Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa
File:                     4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa (raw, json)
Hash identifier:          4W9BKrQlKfhnc2x7NaqBNx+gjR5BNYkqZXbnzPmgjjU=
Subject key identifier:   40:D4:AE:DB:95:31:8C:2F:EB:35:49:2B:5B:20:DE:80:86:17:34:8B
Certificate issuer:       /CN=6ec5d668-721f-4186-82e6-1391fb7784bb
Certificate serial:       010D0C9F4328584A8C70C84E0A85290E75D17280
Authority key identifier: 7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa
Signing time:             Thu 17 Jul 2025 13:01:04 +0000
ROA not before:           Thu 17 Jul 2025 13:01:04 +0000
ROA not after:            Wed 15 Oct 2025 13:01:04 +0000
asID:                     212238
IP address blocks:        172.81.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 11 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:8c:70:c8:4e:0a:85:29:0e:75:d1:72:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ec5d668-721f-4186-82e6-1391fb7784bb
        Validity
            Not Before: Jul 17 13:01:04 2025 GMT
            Not After : Oct 15 13:01:04 2025 GMT
        Subject: CN=259e4fad-8cdc-4ab2-9031-62c541c684e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3a:c5:d6:24:da:b3:b3:b4:41:7d:d7:ce:73:
                    78:f9:46:12:24:3c:b0:99:cf:dd:dd:27:0c:39:cc:
                    63:77:21:5c:3b:eb:7c:69:85:cc:47:b6:cd:3e:0f:
                    67:b1:91:ad:01:ae:50:0e:3f:fe:18:3e:d9:3f:15:
                    74:2b:cf:5c:48:5b:6d:1e:aa:02:b9:27:a6:c5:95:
                    9e:1c:f6:26:35:1d:88:05:84:53:d6:66:7a:b7:17:
                    63:ea:52:d6:af:ef:ea:41:f3:79:76:c0:84:52:e0:
                    01:b5:29:f6:9a:89:16:e2:9b:42:7d:3a:aa:84:da:
                    53:a1:29:00:5c:7a:8f:bb:03:a0:0b:a9:1d:8c:fa:
                    9d:4f:1b:20:26:39:f7:b6:19:a0:35:b4:c9:e8:28:
                    fd:c7:7c:b8:d5:28:42:59:09:9b:c4:bb:3f:62:bc:
                    41:8c:01:78:ce:26:53:f5:2a:36:f7:e0:d9:e0:d7:
                    34:ea:79:1f:6d:bb:06:72:47:90:ff:5b:d6:a9:80:
                    c9:9c:89:8f:5e:83:7a:96:7e:c3:4e:86:fe:31:6b:
                    ee:5c:da:0b:f1:c0:cd:68:43:80:38:4a:13:8f:c0:
                    6e:bc:e9:b1:1a:6e:91:7b:51:e3:fb:f2:79:03:db:
                    f4:7a:51:29:74:88:b8:60:e2:8f:c0:17:8d:3b:d3:
                    70:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:D4:AE:DB:95:31:8C:2F:EB:35:49:2B:5B:20:DE:80:86:17:34:8B
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/4b6ea082-cf66-36cc-9cb0-d75ebcdc8e3e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb/6ec5d668-721f-4186-82e6-1391fb7784bb.crl

            X509v3 Authority Key Identifier:
                keyid:7D:2B:C5:E6:4E:A4:7A:30:F2:01:F7:37:47:FB:D3:47:B7:14:63:24

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/6ec5d668-721f-4186-82e6-1391fb7784bb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.81.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9c:ec:2e:fb:e2:e1:3c:38:5d:63:74:ce:0d:7e:4a:c1:37:e4:
         8a:5c:62:0f:53:ac:a0:db:67:64:06:54:6d:12:fc:64:ed:47:
         0c:39:ef:b4:a5:fb:52:ad:59:2a:32:0a:0a:9b:1b:0d:11:5f:
         36:4c:1f:e2:af:aa:ea:22:f2:fc:a1:3d:2c:67:54:f1:ae:46:
         a9:6d:c8:fd:42:88:e2:c3:39:4b:a7:8d:cf:ed:59:bf:81:b4:
         83:c2:6d:63:0a:b1:71:9c:48:24:c0:92:aa:ec:7c:2e:b2:fb:
         6a:80:5e:d6:96:f4:4a:d7:b8:19:7d:f5:4b:ca:a0:db:f2:c4:
         81:e3:b0:4d:80:15:d8:a8:c1:38:7b:57:4a:57:78:bc:6c:f7:
         cd:fe:27:45:3d:13:37:16:3b:c3:cb:41:e9:ff:1d:1b:55:09:
         ec:76:7f:9c:29:24:ec:6b:b7:1d:c3:66:77:74:13:13:bf:56:
         38:bd:19:fc:a3:a9:62:d8:f3:d5:2e:ca:06:a2:0f:08:24:ea:
         c7:41:f7:1f:72:30:f2:be:8d:9a:25:33:a2:04:f3:3e:75:2d:
         c1:8f:50:04:fe:01:7e:9e:d8:41:c8:9a:3c:07:de:69:b8:45:
         d9:d0:83:84:ba:a5:10:94:c5:8e:cc:c4:4f:7b:8d:80:cc:d6:
         3d:71:33:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqMcMhOCoUpDnXRcoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmVjNWQ2NjgtNzIxZi00MTg2LTgyZTYtMTM5MWZiNzc4
NGJiMB4XDTI1MDcxNzEzMDEwNFoXDTI1MTAxNTEzMDEwNFowLzEtMCsGA1UEAxMk
MjU5ZTRmYWQtOGNkYy00YWIyLTkwMzEtNjJjNTQxYzY4NGUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAojrF1iTas7O0QX3XznN4+UYSJDywmc/d3ScM
OcxjdyFcO+t8aYXMR7bNPg9nsZGtAa5QDj/+GD7ZPxV0K89cSFttHqoCuSemxZWe
HPYmNR2IBYRT1mZ6txdj6lLWr+/qQfN5dsCEUuABtSn2mokW4ptCfTqqhNpToSkA
XHqPuwOgC6kdjPqdTxsgJjn3thmgNbTJ6Cj9x3y41ShCWQmbxLs/YrxBjAF4ziZT
9So29+DZ4Nc06nkfbbsGckeQ/1vWqYDJnImPXoN6ln7DTob+MWvuXNoL8cDNaEOA
OEoTj8BuvOmxGm6Re1Hj+/J5A9v0elEpdIi4YOKPwBeNO9NwwwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEDUrtuVMYwv6zVJK1sg3oCGFzSLMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy82ZWM1
ZDY2OC03MjFmLTQxODYtODJlNi0xMzkxZmI3Nzg0YmIvNGI2ZWEwODItY2Y2Ni0z
NmNjLTljYjAtZDc1ZWJjZGM4ZTNlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvNmVjNWQ2NjgtNzIxZi00MTg2LTgy
ZTYtMTM5MWZiNzc4NGJiLzZlYzVkNjY4LTcyMWYtNDE4Ni04MmU2LTEzOTFmYjc3
ODRiYi5jcmwwHwYDVR0jBBgwFoAUfSvF5k6kejDyAfc3R/vTR7cUYyQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy82ZWM1ZDY2OC03MjFmLTQxODYtODJlNi0xMzkx
ZmI3Nzg0YmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQArFGSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJzsLvvi4Tw4XWN0zg1+SsE35IpcYg9TrKDbZ2QGVG0S/GTtRww577Sl
+1KtWSoyCgqbGw0RXzZMH+Kvquoi8vyhPSxnVPGuRqltyP1CiOLDOUunjc/tWb+B
tIPCbWMKsXGcSCTAkqrsfC6y+2qAXtaW9ErXuBl99UvKoNvyxIHjsE2AFdiowTh7
V0pXeLxs983+J0U9EzcWO8PLQen/HRtVCex2f5wpJOxrtx3DZnd0ExO/Vji9Gfyj
qWLY89UuygaiDwgk6sdB9x9yMPK+jZolM6IE8z51LcGPUAT+AX6e2EHImjwH3mm4
RdnQg4S6pRCUxY7MxE97jYDM1j1xMwk=
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:35:03 2025 by rpki-client