Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/93c4d1c6-fbfc-37a9-aa79-9cb6b7d8d384.roa
File:                     93c4d1c6-fbfc-37a9-aa79-9cb6b7d8d384.roa (raw, json)
Hash identifier:          DbkXUdAqIIPKi9V/YzvMOhS6b0D+cOBeSrMn9qhcZX4=
Subject key identifier:   04:F5:F7:B7:CA:6B:45:56:A5:CD:C8:DA:5F:6A:06:B0:EF:30:39:4C
Certificate issuer:       /CN=3b5275cd-7d56-4cf1-953a-92ba38e28375
Certificate serial:       010D0C9F4328584A233A5A3C70EE466BD8C5B300
Authority key identifier: 4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/93c4d1c6-fbfc-37a9-aa79-9cb6b7d8d384.roa
Signing time:             Mon 09 Jun 2025 20:31:38 +0000
ROA not before:           Mon 09 Jun 2025 20:31:38 +0000
ROA not after:            Sun 07 Sep 2025 20:31:38 +0000
asID:                     396982
IP address blocks:        206.166.200.0/24 maxlen: 24
                          2602:fd96:1::/48 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:23:3a:5a:3c:70:ee:46:6b:d8:c5:b3:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3b5275cd-7d56-4cf1-953a-92ba38e28375
        Validity
            Not Before: Jun  9 20:31:38 2025 GMT
            Not After : Sep  7 20:31:38 2025 GMT
        Subject: CN=50345bf1-9996-4f7e-ad92-cc9e6e7a6383
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c5:70:8d:04:7a:17:18:d1:f6:5f:7a:04:b0:
                    d5:16:b9:52:59:0e:a5:0a:a9:9c:3e:fb:8c:c5:d7:
                    34:be:4d:4b:63:4d:11:65:49:65:6e:b0:3f:93:6b:
                    3d:b2:bc:70:cc:ba:36:83:7d:cf:3b:0f:1c:8d:28:
                    42:05:1a:a9:15:95:c8:83:44:ae:dd:75:72:b2:b8:
                    0c:0c:54:16:9b:ac:eb:27:0d:37:7d:11:b4:61:38:
                    66:bf:ab:f9:a2:5a:eb:ea:84:1a:a9:d8:2c:f0:6a:
                    13:df:77:24:42:b6:1f:09:2d:fe:c0:7f:27:ec:00:
                    9c:06:86:a0:49:bb:1a:c6:7e:e7:c2:c2:71:29:10:
                    89:21:77:32:e6:5a:5b:9c:19:91:c6:31:41:78:8a:
                    f7:49:e1:6b:8e:48:39:5c:fa:83:1f:36:8f:c4:ef:
                    ca:50:32:d0:55:cb:e6:d6:1c:e8:f9:69:d2:71:6f:
                    b0:a7:c7:ef:82:1d:21:bc:18:2e:38:77:0e:1b:dd:
                    21:0f:6c:34:30:ac:80:4e:e4:49:76:78:d7:3b:25:
                    41:51:7a:92:97:19:e4:34:b5:96:07:0f:57:9c:0b:
                    0a:0d:ba:20:45:f7:bb:e2:1b:a3:61:5d:7c:c3:7a:
                    2b:0d:6a:1e:7d:71:2a:a7:70:1b:0b:61:cf:f2:1b:
                    b9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:F5:F7:B7:CA:6B:45:56:A5:CD:C8:DA:5F:6A:06:B0:EF:30:39:4C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/93c4d1c6-fbfc-37a9-aa79-9cb6b7d8d384.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375/3b5275cd-7d56-4cf1-953a-92ba38e28375.crl

            X509v3 Authority Key Identifier:
                keyid:4E:4D:DD:B6:70:F7:B9:4A:AC:35:97:06:E9:2A:88:77:C8:91:67:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/3b5275cd-7d56-4cf1-953a-92ba38e28375.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.166.200.0/24
                IPv6:
                  2602:fd96:1::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:bc:1a:48:4e:67:22:f3:2d:f5:14:85:c4:c2:35:0a:2c:76:
         57:27:dd:04:62:f6:b2:a7:46:e4:c6:96:86:c9:63:61:b6:c5:
         ee:04:d5:3f:7a:49:0d:8f:9a:9e:86:7c:61:63:08:2b:01:16:
         99:a4:18:7e:1b:7b:cc:01:aa:82:9b:0d:9f:6f:7b:0a:7c:00:
         92:63:52:87:74:d2:8f:c5:b0:53:77:f1:b9:05:6d:32:ea:5e:
         35:18:92:6d:cf:ff:a1:25:3a:43:ff:ac:35:28:34:a5:c8:51:
         06:23:01:e5:4e:16:f3:04:df:22:55:a3:7e:7a:5b:af:6b:47:
         ec:31:ea:67:67:d9:20:81:91:1c:bf:8a:e3:00:4f:b7:e5:e3:
         d9:49:a7:97:74:0e:ec:b8:e6:aa:3d:9c:40:19:20:7e:0d:d2:
         bf:61:3a:be:7e:5c:de:b3:50:16:fa:19:8e:c6:e4:b6:b5:88:
         07:c1:27:54:cd:7d:7e:e1:6e:e4:08:07:15:73:fb:32:2d:9a:
         f9:df:09:4c:03:a8:91:47:73:3f:a1:aa:64:f5:10:65:b8:b7:
         a6:96:d0:a9:29:12:36:6c:5a:d4:82:82:ba:e2:14:7d:5a:20:
         5a:b7:2b:02:61:38:3b:8c:d6:4d:d6:e6:47:9e:9b:6b:96:a6:
         e6:21:21:e7
-----BEGIN CERTIFICATE-----
MIIGVDCCBTygAwIBAgIUAQ0Mn0MoWEojOlo8cO5Ga9jFswAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1M2EtOTJiYTM4ZTI4
Mzc1MB4XDTI1MDYwOTIwMzEzOFoXDTI1MDkwNzIwMzEzOFowLzEtMCsGA1UEAxMk
NTAzNDViZjEtOTk5Ni00ZjdlLWFkOTItY2M5ZTZlN2E2MzgzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6cVwjQR6FxjR9l96BLDVFrlSWQ6lCqmcPvuM
xdc0vk1LY00RZUllbrA/k2s9srxwzLo2g33POw8cjShCBRqpFZXIg0Su3XVysrgM
DFQWm6zrJw03fRG0YThmv6v5olrr6oQaqdgs8GoT33ckQrYfCS3+wH8n7ACcBoag
Sbsaxn7nwsJxKRCJIXcy5lpbnBmRxjFBeIr3SeFrjkg5XPqDHzaPxO/KUDLQVcvm
1hzo+WnScW+wp8fvgh0hvBguOHcOG90hD2w0MKyATuRJdnjXOyVBUXqSlxnkNLWW
Bw9XnAsKDbogRfe74hujYV18w3orDWoefXEqp3AbC2HP8hu57QIDAQABo4IDZjCC
A2IwHQYDVR0OBBYEFAT197fKa0VWpc3I2l9qBrDvMDlMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUy
NzVjZC03ZDU2LTRjZjEtOTUzYS05MmJhMzhlMjgzNzUvOTNjNGQxYzYtZmJmYy0z
N2E5LWFhNzktOWNiNmI3ZDhkMzg0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvM2I1Mjc1Y2QtN2Q1Ni00Y2YxLTk1
M2EtOTJiYTM4ZTI4Mzc1LzNiNTI3NWNkLTdkNTYtNGNmMS05NTNhLTkyYmEzOGUy
ODM3NS5jcmwwHwYDVR0jBBgwFoAUTk3dtnD3uUqsNZcG6SqId8iRZ4cwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy8zYjUyNzVjZC03ZDU2LTRjZjEtOTUzYS05MmJh
MzhlMjgzNzUuY2VyMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAzqbIMA8E
AgACMAkDBwAmAv2WAAEwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsG
AQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMu
aHRtbDANBgkqhkiG9w0BAQsFAAOCAQEALLwaSE5nIvMt9RSFxMI1Cix2VyfdBGL2
sqdG5MaWhsljYbbF7gTVP3pJDY+anoZ8YWMIKwEWmaQYfht7zAGqgpsNn297CnwA
kmNSh3TSj8WwU3fxuQVtMupeNRiSbc//oSU6Q/+sNSg0pchRBiMB5U4W8wTfIlWj
fnpbr2tH7DHqZ2fZIIGRHL+K4wBPt+Xj2Umnl3QO7Ljmqj2cQBkgfg3Sv2E6vn5c
3rNQFvoZjsbktrWIB8EnVM19fuFu5AgHFXP7Mi2a+d8JTAOokUdzP6GqZPUQZbi3
ppbQqSkSNmxa1IKCuuIUfVogWrcrAmE4O4zWTdbmR56ba5am5iEh5w==
-----END CERTIFICATE-----
Generated at Mon Jun 16 16:01:09 2025 by rpki-client