Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa
File:                     b86e13ec-5860-3153-b24e-91eb8ecc908e.roa (raw, json)
Hash identifier:          SH/rAPa1yNcVQ4GcYgZixihHYTNP61gY8jV7BEGcpAU=
Subject key identifier:   FE:6F:B9:EE:0A:1B:E7:DF:6A:F0:A0:2C:83:DB:04:23:04:33:FE:1A
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584A68261BCD998D1A88D2F291A8
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa
Signing time:             Fri 04 Jul 2025 13:01:06 +0000
ROA not before:           Fri 04 Jul 2025 13:01:06 +0000
ROA not after:            Thu 02 Oct 2025 13:01:06 +0000
asID:                     397218
IP address blocks:        204.69.234.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 18:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:68:26:1b:cd:99:8d:1a:88:d2:f2:91:a8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Jul  4 13:01:06 2025 GMT
            Not After : Oct  2 13:01:06 2025 GMT
        Subject: CN=201ce02f-5dce-4f7c-9202-0c8e5be9bcd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:6d:26:e7:98:cd:2c:fc:17:6e:e3:0a:3b:31:
                    ff:03:3f:27:82:f9:7d:35:cf:9c:bc:de:31:0f:a9:
                    c8:9d:f3:99:e7:7e:f0:71:8e:fa:ff:0f:c8:fa:b2:
                    c1:61:15:70:13:05:73:91:12:ac:e3:6a:7a:43:96:
                    a3:f1:e8:27:3b:07:ee:87:f7:28:73:d6:ea:94:d4:
                    9d:33:6f:0a:db:35:d0:44:ee:70:22:81:55:72:ee:
                    69:e4:f3:18:9f:73:a5:7a:47:b4:84:f7:e3:a2:e4:
                    d7:a7:26:fa:47:78:16:88:e1:41:d7:fb:9a:64:26:
                    70:9a:50:ff:0f:96:47:19:18:b3:4f:57:c7:2c:de:
                    4e:de:43:54:46:9e:47:c7:c7:18:10:80:7d:d7:dd:
                    8a:cb:6e:2d:f2:b8:0c:c6:09:a0:97:ce:19:5d:14:
                    5d:6f:0a:3a:65:42:b7:5b:12:22:e2:8b:09:e3:31:
                    b0:67:d9:41:60:8e:56:fd:2f:07:ce:d8:26:52:4f:
                    49:cc:6d:40:bd:bc:f4:a9:d3:9a:25:a4:e3:89:88:
                    dc:d8:42:e8:e9:76:3f:1d:90:cd:e1:45:45:a6:1a:
                    8f:8e:ef:0c:2a:ab:4b:6c:9b:62:fa:68:ae:7e:1c:
                    59:df:cc:64:bb:af:9a:49:32:60:51:b4:db:bf:23:
                    65:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6F:B9:EE:0A:1B:E7:DF:6A:F0:A0:2C:83:DB:04:23:04:33:FE:1A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/b86e13ec-5860-3153-b24e-91eb8ecc908e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.69.234.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6c:5a:ef:23:f7:e7:9f:36:f8:00:06:bf:da:c0:20:53:1e:d9:
         b9:37:51:f8:34:fe:de:59:c1:08:6b:77:82:48:c5:51:55:a3:
         c8:b7:10:ad:af:bd:a1:00:ec:e9:75:ec:ef:cd:56:95:25:83:
         20:c5:b3:62:54:c1:da:63:7b:83:6d:b2:75:ce:d2:d6:d8:b9:
         03:83:32:1c:d2:e9:ab:b3:b5:d9:2e:31:3e:cb:00:10:f7:c0:
         b4:80:0f:72:8a:60:4e:83:56:4e:b2:15:8b:ff:a9:06:a3:f2:
         67:e8:fd:96:c9:df:58:90:3d:aa:07:01:05:42:de:88:aa:79:
         bc:e4:32:4f:40:89:4e:49:65:b0:d1:8d:f6:37:47:80:3b:78:
         1b:b6:f4:28:2d:72:3c:4b:f8:3a:9b:ca:12:72:9e:a4:89:48:
         8d:16:a7:d2:48:64:f9:4d:f3:28:6e:c2:63:74:05:d8:72:4c:
         83:8a:02:f8:eb:f3:10:01:eb:d3:af:71:64:c8:c7:49:f9:eb:
         37:6e:ac:cf:76:c3:26:78:41:ad:cc:c1:a8:56:9a:d9:90:cc:
         e0:58:a6:d9:1e:5e:b7:4c:ff:35:e2:e1:7e:30:8d:45:2a:25:
         87:a9:96:55:3d:7d:18:82:68:25:76:2c:bb:c5:8b:ff:fe:9b:
         5a:b0:df:89
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpoJhvNmY0aiNLykagwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWJmNDE5MzUtMzIyOS00ZWM2LWE1ZTYtNGNmNGI0Y2U4
MjQzMB4XDTI1MDcwNDEzMDEwNloXDTI1MTAwMjEzMDEwNlowLzEtMCsGA1UEAxMk
MjAxY2UwMmYtNWRjZS00ZjdjLTkyMDItMGM4ZTViZTliY2QwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvG0m55jNLPwXbuMKOzH/Az8ngvl9Nc+cvN4x
D6nInfOZ537wcY76/w/I+rLBYRVwEwVzkRKs42p6Q5aj8egnOwfuh/coc9bqlNSd
M28K2zXQRO5wIoFVcu5p5PMYn3Oleke0hPfjouTXpyb6R3gWiOFB1/uaZCZwmlD/
D5ZHGRizT1fHLN5O3kNURp5Hx8cYEIB9192Ky24t8rgMxgmgl84ZXRRdbwo6ZUK3
WxIi4osJ4zGwZ9lBYI5W/S8HztgmUk9JzG1Avbz0qdOaJaTjiYjc2ELo6XY/HZDN
4UVFphqPju8MKqtLbJti+miufhxZ38xku6+aSTJgUbTbvyNlqQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP5vue4KG+ffavCgLIPbBCMEM/4aMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0
MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0YjRjZTgyNDMvYjg2ZTEzZWMtNTg2MC0z
MTUzLWIyNGUtOTFlYjhlY2M5MDhlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvYWJmNDE5MzUtMzIyOS00ZWM2LWE1
ZTYtNGNmNGI0Y2U4MjQzL2FiZjQxOTM1LTMyMjktNGVjNi1hNWU2LTRjZjRiNGNl
ODI0My5jcmwwHwYDVR0jBBgwFoAUHHBIf2FRlNIuyoyrzTz3OfdbY7IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9hYmY0MTkzNS0zMjI5LTRlYzYtYTVlNi00Y2Y0
YjRjZTgyNDMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzEXqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGxa7yP35582+AAGv9rAIFMe2bk3Ufg0/t5ZwQhrd4JIxVFVo8i3EK2v
vaEA7Ol17O/NVpUlgyDFs2JUwdpje4NtsnXO0tbYuQODMhzS6auztdkuMT7LABD3
wLSAD3KKYE6DVk6yFYv/qQaj8mfo/ZbJ31iQPaoHAQVC3oiqebzkMk9AiU5JZbDR
jfY3R4A7eBu29CgtcjxL+DqbyhJynqSJSI0Wp9JIZPlN8yhuwmN0BdhyTIOKAvjr
8xAB69OvcWTIx0n56zdurM92wyZ4Qa3MwahWmtmQzOBYptkeXrdM/zXi4X4wjUUq
JYepllU9fRiCaCV2LLvFi//+m1qw34k=
-----END CERTIFICATE-----
Generated at Wed Aug 6 10:06:02 2025 by rpki-client