Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
File:                     a789ba80-8aff-3b9c-92e1-e386d72187ea.roa (raw, json)
Hash identifier:          ERaHW09/xiGINAAvi3pBcSfjeUwqTqYfKub6N2YjlI0=
Subject key identifier:   8E:0E:DC:87:E2:2F:97:8C:01:F1:B7:4E:8E:7F:3E:C5:F6:6F:B2:14
Certificate issuer:       /CN=0ace9928-8310-4c75-a54b-a4085ec0045a
Certificate serial:       010D0C9F4328584AADF12238C989FFF203FA7D40
Authority key identifier: EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     16668
IP address blocks:        199.181.80.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:22:38:c9:89:ff:f2:03:fa:7d:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0ace9928-8310-4c75-a54b-a4085ec0045a
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=ac6f6b5c-191b-4d84-ac08-8ebfb8d694b6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:2b:44:b9:16:53:ce:83:5d:2d:a4:03:56:6a:
                    4c:4c:2c:ec:73:92:e6:19:36:a9:85:26:05:ed:a6:
                    e9:d7:32:c5:0f:d0:d3:2c:b9:fb:3f:25:55:c7:93:
                    06:96:26:ca:2f:14:98:ef:de:c1:93:b1:d2:ad:6f:
                    44:06:07:b6:6a:17:21:1b:1c:a0:c6:d6:8d:0e:fe:
                    3a:3b:2a:78:ca:8e:81:3b:bf:24:8a:d3:3d:78:1c:
                    7f:95:46:ea:51:ab:88:fc:6d:ca:4a:23:68:84:7e:
                    9a:49:63:86:02:b3:19:e6:7f:40:62:43:37:ba:99:
                    93:5f:6e:c3:d4:e0:fe:19:64:0c:31:6b:da:2c:37:
                    53:4e:fe:eb:76:c2:d8:dc:f7:39:ca:a4:4e:f9:3f:
                    50:fa:b3:36:a6:fd:bd:b5:43:67:fb:52:5d:c0:5e:
                    41:28:d9:92:89:da:20:3b:c2:f1:54:01:6f:f5:0b:
                    f3:47:fd:b5:60:5d:b4:6e:12:a1:b8:8e:fa:a2:9e:
                    91:43:c4:79:14:01:16:c4:06:33:bb:68:66:4e:13:
                    c1:20:a1:26:65:03:ed:38:91:b9:9d:45:3c:8d:13:
                    ac:ae:1d:97:be:2e:8c:d4:2f:c7:d3:54:64:9a:30:
                    86:2a:b3:ae:0f:d3:82:e5:39:a3:05:a3:17:48:2a:
                    16:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:0E:DC:87:E2:2F:97:8C:01:F1:B7:4E:8E:7F:3E:C5:F6:6F:B2:14
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/a789ba80-8aff-3b9c-92e1-e386d72187ea.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a/0ace9928-8310-4c75-a54b-a4085ec0045a.crl

            X509v3 Authority Key Identifier:
                keyid:EB:E8:D8:EF:F1:B2:6E:87:EA:47:78:DD:83:AD:01:0F:B6:FF:81:10

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/0ace9928-8310-4c75-a54b-a4085ec0045a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  199.181.80.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:ac:dd:a5:43:7f:22:09:5a:ec:38:23:ce:6c:b0:17:8e:c2:
         b0:80:37:2f:2b:e8:9a:6f:61:b9:11:e0:1c:be:cf:8d:39:d7:
         6d:f0:bb:a9:3a:43:be:e7:c5:8e:90:35:42:36:14:4b:be:40:
         f9:3c:12:3f:e5:2d:35:bc:dc:7a:41:1f:8e:17:ce:37:72:a9:
         59:b0:52:24:b2:68:b7:9d:6f:d9:ff:75:9f:85:17:a0:4a:5b:
         a5:67:b1:50:eb:5b:a7:86:be:96:94:f3:02:31:99:41:55:b1:
         e5:4f:31:f2:38:37:7f:c9:2d:44:f0:7e:ca:c9:f0:9f:77:ce:
         4f:dd:aa:27:7a:52:db:42:1e:75:17:9f:ba:5f:fb:92:4c:2b:
         76:a1:12:65:f8:58:0f:48:d6:e5:88:c4:47:72:40:97:a0:01:
         ad:ad:97:a6:b1:bd:ea:9c:d5:4d:6f:6b:8b:a6:9a:9d:b4:50:
         29:68:fe:e9:e3:65:82:e9:0e:38:07:dc:09:a1:11:ec:df:fb:
         a9:8f:b1:11:28:88:4a:0a:4e:94:92:93:ed:4b:00:fe:7d:30:
         a7:fc:89:23:31:90:3b:ce:33:60:78:be:9a:48:90:1a:48:c1:
         03:8d:b0:79:0f:c7:ee:42:ee:25:05:1e:06:b2:61:3b:f9:62:
         3b:e8:d0:6d
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqt8SI4yYn/8gP6fUAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMGFjZTk5MjgtODMxMC00Yzc1LWE1NGItYTQwODVlYzAw
NDVhMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
YWM2ZjZiNWMtMTkxYi00ZDg0LWFjMDgtOGViZmI4ZDY5NGI2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnitEuRZTzoNdLaQDVmpMTCzsc5LmGTaphSYF
7abp1zLFD9DTLLn7PyVVx5MGlibKLxSY797Bk7HSrW9EBge2ahchGxygxtaNDv46
Oyp4yo6BO78kitM9eBx/lUbqUauI/G3KSiNohH6aSWOGArMZ5n9AYkM3upmTX27D
1OD+GWQMMWvaLDdTTv7rdsLY3Pc5yqRO+T9Q+rM2pv29tUNn+1JdwF5BKNmSidog
O8LxVAFv9QvzR/21YF20bhKhuI76op6RQ8R5FAEWxAYzu2hmThPBIKEmZQPtOJG5
nUU8jROsrh2Xvi6M1C/H01RkmjCGKrOuD9OC5TmjBaMXSCoWVwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFI4O3IfiL5eMAfG3To5/PsX2b7IUMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWNl
OTkyOC04MzEwLTRjNzUtYTU0Yi1hNDA4NWVjMDA0NWEvYTc4OWJhODAtOGFmZi0z
YjljLTkyZTEtZTM4NmQ3MjE4N2VhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMGFjZTk5MjgtODMxMC00Yzc1LWE1
NGItYTQwODVlYzAwNDVhLzBhY2U5OTI4LTgzMTAtNGM3NS1hNTRiLWE0MDg1ZWMw
MDQ1YS5jcmwwHwYDVR0jBBgwFoAU6+jY7/GybofqR3jdg60BD7b/gRAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wYWNlOTkyOC04MzEwLTRjNzUtYTU0Yi1hNDA4
NWVjMDA0NWEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAx7VQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACus3aVDfyIJWuw4I85ssBeOwrCANy8r6JpvYbkR4By+z405123wu6k6
Q77nxY6QNUI2FEu+QPk8Ej/lLTW83HpBH44XzjdyqVmwUiSyaLedb9n/dZ+FF6BK
W6VnsVDrW6eGvpaU8wIxmUFVseVPMfI4N3/JLUTwfsrJ8J93zk/dqid6UttCHnUX
n7pf+5JMK3ahEmX4WA9I1uWIxEdyQJegAa2tl6axveqc1U1va4ummp20UClo/unj
ZYLpDjgH3AmhEezf+6mPsREoiEoKTpSSk+1LAP59MKf8iSMxkDvOM2B4vppIkBpI
wQONsHkPx+5C7iUFHgayYTv5Yjvo0G0=
-----END CERTIFICATE-----
Generated at Thu Aug 7 12:54:04 2025 by rpki-client