:51:13:89:93:97:d7:e2:37:a3:ca:c9:ec:4d:3b:50:80:
         43:46:69:2a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnYX5maYRA/nbEhBYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDUxNDAxMDA0N1oXDTI1MDgxMjAxMDA0N1owLzEtMCsGA1UEAxMk
NTM5NzM1Y2ItYzM4Yi00ODYyLTg3Y2QtMmYxODBhZjM2N2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjkZYJRyXR0gDeSNpwvCNqi861BSivWfXwKZE
ViJ0RNiqUqWsyV1bM39UXezYO/wOxVkIhD9+Y9HaB8kTiXtonIqdFqoZMAPwdP4K
16ninQH3VpGVVpz4/hrXDv4EdOQRwliY13qe1t3rvJjBBerF+EaIDTCf1dBRYFLQ
1ZojNdq0Wazwq/GqAcu8Tdvs3Cw4Tu/KhVwA4cJ1Qz+OYX3uSVjfHjQbBLI8HXh8
bM21hAWsLs3O/qPvNvGFxF3Q1p6ePk5gK4vT6/FeUdG2fFre5Myd2oqixGEqxB25
ywvt867XSElmZ5bCS/VpH4v6rg/5g1h3XOcv9QXXJZ4MuuuSdQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNq6GyDxR5Aiw2Z5WrXeo5WER+UHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvODk2YjM0YTAtNzI1NS0z
ZDk3LTg4OWUtNDE5OGVkY2Q2YjViLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzgwFMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADX/igol5ziU5iAiTqyGbo9BA3PlpfX4kGmVSAbs9Vnpb4Z/3MIyAbPb
HWPOft8tB0tYk9uRBtNc4Pbq2GeInAW/KiT3deC/v847uuCb09y+Hpkv0sf3oAjz
dQT9vZYPAT8ODKlnJ9bGePfNWjPA2XvHyCpJlSdqbwwq592PNgh1c5mNJxUejwYv
J/B4I7wjAen+PuFUe/lH73qx+GGuevP+tt9FuO5neQqYYhOHQuCy3IAtjjnJtCQC
IqSF6GrTkhNfspt5SffhrxTX6VmXHpODaQfUYryH0sNvWlN6ZxawNoRWNqOIXHUl
jEajUROJk5fX4jejysnsTTtQgENGaSo=
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:22:42 2025 by rpki-client