Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa
File:                     814ea5e9-f753-336f-a0ba-035609394f31.roa (raw, json)
Hash identifier:          dzCb+VHFcb0XbOejJIW2Kh3fkEh1PY9RfdKZDhou5Do=
Subject key identifier:   66:EA:61:C0:E9:80:90:ED:BC:E9:06:E6:A0:09:D8:A8:2A:B8:06:47
Certificate issuer:       /CN=e98db606-926a-43a7-aa62-47481a8d81d0
Certificate serial:       010D0C9F4328584A331AE85AF858429391684700
Authority key identifier: A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa
Signing time:             Sun 15 Jun 2025 13:01:02 +0000
ROA not before:           Sun 15 Jun 2025 13:01:02 +0000
ROA not after:            Sat 13 Sep 2025 13:01:02 +0000
asID:                     19795
IP address blocks:        208.95.135.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 18 Jun 2025 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:33:1a:e8:5a:f8:58:42:93:91:68:47:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e98db606-926a-43a7-aa62-47481a8d81d0
        Validity
            Not Before: Jun 15 13:01:02 2025 GMT
            Not After : Sep 13 13:01:02 2025 GMT
        Subject: CN=e6ffb492-cea2-4cf0-93d3-88fc1ba8ac8e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:b0:50:8b:4f:44:2d:9f:6c:45:4f:6d:4d:e8:
                    68:9a:28:5e:15:44:8a:da:02:a3:c2:f4:62:8b:32:
                    c6:66:dd:3e:ba:8e:3b:53:74:e0:fa:e1:3b:61:a9:
                    d8:63:aa:2a:21:4a:04:d8:17:ea:14:82:cc:00:97:
                    5b:a3:bc:01:8a:a3:da:b7:95:c5:36:c4:6e:5f:34:
                    86:51:b0:96:30:33:c0:8a:06:ac:0f:78:a5:25:17:
                    40:ff:18:ed:f9:6e:23:15:7d:63:40:71:3a:17:8e:
                    fd:0f:58:87:59:57:f0:ea:9a:2c:c4:b4:b1:c8:02:
                    03:46:80:4a:1d:48:63:da:0c:83:95:5b:f7:84:1e:
                    89:c0:a0:77:ac:da:d3:23:e3:ed:be:84:fc:ce:d9:
                    e2:f7:b4:97:7c:3c:76:49:1d:f6:2c:a6:67:a9:05:
                    dc:d7:dd:36:1b:7e:e4:c1:82:00:da:c5:75:dd:55:
                    77:51:4d:e2:1b:0a:4d:17:01:7c:85:20:0d:7c:e0:
                    aa:96:e3:06:be:02:cc:41:94:2d:c4:3e:e3:36:7f:
                    dd:c9:5a:9f:af:5b:35:06:d9:a3:eb:68:20:3f:61:
                    83:a3:a0:0e:6a:3a:ef:d6:b9:2b:b5:cf:f0:ac:cc:
                    0d:83:34:ae:f5:e9:02:2b:eb:95:6b:af:85:77:6f:
                    98:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:EA:61:C0:E9:80:90:ED:BC:E9:06:E6:A0:09:D8:A8:2A:B8:06:47
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/814ea5e9-f753-336f-a0ba-035609394f31.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0/e98db606-926a-43a7-aa62-47481a8d81d0.crl

            X509v3 Authority Key Identifier:
                keyid:A1:10:6C:BF:85:75:3C:56:40:BD:1E:DD:3C:8A:E0:26:10:5F:33:B5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/e98db606-926a-43a7-aa62-47481a8d81d0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.95.135.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5e:45:c1:ed:67:02:46:9e:38:73:19:95:dd:60:8e:af:e4:f4:
         62:ae:cd:81:f7:53:56:c2:4e:a8:5a:28:96:34:54:1d:d8:c3:
         38:88:00:9c:24:7e:e2:f3:2f:4e:32:9f:08:42:b8:94:9a:6e:
         58:44:3c:8b:52:99:70:1f:6a:9e:89:9d:d3:c5:c4:48:0b:39:
         d7:b5:0d:16:42:b4:ee:4f:9d:98:7f:cd:47:a8:48:55:b4:f3:
         0b:14:36:6a:08:99:bd:fa:03:8e:35:eb:f4:bf:3f:04:0a:dc:
         7f:60:a7:31:3c:6a:06:5d:1d:a0:ea:b6:81:67:c4:cb:e8:7b:
         d5:a1:be:a4:29:60:ef:e1:94:08:0d:bf:a9:fb:c3:8c:2c:a8:
         f9:d6:4f:1c:fc:12:f5:f4:e9:47:32:0c:71:e0:d8:b1:0d:fa:
         a5:ce:f0:fc:35:74:84:8b:bb:fa:8d:5e:b6:98:dc:f2:90:88:
         8c:90:0c:a9:95:0f:b0:4c:89:b2:82:b4:0a:ae:94:75:85:a6:
         54:33:6b:48:b9:06:8b:b5:f5:5f:d8:56:6c:41:fe:99:fc:78:
         18:6d:78:39:ae:a8:1b:c3:db:d1:98:cd:90:40:40:00:eb:73:
         20:4e:21:f1:a9:f6:dc:e1:b1:83:0b:ed:ee:4a:33:44:17:09:
         c4:3d:ec:bc
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEozGuha+FhCk5FoRwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk4ZGI2MDYtOTI2YS00M2E3LWFhNjItNDc0ODFhOGQ4
MWQwMB4XDTI1MDYxNTEzMDEwMloXDTI1MDkxMzEzMDEwMlowLzEtMCsGA1UEAxMk
ZTZmZmI0OTItY2VhMi00Y2YwLTkzZDMtODhmYzFiYThhYzhlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5bBQi09ELZ9sRU9tTehomiheFUSK2gKjwvRi
izLGZt0+uo47U3Tg+uE7YanYY6oqIUoE2BfqFILMAJdbo7wBiqPat5XFNsRuXzSG
UbCWMDPAigasD3ilJRdA/xjt+W4jFX1jQHE6F479D1iHWVfw6posxLSxyAIDRoBK
HUhj2gyDlVv3hB6JwKB3rNrTI+PtvoT8ztni97SXfDx2SR32LKZnqQXc1902G37k
wYIA2sV13VV3UU3iGwpNFwF8hSANfOCqluMGvgLMQZQtxD7jNn/dyVqfr1s1Btmj
62ggP2GDo6AOajrv1rkrtc/wrMwNgzSu9ekCK+uVa6+Fd2+YkwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGbqYcDpgJDtvOkG5qAJ2KgquAZHMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS9lOThk
YjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4MWE4ZDgxZDAvODE0ZWE1ZTktZjc1My0z
MzZmLWEwYmEtMDM1NjA5Mzk0ZjMxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvZTk4ZGI2MDYtOTI2YS00M2E3LWFh
NjItNDc0ODFhOGQ4MWQwL2U5OGRiNjA2LTkyNmEtNDNhNy1hYTYyLTQ3NDgxYThk
ODFkMC5jcmwwHwYDVR0jBBgwFoAUoRBsv4V1PFZAvR7dPIrgJhBfM7UwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS9lOThkYjYwNi05MjZhLTQzYTctYWE2Mi00NzQ4
MWE4ZDgxZDAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0F+HMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF5Fwe1nAkaeOHMZld1gjq/k9GKuzYH3U1bCTqhaKJY0VB3YwziIAJwk
fuLzL04ynwhCuJSablhEPItSmXAfap6JndPFxEgLOde1DRZCtO5PnZh/zUeoSFW0
8wsUNmoImb36A4416/S/PwQK3H9gpzE8agZdHaDqtoFnxMvoe9WhvqQpYO/hlAgN
v6n7w4wsqPnWTxz8EvX06UcyDHHg2LEN+qXO8Pw1dISLu/qNXraY3PKQiIyQDKmV
D7BMibKCtAqulHWFplQza0i5Bou19V/YVmxB/pn8eBhteDmuqBvD29GYzZBAQADr
cyBOIfGp9tzhsYML7e5KM0QXCcQ97Lw=
-----END CERTIFICATE-----
Generated at Mon Jun 16 18:17:22 2025 by rpki-client