Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa
File:                     71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa (raw, json)
Hash identifier:          +g4VSSiZP8hiyb6Azz2dCTNb1pidrseFfEv1QLztC9k=
Subject key identifier:   FE:36:02:1C:A1:E5:85:A0:8E:98:4A:C8:0A:F2:2A:90:14:8A:65:27
Certificate issuer:       /CN=7398f99d-b512-4640-b38b-2c84db430afb
Certificate serial:       010D0C9F4328584A761B7262DDAC8AAD20F31900
Authority key identifier: 85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa
Signing time:             Wed 09 Jul 2025 13:01:04 +0000
ROA not before:           Wed 09 Jul 2025 13:01:04 +0000
ROA not after:            Tue 07 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        206.204.250.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 06 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:76:1b:72:62:dd:ac:8a:ad:20:f3:19:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7398f99d-b512-4640-b38b-2c84db430afb
        Validity
            Not Before: Jul  9 13:01:04 2025 GMT
            Not After : Oct  7 13:01:04 2025 GMT
        Subject: CN=e4b531e9-775b-4596-8287-c335e213289e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:05:cb:da:9f:b9:4e:46:1c:fd:c1:01:66:c1:
                    dc:da:5f:a6:2c:c4:38:9e:de:78:05:fa:e7:0a:5d:
                    81:2f:d8:eb:6f:0c:65:dd:be:a3:ab:86:e1:2f:dd:
                    15:08:34:2a:61:22:00:5a:28:01:df:82:d4:8f:10:
                    79:60:c5:ad:37:d4:0a:33:7b:31:31:45:57:66:67:
                    4d:b7:99:f8:10:6c:71:5c:4a:d2:5c:22:ee:00:d8:
                    87:f3:c1:d4:b2:c7:34:3e:16:98:88:6e:55:22:ae:
                    63:74:b0:8d:52:ed:b1:01:db:b1:6b:20:51:e6:b9:
                    00:1a:f7:b4:c9:41:30:38:4e:59:75:79:24:d2:da:
                    a1:34:85:03:ff:75:e5:94:c2:b0:81:15:06:36:2a:
                    11:a4:13:85:05:2f:5f:a1:46:25:1e:0e:ab:34:95:
                    72:0e:71:4d:ca:8d:fc:40:b3:f8:a0:d0:86:09:90:
                    26:5b:fe:a5:d2:d7:68:ab:87:34:d0:69:69:fa:ed:
                    1f:8e:3e:fe:fd:b8:55:27:38:b4:65:a8:39:49:93:
                    0d:9b:b7:9d:20:80:81:98:94:d7:11:84:a8:35:f9:
                    37:c9:cf:62:88:1f:b8:92:a4:99:22:53:7b:da:99:
                    95:6b:03:b4:ba:5f:55:8a:97:df:14:2b:82:0a:7d:
                    2c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:36:02:1C:A1:E5:85:A0:8E:98:4A:C8:0A:F2:2A:90:14:8A:65:27
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/71b812f7-38d4-3c0e-bcd9-733546b8ad4c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb/7398f99d-b512-4640-b38b-2c84db430afb.crl

            X509v3 Authority Key Identifier:
                keyid:85:E7:90:76:06:2E:D4:6A:D3:62:FA:9E:CE:72:56:42:9A:B6:CF:C4

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/7398f99d-b512-4640-b38b-2c84db430afb.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.204.250.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:81:c7:09:d2:30:4b:4e:84:73:89:06:14:b6:08:38:66:7e:
         09:45:83:7b:7e:97:a5:fd:88:79:66:ce:af:48:92:5f:76:3e:
         fc:10:84:18:86:37:c6:a2:61:46:5f:70:ea:d7:05:51:8f:d4:
         61:cf:84:fa:d5:91:96:82:e5:27:85:3b:72:21:36:30:db:e6:
         5a:7e:50:6d:c5:15:55:68:30:3e:fb:2a:82:f8:d6:bb:6f:8d:
         25:16:ff:07:28:f7:92:bd:84:e2:28:85:04:59:35:12:45:74:
         ea:6b:5f:6a:1e:9e:82:0b:9a:c3:5a:99:19:bd:07:40:ea:27:
         98:af:cf:3f:f2:b9:3b:5b:b8:60:a6:e2:00:f8:91:11:a2:41:
         a9:33:69:bc:d2:02:22:33:ff:5a:4b:23:dd:c4:a9:fe:c3:8f:
         6d:0a:28:bf:57:14:eb:83:4d:09:29:76:79:75:ce:0b:bc:6c:
         8d:ec:24:b6:1f:4e:ab:b8:3a:93:8e:28:dc:da:72:e0:c4:73:
         40:75:e6:ff:b5:8f:4d:2b:26:92:9e:4f:ff:58:ac:fc:96:bb:
         b6:2a:cf:f4:56:d8:c1:a5:34:b4:0e:80:55:33:53:52:5f:05:
         5f:01:4b:61:a6:d8:89:c3:6e:95:98:f0:c5:3d:04:1b:b3:c8:
         1f:aa:d7:ae
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEp2G3Ji3ayKrSDzGQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNzM5OGY5OWQtYjUxMi00NjQwLWIzOGItMmM4NGRiNDMw
YWZiMB4XDTI1MDcwOTEzMDEwNFoXDTI1MTAwNzEzMDEwNFowLzEtMCsGA1UEAxMk
ZTRiNTMxZTktNzc1Yi00NTk2LTgyODctYzMzNWUyMTMyODllMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjgXL2p+5TkYc/cEBZsHc2l+mLMQ4nt54Bfrn
Cl2BL9jrbwxl3b6jq4bhL90VCDQqYSIAWigB34LUjxB5YMWtN9QKM3sxMUVXZmdN
t5n4EGxxXErSXCLuANiH88HUssc0PhaYiG5VIq5jdLCNUu2xAduxayBR5rkAGve0
yUEwOE5ZdXkk0tqhNIUD/3XllMKwgRUGNioRpBOFBS9foUYlHg6rNJVyDnFNyo38
QLP4oNCGCZAmW/6l0tdoq4c00Glp+u0fjj7+/bhVJzi0Zag5SZMNm7edIICBmJTX
EYSoNfk3yc9iiB+4kqSZIlN72pmVawO0ul9VipffFCuCCn0s0wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFP42Ahyh5YWgjphKyAryKpAUimUnMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNmNy1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4
Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0ZGI0MzBhZmIvNzFiODEyZjctMzhkNC0z
YzBlLWJjZDktNzMzNTQ2YjhhZDRjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9kOWQxNTcyZi02
Y2JiLTRjZjctYjU5OS1lOWQwZTk4MWQ5YmYvNzM5OGY5OWQtYjUxMi00NjQwLWIz
OGItMmM4NGRiNDMwYWZiLzczOThmOTlkLWI1MTItNDY0MC1iMzhiLTJjODRkYjQz
MGFmYi5jcmwwHwYDVR0jBBgwFoAUheeQdgYu1GrTYvqeznJWQpq2z8QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Q5ZDE1NzJmLTZjYmItNGNm
Ny1iNTk5LWU5ZDBlOTgxZDliZi83Mzk4Zjk5ZC1iNTEyLTQ2NDAtYjM4Yi0yYzg0
ZGI0MzBhZmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzsz6MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAA2BxwnSMEtOhHOJBhS2CDhmfglFg3t+l6X9iHlmzq9Ikl92PvwQhBiG
N8aiYUZfcOrXBVGP1GHPhPrVkZaC5SeFO3IhNjDb5lp+UG3FFVVoMD77KoL41rtv
jSUW/wco95K9hOIohQRZNRJFdOprX2oenoILmsNamRm9B0DqJ5ivzz/yuTtbuGCm
4gD4kRGiQakzabzSAiIz/1pLI93Eqf7Dj20KKL9XFOuDTQkpdnl1zgu8bI3sJLYf
Tqu4OpOOKNzacuDEc0B15v+1j00rJpKeT/9YrPyWu7Yqz/RW2MGlNLQOgFUzU1Jf
BV8BS2Gm2InDbpWY8MU9BBuzyB+q164=
-----END CERTIFICATE-----
Generated at Tue Aug 5 08:24:54 2025 by rpki-client