Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa
File:                     3a315f55-20c2-37ff-b50f-af30c5811ce0.roa (raw, json)
Hash identifier:          fnWdpp3a/GdluVNKIoVOjOG7Yfg/FC9shZkXkwTdH/I=
Subject key identifier:   2F:42:EA:AE:66:61:F5:C0:8E:B5:A9:77:2A:C1:A7:01:35:67:F4:C3
Certificate issuer:       /CN=8ad56193-8e33-4786-9a64-949338fc325a
Certificate serial:       010D0C9F4328584A7D15F5349A29BF8D8BF18B00
Authority key identifier: 4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa
Signing time:             Sat 12 Jul 2025 01:00:50 +0000
ROA not before:           Sat 12 Jul 2025 01:00:50 +0000
ROA not after:            Fri 10 Oct 2025 01:00:50 +0000
asID:                     7018
IP address blocks:        209.114.4.0/22 maxlen: 24
                          209.114.8.0/21 maxlen: 24
                          209.114.16.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 10 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:7d:15:f5:34:9a:29:bf:8d:8b:f1:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ad56193-8e33-4786-9a64-949338fc325a
        Validity
            Not Before: Jul 12 01:00:50 2025 GMT
            Not After : Oct 10 01:00:50 2025 GMT
        Subject: CN=c9688311-1522-4121-ae22-8d354ccd01ca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:e9:95:0e:11:c5:36:0f:83:43:31:46:be:1e:
                    b9:3c:eb:31:5a:26:9e:3d:c7:e1:ef:4f:8f:d9:49:
                    7e:c9:9d:2b:11:fa:f3:30:d7:cf:a5:e7:a8:5b:68:
                    b4:ae:67:77:8c:ae:65:ac:dd:d2:cd:65:25:c4:36:
                    b6:5e:eb:28:67:65:05:e7:a1:60:d8:1d:c7:e0:19:
                    5c:ba:14:43:2b:c2:56:51:67:ab:5f:49:c1:65:7f:
                    ab:a4:d3:70:fc:b4:cd:23:c5:74:dd:0a:56:54:37:
                    d1:d4:90:35:47:18:cf:8b:f2:c3:96:f6:7d:a4:3d:
                    31:29:d9:98:21:80:42:c4:6e:6e:f5:76:9c:18:55:
                    0c:d9:98:e3:e3:c7:7b:94:f1:e5:d8:2a:29:df:38:
                    e0:f9:1c:bf:e0:d2:e2:25:52:79:0c:30:ad:83:88:
                    fa:3b:8d:9d:e4:97:87:21:9e:95:98:5e:0a:f0:c3:
                    00:f3:a3:d8:53:1a:55:d6:e4:fa:15:c1:7f:5c:7f:
                    f9:b5:4b:72:9d:bc:d9:2f:51:83:a3:4f:e7:1c:9a:
                    45:b4:90:90:90:b5:87:dd:73:2c:99:36:46:94:12:
                    9e:a4:1e:b4:fc:85:8c:c2:cf:1a:2b:87:67:cd:fc:
                    be:f2:8e:cc:6b:aa:06:ef:81:ab:bb:32:2e:c7:7f:
                    cb:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:42:EA:AE:66:61:F5:C0:8E:B5:A9:77:2A:C1:A7:01:35:67:F4:C3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/3a315f55-20c2-37ff-b50f-af30c5811ce0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a/8ad56193-8e33-4786-9a64-949338fc325a.crl

            X509v3 Authority Key Identifier:
                keyid:4A:6C:4F:37:D3:2A:B1:8E:70:1C:BD:06:EB:1B:C3:FB:6D:4E:57:ED

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8ad56193-8e33-4786-9a64-949338fc325a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.114.4.0-209.114.31.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ad:09:ff:6b:5d:e6:5d:16:6e:b5:87:31:a8:6f:52:06:eb:9a:
         14:f7:09:b1:c3:5b:df:06:bd:10:f1:6b:65:a8:60:e2:c6:ab:
         d0:bf:41:a6:80:e8:92:b4:77:c7:25:09:f9:cf:9d:f9:3f:34:
         c6:6f:30:64:dc:4e:8a:80:0a:2f:6e:84:12:28:25:9e:4f:4c:
         d0:e4:e9:03:b1:d0:db:88:b6:7e:63:aa:63:33:3b:02:b8:8f:
         57:4c:5e:b2:f0:20:0c:44:24:63:ee:df:bf:da:f4:ef:9f:92:
         d2:fd:92:fc:f6:03:3d:0d:5e:d9:77:60:27:0c:b4:b5:f8:84:
         a4:df:b3:cc:e2:7e:30:12:43:1e:53:76:67:d8:21:80:bd:f6:
         95:63:9a:9c:af:6e:de:5c:2b:9f:29:51:db:93:28:37:7e:95:
         41:83:37:64:68:73:98:f8:77:9c:66:b1:27:54:a3:a7:e5:cd:
         00:0d:06:61:9c:6a:d3:3f:24:4e:56:f8:4c:dd:67:e6:a0:fe:
         23:6d:e2:fc:08:3e:b7:fd:32:9c:5a:ca:a3:4d:e8:f7:6d:03:
         1c:79:ad:b8:44:d8:90:b9:82:c8:14:aa:29:23:c9:ec:61:41:
         13:ec:49:aa:a1:ff:ca:b9:b8:b8:4e:2e:4c:0e:31:e8:43:de:
         09:9e:c1:5e
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEp9FfU0mim/jYvxiwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGFkNTYxOTMtOGUzMy00Nzg2LTlhNjQtOTQ5MzM4ZmMz
MjVhMB4XDTI1MDcxMjAxMDA1MFoXDTI1MTAxMDAxMDA1MFowLzEtMCsGA1UEAxMk
Yzk2ODgzMTEtMTUyMi00MTIxLWFlMjItOGQzNTRjY2QwMWNhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoOmVDhHFNg+DQzFGvh65POsxWiaePcfh70+P
2Ul+yZ0rEfrzMNfPpeeoW2i0rmd3jK5lrN3SzWUlxDa2XusoZ2UF56Fg2B3H4Blc
uhRDK8JWUWerX0nBZX+rpNNw/LTNI8V03QpWVDfR1JA1RxjPi/LDlvZ9pD0xKdmY
IYBCxG5u9XacGFUM2Zjj48d7lPHl2Cop3zjg+Ry/4NLiJVJ5DDCtg4j6O42d5JeH
IZ6VmF4K8MMA86PYUxpV1uT6FcF/XH/5tUtynbzZL1GDo0/nHJpFtJCQkLWH3XMs
mTZGlBKepB60/IWMws8aK4dnzfy+8o7Ma6oG74GruzIux3/LkQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFC9C6q5mYfXAjrWpdyrBpwE1Z/TDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1
NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkzMzhmYzMyNWEvM2EzMTVmNTUtMjBjMi0z
N2ZmLWI1MGYtYWYzMGM1ODExY2UwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGFkNTYxOTMtOGUzMy00Nzg2LTlh
NjQtOTQ5MzM4ZmMzMjVhLzhhZDU2MTkzLThlMzMtNDc4Ni05YTY0LTk0OTMzOGZj
MzI1YS5jcmwwHwYDVR0jBBgwFoAUSmxPN9MqsY5wHL0G6xvD+21OV+0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84YWQ1NjE5My04ZTMzLTQ3ODYtOWE2NC05NDkz
MzhmYzMyNWEuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBALRcgQD
BAXRcgAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEArQn/a13mXRZutYcxqG9SBuuaFPcJscNb3wa9EPFrZahg
4sar0L9BpoDokrR3xyUJ+c+d+T80xm8wZNxOioAKL26EEiglnk9M0OTpA7HQ24i2
fmOqYzM7AriPV0xesvAgDEQkY+7fv9r075+S0v2S/PYDPQ1e2XdgJwy0tfiEpN+z
zOJ+MBJDHlN2Z9ghgL32lWOanK9u3lwrnylR25MoN36VQYM3ZGhzmPh3nGaxJ1Sj
p+XNAA0GYZxq0z8kTlb4TN1n5qD+I23i/Ag+t/0ynFrKo03o920DHHmtuETYkLmC
yBSqKSPJ7GFBE+xJqqH/yrm4uE4uTA4x6EPeCZ7BXg==
-----END CERTIFICATE-----
Generated at Sat Aug 9 02:47:27 2025 by rpki-client