Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa
File:                     7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa (raw, json)
Hash identifier:          1UR9/+5axn54U4vXwbTHEuoo9xgINp6E4VY3IbXALUg=
Subject key identifier:   AE:BD:F5:10:AE:59:98:41:34:E6:CE:E0:EF:DA:E4:E9:BB:A5:D6:49
Certificate issuer:       /CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
Certificate serial:       010D0C9F4328584A2D858A3FD2779CF5601AFE80
Authority key identifier: 91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa
Signing time:             Fri 13 Jun 2025 13:01:04 +0000
ROA not before:           Fri 13 Jun 2025 13:01:04 +0000
ROA not after:            Thu 11 Sep 2025 13:01:04 +0000
asID:                     14618
IP address blocks:        207.202.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2d:85:8a:3f:d2:77:9c:f5:60:1a:fe:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5dce877b-b7a0-44f5-b8c2-1115311c773e
        Validity
            Not Before: Jun 13 13:01:04 2025 GMT
            Not After : Sep 11 13:01:04 2025 GMT
        Subject: CN=a1d2da76-4d8c-419f-a6fb-deccdc08fed0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:56:fc:a4:92:63:09:2c:7e:e1:e4:46:67:f3:
                    3b:12:82:6d:21:0a:be:8e:8f:d6:cd:c1:58:98:c1:
                    30:c6:c5:f6:79:94:77:71:0a:c4:35:b0:ae:1b:16:
                    15:de:f0:ab:8a:d6:79:48:98:ae:1d:a8:f3:db:38:
                    48:9a:50:fb:1a:e7:93:00:77:ab:2f:b6:ef:6e:a7:
                    8d:eb:d0:d7:39:02:75:20:30:c8:d9:d8:52:55:19:
                    2c:a3:97:a0:7f:8d:bd:da:11:09:2a:27:5d:63:85:
                    85:3d:2c:ed:88:7e:14:55:05:0b:93:02:c3:0d:c9:
                    c7:ab:c4:b0:5c:64:3e:d8:09:2b:f8:ff:8c:55:6b:
                    6d:82:b4:00:c5:62:c3:90:e2:63:ff:df:e1:52:32:
                    d8:73:99:4a:54:18:a7:0d:de:5b:76:06:9b:2e:33:
                    26:56:83:90:79:d6:9d:eb:f5:2b:30:eb:d8:6d:7b:
                    57:2f:42:c2:f3:aa:21:d9:6b:50:b3:be:8f:b0:4b:
                    70:13:cc:34:ec:62:f7:44:1f:5c:f0:da:4b:fa:d9:
                    43:43:92:c5:36:3b:a5:b9:b9:c0:46:ac:5c:5b:84:
                    28:7c:bd:60:2a:a5:d1:29:59:d0:64:f2:3b:d6:cf:
                    31:8a:e1:70:ba:8c:dc:b8:4e:5d:ac:49:65:82:d1:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:BD:F5:10:AE:59:98:41:34:E6:CE:E0:EF:DA:E4:E9:BB:A5:D6:49
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/7df2e1af-fc39-3ee5-8272-3cd60c8a5779.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e/5dce877b-b7a0-44f5-b8c2-1115311c773e.crl

            X509v3 Authority Key Identifier:
                keyid:91:40:49:57:21:04:32:E7:F1:28:40:C4:C1:5B:49:A8:24:DF:F2:2A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/5dce877b-b7a0-44f5-b8c2-1115311c773e.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.202.65.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         7b:b4:ef:08:d1:be:a5:86:ef:a0:7b:80:52:c7:e5:27:42:36:
         57:6c:a8:d0:bc:fc:87:2e:91:df:ff:33:43:53:04:13:22:da:
         53:28:61:70:8b:2f:c3:ed:17:29:3f:74:f9:51:e6:b7:e2:96:
         a0:c2:f8:25:8a:8f:6a:2a:4d:3d:c8:0f:b7:e3:72:69:0d:cb:
         3a:a9:ac:fe:39:7c:a0:19:2b:77:72:40:e7:1f:a1:07:d1:2f:
         d1:e2:ce:33:ed:8c:87:66:84:d6:7c:cf:15:fc:34:7a:4e:80:
         82:15:bb:d3:67:49:6f:78:9a:1e:db:ee:60:f7:b5:13:50:82:
         52:ee:c4:6d:5c:db:5f:50:18:f0:55:7b:b8:c5:b3:cc:91:b0:
         c2:df:fa:fa:9c:a5:23:1a:e6:6f:80:00:13:be:eb:e7:e6:80:
         eb:ed:26:ae:08:5d:49:05:f8:c7:18:02:c1:62:4e:3b:0a:f6:
         01:07:83:cf:9f:85:b5:3b:d3:1d:be:6c:a6:e9:cd:e0:c4:7d:
         2c:16:ef:9c:f3:02:2f:1c:f9:53:d5:2c:b2:0b:0d:5a:1e:dd:
         7a:a7:bf:fa:f9:bc:7c:00:7d:41:22:8b:a5:99:4d:74:59:f5:
         03:c5:b4:59:34:55:1a:58:e0:10:7c:6d:11:73:0a:b7:25:c9:
         37:16:f2:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEothYo/0nec9WAa/oAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNWRjZTg3N2ItYjdhMC00NGY1LWI4YzItMTExNTMxMWM3
NzNlMB4XDTI1MDYxMzEzMDEwNFoXDTI1MDkxMTEzMDEwNFowLzEtMCsGA1UEAxMk
YTFkMmRhNzYtNGQ4Yy00MTlmLWE2ZmItZGVjY2RjMDhmZWQwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhFb8pJJjCSx+4eRGZ/M7EoJtIQq+jo/WzcFY
mMEwxsX2eZR3cQrENbCuGxYV3vCritZ5SJiuHajz2zhImlD7GueTAHerL7bvbqeN
69DXOQJ1IDDI2dhSVRkso5egf4292hEJKiddY4WFPSztiH4UVQULkwLDDcnHq8Sw
XGQ+2Akr+P+MVWttgrQAxWLDkOJj/9/hUjLYc5lKVBinDd5bdgabLjMmVoOQedad
6/UrMOvYbXtXL0LC86oh2WtQs76PsEtwE8w07GL3RB9c8NpL+tlDQ5LFNjulubnA
RqxcW4QofL1gKqXRKVnQZPI71s8xiuFwuozcuE5drEllgtGKkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFK699RCuWZhBNObO4O/a5Om7pdZJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNl
ODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1MzExYzc3M2UvN2RmMmUxYWYtZmMzOS0z
ZWU1LTgyNzItM2NkNjBjOGE1Nzc5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvNWRjZTg3N2ItYjdhMC00NGY1LWI4
YzItMTExNTMxMWM3NzNlLzVkY2U4NzdiLWI3YTAtNDRmNS1iOGMyLTExMTUzMTFj
NzczZS5jcmwwHwYDVR0jBBgwFoAUkUBJVyEEMufxKEDEwVtJqCTf8iowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS81ZGNlODc3Yi1iN2EwLTQ0ZjUtYjhjMi0xMTE1
MzExYzc3M2UuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAz8pBMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHu07wjRvqWG76B7gFLH5SdCNldsqNC8/Icukd//M0NTBBMi2lMoYXCL
L8PtFyk/dPlR5rfilqDC+CWKj2oqTT3ID7fjcmkNyzqprP45fKAZK3dyQOcfoQfR
L9HizjPtjIdmhNZ8zxX8NHpOgIIVu9NnSW94mh7b7mD3tRNQglLuxG1c219QGPBV
e7jFs8yRsMLf+vqcpSMa5m+AABO+6+fmgOvtJq4IXUkF+McYAsFiTjsK9gEHg8+f
hbU70x2+bKbpzeDEfSwW75zzAi8c+VPVLLILDVoe3Xqnv/r5vHwAfUEii6WZTXRZ
9QPFtFk0VRpY4BB8bRFzCrclyTcW8j8=
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:34:51 2025 by rpki-client