Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9a30f1-f0c0-3e18-b47b-b5d039a7e5e6.roa
File:                     8b9a30f1-f0c0-3e18-b47b-b5d039a7e5e6.roa (raw, json)
Hash identifier:          qDPSgLF6zeerjlmu7+ZKNCCNgp0I34VUNysIxzgEWao=
Subject key identifier:   A7:9D:1E:BA:75:C3:3B:C4:C8:7D:4D:7C:0B:BA:5B:54:AE:52:55:A1
Certificate issuer:       /CN=da370214-1d61-48bf-84a0-a60096ccaae7
Certificate serial:       010D0C9F4328584AA6F61FBF0A209B5BD548C180
Authority key identifier: F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9a30f1-f0c0-3e18-b47b-b5d039a7e5e6.roa
Signing time:             Sun 27 Jul 2025 01:00:49 +0000
ROA not before:           Sun 27 Jul 2025 01:00:49 +0000
ROA not after:            Sat 25 Oct 2025 01:00:49 +0000
asID:                     5065
IP address blocks:        216.132.26.0/24 maxlen: 24
                          216.132.27.0/24 maxlen: 24
                          216.132.28.0/24 maxlen: 24
                          216.132.29.0/24 maxlen: 24
                          216.132.30.0/24 maxlen: 24
                          216.132.31.0/24 maxlen: 24
                          216.132.96.0/24 maxlen: 24
                          216.132.97.0/24 maxlen: 24
                          216.132.98.0/24 maxlen: 24
                          216.132.99.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:a6:f6:1f:bf:0a:20:9b:5b:d5:48:c1:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=da370214-1d61-48bf-84a0-a60096ccaae7
        Validity
            Not Before: Jul 27 01:00:49 2025 GMT
            Not After : Oct 25 01:00:49 2025 GMT
        Subject: CN=5b56445c-0506-476e-9a59-ad7b43a8fa60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:40:43:10:7a:49:38:fb:47:54:a9:57:3a:de:
                    95:e0:5b:d0:8a:7b:c3:fe:1c:14:5a:d7:29:bc:36:
                    7b:94:4c:0a:68:b7:21:5d:62:2b:6d:c8:d9:4c:cc:
                    1d:ab:4d:84:49:20:9a:67:d3:b3:d9:a6:b5:d1:f8:
                    b3:cb:a1:c2:48:e8:1a:a1:fe:08:4e:eb:90:c8:0b:
                    56:15:4d:49:17:74:2d:1f:57:1d:2b:e5:37:0c:20:
                    4b:f6:de:75:a1:48:6b:63:cc:5e:97:64:08:39:6d:
                    d6:c7:cb:e3:78:ca:66:02:bd:d5:93:52:95:5a:d4:
                    97:11:4b:b3:81:5f:7e:67:1f:aa:1c:13:ab:18:d1:
                    ee:ea:0e:c2:0d:d8:4d:e5:8d:cf:0e:5a:74:7d:a7:
                    1a:5d:01:00:86:c7:7e:bb:19:d6:19:dc:0a:52:dc:
                    52:14:f3:6d:f6:14:4a:d0:2b:ba:68:a7:86:c5:4d:
                    ff:08:41:ea:9f:c3:32:65:b5:b0:e9:88:70:6c:23:
                    2e:18:73:9d:fd:38:30:c0:76:6e:ac:37:c3:61:ec:
                    84:6a:b9:10:07:04:99:b9:8a:16:33:f2:28:74:9a:
                    34:e7:7c:f1:8f:78:de:5f:3d:07:4c:3c:8c:3c:eb:
                    85:82:9f:8a:99:52:5f:48:00:d8:21:ee:e4:6f:43:
                    e7:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:9D:1E:BA:75:C3:3B:C4:C8:7D:4D:7C:0B:BA:5B:54:AE:52:55:A1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/8b9a30f1-f0c0-3e18-b47b-b5d039a7e5e6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7/da370214-1d61-48bf-84a0-a60096ccaae7.crl

            X509v3 Authority Key Identifier:
                keyid:F2:73:37:4B:91:7B:C5:74:1F:84:B3:34:D0:70:D8:A3:96:B9:6E:DB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/da370214-1d61-48bf-84a0-a60096ccaae7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.132.26.0-216.132.31.255
                  216.132.96.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         bd:12:62:cd:b9:e8:3e:df:6b:9a:3e:91:a9:dc:df:96:7c:60:
         0e:b5:21:ac:7e:a8:e9:45:99:82:3a:63:ac:59:c4:a1:fb:0e:
         3c:b6:c3:0e:3e:fb:8e:96:24:4b:78:3d:7f:28:c1:5b:f9:14:
         b0:08:7e:a0:e4:83:9e:96:91:09:af:55:a2:26:36:e6:b9:35:
         83:2d:17:e0:3a:7b:e3:ec:ba:61:c2:a9:19:16:73:f2:97:e7:
         f0:e7:23:41:ef:80:66:c9:53:e2:6c:fc:85:6f:b6:73:d2:17:
         c1:bc:50:90:05:e3:62:7b:ce:19:70:e9:cf:41:9c:3c:3f:3f:
         69:fc:e6:fd:c2:52:6d:62:ea:da:38:ce:88:6d:17:df:17:c2:
         11:1a:68:91:07:08:e1:76:5b:32:c7:96:85:26:4f:5d:49:47:
         10:5c:ff:48:59:77:fb:c0:7f:96:e7:8c:ea:16:6d:f6:0b:86:
         40:4b:f7:e6:93:1c:f7:24:df:d3:99:ee:6f:1c:52:01:b6:a7:
         1a:43:fc:79:03:31:6c:88:42:a7:db:61:80:a2:04:f0:87:1a:
         d5:fa:cf:31:e3:e7:fa:a1:3a:f3:8b:15:9c:98:5d:cf:0d:9e:
         2d:a8:5b:0b:28:2b:d1:f2:da:13:00:89:5f:5d:e9:ed:1d:3b:
         f6:70:c6:5b
-----BEGIN CERTIFICATE-----
MIIGUTCCBTmgAwIBAgIUAQ0Mn0MoWEqm9h+/CiCbW9VIwYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGEzNzAyMTQtMWQ2MS00OGJmLTg0YTAtYTYwMDk2Y2Nh
YWU3MB4XDTI1MDcyNzAxMDA0OVoXDTI1MTAyNTAxMDA0OVowLzEtMCsGA1UEAxMk
NWI1NjQ0NWMtMDUwNi00NzZlLTlhNTktYWQ3YjQzYThmYTYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzEBDEHpJOPtHVKlXOt6V4FvQinvD/hwUWtcp
vDZ7lEwKaLchXWIrbcjZTMwdq02ESSCaZ9Oz2aa10fizy6HCSOgaof4ITuuQyAtW
FU1JF3QtH1cdK+U3DCBL9t51oUhrY8xel2QIOW3Wx8vjeMpmAr3Vk1KVWtSXEUuz
gV9+Zx+qHBOrGNHu6g7CDdhN5Y3PDlp0facaXQEAhsd+uxnWGdwKUtxSFPNt9hRK
0Cu6aKeGxU3/CEHqn8MyZbWw6YhwbCMuGHOd/TgwwHZurDfDYeyEarkQBwSZuYoW
M/IodJo053zxj3jeXz0HTDyMPOuFgp+KmVJfSADYIe7kb0PnowIDAQABo4IDYzCC
A18wHQYDVR0OBBYEFKedHrp1wzvEyH1NfAu6W1SuUlWhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3
MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAwOTZjY2FhZTcvOGI5YTMwZjEtZjBjMC0z
ZTE4LWI0N2ItYjVkMDM5YTdlNWU2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZGEzNzAyMTQtMWQ2MS00OGJmLTg0
YTAtYTYwMDk2Y2NhYWU3L2RhMzcwMjE0LTFkNjEtNDhiZi04NGEwLWE2MDA5NmNj
YWFlNy5jcmwwHwYDVR0jBBgwFoAU8nM3S5F7xXQfhLM00HDYo5a5btswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9kYTM3MDIxNC0xZDYxLTQ4YmYtODRhMC1hNjAw
OTZjY2FhZTcuY2VyMC0GCCsGAQUFBwEHAQH/BB4wHDAaBAIAATAUMAwDBAHYhBoD
BAXYhAADBALYhGAwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUF
BwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRt
bDANBgkqhkiG9w0BAQsFAAOCAQEAvRJizbnoPt9rmj6RqdzflnxgDrUhrH6o6UWZ
gjpjrFnEofsOPLbDDj77jpYkS3g9fyjBW/kUsAh+oOSDnpaRCa9VoiY25rk1gy0X
4Dp74+y6YcKpGRZz8pfn8OcjQe+AZslT4mz8hW+2c9IXwbxQkAXjYnvOGXDpz0Gc
PD8/afzm/cJSbWLq2jjOiG0X3xfCERpokQcI4XZbMseWhSZPXUlHEFz/SFl3+8B/
lueM6hZt9guGQEv35pMc9yTf05nubxxSAbanGkP8eQMxbIhCp9thgKIE8Ica1frP
MePn+qE684sVnJhdzw2eLahbCygr0fLaEwCJX13p7R079nDGWw==
-----END CERTIFICATE-----
Generated at Wed Aug 6 11:10:41 2025 by rpki-client