Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
File:                     439be47f-ad79-3de0-a5e7-1bb882c73b27.roa (raw, json)
Hash identifier:          yhr3A0rCzfyUjKQeSjSMGTFdJHX6wvOsPctMl1X5iSA=
Subject key identifier:   96:46:C3:CE:69:01:E1:DD:E2:6E:B3:8D:90:2C:8B:6E:FE:25:63:7F
Certificate issuer:       /CN=3d270043-5069-4b58-b6cb-4496aa37669d
Certificate serial:       010D0C9F4328584A03A54B41BAFCE5864E272400
Authority key identifier: CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa
Signing time:             Thu 29 May 2025 13:01:03 +0000
ROA not before:           Thu 29 May 2025 13:01:03 +0000
ROA not after:            Wed 27 Aug 2025 13:01:03 +0000
asID:                     14079
IP address blocks:        207.2.112.0/22 maxlen: 22
                          2602:fbd4::/36 maxlen: 36
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:03:a5:4b:41:ba:fc:e5:86:4e:27:24:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3d270043-5069-4b58-b6cb-4496aa37669d
        Validity
            Not Before: May 29 13:01:03 2025 GMT
            Not After : Aug 27 13:01:03 2025 GMT
        Subject: CN=cf3c7d81-ffa2-4d9c-b123-0b2a61937e49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fb:69:ad:eb:87:83:40:3c:79:52:03:ba:b2:
                    43:40:e3:17:85:80:1d:57:41:45:9f:5c:9c:10:cd:
                    e1:e4:34:6f:e3:7b:8b:f6:b1:51:e6:8c:11:5c:1d:
                    d1:01:e0:46:c8:07:5b:57:52:3f:4d:e2:ea:9c:52:
                    56:6b:e4:ba:29:b0:b4:de:50:1e:f3:82:35:13:d8:
                    e7:21:a7:72:b9:16:63:84:cc:dc:1c:04:81:dc:f5:
                    ba:c6:28:1e:6c:9c:a8:92:aa:e7:60:2e:7d:66:82:
                    ba:df:1e:89:20:c4:40:39:31:6e:8c:85:0f:36:84:
                    5e:65:68:12:b5:15:0b:57:17:52:41:46:17:39:21:
                    6f:43:6b:98:99:01:2d:4a:86:a5:ef:26:6f:a1:26:
                    f1:f2:6c:5b:da:58:47:a6:23:a0:a2:0a:d8:07:f8:
                    13:d9:4b:ff:d2:68:70:39:bf:8e:54:73:6d:08:13:
                    a3:4d:16:0f:6a:8e:92:73:b7:0d:d9:7e:df:bd:c1:
                    74:22:a2:f3:ae:b4:25:26:ae:00:59:5a:f9:27:17:
                    11:8c:cc:69:09:79:66:6a:4d:be:87:4d:af:0f:88:
                    2b:d3:63:2e:32:7c:5a:f3:bd:48:ed:72:7f:44:fc:
                    26:d1:1c:51:38:41:40:b9:f9:24:b6:ea:e6:00:4e:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:46:C3:CE:69:01:E1:DD:E2:6E:B3:8D:90:2C:8B:6E:FE:25:63:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/439be47f-ad79-3de0-a5e7-1bb882c73b27.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d/3d270043-5069-4b58-b6cb-4496aa37669d.crl

            X509v3 Authority Key Identifier:
                keyid:CB:5F:F4:1A:A0:2D:FA:1E:A1:99:B6:29:37:09:17:3A:0E:CC:4F:C9

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/3d270043-5069-4b58-b6cb-4496aa37669d.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.2.112.0/22
                IPv6:
                  2602:fbd4::/36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:1b:43:f3:54:ab:78:0a:03:35:35:fe:8f:af:b2:03:75:79:
         2e:b9:e5:7d:fa:3f:a0:5d:48:99:a3:98:44:83:21:74:ed:a2:
         1f:0a:5d:46:42:cc:99:27:a3:6c:70:ef:9e:c9:2a:93:b7:00:
         a6:db:1d:be:12:67:09:bb:b0:0f:4c:f4:dd:4c:1c:69:d4:e0:
         a0:ee:64:c9:2b:8d:da:74:f8:87:a5:0e:60:dc:a1:91:cb:0d:
         c8:b2:1e:d7:a7:55:ff:67:52:ed:38:8a:8f:7d:13:ed:f7:d8:
         98:c2:83:3d:e4:ab:ac:5a:17:02:d6:7f:93:05:e0:46:79:fd:
         77:ab:71:c3:bc:03:5d:1a:32:66:b8:f1:00:8f:0e:d7:66:a7:
         4a:a1:c0:52:58:a8:5c:8a:ac:e6:4d:8a:54:3f:57:87:db:cc:
         36:28:20:91:40:56:5a:3b:81:29:f6:1e:bc:2a:c5:34:9d:bc:
         cd:ce:69:4a:8c:e7:0c:1f:fa:28:6e:fc:8e:24:5d:a3:df:36:
         e1:5d:e2:55:87:c6:39:7a:f2:2e:6a:e8:df:e5:ad:04:9c:89:
         4f:31:07:fd:06:8f:0d:56:f3:fc:3a:52:65:14:ee:38:8f:f2:
         d0:cd:49:27:a0:4a:a2:82:23:eb:eb:af:69:61:94:bb:8b:68:
         f6:df:93:a3
-----BEGIN CERTIFICATE-----
MIIGUzCCBTugAwIBAgIUAQ0Mn0MoWEoDpUtBuvzlhk4nJAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2QyNzAwNDMtNTA2OS00YjU4LWI2Y2ItNDQ5NmFhMzc2
NjlkMB4XDTI1MDUyOTEzMDEwM1oXDTI1MDgyNzEzMDEwM1owLzEtMCsGA1UEAxMk
Y2YzYzdkODEtZmZhMi00ZDljLWIxMjMtMGIyYTYxOTM3ZTQ5MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvvtpreuHg0A8eVIDurJDQOMXhYAdV0FFn1yc
EM3h5DRv43uL9rFR5owRXB3RAeBGyAdbV1I/TeLqnFJWa+S6KbC03lAe84I1E9jn
IadyuRZjhMzcHASB3PW6xigebJyokqrnYC59ZoK63x6JIMRAOTFujIUPNoReZWgS
tRULVxdSQUYXOSFvQ2uYmQEtSoal7yZvoSbx8mxb2lhHpiOgogrYB/gT2Uv/0mhw
Ob+OVHNtCBOjTRYPao6Sc7cN2X7fvcF0IqLzrrQlJq4AWVr5JxcRjMxpCXlmak2+
h02vD4gr02MuMnxa871I7XJ/RPwm0RxROEFAufkkturmAE517QIDAQABo4IDZTCC
A2EwHQYDVR0OBBYEFJZGw85pAeHd4m6zjZAsi27+JWN/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3
MDA0My01MDY5LTRiNTgtYjZjYi00NDk2YWEzNzY2OWQvNDM5YmU0N2YtYWQ3OS0z
ZGUwLWE1ZTctMWJiODgyYzczYjI3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvM2QyNzAwNDMtNTA2OS00YjU4LWI2
Y2ItNDQ5NmFhMzc2NjlkLzNkMjcwMDQzLTUwNjktNGI1OC1iNmNiLTQ0OTZhYTM3
NjY5ZC5jcmwwHwYDVR0jBBgwFoAUy1/0GqAt+h6hmbYpNwkXOg7MT8kwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8zZDI3MDA0My01MDY5LTRiNTgtYjZjYi00NDk2
YWEzNzY2OWQuY2VyMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQCzwJwMA4E
AgACMAgDBgQmAvvUADBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYIKwYB
BQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nwcy5o
dG1sMA0GCSqGSIb3DQEBCwUAA4IBAQB4G0PzVKt4CgM1Nf6Pr7IDdXkuueV9+j+g
XUiZo5hEgyF07aIfCl1GQsyZJ6NscO+eySqTtwCm2x2+EmcJu7APTPTdTBxp1OCg
7mTJK43adPiHpQ5g3KGRyw3Ish7Xp1X/Z1LtOIqPfRPt99iYwoM95KusWhcC1n+T
BeBGef13q3HDvANdGjJmuPEAjw7XZqdKocBSWKhciqzmTYpUP1eH28w2KCCRQFZa
O4Ep9h68KsU0nbzNzmlKjOcMH/oobvyOJF2j3zbhXeJVh8Y5evIuaujf5a0EnIlP
MQf9Bo8NVvP8OlJlFO44j/LQzUknoEqigiPr669pYZS7i2j235Oj
-----END CERTIFICATE-----
Generated at Sun Jun 15 15:26:40 2025 by rpki-client