Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa
File:                     b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa (raw, json)
Hash identifier:          7FxGbelJMjq54cG+82+nRVWCTHtt1PoY6kevJBg8X5o=
Subject key identifier:   DA:F6:90:32:97:EA:29:0F:FC:CF:35:24:C5:A1:39:44:FA:DD:E5:44
Certificate issuer:       /CN=e286fd28-0939-48b9-86ba-cbe791497d15
Certificate serial:       010D0C9F43285849CE9A51A9CD840EE757307AF0
Authority key identifier: 1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa
Signing time:             Sat 10 May 2025 13:01:00 +0000
ROA not before:           Sat 10 May 2025 13:01:00 +0000
ROA not after:            Fri 08 Aug 2025 13:01:00 +0000
asID:                     14618
IP address blocks:        142.202.204.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 16 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ce:9a:51:a9:cd:84:0e:e7:57:30:7a:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e286fd28-0939-48b9-86ba-cbe791497d15
        Validity
            Not Before: May 10 13:01:00 2025 GMT
            Not After : Aug  8 13:01:00 2025 GMT
        Subject: CN=14bb3f90-9b09-4627-a8c9-1b21cd1851c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:5e:11:82:2b:80:05:31:62:76:db:b4:a1:47:
                    96:bb:d4:b5:9c:59:2d:e6:50:ca:a3:f2:70:7e:fc:
                    97:0c:da:54:5a:25:ba:3e:10:e7:9f:8d:c6:15:4a:
                    1b:56:31:8b:00:dd:99:e1:76:a7:7a:21:e1:ac:94:
                    77:b3:f1:9f:21:12:fc:c2:b9:d7:b3:65:cc:55:95:
                    00:f6:99:1c:ee:63:2a:b3:46:6e:cc:72:97:9f:fd:
                    48:b2:d6:79:82:b4:7a:70:ec:51:04:ae:ed:65:3d:
                    e2:5b:fd:d9:24:b6:99:50:2b:ba:3d:b4:b5:04:cf:
                    d9:03:19:4b:fb:eb:69:74:0b:16:1b:a3:ed:24:66:
                    27:44:38:c9:8a:69:5c:0b:e7:5c:6f:58:64:99:94:
                    5c:f3:78:6c:4e:0f:8b:7a:d0:34:63:c9:35:02:17:
                    6c:45:ed:43:41:f4:74:52:8d:25:33:b4:83:59:88:
                    8d:c4:29:c4:ad:6b:1b:0d:54:9d:15:bb:a7:11:b3:
                    c8:1f:91:b4:39:9f:bb:62:d3:c6:5d:6e:b6:df:4c:
                    e7:79:ed:35:6c:8d:d9:08:8d:be:ad:2f:8e:6c:e2:
                    bf:15:7e:5f:f3:3c:a4:95:b9:a6:b5:c7:6d:02:03:
                    f6:91:4e:c6:12:80:12:5d:26:70:7b:44:3b:20:e9:
                    5b:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F6:90:32:97:EA:29:0F:FC:CF:35:24:C5:A1:39:44:FA:DD:E5:44
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/b6c8f991-09fa-3c07-955b-704a2c6d70f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15/e286fd28-0939-48b9-86ba-cbe791497d15.crl

            X509v3 Authority Key Identifier:
                keyid:1A:A4:9C:18:83:7A:8A:F6:9B:C9:28:DF:33:44:30:F2:DD:71:0E:9C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e286fd28-0939-48b9-86ba-cbe791497d15.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.202.204.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ce:9d:3d:73:b9:82:9b:27:5a:8e:0a:0a:de:47:8d:cb:48:d3:
         51:00:cd:65:b4:28:ed:45:26:ba:82:ac:43:30:29:dd:4a:c9:
         e0:66:c0:56:ec:38:e8:80:6f:5b:c1:00:19:49:4f:76:35:4e:
         00:ad:61:35:bc:a0:3b:a0:b5:bc:c6:0d:5f:bf:67:57:09:f6:
         40:cc:d9:56:20:b6:de:d8:ca:fb:a7:07:53:5f:18:bd:46:9f:
         03:76:cc:7d:02:63:5c:dc:a6:9a:3d:b8:01:bc:5a:fe:23:48:
         5d:98:61:64:3c:90:1b:9b:7b:7d:1b:60:3b:d2:ac:3a:5a:2c:
         4f:b5:a0:13:d9:4e:7b:1c:89:27:c7:b2:03:d3:0d:9a:41:d8:
         45:63:a6:62:1d:3b:44:eb:57:38:65:f7:35:5a:63:94:fc:25:
         76:26:22:34:75:f3:47:f6:9e:05:6e:99:4f:bc:8d:b8:57:b4:
         8d:6c:ae:0e:cf:61:2a:9e:ad:17:c2:f5:46:d6:88:79:fe:93:
         3f:ef:19:f6:7c:f7:34:59:9d:e7:6c:66:13:e7:1e:7e:45:d6:
         aa:2c:10:13:bd:18:38:79:29:94:ea:32:97:e1:c4:09:78:71:
         72:f7:1e:65:a9:62:4a:2b:db:59:98:88:38:32:88:a0:46:c7:
         7b:ad:81:63
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnOmlGpzYQO51cwevAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTI4NmZkMjgtMDkzOS00OGI5LTg2YmEtY2JlNzkxNDk3
ZDE1MB4XDTI1MDUxMDEzMDEwMFoXDTI1MDgwODEzMDEwMFowLzEtMCsGA1UEAxMk
MTRiYjNmOTAtOWIwOS00NjI3LWE4YzktMWIyMWNkMTg1MWM2MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmF4RgiuABTFidtu0oUeWu9S1nFkt5lDKo/Jw
fvyXDNpUWiW6PhDnn43GFUobVjGLAN2Z4XaneiHhrJR3s/GfIRL8wrnXs2XMVZUA
9pkc7mMqs0ZuzHKXn/1IstZ5grR6cOxRBK7tZT3iW/3ZJLaZUCu6PbS1BM/ZAxlL
++tpdAsWG6PtJGYnRDjJimlcC+dcb1hkmZRc83hsTg+LetA0Y8k1AhdsRe1DQfR0
Uo0lM7SDWYiNxCnErWsbDVSdFbunEbPIH5G0OZ+7YtPGXW6230znee01bI3ZCI2+
rS+ObOK/FX5f8zyklbmmtcdtAgP2kU7GEoASXSZwe0Q7IOlbtwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNr2kDKX6ikP/M81JMWhOUT63eVEMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2
ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3OTE0OTdkMTUvYjZjOGY5OTEtMDlmYS0z
YzA3LTk1NWItNzA0YTJjNmQ3MGY0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTI4NmZkMjgtMDkzOS00OGI5LTg2
YmEtY2JlNzkxNDk3ZDE1L2UyODZmZDI4LTA5MzktNDhiOS04NmJhLWNiZTc5MTQ5
N2QxNS5jcmwwHwYDVR0jBBgwFoAUGqScGIN6ivabySjfM0Qw8t1xDpwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lMjg2ZmQyOC0wOTM5LTQ4YjktODZiYS1jYmU3
OTE0OTdkMTUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjsrMMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAM6dPXO5gpsnWo4KCt5HjctI01EAzWW0KO1FJrqCrEMwKd1KyeBmwFbs
OOiAb1vBABlJT3Y1TgCtYTW8oDugtbzGDV+/Z1cJ9kDM2VYgtt7YyvunB1NfGL1G
nwN2zH0CY1zcppo9uAG8Wv4jSF2YYWQ8kBube30bYDvSrDpaLE+1oBPZTnsciSfH
sgPTDZpB2EVjpmIdO0TrVzhl9zVaY5T8JXYmIjR180f2ngVumU+8jbhXtI1srg7P
YSqerRfC9UbWiHn+kz/vGfZ89zRZnedsZhPnHn5F1qosEBO9GDh5KZTqMpfhxAl4
cXL3HmWpYkor21mYiDgyiKBGx3utgWM=
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:48:24 2025 by rpki-client