Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c6efb83-ee1b-3d2b-a333-e23690b35b8f.roa
File:                     2c6efb83-ee1b-3d2b-a333-e23690b35b8f.roa (raw, json)
Hash identifier:          bRheqoAV8RPw5SfOBYYr+0fZeuslQ0TmtQB5wq7RnGQ=
Subject key identifier:   C9:81:2B:E5:C0:09:65:95:A8:E7:61:01:B0:F0:15:59:4D:50:88:C5
Certificate issuer:       /CN=91322739-0874-4cca-b94c-dfee388b4b44
Certificate serial:       010D0C9F4328584AE1967A9352C8ADBEF7CBE050
Authority key identifier: 5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c6efb83-ee1b-3d2b-a333-e23690b35b8f.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     577
IP address blocks:        216.209.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:7a:93:52:c8:ad:be:f7:cb:e0:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91322739-0874-4cca-b94c-dfee388b4b44
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=d4481ef0-64cd-485e-bab5-5995914e236b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:c3:96:c7:ef:90:9f:01:5d:3e:20:b6:c4:
                    8b:1f:06:b7:86:4a:29:f9:fc:4c:1b:90:f3:e6:42:
                    2e:0d:ee:2e:b9:d2:09:ee:fa:4a:43:e0:26:e6:0d:
                    ae:ff:44:dd:aa:81:d1:0a:2e:09:cc:0f:4b:d5:5d:
                    0b:83:8b:0a:bd:00:b7:a7:8a:86:48:c0:a6:f0:73:
                    92:2e:6e:60:f3:9e:6b:e1:53:52:78:99:6d:2d:ff:
                    17:7a:77:d9:c8:24:b5:fc:bd:40:86:18:aa:ea:30:
                    55:a7:2a:a5:6e:49:db:2f:0f:ce:7c:06:58:dc:a8:
                    b5:0d:de:a6:76:3a:35:d6:ce:b6:44:cc:1c:69:76:
                    8c:71:00:f5:81:52:98:9b:85:32:df:ec:73:4a:8c:
                    0f:f5:d4:27:6f:40:46:95:9a:bf:e2:06:34:32:ef:
                    1e:6c:87:ba:e4:59:71:a1:b9:08:c2:0f:1a:19:63:
                    3f:1a:e4:57:f1:32:ff:a6:86:94:fb:5e:7f:38:48:
                    aa:88:57:64:4f:e7:c4:9e:09:31:45:47:f8:ca:b8:
                    2f:dd:46:22:53:b5:51:69:f3:d0:b8:3f:6f:f7:ae:
                    74:1b:aa:b9:e3:83:2d:1e:30:d2:55:4f:e5:37:ea:
                    40:85:8a:50:fe:9f:eb:25:67:db:4f:49:24:7a:dd:
                    70:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:81:2B:E5:C0:09:65:95:A8:E7:61:01:B0:F0:15:59:4D:50:88:C5
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/2c6efb83-ee1b-3d2b-a333-e23690b35b8f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44/91322739-0874-4cca-b94c-dfee388b4b44.crl

            X509v3 Authority Key Identifier:
                keyid:5A:AF:F2:FC:49:07:0A:B7:04:14:9A:16:60:62:8E:DE:92:C5:91:7A

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/91322739-0874-4cca-b94c-dfee388b4b44.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.209.0.0/16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:f2:78:46:5e:d7:ab:94:87:74:6d:cd:86:a0:ff:67:80:36:
         e3:b0:d7:97:14:74:7c:3b:36:b4:11:78:f0:98:0f:42:23:65:
         ea:8d:aa:3e:f4:fb:cf:ce:6e:9e:d1:05:e7:3b:05:8b:37:8b:
         6b:54:6d:12:6f:04:37:a6:f2:16:2b:fe:6f:32:3e:2b:a1:29:
         96:af:6a:58:28:65:72:9b:35:c1:ac:63:5c:ad:ba:20:2a:6a:
         6a:28:33:b0:e1:ce:4f:25:d7:dc:6f:d4:b1:43:3b:b8:af:74:
         f5:5c:6f:c4:29:0f:e0:e4:7d:c2:83:17:b0:d6:12:c2:a2:d4:
         6d:5d:5e:f1:06:df:2d:80:e6:63:26:fa:79:93:34:8a:ef:81:
         52:95:82:6b:5b:69:1a:87:17:49:79:d9:21:85:66:bf:08:34:
         8d:0c:dd:54:80:5f:c6:43:42:eb:0a:12:48:0c:3d:56:66:d4:
         dd:c1:0f:40:bd:1b:5e:f9:7b:2a:80:de:df:4f:78:a8:6f:fc:
         d3:6f:7a:08:86:d9:5a:0c:8a:bf:e6:5b:50:9d:6d:fa:db:00:
         ab:b7:80:59:f5:ea:aa:25:ab:d5:86:76:68:71:39:3e:da:4c:
         d6:c0:73:c9:a3:a2:4e:c2:00:18:22:c7:08:35:9f:6d:2d:e1:
         d9:c6:36:18
-----BEGIN CERTIFICATE-----
MIIGQjCCBSqgAwIBAgIUAQ0Mn0MoWErhlnqTUsitvvfL4FAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTEzMjI3MzktMDg3NC00Y2NhLWI5NGMtZGZlZTM4OGI0
YjQ0MB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
ZDQ0ODFlZjAtNjRjZC00ODVlLWJhYjUtNTk5NTkxNGUyMzZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAj2HDlsfvkJ8BXT4gtsSLHwa3hkop+fxMG5Dz
5kIuDe4uudIJ7vpKQ+Am5g2u/0TdqoHRCi4JzA9L1V0Lg4sKvQC3p4qGSMCm8HOS
Lm5g855r4VNSeJltLf8XenfZyCS1/L1Ahhiq6jBVpyqlbknbLw/OfAZY3Ki1Dd6m
djo11s62RMwcaXaMcQD1gVKYm4Uy3+xzSowP9dQnb0BGlZq/4gY0Mu8ebIe65Flx
obkIwg8aGWM/GuRX8TL/poaU+15/OEiqiFdkT+fEngkxRUf4yrgv3UYiU7VRafPQ
uD9v9650G6q544MtHjDSVU/lN+pAhYpQ/p/rJWfbT0kket1wZQIDAQABo4IDVDCC
A1AwHQYDVR0OBBYEFMmBK+XACWWVqOdhAbDwFVlNUIjFMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85MTMy
MjczOS0wODc0LTRjY2EtYjk0Yy1kZmVlMzg4YjRiNDQvMmM2ZWZiODMtZWUxYi0z
ZDJiLWEzMzMtZTIzNjkwYjM1YjhmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTEzMjI3MzktMDg3NC00Y2NhLWI5
NGMtZGZlZTM4OGI0YjQ0LzkxMzIyNzM5LTA4NzQtNGNjYS1iOTRjLWRmZWUzODhi
NGI0NC5jcmwwHwYDVR0jBBgwFoAUWq/y/EkHCrcEFJoWYGKO3pLFkXowDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85MTMyMjczOS0wODc0LTRjY2EtYjk0Yy1kZmVl
Mzg4YjRiNDQuY2VyMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMA2NEwVAYD
VR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixodHRwczovL3d3
dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkqhkiG9w0BAQsF
AAOCAQEAH/J4Rl7Xq5SHdG3NhqD/Z4A247DXlxR0fDs2tBF48JgPQiNl6o2qPvT7
z85untEF5zsFizeLa1RtEm8EN6byFiv+bzI+K6Eplq9qWChlcps1waxjXK26ICpq
aigzsOHOTyXX3G/UsUM7uK909VxvxCkP4OR9woMXsNYSwqLUbV1e8QbfLYDmYyb6
eZM0iu+BUpWCa1tpGocXSXnZIYVmvwg0jQzdVIBfxkNC6woSSAw9VmbU3cEPQL0b
Xvl7KoDe3094qG/80296CIbZWgyKv+ZbUJ1t+tsAq7eAWfXqqiWr1YZ2aHE5PtpM
1sBzyaOiTsIAGCLHCDWfbS3h2cY2GA==
-----END CERTIFICATE-----
Generated at Sun Aug 24 04:41:46 2025 by rpki-client