Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
File:                     bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa (raw, json)
Hash identifier:          PUiRCq1mKigoiz0NAE+7T74ilqsR5lp/33Po0L7yjXg=
Subject key identifier:   C8:52:89:0C:C3:30:7D:6E:ED:F7:08:EC:41:01:CC:E7:82:F2:87:C1
Certificate issuer:       /CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
Certificate serial:       010D0C9F4328584A9D30EC5B13C062D629D58B00
Authority key identifier: B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa
Signing time:             Wed 23 Jul 2025 13:01:02 +0000
ROA not before:           Wed 23 Jul 2025 13:01:02 +0000
ROA not after:            Tue 21 Oct 2025 13:01:02 +0000
asID:                     13807
IP address blocks:        216.8.192.0/18 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 08 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:9d:30:ec:5b:13:c0:62:d6:29:d5:8b:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=cf0f31b6-ef62-4dd5-879b-fe7aee0c0536
        Validity
            Not Before: Jul 23 13:01:02 2025 GMT
            Not After : Oct 21 13:01:02 2025 GMT
        Subject: CN=33da6b4d-c5b3-4dd7-a547-413f0c40dfaa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ec:ae:47:22:c6:be:a9:74:71:d9:3c:0f:39:
                    c8:7b:46:56:0a:40:36:55:d5:c5:fd:cf:79:61:86:
                    be:7b:75:e4:fc:0d:82:c1:7f:a1:44:07:60:f3:00:
                    a5:c9:7a:4b:c1:e8:b7:47:4d:31:b8:43:4a:66:d7:
                    2b:bd:c2:1d:e8:11:b4:56:0f:30:20:d2:3a:28:52:
                    6f:d5:10:43:8a:44:ce:94:aa:19:40:bd:7e:f9:dd:
                    49:d9:df:7a:bf:fe:bf:fa:47:29:83:f8:42:89:1c:
                    bf:2f:80:f6:d1:c3:9a:fe:d8:89:12:5a:ad:6e:fc:
                    71:63:d9:ae:58:eb:10:a3:e3:79:12:2f:fb:14:13:
                    13:e3:5d:44:a2:35:ee:5e:e1:ea:1d:f2:53:15:3f:
                    82:1b:6d:0e:aa:26:84:67:70:d1:55:bd:38:ec:54:
                    f8:80:1f:84:29:61:53:79:63:44:a8:58:78:bf:aa:
                    55:b8:62:43:aa:5c:b9:52:89:48:3b:48:94:b0:d5:
                    fa:42:bc:e1:18:52:ea:57:69:bc:99:18:19:55:08:
                    e3:ee:a7:de:60:65:f9:1d:d4:8f:04:60:17:57:54:
                    19:69:c5:c4:f1:cc:20:43:a8:d7:25:e5:10:b3:ed:
                    87:1e:34:15:13:d2:b6:c8:7d:0a:f0:87:59:01:2c:
                    d7:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:52:89:0C:C3:30:7D:6E:ED:F7:08:EC:41:01:CC:E7:82:F2:87:C1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/bcc30403-87eb-3c69-8f8d-9f0ffc87e28b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.crl

            X509v3 Authority Key Identifier:
                keyid:B9:50:CD:94:62:A9:48:BB:D7:A2:B1:00:10:2E:4E:45:8B:6D:64:7B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/cf0f31b6-ef62-4dd5-879b-fe7aee0c0536.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.192.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         74:cb:48:10:00:3b:b9:2b:b2:f5:af:c6:ce:e5:a1:7c:7f:c8:
         fe:d4:78:c7:70:5b:25:d3:4c:16:91:47:be:ee:51:48:6d:bc:
         59:b6:0f:c1:f5:29:38:2e:36:a4:29:17:ec:45:9e:1b:0b:5a:
         a9:78:38:db:51:0c:56:c5:fd:61:da:e5:f0:68:6c:8c:a6:0d:
         06:d5:4e:18:19:c1:14:f0:4c:d9:cf:75:88:4e:6e:3b:ef:4e:
         a8:dd:e0:75:16:5d:c8:e1:72:40:02:c3:13:9e:06:77:69:a5:
         08:7f:18:06:a6:59:30:f7:df:4a:68:e4:56:ed:0b:85:ff:8b:
         cd:5a:43:46:6d:96:2f:98:4d:49:d1:8e:4e:c7:a7:2c:fd:ee:
         17:16:fd:9a:99:a5:13:de:64:82:7b:59:b0:7f:d6:f7:92:8a:
         41:1b:55:2d:37:9a:fd:36:54:0c:d8:ca:36:47:d2:24:4b:94:
         55:9b:2d:24:4e:06:8c:46:4a:89:3f:6e:b5:23:b8:8c:4b:eb:
         b9:4f:e7:f3:a6:89:3c:c9:0d:2e:b1:c1:d1:07:b1:9a:79:03:
         95:94:ff:07:2e:1f:b5:ef:a9:92:cb:57:fb:95:4c:e1:b1:f9:
         55:77:e8:7a:d2:4f:f1:e4:14:83:bc:9d:07:ab:99:2f:3e:bc:
         9e:b4:59:ea
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqdMOxbE8Bi1inViwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3OWItZmU3YWVlMGMw
NTM2MB4XDTI1MDcyMzEzMDEwMloXDTI1MTAyMTEzMDEwMlowLzEtMCsGA1UEAxMk
MzNkYTZiNGQtYzViMy00ZGQ3LWE1NDctNDEzZjBjNDBkZmFhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh+yuRyLGvql0cdk8DznIe0ZWCkA2VdXF/c95
YYa+e3Xk/A2CwX+hRAdg8wClyXpLwei3R00xuENKZtcrvcId6BG0Vg8wINI6KFJv
1RBDikTOlKoZQL1++d1J2d96v/6/+kcpg/hCiRy/L4D20cOa/tiJElqtbvxxY9mu
WOsQo+N5Ei/7FBMT411EojXuXuHqHfJTFT+CG20OqiaEZ3DRVb047FT4gB+EKWFT
eWNEqFh4v6pVuGJDqly5UolIO0iUsNX6QrzhGFLqV2m8mRgZVQjj7qfeYGX5HdSP
BGAXV1QZacXE8cwgQ6jXJeUQs+2HHjQVE9K2yH0K8IdZASzX+QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMhSiQzDMH1u7fcI7EEBzOeC8ofBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBm
MzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdhZWUwYzA1MzYvYmNjMzA0MDMtODdlYi0z
YzY5LThmOGQtOWYwZmZjODdlMjhiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvY2YwZjMxYjYtZWY2Mi00ZGQ1LTg3
OWItZmU3YWVlMGMwNTM2L2NmMGYzMWI2LWVmNjItNGRkNS04NzliLWZlN2FlZTBj
MDUzNi5jcmwwHwYDVR0jBBgwFoAUuVDNlGKpSLvXorEAEC5ORYttZHswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9jZjBmMzFiNi1lZjYyLTRkZDUtODc5Yi1mZTdh
ZWUwYzA1MzYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG2AjAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHTLSBAAO7krsvWvxs7loXx/yP7UeMdwWyXTTBaRR77uUUhtvFm2D8H1
KTguNqQpF+xFnhsLWql4ONtRDFbF/WHa5fBobIymDQbVThgZwRTwTNnPdYhObjvv
Tqjd4HUWXcjhckACwxOeBndppQh/GAamWTD330po5FbtC4X/i81aQ0Ztli+YTUnR
jk7Hpyz97hcW/ZqZpRPeZIJ7WbB/1veSikEbVS03mv02VAzYyjZH0iRLlFWbLSRO
BoxGSok/brUjuIxL67lP5/OmiTzJDS6xwdEHsZp5A5WU/wcuH7XvqZLLV/uVTOGx
+VV36HrST/HkFIO8nQermS8+vJ60Weo=
-----END CERTIFICATE-----
Generated at Thu Aug 7 11:12:31 2025 by rpki-client