Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa
File:                     ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa (raw, json)
Hash identifier:          +t1NJ9fWaMsC6iWsh/5oO5ze7HUMRljB4Vgc84JkLCo=
Subject key identifier:   67:F9:91:6D:FA:FE:A0:10:6A:7B:1A:22:33:E5:3A:AF:65:15:4B:34
Certificate issuer:       /CN=94550438-10ef-444f-b785-f7bc6eba08e7
Certificate serial:       010D0C9F4328584A51D06890930DA1FEAC94F55B
Authority key identifier: 34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa
Signing time:             Thu 26 Jun 2025 13:01:04 +0000
ROA not before:           Thu 26 Jun 2025 13:01:04 +0000
ROA not after:            Wed 24 Sep 2025 13:01:04 +0000
asID:                     15267
IP address blocks:        216.239.0.0/19 maxlen: 19
                          216.239.0.0/20 maxlen: 20
                          216.239.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/0357272c-a79a-45bf-9586-92dd49ef3223.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:51:d0:68:90:93:0d:a1:fe:ac:94:f5:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94550438-10ef-444f-b785-f7bc6eba08e7
        Validity
            Not Before: Jun 26 13:01:04 2025 GMT
            Not After : Sep 24 13:01:04 2025 GMT
        Subject: CN=d23d41a2-ba43-4254-b00d-7c2d241806e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:66:75:c9:bc:7f:e9:5e:be:15:40:59:22:a4:
                    37:1f:1b:43:1f:ef:34:69:f9:6a:01:1c:ca:36:92:
                    f9:51:80:ab:a5:21:dd:f9:ba:24:16:ab:e5:a1:9d:
                    64:b1:78:17:de:1b:88:11:59:f3:d8:ed:c4:6a:39:
                    86:6b:c6:11:e5:ad:94:33:8e:b3:11:03:87:c4:09:
                    8e:85:7b:87:d1:5c:f5:23:d8:b2:d7:82:61:5f:dc:
                    3e:d7:f8:e0:16:71:91:52:70:1c:c8:dd:c5:69:c6:
                    af:b7:44:4b:1f:0a:3d:12:78:2e:91:6b:c4:86:b0:
                    32:68:38:65:c8:7c:c8:e2:8f:1e:2f:60:ae:ac:90:
                    a7:31:cf:a7:84:de:f2:c3:13:f2:04:d7:29:11:e0:
                    73:b0:7c:6c:73:17:69:83:9f:d8:4c:7e:5c:e0:55:
                    f3:51:58:3c:fa:b0:12:c2:92:bd:f7:ad:19:76:51:
                    13:5f:c9:69:df:7f:90:d0:57:04:54:a5:62:44:03:
                    40:51:f9:c9:5f:87:df:db:95:de:a0:0b:52:73:79:
                    d3:6c:0a:0f:da:95:e4:85:bd:43:eb:9c:2e:2f:1c:
                    31:f1:ba:4a:b0:8f:08:07:40:d5:1b:e3:c6:4b:1a:
                    cf:f4:83:47:9a:4c:98:d7:1d:f0:e7:07:b4:91:6e:
                    f3:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F9:91:6D:FA:FE:A0:10:6A:7B:1A:22:33:E5:3A:AF:65:15:4B:34
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/ad88f5d4-90ec-3832-a8a7-1ed75aa8d212.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7/94550438-10ef-444f-b785-f7bc6eba08e7.crl

            X509v3 Authority Key Identifier:
                keyid:34:47:3D:92:98:3E:D3:C0:22:F0:9B:CA:12:10:8C:3D:A1:EF:3C:20

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/0357272c-a79a-45bf-9586-92dd49ef3223/94550438-10ef-444f-b785-f7bc6eba08e7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.239.0.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2c:af:ac:62:da:ec:de:6e:a3:a7:67:8e:30:3b:f8:89:26:cd:
         bd:7c:3b:11:38:e9:3a:f8:0a:11:03:69:c0:92:80:2f:15:c0:
         7d:db:96:f1:99:01:18:7d:c5:0c:af:7c:ad:b6:46:50:48:35:
         46:84:25:4f:ec:a9:07:fb:a5:e0:c7:bf:8e:32:1e:d8:48:59:
         92:e1:11:e6:e1:ce:3a:e7:ad:a3:80:92:24:de:1e:e6:8e:8f:
         f2:35:f3:72:6e:c9:d0:65:f3:8e:09:ce:a7:44:5d:27:14:e6:
         10:f9:78:9a:bb:03:8c:ed:1b:6f:24:c7:98:19:9c:92:60:55:
         77:4e:b5:4c:d4:3a:17:e7:31:64:3a:30:2f:af:79:8a:7f:4a:
         d9:ea:d3:8a:e7:36:84:b1:17:1f:5d:04:9f:f5:43:b5:b3:32:
         e8:b5:01:1f:0d:18:2e:5f:0e:5d:b2:27:ad:cf:90:0b:52:ca:
         af:01:98:7b:5d:0d:3d:c0:76:92:00:3a:4e:c4:13:e4:47:60:
         ec:bf:88:50:1d:d9:1e:78:22:0a:06:b7:c1:62:20:45:d9:ca:
         05:8e:2b:bf:12:a2:ae:19:6c:d8:ba:b7:e0:24:04:3c:f0:65:
         6c:54:0f:5a:61:ac:e3:9d:61:45:dd:2d:c8:9f:b6:0b:94:4c:
         49:df:69:3c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpR0GiQkw2h/qyU9VswDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOTQ1NTA0MzgtMTBlZi00NDRmLWI3ODUtZjdiYzZlYmEw
OGU3MB4XDTI1MDYyNjEzMDEwNFoXDTI1MDkyNDEzMDEwNFowLzEtMCsGA1UEAxMk
ZDIzZDQxYTItYmE0My00MjU0LWIwMGQtN2MyZDI0MTgwNmUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAg2Z1ybx/6V6+FUBZIqQ3HxtDH+80aflqARzK
NpL5UYCrpSHd+bokFqvloZ1ksXgX3huIEVnz2O3EajmGa8YR5a2UM46zEQOHxAmO
hXuH0Vz1I9iy14JhX9w+1/jgFnGRUnAcyN3Facavt0RLHwo9EngukWvEhrAyaDhl
yHzI4o8eL2CurJCnMc+nhN7ywxPyBNcpEeBzsHxscxdpg5/YTH5c4FXzUVg8+rAS
wpK9960ZdlETX8lp33+Q0FcEVKViRANAUfnJX4ff25XeoAtSc3nTbAoP2pXkhb1D
65wuLxwx8bpKsI8IB0DVG+PGSxrP9INHmkyY1x3w5we0kW7zMQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGf5kW36/qAQansaIjPlOq9lFUs0MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzAzNTcyNzJjLWE3OWEtNDViZi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1
MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2JjNmViYTA4ZTcvYWQ4OGY1ZDQtOTBlYy0z
ODMyLWE4YTctMWVkNzVhYThkMjEyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8wMzU3MjcyYy1h
NzlhLTQ1YmYtOTU4Ni05MmRkNDllZjMyMjMvOTQ1NTA0MzgtMTBlZi00NDRmLWI3
ODUtZjdiYzZlYmEwOGU3Lzk0NTUwNDM4LTEwZWYtNDQ0Zi1iNzg1LWY3YmM2ZWJh
MDhlNy5jcmwwHwYDVR0jBBgwFoAUNEc9kpg+08Ai8JvKEhCMPaHvPCAwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzAzNTcyNzJjLWE3OWEtNDVi
Zi05NTg2LTkyZGQ0OWVmMzIyMy85NDU1MDQzOC0xMGVmLTQ0NGYtYjc4NS1mN2Jj
NmViYTA4ZTcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2O8AMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACyvrGLa7N5uo6dnjjA7+Ikmzb18OxE46Tr4ChEDacCSgC8VwH3blvGZ
ARh9xQyvfK22RlBINUaEJU/sqQf7peDHv44yHthIWZLhEebhzjrnraOAkiTeHuaO
j/I183JuydBl844JzqdEXScU5hD5eJq7A4ztG28kx5gZnJJgVXdOtUzUOhfnMWQ6
MC+veYp/Stnq04rnNoSxFx9dBJ/1Q7WzMui1AR8NGC5fDl2yJ63PkAtSyq8BmHtd
DT3AdpIAOk7EE+RHYOy/iFAd2R54IgoGt8FiIEXZygWOK78Soq4ZbNi6t+AkBDzw
ZWxUD1phrOOdYUXdLciftguUTEnfaTw=
-----END CERTIFICATE-----
Generated at Tue Jul 1 09:14:19 2025 by rpki-client