Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
File:                     43b63ab6-b85b-3cb0-a726-20010fca26b3.roa (raw, json)
Hash identifier:          Z82MGrv0yas73gwc+QkDEbMu7Ek06NFgIz7hs/Xduno=
Subject key identifier:   BE:8E:0E:BE:AF:A7:E6:0D:A2:80:85:EB:4F:FF:AE:0F:6E:28:F2:0D
Certificate issuer:       /CN=2de5d746-3402-4263-b880-ea4d7ecfc168
Certificate serial:       010D0C9F4328584A225AC15E9F7F927BE3FA6980
Authority key identifier: 6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa
Signing time:             Mon 09 Jun 2025 13:01:01 +0000
ROA not before:           Mon 09 Jun 2025 13:01:01 +0000
ROA not after:            Sun 07 Sep 2025 13:01:01 +0000
asID:                     46265
IP address blocks:        208.52.177.2/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:22:5a:c1:5e:9f:7f:92:7b:e3:fa:69:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2de5d746-3402-4263-b880-ea4d7ecfc168
        Validity
            Not Before: Jun  9 13:01:01 2025 GMT
            Not After : Sep  7 13:01:01 2025 GMT
        Subject: CN=f8058fad-12ee-433a-b044-e138d3e45f3a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:29:3f:2c:ea:14:b7:a6:3b:cf:ab:15:1c:6b:
                    3c:2d:71:d6:dd:ca:36:b1:e1:94:37:11:40:08:a6:
                    31:58:e6:41:d3:74:fd:c6:39:e6:be:b2:df:1c:3e:
                    29:c5:eb:8f:5b:68:10:03:94:33:05:cd:88:48:20:
                    55:c2:45:56:b4:cb:d7:3c:dc:eb:8f:a1:4a:16:ea:
                    b5:60:89:93:9a:a4:5c:a4:a7:29:6f:a8:bd:07:1c:
                    09:f9:ad:a1:fc:59:f6:13:bb:58:d8:30:d4:50:af:
                    13:84:bb:6e:77:8d:62:c9:b2:d4:c8:ac:c2:d4:cd:
                    6b:b5:77:ae:81:7f:fe:0c:c6:87:3f:88:21:2a:7b:
                    f8:e9:71:7f:70:4c:1f:73:ba:34:bc:e4:81:97:54:
                    cc:93:0a:4a:aa:fd:1b:18:e4:6e:d7:43:3a:0c:47:
                    2e:25:71:8d:05:ae:d5:f0:d9:a1:64:36:9c:68:17:
                    b9:8e:bc:06:31:3e:12:7f:e9:61:29:93:3d:97:28:
                    b4:d4:89:cf:49:d6:95:a1:af:93:ed:f3:d2:69:d0:
                    30:a5:c2:fb:f5:46:44:d2:b1:ec:e3:db:ef:17:f5:
                    e8:28:b6:5a:8a:ad:b7:dc:de:c7:f6:13:51:cf:15:
                    01:83:27:b9:59:d3:b9:6c:30:d4:d7:27:ff:6f:3a:
                    98:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:8E:0E:BE:AF:A7:E6:0D:A2:80:85:EB:4F:FF:AE:0F:6E:28:F2:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/43b63ab6-b85b-3cb0-a726-20010fca26b3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168/2de5d746-3402-4263-b880-ea4d7ecfc168.crl

            X509v3 Authority Key Identifier:
                keyid:6B:BB:D0:04:79:CD:D6:C4:66:C1:FB:C0:6A:58:3A:2A:15:6D:48:7C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/2de5d746-3402-4263-b880-ea4d7ecfc168.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.52.177.2/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         71:54:85:dc:b3:4d:1f:2b:2c:2f:d3:61:2b:89:ec:ce:38:1c:
         ff:89:c3:05:c7:b8:e6:60:26:37:0b:20:87:38:81:c4:c8:b1:
         e7:5e:2b:85:80:9c:2c:2f:fa:2b:e3:79:f0:00:7f:69:e3:ae:
         0d:df:d5:ab:cf:fd:bd:bd:40:9d:38:af:0d:a7:54:df:88:1c:
         09:11:c3:28:87:98:f6:15:20:a6:49:ad:8a:d8:a4:39:c4:e6:
         71:e6:22:1e:b0:a5:fa:a3:ec:43:6b:dc:20:b8:c5:15:1e:00:
         ca:52:80:96:52:0f:56:fd:d2:67:b4:92:37:5e:22:52:40:44:
         65:f2:f2:d6:e1:cd:8b:43:0e:db:80:8a:6e:f3:36:6e:65:f8:
         dd:4b:37:71:91:d9:13:fa:82:ad:93:5a:ce:52:8f:94:17:7b:
         56:0d:d5:0e:fb:ff:54:03:fc:7b:bb:0e:17:30:7e:e1:8b:9e:
         13:4a:78:62:b1:e9:09:2e:5f:4c:cf:86:0b:4c:d9:df:fb:0b:
         34:fa:f1:f1:be:29:6e:88:48:29:3f:16:02:16:7f:7b:3a:dc:
         cd:50:23:22:c1:68:f6:38:f2:9b:c0:3d:06:eb:31:b1:9e:f0:
         46:d9:66:77:b3:9f:be:e2:2b:ab:a2:a4:1e:73:28:ec:b0:00:
         a8:ad:0a:15
-----BEGIN CERTIFICATE-----
MIIGRDCCBSygAwIBAgIUAQ0Mn0MoWEoiWsFen3+Se+P6aYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmRlNWQ3NDYtMzQwMi00MjYzLWI4ODAtZWE0ZDdlY2Zj
MTY4MB4XDTI1MDYwOTEzMDEwMVoXDTI1MDkwNzEzMDEwMVowLzEtMCsGA1UEAxMk
ZjgwNThmYWQtMTJlZS00MzNhLWIwNDQtZTEzOGQzZTQ1ZjNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqCk/LOoUt6Y7z6sVHGs8LXHW3co2seGUNxFA
CKYxWOZB03T9xjnmvrLfHD4pxeuPW2gQA5QzBc2ISCBVwkVWtMvXPNzrj6FKFuq1
YImTmqRcpKcpb6i9BxwJ+a2h/Fn2E7tY2DDUUK8ThLtud41iybLUyKzC1M1rtXeu
gX/+DMaHP4ghKnv46XF/cEwfc7o0vOSBl1TMkwpKqv0bGORu10M6DEcuJXGNBa7V
8NmhZDacaBe5jrwGMT4Sf+lhKZM9lyi01InPSdaVoa+T7fPSadAwpcL79UZE0rHs
49vvF/XoKLZaiq233N7H9hNRzxUBgye5WdO5bDDU1yf/bzqYZwIDAQABo4IDVjCC
A1IwHQYDVR0OBBYEFL6ODr6vp+YNooCF60//rg9uKPINMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1
ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRkN2VjZmMxNjgvNDNiNjNhYjYtYjg1Yi0z
Y2IwLWE3MjYtMjAwMTBmY2EyNmIzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMmRlNWQ3NDYtMzQwMi00MjYzLWI4
ODAtZWE0ZDdlY2ZjMTY4LzJkZTVkNzQ2LTM0MDItNDI2My1iODgwLWVhNGQ3ZWNm
YzE2OC5jcmwwHwYDVR0jBBgwFoAUa7vQBHnN1sRmwfvAalg6KhVtSHwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8yZGU1ZDc0Ni0zNDAyLTQyNjMtYjg4MC1lYTRk
N2VjZmMxNjguY2VyMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAATAHAwUA0DSxAjBU
BgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYBBQUHAgEWLGh0dHBzOi8v
d3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5odG1sMA0GCSqGSIb3DQEB
CwUAA4IBAQBxVIXcs00fKywv02EriezOOBz/icMFx7jmYCY3CyCHOIHEyLHnXiuF
gJwsL/or43nwAH9p464N39Wrz/29vUCdOK8Np1TfiBwJEcMoh5j2FSCmSa2K2KQ5
xOZx5iIesKX6o+xDa9wguMUVHgDKUoCWUg9W/dJntJI3XiJSQERl8vLW4c2LQw7b
gIpu8zZuZfjdSzdxkdkT+oKtk1rOUo+UF3tWDdUO+/9UA/x7uw4XMH7hi54TSnhi
sekJLl9Mz4YLTNnf+ws0+vHxviluiEgpPxYCFn97OtzNUCMiwWj2OPKbwD0G6zGx
nvBG2WZ3s5++4iuroqQecyjssACorQoV
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:46:23 2025 by rpki-client