Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/781f24f3-8d02-3b9c-81ee-a4accf7447b5.roa
File:                     781f24f3-8d02-3b9c-81ee-a4accf7447b5.roa (raw, json)
Hash identifier:          ZtT7Kkp21IGV6yU12Wg3msBIsVdu/EOXc4nm34UyRRE=
Subject key identifier:   C5:39:3B:51:4D:1D:37:8F:FF:7D:18:60:83:B0:02:D5:88:A5:75:53
Certificate issuer:       /CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
Certificate serial:       010D0C9F4328584A25B15D52314FA8E901EF0C80
Authority key identifier: BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/781f24f3-8d02-3b9c-81ee-a4accf7447b5.roa
Signing time:             Tue 10 Jun 2025 17:43:02 +0000
ROA not before:           Tue 10 Jun 2025 17:43:02 +0000
ROA not after:            Mon 08 Sep 2025 17:43:02 +0000
asID:                     40714
IP address blocks:        216.255.176.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 21 Jun 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:25:b1:5d:52:31:4f:a8:e9:01:ef:0c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f52d9dd2-a206-4694-a550-d6639e33e9f6
        Validity
            Not Before: Jun 10 17:43:02 2025 GMT
            Not After : Sep  8 17:43:02 2025 GMT
        Subject: CN=4e6cafca-c88d-461f-a705-6f00c4a82ad9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e6:a2:46:b2:1b:6e:7a:0c:a7:21:12:75:10:
                    7f:de:f0:bb:74:9f:ce:ea:61:07:86:31:26:96:71:
                    40:c2:a0:51:00:0b:c9:65:2e:8e:3a:cd:a4:26:bc:
                    f7:ed:f4:f7:ce:58:8c:c6:08:aa:c4:e4:62:a9:6c:
                    e2:37:4e:c7:21:f4:cf:72:42:98:dd:e1:5b:b0:6d:
                    7f:f0:c3:65:4d:79:d3:92:cc:29:d6:00:29:de:ca:
                    30:06:4a:c7:9a:48:6e:7d:8f:85:c2:59:d9:72:2d:
                    2b:23:dc:70:68:d0:cf:3a:32:84:0e:17:92:92:43:
                    a3:31:bc:5c:93:88:ce:65:e5:de:8d:52:a4:97:09:
                    5f:26:73:3b:4f:70:0c:6d:be:eb:4d:28:c4:bc:ff:
                    73:e6:4e:3a:22:e5:77:1e:a9:67:92:03:cb:61:3a:
                    dc:85:d8:89:a6:cb:f8:f3:03:7f:55:43:53:53:04:
                    a1:cf:e0:9b:ed:e3:6d:c8:57:44:0a:fe:03:14:38:
                    84:7e:a8:99:0a:03:f1:8d:25:5d:0d:c0:33:09:d2:
                    57:68:e7:d0:11:1a:f8:18:02:54:01:51:a4:a9:c6:
                    c0:28:d2:4a:9b:f4:ce:aa:56:b6:28:27:cc:62:5c:
                    53:09:1b:05:2d:cd:1a:3a:42:be:9b:bf:e0:ca:53:
                    83:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:39:3B:51:4D:1D:37:8F:FF:7D:18:60:83:B0:02:D5:88:A5:75:53
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/781f24f3-8d02-3b9c-81ee-a4accf7447b5.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6/f52d9dd2-a206-4694-a550-d6639e33e9f6.crl

            X509v3 Authority Key Identifier:
                keyid:BD:E7:F5:54:80:A6:3B:0B:FE:B6:E6:EF:1E:0F:B3:18:E1:77:DF:B9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d6b5ad28-1cbc-47ab-904e-45361a5487c3/f52d9dd2-a206-4694-a550-d6639e33e9f6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.255.176.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:c3:25:a7:7d:6f:70:64:18:88:89:27:a0:3a:65:97:85:27:
         17:55:dc:27:cf:3f:69:4b:66:ea:2d:e8:97:d2:c0:47:90:d7:
         71:85:94:ec:a0:4a:df:64:81:66:ec:2c:3e:b8:f1:e1:49:90:
         f6:63:98:57:e4:3d:87:0b:e6:55:7f:ab:a2:69:da:c0:d9:b2:
         c0:5b:b5:00:bf:df:b6:37:36:bb:b1:d7:f7:6f:74:bc:9c:c7:
         23:19:57:8c:c7:1c:3a:62:0c:15:99:a8:9f:9e:03:a5:e1:d6:
         fd:e6:a7:e7:bb:b9:f1:83:33:66:19:46:cd:ba:17:6e:23:0b:
         17:67:57:61:03:4d:f5:af:0d:00:e5:70:47:94:e9:d6:c6:f3:
         56:f2:98:6e:cb:4c:f5:07:dc:4e:4a:0e:24:b0:85:36:12:a5:
         7e:d1:19:29:c6:b2:a6:a3:fd:e9:eb:06:47:d9:6e:f7:a0:9d:
         51:67:1b:60:db:3a:26:8c:f9:d0:7d:3c:b8:a1:ca:a1:0a:e8:
         e5:ba:64:4a:1b:99:01:e1:00:c7:a5:90:f4:42:40:84:7f:29:
         fd:3c:59:01:86:73:26:2b:a1:41:50:97:ae:4c:ad:7c:0c:9c:
         9f:f6:11:75:11:d8:cc:b7:3c:b3:ec:12:26:e0:cc:ef:78:2e:
         01:0c:ee:10
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEolsV1SMU+o6QHvDIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjUyZDlkZDItYTIwNi00Njk0LWE1NTAtZDY2MzllMzNl
OWY2MB4XDTI1MDYxMDE3NDMwMloXDTI1MDkwODE3NDMwMlowLzEtMCsGA1UEAxMk
NGU2Y2FmY2EtYzg4ZC00NjFmLWE3MDUtNmYwMGM0YTgyYWQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApeaiRrIbbnoMpyESdRB/3vC7dJ/O6mEHhjEm
lnFAwqBRAAvJZS6OOs2kJrz37fT3zliMxgiqxORiqWziN07HIfTPckKY3eFbsG1/
8MNlTXnTkswp1gAp3sowBkrHmkhufY+FwlnZci0rI9xwaNDPOjKEDheSkkOjMbxc
k4jOZeXejVKklwlfJnM7T3AMbb7rTSjEvP9z5k46IuV3HqlnkgPLYTrchdiJpsv4
8wN/VUNTUwShz+Cb7eNtyFdECv4DFDiEfqiZCgPxjSVdDcAzCdJXaOfQERr4GAJU
AVGkqcbAKNJKm/TOqla2KCfMYlxTCRsFLc0aOkK+m7/gylODaQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMU5O1FNHTeP/30YYIOwAtWIpXVTMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdhYi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJk
OWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYzOWUzM2U5ZjYvNzgxZjI0ZjMtOGQwMi0z
YjljLTgxZWUtYTRhY2NmNzQ0N2I1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kNmI1YWQyOC0x
Y2JjLTQ3YWItOTA0ZS00NTM2MWE1NDg3YzMvZjUyZDlkZDItYTIwNi00Njk0LWE1
NTAtZDY2MzllMzNlOWY2L2Y1MmQ5ZGQyLWEyMDYtNDY5NC1hNTUwLWQ2NjM5ZTMz
ZTlmNi5jcmwwHwYDVR0jBBgwFoAUvef1VICmOwv+tubvHg+zGOF337kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q2YjVhZDI4LTFjYmMtNDdh
Yi05MDRlLTQ1MzYxYTU0ODdjMy9mNTJkOWRkMi1hMjA2LTQ2OTQtYTU1MC1kNjYz
OWUzM2U5ZjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQE2P+wMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFTDJad9b3BkGIiJJ6A6ZZeFJxdV3CfPP2lLZuot6JfSwEeQ13GFlOyg
St9kgWbsLD648eFJkPZjmFfkPYcL5lV/q6Jp2sDZssBbtQC/37Y3Nrux1/dvdLyc
xyMZV4zHHDpiDBWZqJ+eA6Xh1v3mp+e7ufGDM2YZRs26F24jCxdnV2EDTfWvDQDl
cEeU6dbG81bymG7LTPUH3E5KDiSwhTYSpX7RGSnGsqaj/enrBkfZbvegnVFnG2Db
OiaM+dB9PLihyqEK6OW6ZEobmQHhAMelkPRCQIR/Kf08WQGGcyYroUFQl65MrXwM
nJ/2EXUR2My3PLPsEibgzO94LgEM7hA=
-----END CERTIFICATE-----
Generated at Fri Jun 20 00:13:27 2025 by rpki-client