Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
File:                     14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa (raw, json)
Hash identifier:          nd8R+vlUj+P6JEvGcgAWFHX2nEXeWIdl9B+CoDJpg2g=
Subject key identifier:   79:69:95:20:10:C8:F3:A1:45:8E:01:85:28:B7:CC:EF:BF:49:64:0D
Certificate issuer:       /CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
Certificate serial:       010D0C9F4328584AAB2650BD25DDA173D6E5C5A0
Authority key identifier: 81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa
Signing time:             Mon 28 Jul 2025 13:01:04 +0000
ROA not before:           Mon 28 Jul 2025 13:01:04 +0000
ROA not after:            Sun 26 Oct 2025 13:01:04 +0000
asID:                     16509
IP address blocks:        192.206.0.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 05 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ab:26:50:bd:25:dd:a1:73:d6:e5:c5:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7
        Validity
            Not Before: Jul 28 13:01:04 2025 GMT
            Not After : Oct 26 13:01:04 2025 GMT
        Subject: CN=6fb6a722-63b6-4427-92dd-6cd5149854a4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:4f:ef:f3:f4:d8:87:54:bc:7d:b7:c1:8c:
                    3a:e8:00:9f:2c:cf:b7:f9:45:fd:c1:92:d2:02:84:
                    d8:b4:2d:9d:bc:50:d9:fd:87:5a:fd:86:b3:c6:2a:
                    c1:49:4e:ef:25:10:7e:8d:48:d8:e6:a7:56:7a:dc:
                    af:55:c8:77:59:07:96:d6:cf:47:3f:4b:0e:8f:f2:
                    10:d3:4e:9a:cb:97:3a:bf:3a:dc:5e:56:f1:b8:b0:
                    44:2e:25:35:f8:e7:14:f6:1b:d3:ad:e0:a3:ad:8c:
                    e3:e9:1c:70:2e:b9:49:43:51:04:e0:ca:8e:c4:0c:
                    6e:92:b1:27:9f:5e:2d:21:1d:75:01:22:d6:06:51:
                    2e:c5:9f:d4:07:4b:d0:01:a9:ed:86:29:22:07:b2:
                    9b:c3:ef:cd:cd:a4:78:f6:54:73:3d:cb:ab:25:9a:
                    11:38:60:b5:8c:e9:ee:5e:79:4e:cc:23:89:83:a8:
                    d5:ac:16:5e:9b:bc:47:78:a4:2b:55:cf:03:29:39:
                    2d:72:d4:5d:0a:e7:88:d2:79:18:51:77:e7:32:ab:
                    bc:6c:71:da:21:48:84:ad:3b:fd:6d:09:65:64:d0:
                    33:af:89:bb:75:05:05:c3:be:b0:25:76:f7:9d:bc:
                    b0:5d:44:36:8b:d0:5f:7a:a6:ce:eb:37:8a:d4:27:
                    9a:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:95:20:10:C8:F3:A1:45:8E:01:85:28:B7:CC:EF:BF:49:64:0D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/14e8f9c1-617d-30c8-a1d9-8bb5df3222ed.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.crl

            X509v3 Authority Key Identifier:
                keyid:81:15:A2:E7:D6:95:EA:BE:06:B5:02:F1:90:09:98:2F:53:CD:D4:A9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/209ed81a-8c04-4cde-9dbb-7d83a3d7c4f7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.206.0.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:74:62:0d:c9:34:b9:da:72:2e:eb:37:1f:ed:22:2c:a9:31:
         68:71:bf:31:7f:64:9a:00:cb:cf:87:c8:83:7b:7e:c1:1a:fd:
         1a:29:8c:8d:42:a5:30:f9:05:af:22:43:d4:88:49:8e:12:b1:
         9c:d0:4b:c8:03:2e:94:46:47:67:3c:d5:ff:8f:ae:c6:3e:ad:
         17:85:31:41:89:4f:2c:e5:b1:92:f9:4d:70:75:5d:97:32:d6:
         52:92:ff:65:ad:83:ae:f0:c3:be:13:07:59:73:d1:61:03:59:
         cd:25:1a:33:0c:c6:3c:04:af:48:3c:09:d4:13:8d:6b:6c:e1:
         92:46:27:08:8b:bc:9d:7b:18:a4:b8:6a:a5:f8:a1:dd:e6:b3:
         0a:ce:dd:fe:23:ef:51:68:8d:13:0f:5a:c7:2a:74:52:77:7f:
         7d:10:a0:9d:50:4f:5e:33:19:c1:ac:27:fb:3c:f1:d6:75:04:
         bd:69:cb:f8:dc:bc:b8:b3:f2:f9:9d:34:53:97:7e:df:61:de:
         49:21:80:43:f0:a9:90:43:00:57:21:4d:7e:0e:43:4d:6e:95:
         c7:fc:98:a5:98:5e:06:ae:f4:f5:f2:c8:bd:87:cc:b1:82:b9:
         01:0c:85:c9:e7:87:be:f3:b0:4f:4e:6a:cf:0c:b5:01:af:d1:
         c1:37:d8:b5
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqrJlC9Jd2hc9blxaAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjA5ZWQ4MWEtOGMwNC00Y2RlLTlkYmItN2Q4M2EzZDdj
NGY3MB4XDTI1MDcyODEzMDEwNFoXDTI1MTAyNjEzMDEwNFowLzEtMCsGA1UEAxMk
NmZiNmE3MjItNjNiNi00NDI3LTkyZGQtNmNkNTE0OTg1NGE0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDVP7/P02IdUvH23wYw66ACfLM+3+UX9wZLS
AoTYtC2dvFDZ/Yda/YazxirBSU7vJRB+jUjY5qdWetyvVch3WQeW1s9HP0sOj/IQ
006ay5c6vzrcXlbxuLBELiU1+OcU9hvTreCjrYzj6RxwLrlJQ1EE4MqOxAxukrEn
n14tIR11ASLWBlEuxZ/UB0vQAanthikiB7Kbw+/NzaR49lRzPcurJZoROGC1jOnu
XnlOzCOJg6jVrBZem7xHeKQrVc8DKTktctRdCueI0nkYUXfnMqu8bHHaIUiErTv9
bQllZNAzr4m7dQUFw76wJXb3nbywXUQ2i9BfeqbO6zeK1CeaNwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHlplSAQyPOhRY4BhSi3zO+/SWQNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yMDll
ZDgxYS04YzA0LTRjZGUtOWRiYi03ZDgzYTNkN2M0ZjcvMTRlOGY5YzEtNjE3ZC0z
MGM4LWExZDktOGJiNWRmMzIyMmVkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjA5ZWQ4MWEtOGMwNC00Y2RlLTlk
YmItN2Q4M2EzZDdjNGY3LzIwOWVkODFhLThjMDQtNGNkZS05ZGJiLTdkODNhM2Q3
YzRmNy5jcmwwHwYDVR0jBBgwFoAUgRWi59aV6r4GtQLxkAmYL1PN1KkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yMDllZDgxYS04YzA0LTRjZGUtOWRiYi03ZDgz
YTNkN2M0ZjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwM4AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACx0Yg3JNLnaci7rNx/tIiypMWhxvzF/ZJoAy8+HyIN7fsEa/RopjI1C
pTD5Ba8iQ9SISY4SsZzQS8gDLpRGR2c81f+PrsY+rReFMUGJTyzlsZL5TXB1XZcy
1lKS/2Wtg67ww74TB1lz0WEDWc0lGjMMxjwEr0g8CdQTjWts4ZJGJwiLvJ17GKS4
aqX4od3mswrO3f4j71FojRMPWscqdFJ3f30QoJ1QT14zGcGsJ/s88dZ1BL1py/jc
vLiz8vmdNFOXft9h3kkhgEPwqZBDAFchTX4OQ01ulcf8mKWYXgau9PXyyL2HzLGC
uQEMhcnnh77zsE9Oas8MtQGv0cE32LU=
-----END CERTIFICATE-----
Generated at Mon Aug 4 15:07:55 2025 by rpki-client