Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
File:                     897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa (raw, json)
Hash identifier:          5n5IMbS035SfHIW9kGERC7tMMV9gcciTUQKrVZ/ILZo=
Subject key identifier:   C6:25:68:9B:64:D1:6F:87:B5:77:10:41:33:F4:C9:66:C4:CC:34:C4
Certificate issuer:       /CN=f16b1ed2-491f-4ed7-be99-59b20310c475
Certificate serial:       010D0C9F43285849ED4FD04CAA8A00689308AA80
Authority key identifier: 10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa
Signing time:             Wed 21 May 2025 13:01:04 +0000
ROA not before:           Wed 21 May 2025 13:01:04 +0000
ROA not after:            Tue 19 Aug 2025 13:01:04 +0000
asID:                     11924
IP address blocks:        208.75.140.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 19 Jun 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ed:4f:d0:4c:aa:8a:00:68:93:08:aa:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f16b1ed2-491f-4ed7-be99-59b20310c475
        Validity
            Not Before: May 21 13:01:04 2025 GMT
            Not After : Aug 19 13:01:04 2025 GMT
        Subject: CN=26f7016d-0461-4aef-8354-019ca8cb7597
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:28:5e:2d:5b:c9:d7:1f:ea:ee:5f:a0:ba:98:
                    45:f0:17:6f:ea:12:49:54:7d:43:46:57:e2:82:d4:
                    b7:32:c4:dc:fa:89:ed:ac:8a:af:b7:b5:0d:7c:3c:
                    3e:97:26:73:7b:f1:9b:b6:33:c4:34:9a:8b:c1:6c:
                    f3:75:15:b9:ad:95:14:19:85:68:44:9b:e7:39:60:
                    fb:ec:20:f9:3c:a5:d1:96:62:0e:4b:3a:3c:49:c5:
                    8e:8b:a1:39:21:36:fe:5d:3c:5c:45:fc:1b:23:e1:
                    71:40:0c:5c:47:25:bb:51:2f:79:16:8b:b1:f3:99:
                    33:21:68:2e:ca:c2:42:0f:74:de:77:5d:04:89:63:
                    27:60:b2:21:c6:d6:6a:da:38:ba:e9:63:84:c2:44:
                    1f:86:10:1b:0c:a9:44:b7:bf:1f:ee:7d:6d:e5:28:
                    7c:35:c9:d3:08:e5:c7:96:5a:75:57:82:c7:86:25:
                    9e:e5:cc:ed:93:ca:8c:12:c8:fc:25:63:ed:67:b8:
                    0a:58:c1:2a:c9:1b:41:9f:d1:71:44:a5:ef:9f:72:
                    e1:5d:dc:e0:b0:01:30:e1:9d:a3:9e:41:dc:80:27:
                    a9:1f:78:91:19:ed:fc:f4:be:0e:96:6e:f5:0d:5c:
                    f9:c6:7b:1c:f1:06:10:ed:53:9b:d4:dd:10:78:48:
                    bb:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:25:68:9B:64:D1:6F:87:B5:77:10:41:33:F4:C9:66:C4:CC:34:C4
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/897fcc0f-5d7e-3c60-9bdd-21b4abcc3bb9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475/f16b1ed2-491f-4ed7-be99-59b20310c475.crl

            X509v3 Authority Key Identifier:
                keyid:10:63:9B:2C:4A:02:6A:D8:33:C9:71:22:24:52:5C:80:BE:6C:AB:D6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/f16b1ed2-491f-4ed7-be99-59b20310c475.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.75.140.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         27:b9:c8:93:75:db:77:3a:c8:ff:07:05:5c:98:62:d4:fd:f3:
         66:f9:86:11:be:4e:5b:49:81:0a:fb:e3:86:94:d2:69:94:3f:
         e0:4d:72:fe:51:46:5c:eb:4e:21:db:8a:9a:fb:a9:78:75:70:
         9f:3a:e0:15:7d:d2:fa:f6:76:1e:28:d3:06:70:ac:59:89:d4:
         d4:04:78:1f:0d:c9:92:f5:fe:5e:f2:05:1b:24:be:11:0a:63:
         19:9e:fa:79:af:e3:3d:71:ae:74:3f:09:0e:20:ca:f2:93:f4:
         75:9f:3f:20:53:96:9e:5b:02:58:da:5e:be:eb:2e:80:9d:01:
         03:08:a5:89:36:5c:b8:c1:e4:55:1e:79:1f:8a:20:34:b7:a9:
         6f:80:71:da:1d:d0:70:b3:c7:ea:84:2a:dc:e9:99:5a:b9:76:
         6d:fc:20:7d:1e:01:fd:e8:7f:12:46:a7:02:66:32:db:eb:79:
         b7:a8:83:56:d9:6e:eb:72:5a:02:90:eb:a6:3e:4f:17:78:ee:
         7e:dd:e2:7a:2a:b6:0d:a3:35:fa:12:2d:f9:07:7a:3d:7d:09:
         a3:a7:62:95:1d:5d:f3:43:3c:9b:98:0d:08:39:50:bf:73:47:
         6c:a2:70:b0:00:f9:e1:78:4d:bd:a9:f7:d0:c5:bc:59:56:c2:
         1f:d0:7b:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEntT9BMqooAaJMIqoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjE2YjFlZDItNDkxZi00ZWQ3LWJlOTktNTliMjAzMTBj
NDc1MB4XDTI1MDUyMTEzMDEwNFoXDTI1MDgxOTEzMDEwNFowLzEtMCsGA1UEAxMk
MjZmNzAxNmQtMDQ2MS00YWVmLTgzNTQtMDE5Y2E4Y2I3NTk3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+SheLVvJ1x/q7l+guphF8Bdv6hJJVH1DRlfi
gtS3MsTc+ontrIqvt7UNfDw+lyZze/GbtjPENJqLwWzzdRW5rZUUGYVoRJvnOWD7
7CD5PKXRlmIOSzo8ScWOi6E5ITb+XTxcRfwbI+FxQAxcRyW7US95Foux85kzIWgu
ysJCD3Ted10EiWMnYLIhxtZq2ji66WOEwkQfhhAbDKlEt78f7n1t5Sh8NcnTCOXH
llp1V4LHhiWe5cztk8qMEsj8JWPtZ7gKWMEqyRtBn9FxRKXvn3LhXdzgsAEw4Z2j
nkHcgCepH3iRGe389L4Olm71DVz5xnsc8QYQ7VOb1N0QeEi7QwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMYlaJtk0W+HtXcQQTP0yWbEzDTEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS9mMTZi
MWVkMi00OTFmLTRlZDctYmU5OS01OWIyMDMxMGM0NzUvODk3ZmNjMGYtNWQ3ZS0z
YzYwLTliZGQtMjFiNGFiY2MzYmI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvZjE2YjFlZDItNDkxZi00ZWQ3LWJl
OTktNTliMjAzMTBjNDc1L2YxNmIxZWQyLTQ5MWYtNGVkNy1iZTk5LTU5YjIwMzEw
YzQ3NS5jcmwwHwYDVR0jBBgwFoAUEGObLEoCatgzyXEiJFJcgL5sq9YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS9mMTZiMWVkMi00OTFmLTRlZDctYmU5OS01OWIy
MDMxMGM0NzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0EuMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACe5yJN123c6yP8HBVyYYtT982b5hhG+TltJgQr744aU0mmUP+BNcv5R
RlzrTiHbipr7qXh1cJ864BV90vr2dh4o0wZwrFmJ1NQEeB8NyZL1/l7yBRskvhEK
Yxme+nmv4z1xrnQ/CQ4gyvKT9HWfPyBTlp5bAljaXr7rLoCdAQMIpYk2XLjB5FUe
eR+KIDS3qW+Acdod0HCzx+qEKtzpmVq5dm38IH0eAf3ofxJGpwJmMtvrebeog1bZ
butyWgKQ66Y+Txd47n7d4noqtg2jNfoSLfkHej19CaOnYpUdXfNDPJuYDQg5UL9z
R2yicLAA+eF4Tb2p99DFvFlWwh/Qe4U=
-----END CERTIFICATE-----
Generated at Mon Jun 16 20:39:44 2025 by rpki-client