Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa
File:                     fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa (raw, json)
Hash identifier:          HLHOtAj3NZL5F3f/JOyyTfq/QU6a/MkVFTGUJRwIYKY=
Subject key identifier:   38:A9:76:06:F0:1D:D5:57:8B:30:84:80:F8:04:BA:C0:02:E4:64:BB
Certificate issuer:       /CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
Certificate serial:       010D0C9F4328584A3A15721EC77A76658BFBC500
Authority key identifier: 4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa
Signing time:             Wed 18 Jun 2025 01:00:50 +0000
ROA not before:           Wed 18 Jun 2025 01:00:50 +0000
ROA not after:            Tue 16 Sep 2025 01:00:50 +0000
asID:                     13727
IP address blocks:        216.8.176.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3a:15:72:1e:c7:7a:76:65:8b:fb:c5:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1e7bc28d-37e4-4c76-84d4-8431dc9239c8
        Validity
            Not Before: Jun 18 01:00:50 2025 GMT
            Not After : Sep 16 01:00:50 2025 GMT
        Subject: CN=c88d030c-fa18-408e-b4ad-dd5bedf8ead1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f5:c3:d4:fc:25:c9:ef:fd:bc:9f:43:92:7a:
                    34:6e:d9:6e:fc:e2:b0:fe:d1:46:ba:2b:a7:5c:10:
                    8a:a2:80:a8:ba:fb:25:3b:5d:f7:2d:79:9d:1f:d8:
                    f5:42:e0:97:93:f7:7c:57:08:58:3d:27:69:e7:e7:
                    da:cb:91:38:5e:4f:b4:04:ed:fd:d2:72:ea:38:06:
                    80:5a:e3:98:f1:69:84:3b:40:14:56:df:87:66:c1:
                    18:8e:41:fd:ab:8a:fb:2b:c8:c8:56:09:5d:33:fd:
                    9d:5f:4c:4c:7d:71:42:0e:75:ef:74:be:d2:65:fe:
                    11:59:9e:e4:60:68:19:64:f7:51:af:0a:ef:03:8b:
                    0c:8e:36:57:74:0a:21:24:1d:45:f5:62:ea:03:84:
                    6d:50:0c:99:9b:f8:71:9b:14:97:bf:e7:e8:55:2b:
                    8c:34:c0:44:bf:33:fd:1a:ba:22:25:f3:2a:55:2c:
                    b8:61:71:20:15:4d:04:6a:bd:3f:e8:26:d2:6f:83:
                    56:9a:06:9c:0f:68:20:44:4f:f4:6b:ed:89:d6:de:
                    03:7e:cf:00:17:dd:ac:d8:21:33:c4:fc:e8:bb:23:
                    3a:06:01:6f:63:e0:e1:25:a0:37:7b:1e:ba:41:00:
                    eb:ca:96:d2:14:41:41:ed:f3:05:4c:fa:47:72:f6:
                    7e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:A9:76:06:F0:1D:D5:57:8B:30:84:80:F8:04:BA:C0:02:E4:64:BB
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/fe164eba-9a9c-32b9-951f-27b34f55a3aa.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.crl

            X509v3 Authority Key Identifier:
                keyid:4F:68:46:08:EC:C0:FC:35:9C:5D:4D:71:77:EB:C9:D0:CA:81:1B:54

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1e7bc28d-37e4-4c76-84d4-8431dc9239c8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.8.176.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         97:ec:ca:69:e9:7d:4d:db:16:7e:ca:76:b4:69:33:39:1a:1c:
         dd:33:27:9d:38:b8:3a:c5:1a:61:02:cd:7e:a8:a2:7b:5b:4c:
         ea:d8:22:0f:89:68:ca:dc:8e:60:07:6a:d5:81:45:0a:67:28:
         21:de:2e:6d:f8:99:07:0d:1f:39:df:05:3b:8e:df:a7:78:83:
         56:7e:c3:59:95:73:3d:2c:c4:12:1b:3f:c9:00:e7:66:39:6f:
         09:1a:a7:4f:c9:04:ac:e2:78:98:b5:6a:cb:39:6d:23:44:d8:
         19:00:28:c0:31:81:27:0e:91:40:82:6a:82:8f:3a:46:ff:8b:
         34:ae:0e:dc:7d:3b:a0:88:90:f6:5e:77:e0:7c:31:ca:89:21:
         7b:22:94:af:dd:43:db:33:07:c6:a6:50:e8:60:a1:2d:a3:7f:
         90:2f:49:67:d1:20:31:11:8e:41:4b:29:70:7d:3a:52:35:1a:
         a2:a7:3c:ab:50:f3:f4:28:7a:e7:65:6b:de:0d:4d:c4:f5:38:
         e3:5d:e3:e6:ba:72:42:83:8d:5f:c2:95:bf:88:f4:49:b0:b1:
         89:85:a1:c0:c6:28:67:b7:dd:21:ed:66:f4:1c:dd:61:a0:91:
         10:31:74:c7:85:4c:af:cf:25:e3:47:6a:09:c8:e6:73:41:24:
         d6:0e:78:5e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo6FXIex3p2ZYv7xQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWU3YmMyOGQtMzdlNC00Yzc2LTg0ZDQtODQzMWRjOTIz
OWM4MB4XDTI1MDYxODAxMDA1MFoXDTI1MDkxNjAxMDA1MFowLzEtMCsGA1UEAxMk
Yzg4ZDAzMGMtZmExOC00MDhlLWI0YWQtZGQ1YmVkZjhlYWQxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPXD1Pwlye/9vJ9Dkno0btlu/OKw/tFGuiun
XBCKooCouvslO133LXmdH9j1QuCXk/d8VwhYPSdp5+fay5E4Xk+0BO390nLqOAaA
WuOY8WmEO0AUVt+HZsEYjkH9q4r7K8jIVgldM/2dX0xMfXFCDnXvdL7SZf4RWZ7k
YGgZZPdRrwrvA4sMjjZXdAohJB1F9WLqA4RtUAyZm/hxmxSXv+foVSuMNMBEvzP9
GroiJfMqVSy4YXEgFU0Ear0/6CbSb4NWmgacD2ggRE/0a+2J1t4Dfs8AF92s2CEz
xPzouyM6BgFvY+DhJaA3ex66QQDrypbSFEFB7fMFTPpHcvZ+HQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDipdgbwHdVXizCEgPgEusAC5GS7MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdi
YzI4ZC0zN2U0LTRjNzYtODRkNC04NDMxZGM5MjM5YzgvZmUxNjRlYmEtOWE5Yy0z
MmI5LTk1MWYtMjdiMzRmNTVhM2FhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMWU3YmMyOGQtMzdlNC00Yzc2LTg0
ZDQtODQzMWRjOTIzOWM4LzFlN2JjMjhkLTM3ZTQtNGM3Ni04NGQ0LTg0MzFkYzky
MzljOC5jcmwwHwYDVR0jBBgwFoAUT2hGCOzA/DWcXU1xd+vJ0MqBG1QwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8xZTdiYzI4ZC0zN2U0LTRjNzYtODRkNC04NDMx
ZGM5MjM5YzguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC2AiwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJfsymnpfU3bFn7KdrRpMzkaHN0zJ504uDrFGmECzX6oontbTOrYIg+J
aMrcjmAHatWBRQpnKCHeLm34mQcNHznfBTuO36d4g1Z+w1mVcz0sxBIbP8kA52Y5
bwkap0/JBKzieJi1ass5bSNE2BkAKMAxgScOkUCCaoKPOkb/izSuDtx9O6CIkPZe
d+B8McqJIXsilK/dQ9szB8amUOhgoS2jf5AvSWfRIDERjkFLKXB9OlI1GqKnPKtQ
8/Qoeudla94NTcT1OONd4+a6ckKDjV/Clb+I9EmwsYmFocDGKGe33SHtZvQc3WGg
kRAxdMeFTK/PJeNHagnI5nNBJNYOeF4=
-----END CERTIFICATE-----
Generated at Mon Jun 30 08:25:43 2025 by rpki-client