Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
File:                     1ece9c7d-b04b-3926-9731-b706c26b400a.roa (raw, json)
Hash identifier:          7TPe5J50IL6miGv7GbQQ3jGqpBgqwcDfk9RfjKTVXG0=
Subject key identifier:   F3:B7:D1:E5:88:F7:BB:25:B3:3A:1A:66:2C:45:3B:0B:DE:8C:7F:22
Certificate issuer:       /CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
Certificate serial:       010D0C9F4328584A6DBB3D6A120D351D194C7200
Authority key identifier: 6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa
Signing time:             Sun 06 Jul 2025 13:01:03 +0000
ROA not before:           Sun 06 Jul 2025 13:01:03 +0000
ROA not after:            Sat 04 Oct 2025 13:01:03 +0000
asID:                     20169
IP address blocks:        149.112.51.0/24 maxlen: 24
                          2001:504:128::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:6d:bb:3d:6a:12:0d:35:1d:19:4c:72:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8fd7a5d6-2433-44f5-94f4-95c64a92b2ec
        Validity
            Not Before: Jul  6 13:01:03 2025 GMT
            Not After : Oct  4 13:01:03 2025 GMT
        Subject: CN=9eef06ef-99ee-42e6-9acd-bfdd2f4932b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:29:de:93:73:5a:9c:78:4e:63:46:58:7f:52:
                    6d:9d:17:b3:67:1e:14:eb:bb:87:fc:cf:ea:38:a5:
                    10:43:d5:f9:43:ab:38:10:c2:63:ed:59:db:cd:0e:
                    0f:60:73:5e:3f:e9:e6:f6:1d:bc:7f:b8:b8:ad:a6:
                    4d:a3:87:51:71:54:3f:38:8a:5f:72:07:79:7a:a2:
                    3d:3c:82:05:0e:10:e1:8b:2c:fa:a9:bc:59:58:57:
                    95:01:54:dc:9b:cd:70:6d:46:01:7e:c2:12:a3:e6:
                    80:15:f5:aa:2e:49:c3:d3:76:cd:3a:a6:06:b0:d1:
                    f8:c6:6c:c5:0e:13:41:07:9e:1b:ca:17:1c:ca:9e:
                    2d:14:91:b6:1d:75:5f:37:3c:8f:ed:46:2e:9f:46:
                    19:c2:a3:62:9f:6e:5b:4e:d1:b6:b9:48:ee:ce:0e:
                    b3:fd:de:69:28:bc:2a:a3:cd:13:ce:bc:b3:3d:46:
                    7b:8c:5e:9e:54:ad:53:f6:2a:7e:71:68:e4:81:c5:
                    3b:41:80:d7:38:68:98:15:42:9e:36:fe:27:7e:f8:
                    a4:f3:a1:73:c1:f1:49:51:43:51:b3:f8:e0:b7:ac:
                    de:81:b6:8d:e6:23:a4:43:e4:d9:b2:20:7e:32:cd:
                    a4:6f:b5:77:d4:87:a3:7c:17:38:80:29:1d:27:59:
                    d2:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:B7:D1:E5:88:F7:BB:25:B3:3A:1A:66:2C:45:3B:0B:DE:8C:7F:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/1ece9c7d-b04b-3926-9731-b706c26b400a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.crl

            X509v3 Authority Key Identifier:
                keyid:6A:B4:BA:2D:9B:D2:93:08:BD:70:DA:47:8F:C1:F2:97:CE:19:CE:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/8fd7a5d6-2433-44f5-94f4-95c64a92b2ec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  149.112.51.0/24
                IPv6:
                  2001:504:128::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         31:ac:62:f3:a9:92:71:59:d4:ca:46:eb:d9:31:5a:87:8a:94:
         5f:6f:b9:56:f7:23:b5:92:d6:9c:98:e3:8c:52:b4:d7:3d:7c:
         1c:e9:b4:91:f8:be:a5:70:26:f8:e6:0a:98:56:20:c7:36:33:
         91:44:ec:5e:ed:fa:2a:30:15:5a:99:e8:03:f7:60:18:d0:97:
         9e:e3:16:06:30:7d:9f:cb:91:fe:73:a2:8a:8e:a5:cb:59:a1:
         5e:ee:a3:a5:06:72:bb:46:f0:d3:3a:d6:a1:b4:7e:41:18:7d:
         e1:8b:68:04:ce:76:75:18:35:cf:5e:bd:de:3c:fa:df:e7:85:
         c4:15:af:86:38:9e:09:ac:35:34:29:98:24:9c:97:8b:4f:7f:
         41:92:00:a9:2d:54:39:85:c9:42:cf:82:02:43:dd:e8:1a:eb:
         4a:39:71:46:aa:10:db:97:c1:db:c2:f4:14:75:b0:76:d5:6e:
         f4:82:82:05:65:f2:97:c7:52:3e:14:a3:c1:84:a4:74:54:cd:
         fa:5e:bb:64:fe:0f:a3:65:ac:73:f8:d1:af:37:95:34:0e:59:
         41:13:e4:57:37:40:53:43:34:a0:8f:b6:96:3d:a6:1c:8f:be:
         85:64:3a:90:00:2b:3e:8d:ee:81:8e:fc:be:a4:33:2d:10:41:
         fe:fd:d9:e0
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEptuz1qEg01HRlMcgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGZkN2E1ZDYtMjQzMy00NGY1LTk0ZjQtOTVjNjRhOTJi
MmVjMB4XDTI1MDcwNjEzMDEwM1oXDTI1MTAwNDEzMDEwM1owLzEtMCsGA1UEAxMk
OWVlZjA2ZWYtOTllZS00MmU2LTlhY2QtYmZkZDJmNDkzMmI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhCnek3NanHhOY0ZYf1JtnRezZx4U67uH/M/q
OKUQQ9X5Q6s4EMJj7VnbzQ4PYHNeP+nm9h28f7i4raZNo4dRcVQ/OIpfcgd5eqI9
PIIFDhDhiyz6qbxZWFeVAVTcm81wbUYBfsISo+aAFfWqLknD03bNOqYGsNH4xmzF
DhNBB54byhccyp4tFJG2HXVfNzyP7UYun0YZwqNin25bTtG2uUjuzg6z/d5pKLwq
o80TzryzPUZ7jF6eVK1T9ip+cWjkgcU7QYDXOGiYFUKeNv4nfvik86FzwfFJUUNR
s/jgt6zegbaN5iOkQ+TZsiB+Ms2kb7V31IejfBc4gCkdJ1nSPQIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFPO30eWI97slszoaZixFOwvejH8iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3
YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2NGE5MmIyZWMvMWVjZTljN2QtYjA0Yi0z
OTI2LTk3MzEtYjcwNmMyNmI0MDBhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvOGZkN2E1ZDYtMjQzMy00NGY1LTk0
ZjQtOTVjNjRhOTJiMmVjLzhmZDdhNWQ2LTI0MzMtNDRmNS05NGY0LTk1YzY0YTky
YjJlYy5jcmwwHwYDVR0jBBgwFoAUarS6LZvSkwi9cNpHj8Hyl84ZzrUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS84ZmQ3YTVkNi0yNDMzLTQ0ZjUtOTRmNC05NWM2
NGE5MmIyZWMuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAlXAzMA8E
AgACMAkDBwAgAQUEASgwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAMaxi86mScVnUykbr2TFah4qUX2+5Vvcj
tZLWnJjjjFK01z18HOm0kfi+pXAm+OYKmFYgxzYzkUTsXu36KjAVWpnoA/dgGNCX
nuMWBjB9n8uR/nOiio6ly1mhXu6jpQZyu0bw0zrWobR+QRh94YtoBM52dRg1z169
3jz63+eFxBWvhjieCaw1NCmYJJyXi09/QZIAqS1UOYXJQs+CAkPd6BrrSjlxRqoQ
25fB28L0FHWwdtVu9IKCBWXyl8dSPhSjwYSkdFTN+l67ZP4Po2Wsc/jRrzeVNA5Z
QRPkVzdAU0M0oI+2lj2mHI++hWQ6kAArPo3ugY78vqQzLRBB/v3Z4A==
-----END CERTIFICATE-----
Generated at Wed Aug 6 09:41:05 2025 by rpki-client