Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa
File:                     c404092f-b471-3319-8d76-7950384a1e5f.roa (raw, json)
Hash identifier:          NbhmaS/qS4LjoaKa97IG0zwRuZxP3/7diH4b+GnR3mA=
Subject key identifier:   49:F6:15:22:13:1B:B2:A5:37:E4:8F:1E:AC:9A:58:69:B1:BF:D3:62
Certificate issuer:       /CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
Certificate serial:       010D0C9F43285849DC8FD0ACDB18EED4692E3C00
Authority key identifier: 57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa
Signing time:             Thu 15 May 2025 13:01:00 +0000
ROA not before:           Thu 15 May 2025 13:01:00 +0000
ROA not after:            Wed 13 Aug 2025 13:01:00 +0000
asID:                     2559
IP address blocks:        198.217.216.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:dc:8f:d0:ac:db:18:ee:d4:69:2e:3c:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e06497e-e9cc-45cb-85d6-cf2e58e51842
        Validity
            Not Before: May 15 13:01:00 2025 GMT
            Not After : Aug 13 13:01:00 2025 GMT
        Subject: CN=b857641d-e299-4776-9829-98d65aaac776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:35:0c:2c:1f:b9:e3:67:ab:3f:43:ff:52:a1:
                    81:1c:e3:7f:5e:a2:e9:42:09:ac:2b:61:7f:16:ec:
                    4d:bd:69:29:82:a5:f3:10:ab:05:68:28:c4:07:85:
                    12:75:17:14:4a:22:a4:36:5e:7b:38:1c:ea:d4:a0:
                    61:1b:b0:a5:4f:bd:0d:dc:f0:7b:61:86:8c:ac:b7:
                    b9:c0:a4:01:3b:b6:72:ec:ee:e4:aa:76:f7:17:a1:
                    cf:c2:db:f2:a3:c6:d3:8f:8a:6a:de:5c:6e:f6:1b:
                    f2:33:d7:59:c9:b5:a4:51:54:c4:67:6a:31:53:25:
                    d1:cd:bf:0c:52:a8:60:d1:74:87:6f:77:49:d9:ea:
                    eb:fa:fb:fb:15:93:9d:f4:1a:d5:44:94:5c:92:57:
                    c8:28:55:b3:cc:9e:a0:31:8b:bd:3a:3f:03:7b:69:
                    41:c4:67:a4:39:91:d4:46:a8:3e:01:0f:2e:e2:6a:
                    43:c7:7f:7b:ed:af:86:d1:e3:75:d5:a8:5b:a5:c0:
                    cd:62:60:96:36:e6:1f:af:2e:7b:dc:d9:05:1a:12:
                    30:2d:83:b1:1a:a1:39:10:3e:28:a5:a0:44:c9:25:
                    2d:1b:bf:ec:e5:c2:7a:29:54:39:8d:7d:01:5e:d8:
                    2b:d1:36:49:95:c2:74:e9:4f:08:1e:38:d2:cb:ee:
                    ae:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:F6:15:22:13:1B:B2:A5:37:E4:8F:1E:AC:9A:58:69:B1:BF:D3:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/c404092f-b471-3319-8d76-7950384a1e5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842/4e06497e-e9cc-45cb-85d6-cf2e58e51842.crl

            X509v3 Authority Key Identifier:
                keyid:57:6F:9F:C6:66:F6:D1:29:CC:7F:C8:0E:E5:F8:47:B4:CB:F4:D1:81

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/4e06497e-e9cc-45cb-85d6-cf2e58e51842.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.217.216.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9e:82:f7:d4:4a:fc:46:4b:f9:ae:76:c2:56:31:c7:db:83:9f:
         3a:b3:06:0b:30:3f:0b:2e:4e:b0:20:45:ab:ff:6e:53:42:2a:
         df:44:99:2b:ab:15:31:de:8b:4e:ff:30:31:30:5c:7d:22:ca:
         fb:0b:dc:c9:b7:55:77:d6:63:8a:10:48:4b:79:b0:21:ed:bc:
         fb:6d:7b:2c:20:1e:cd:df:6d:85:38:ea:60:f4:28:61:92:b0:
         a5:ba:18:c1:86:e8:74:76:1a:7c:0b:3c:4e:98:30:a6:10:7b:
         25:7d:51:db:46:8d:ec:d2:15:46:f4:e0:5d:19:c2:74:3c:7e:
         73:9b:ca:5b:a7:b6:ee:b0:44:10:ab:6e:2a:f6:53:43:af:ce:
         43:b7:32:68:f7:0c:ab:4d:d8:06:80:42:64:59:25:af:63:2b:
         8e:a2:84:48:b6:68:c3:ba:2a:42:cc:dd:0c:85:2e:e6:da:85:
         8a:88:a0:49:01:18:31:6b:f8:56:4e:e5:46:2f:de:9a:43:c7:
         dc:e8:72:13:a1:25:da:0c:de:55:5d:28:31:4d:91:58:4d:bb:
         7c:41:00:07:7e:4d:13:8a:26:00:71:cd:2f:dc:fc:34:59:ce:
         95:6c:0a:94:74:92:96:74:f8:70:9f:23:ee:a4:94:6d:08:ce:
         8a:6b:6f:32
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEncj9Cs2xju1GkuPAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwNjQ5N2UtZTljYy00NWNiLTg1ZDYtY2YyZTU4ZTUx
ODQyMB4XDTI1MDUxNTEzMDEwMFoXDTI1MDgxMzEzMDEwMFowLzEtMCsGA1UEAxMk
Yjg1NzY0MWQtZTI5OS00Nzc2LTk4MjktOThkNjVhYWFjNzc2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyzUMLB+542erP0P/UqGBHON/XqLpQgmsK2F/
FuxNvWkpgqXzEKsFaCjEB4USdRcUSiKkNl57OBzq1KBhG7ClT70N3PB7YYaMrLe5
wKQBO7Zy7O7kqnb3F6HPwtvyo8bTj4pq3lxu9hvyM9dZybWkUVTEZ2oxUyXRzb8M
Uqhg0XSHb3dJ2err+vv7FZOd9BrVRJRcklfIKFWzzJ6gMYu9Oj8De2lBxGekOZHU
Rqg+AQ8u4mpDx3977a+G0eN11ahbpcDNYmCWNuYfry573NkFGhIwLYOxGqE5ED4o
paBEySUtG7/s5cJ6KVQ5jX0BXtgr0TZJlcJ06U8IHjjSy+6uYwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEn2FSITG7KlN+SPHqyaWGmxv9NiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2
NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJlNThlNTE4NDIvYzQwNDA5MmYtYjQ3MS0z
MzE5LThkNzYtNzk1MDM4NGExZTVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNGUwNjQ5N2UtZTljYy00NWNiLTg1
ZDYtY2YyZTU4ZTUxODQyLzRlMDY0OTdlLWU5Y2MtNDVjYi04NWQ2LWNmMmU1OGU1
MTg0Mi5jcmwwHwYDVR0jBBgwFoAUV2+fxmb20SnMf8gO5fhHtMv00YEwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy80ZTA2NDk3ZS1lOWNjLTQ1Y2ItODVkNi1jZjJl
NThlNTE4NDIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAxtnYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJ6C99RK/EZL+a52wlYxx9uDnzqzBgswPwsuTrAgRav/blNCKt9EmSur
FTHei07/MDEwXH0iyvsL3Mm3VXfWY4oQSEt5sCHtvPtteywgHs3fbYU46mD0KGGS
sKW6GMGG6HR2GnwLPE6YMKYQeyV9UdtGjezSFUb04F0ZwnQ8fnObyluntu6wRBCr
bir2U0OvzkO3Mmj3DKtN2AaAQmRZJa9jK46ihEi2aMO6KkLM3QyFLubahYqIoEkB
GDFr+FZO5UYv3ppDx9zochOhJdoM3lVdKDFNkVhNu3xBAAd+TROKJgBxzS/c/DRZ
zpVsCpR0kpZ0+HCfI+6klG0IzoprbzI=
-----END CERTIFICATE-----
Generated at Sun Jun 15 22:03:09 2025 by rpki-client