Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
File:                     2f8b5844-754a-3987-8ab2-f733b85a8928.roa (raw, json)
Hash identifier:          49OTibL9Y7I8NoQ23GGsVJ+TwRMV1AWFXc89FzSiTQs=
Subject key identifier:   5A:74:3B:9A:C6:56:FB:5D:D0:2F:63:D0:23:7D:E0:1E:CD:BD:52:0A
Certificate issuer:       /CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
Certificate serial:       010D0C9F4328584AADF10D71B466843C009D9980
Authority key identifier: 1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa
Signing time:             Tue 29 Jul 2025 13:01:04 +0000
ROA not before:           Tue 29 Jul 2025 13:01:04 +0000
ROA not after:            Mon 27 Oct 2025 13:01:04 +0000
asID:                     6491
IP address blocks:        204.89.198.0/24 maxlen: 24
                          206.197.69.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 07 Aug 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ad:f1:0d:71:b4:66:84:3c:00:9d:99:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b2cd0d51-8b99-42c8-91af-2ff34a44ae93
        Validity
            Not Before: Jul 29 13:01:04 2025 GMT
            Not After : Oct 27 13:01:04 2025 GMT
        Subject: CN=78e5da5d-f589-45f9-af84-df522919316c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:fa:75:2e:2d:88:83:96:cc:54:a9:56:12:05:
                    47:38:e6:03:18:f9:1f:62:c9:51:d7:54:10:08:7b:
                    03:40:9d:22:fe:85:65:0d:ae:da:e5:b6:b4:ff:57:
                    7e:f8:0b:b4:c6:2c:f0:c4:4b:be:b9:8d:75:3d:e1:
                    8c:f5:f5:2e:d1:99:ff:d9:38:bc:d2:cc:6c:9f:bc:
                    06:2e:e4:a1:e0:33:db:ad:6f:03:0f:e4:cf:d6:de:
                    9c:d8:a9:32:7b:7c:94:99:34:ca:d0:3f:eb:ed:f1:
                    36:a7:81:93:f4:27:00:5c:94:97:7c:f9:63:00:be:
                    2e:0f:b1:dc:2c:78:4a:c4:01:b3:84:79:f2:fe:2f:
                    a7:e9:98:27:28:8a:96:7c:cb:35:bb:11:26:d2:27:
                    c4:8c:48:10:04:a3:60:6e:a9:3a:b5:da:a2:a8:46:
                    e2:31:a1:c5:d3:df:8c:67:6f:eb:a0:73:7f:1c:b6:
                    69:97:aa:c5:91:f0:e0:9d:f9:ef:ed:b7:05:f9:cb:
                    cb:10:31:c8:16:c2:0c:d8:72:8c:58:35:32:2a:34:
                    56:b8:62:12:f5:e4:c5:e9:ba:94:1b:64:8b:ef:67:
                    bd:4e:61:15:02:a2:d2:b7:f6:f6:a7:ca:99:e4:bb:
                    e4:85:23:bb:d9:30:ee:26:4d:15:a7:b7:24:b4:49:
                    99:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:74:3B:9A:C6:56:FB:5D:D0:2F:63:D0:23:7D:E0:1E:CD:BD:52:0A
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/2f8b5844-754a-3987-8ab2-f733b85a8928.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.crl

            X509v3 Authority Key Identifier:
                keyid:1B:1C:43:FD:80:6A:30:A8:E3:43:11:46:C2:D6:78:E2:4B:BF:F0:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/b2cd0d51-8b99-42c8-91af-2ff34a44ae93.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.89.198.0/24
                  206.197.69.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ae:20:65:a6:59:41:66:e8:49:2a:88:4c:96:86:70:85:61:8c:
         cb:39:12:c3:a5:05:e6:e1:9c:12:72:02:89:2c:87:0b:4c:ee:
         1a:a9:aa:97:a4:6e:0e:52:ef:76:1f:5b:77:96:71:68:59:24:
         20:ef:46:90:11:73:86:d8:59:98:b2:ca:ee:fb:de:82:a7:06:
         0b:6e:03:a7:62:23:e7:7b:2f:2e:16:24:95:43:24:07:fd:27:
         20:44:9b:1b:08:0e:88:e5:25:0c:d0:d6:68:c1:52:50:3c:49:
         b6:78:b2:44:b1:a9:2f:e9:20:6f:27:5e:e4:f9:06:0b:a1:98:
         f5:a5:c0:71:5e:1b:9d:1c:57:45:78:99:c5:bf:bc:d2:25:aa:
         f1:3a:ac:8d:84:17:0c:7b:60:69:fb:b9:8e:0f:91:a3:2f:5b:
         83:86:1d:d8:0c:a1:63:38:5b:df:84:b2:82:84:2d:92:41:1d:
         7c:2c:e7:d7:6c:8a:7b:7f:f9:fc:b8:70:48:e4:29:66:68:a4:
         c0:d7:41:6e:b8:39:96:49:11:6c:7d:ab:aa:6c:e5:62:e7:d7:
         22:bd:e8:ee:a7:f8:8d:43:77:5f:3f:48:00:dc:6e:3d:0d:30:
         0a:1f:68:03:6d:6e:ba:56:c5:93:f4:c9:c8:96:de:9d:8d:6e:
         b2:15:a9:fa
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWEqt8Q1xtGaEPACdmYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjJjZDBkNTEtOGI5OS00MmM4LTkxYWYtMmZmMzRhNDRh
ZTkzMB4XDTI1MDcyOTEzMDEwNFoXDTI1MTAyNzEzMDEwNFowLzEtMCsGA1UEAxMk
NzhlNWRhNWQtZjU4OS00NWY5LWFmODQtZGY1MjI5MTkzMTZjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/p1Li2Ig5bMVKlWEgVHOOYDGPkfYslR11QQ
CHsDQJ0i/oVlDa7a5ba0/1d++Au0xizwxEu+uY11PeGM9fUu0Zn/2Ti80sxsn7wG
LuSh4DPbrW8DD+TP1t6c2Kkye3yUmTTK0D/r7fE2p4GT9CcAXJSXfPljAL4uD7Hc
LHhKxAGzhHny/i+n6ZgnKIqWfMs1uxEm0ifEjEgQBKNgbqk6tdqiqEbiMaHF09+M
Z2/roHN/HLZpl6rFkfDgnfnv7bcF+cvLEDHIFsIM2HKMWDUyKjRWuGIS9eTF6bqU
G2SL72e9TmEVAqLSt/b2p8qZ5LvkhSO72TDuJk0Vp7cktEmZdQIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFFp0O5rGVvtd0C9j0CN94B7NvVIKMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9iMmNk
MGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYzNGE0NGFlOTMvMmY4YjU4NDQtNzU0YS0z
OTg3LThhYjItZjczM2I4NWE4OTI4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvYjJjZDBkNTEtOGI5OS00MmM4LTkx
YWYtMmZmMzRhNDRhZTkzL2IyY2QwZDUxLThiOTktNDJjOC05MWFmLTJmZjM0YTQ0
YWU5My5jcmwwHwYDVR0jBBgwFoAUGxxD/YBqMKjjQxFGwtZ44ku/8BQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9iMmNkMGQ1MS04Yjk5LTQyYzgtOTFhZi0yZmYz
NGE0NGFlOTMuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAzFnGAwQA
zsVFMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAK4gZaZZQWboSSqITJaGcIVhjMs5EsOlBebhnBJyAokshwtM
7hqpqpekbg5S73YfW3eWcWhZJCDvRpARc4bYWZiyyu773oKnBgtuA6diI+d7Ly4W
JJVDJAf9JyBEmxsIDojlJQzQ1mjBUlA8SbZ4skSxqS/pIG8nXuT5BguhmPWlwHFe
G50cV0V4mcW/vNIlqvE6rI2EFwx7YGn7uY4PkaMvW4OGHdgMoWM4W9+EsoKELZJB
HXws59dsint/+fy4cEjkKWZopMDXQW64OZZJEWx9q6ps5WLn1yK96O6n+I1Dd18/
SADcbj0NMAofaANtbrpWxZP0yciW3p2NbrIVqfo=
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:30:49 2025 by rpki-client