Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa
File:                     2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa (raw, json)
Hash identifier:          q8PEf360yHoMkAjxkNLVb1nl/DN6LpNAdKWFY4qNflU=
Subject key identifier:   C3:77:B3:F8:21:00:C3:62:65:09:33:31:62:6F:CC:EC:33:74:89:5C
Certificate issuer:       /CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
Certificate serial:       010D0C9F4328584AB3862491155C1D0578C9B000
Authority key identifier: B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa
Signing time:             Thu 31 Jul 2025 13:00:39 +0000
ROA not before:           Thu 31 Jul 2025 13:00:39 +0000
ROA not after:            Wed 29 Oct 2025 13:00:39 +0000
asID:                     395657
IP address blocks:        208.94.236.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:b3:86:24:91:15:5c:1d:05:78:c9:b0:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d6d41513-869c-41f2-9319-11d1e8b95e2b
        Validity
            Not Before: Jul 31 13:00:39 2025 GMT
            Not After : Oct 29 13:00:39 2025 GMT
        Subject: CN=d7962753-88c5-4186-8695-8506afb16b96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:06:c8:66:ef:6c:35:2a:d8:21:96:c7:b3:d1:
                    6d:11:15:fd:61:55:92:79:8b:1d:8b:50:61:18:f1:
                    b8:5c:a1:bf:76:c0:1b:aa:ca:b4:bc:87:fa:29:e2:
                    21:a8:bf:73:1e:ad:a2:4f:f2:75:f7:7d:7b:42:03:
                    2f:25:b1:81:e5:15:7d:99:0e:34:c2:06:65:53:1e:
                    e5:ff:e7:00:a5:f7:46:9d:e8:21:87:78:9a:9a:3c:
                    ef:1a:b8:e1:50:18:99:22:5d:65:69:f4:d0:2d:90:
                    c3:e0:d9:9e:a7:b2:e8:18:4f:7c:75:f3:4c:dc:85:
                    6b:be:e1:b0:07:5d:41:91:ac:15:d8:95:6e:c8:81:
                    e3:01:27:04:57:a5:6a:d7:e1:c9:26:db:50:9f:6a:
                    3e:bf:d0:1c:c8:ab:84:fc:8b:c8:dd:66:5c:9c:f0:
                    68:ba:0b:eb:d3:b3:84:83:a9:a2:9a:40:36:9b:72:
                    77:26:2c:8c:70:12:e7:a9:53:0d:a2:ca:c5:c1:d1:
                    de:65:02:c8:4b:24:26:78:99:a6:15:e1:be:ea:fa:
                    13:59:4c:00:71:ed:c0:a7:f2:9f:4f:0b:59:fb:c2:
                    97:86:e0:46:b8:3f:0e:36:f6:58:92:46:74:cc:0b:
                    23:45:9a:46:e9:6d:7b:4b:69:02:91:a4:a6:3d:73:
                    71:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:77:B3:F8:21:00:C3:62:65:09:33:31:62:6F:CC:EC:33:74:89:5C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/2218f8f8-b5bd-3481-8397-51e1a1f24c54.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b/d6d41513-869c-41f2-9319-11d1e8b95e2b.crl

            X509v3 Authority Key Identifier:
                keyid:B4:29:02:33:DF:93:BC:99:FE:07:E1:A7:D2:13:FA:C2:B9:A8:40:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/d6d41513-869c-41f2-9319-11d1e8b95e2b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.94.236.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         05:c0:86:b3:75:dd:51:11:78:ac:41:0e:2d:80:77:75:7c:66:
         69:e4:59:d4:09:da:1e:aa:30:e1:e6:53:00:0d:32:63:16:46:
         70:2f:25:ac:d0:8c:76:78:fe:28:f9:ab:29:a0:d5:c6:35:87:
         00:ca:36:74:63:f2:e1:59:84:27:12:92:d8:2d:6a:61:38:15:
         3c:ab:a6:34:4b:9b:76:c3:a9:b4:fc:4c:60:4d:50:5c:c9:e0:
         18:f1:5d:68:57:d2:96:01:f8:f4:dc:5a:63:8c:7b:e4:af:3c:
         c4:e3:bf:3f:ef:dd:bc:4d:ab:76:08:ad:37:61:ac:35:b6:ee:
         58:5b:c4:b7:1e:83:fd:d7:17:ab:76:32:46:dd:88:07:11:08:
         3a:d5:68:76:29:ac:ce:fa:ba:53:30:86:02:57:3a:88:3b:17:
         7f:83:93:c4:59:68:f3:4e:7e:08:8a:70:66:9d:86:88:be:6b:
         f7:ce:e7:2d:fc:e1:d7:0a:c8:dd:27:2f:36:ba:37:03:55:70:
         25:1e:76:ff:c9:b1:fd:d1:b8:10:27:5d:ef:10:64:18:83:db:
         f9:4a:5c:86:d1:b9:b5:24:9d:0d:ad:30:02:39:80:b2:50:40:
         99:49:d8:df:24:48:11:d9:d8:fd:60:f5:a9:dc:0f:9a:99:ac:
         65:ad:a8:41
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqzhiSRFVwdBXjJsAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDZkNDE1MTMtODY5Yy00MWYyLTkzMTktMTFkMWU4Yjk1
ZTJiMB4XDTI1MDczMTEzMDAzOVoXDTI1MTAyOTEzMDAzOVowLzEtMCsGA1UEAxMk
ZDc5NjI3NTMtODhjNS00MTg2LTg2OTUtODUwNmFmYjE2Yjk2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgAbIZu9sNSrYIZbHs9FtERX9YVWSeYsdi1Bh
GPG4XKG/dsAbqsq0vIf6KeIhqL9zHq2iT/J19317QgMvJbGB5RV9mQ40wgZlUx7l
/+cApfdGneghh3iamjzvGrjhUBiZIl1lafTQLZDD4Nmep7LoGE98dfNM3IVrvuGw
B11BkawV2JVuyIHjAScEV6Vq1+HJJttQn2o+v9AcyKuE/IvI3WZcnPBougvr07OE
g6mimkA2m3J3JiyMcBLnqVMNosrFwdHeZQLISyQmeJmmFeG+6voTWUwAce3Ap/Kf
TwtZ+8KXhuBGuD8ONvZYkkZ0zAsjRZpG6W17S2kCkaSmPXNxzwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMN3s/ghAMNiZQkzMWJvzOwzdIlcMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0
MTUxMy04NjljLTQxZjItOTMxOS0xMWQxZThiOTVlMmIvMjIxOGY4ZjgtYjViZC0z
NDgxLTgzOTctNTFlMWExZjI0YzU0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZDZkNDE1MTMtODY5Yy00MWYyLTkz
MTktMTFkMWU4Yjk1ZTJiL2Q2ZDQxNTEzLTg2OWMtNDFmMi05MzE5LTExZDFlOGI5
NWUyYi5jcmwwHwYDVR0jBBgwFoAUtCkCM9+TvJn+B+Gn0hP6wrmoQE4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9kNmQ0MTUxMy04NjljLTQxZjItOTMxOS0xMWQx
ZThiOTVlMmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F7sMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAXAhrN13VEReKxBDi2Ad3V8ZmnkWdQJ2h6qMOHmUwANMmMWRnAvJazQ
jHZ4/ij5qymg1cY1hwDKNnRj8uFZhCcSktgtamE4FTyrpjRLm3bDqbT8TGBNUFzJ
4BjxXWhX0pYB+PTcWmOMe+SvPMTjvz/v3bxNq3YIrTdhrDW27lhbxLceg/3XF6t2
MkbdiAcRCDrVaHYprM76ulMwhgJXOog7F3+Dk8RZaPNOfgiKcGadhoi+a/fO5y38
4dcKyN0nLza6NwNVcCUedv/Jsf3RuBAnXe8QZBiD2/lKXIbRubUknQ2tMAI5gLJQ
QJlJ2N8kSBHZ2P1g9ancD5qZrGWtqEE=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:42:09 2025 by rpki-client