Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa
File:                     1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa (raw, json)
Hash identifier:          SBnvPhE/L6qmcV4keqCBnSvwUlZmZZdwuYLujLAIcCg=
Subject key identifier:   CB:5B:7E:02:C9:4F:D0:D1:74:16:0B:E8:68:24:4F:7D:43:62:DF:B6
Certificate issuer:       /CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
Certificate serial:       010D0C9F4328584A3E45A68865B1B732313083C0
Authority key identifier: AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     16715
IP address blocks:        67.220.48.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sat 05 Jul 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:a6:88:65:b1:b7:32:31:30:83:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ff5ac87-7814-4f58-a2b6-2075afc56f21
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=c86083cd-227e-440d-a1ef-f55ab84458d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b0:ce:07:c3:1c:3d:9d:9b:48:58:8e:d7:fc:
                    42:86:15:06:41:3f:e2:8e:49:d5:ff:0c:e1:b2:ab:
                    11:9f:2c:0f:bd:e9:66:b4:88:f6:7e:b1:75:6d:f4:
                    9c:75:e5:77:fb:af:aa:82:85:85:5c:90:19:d3:5e:
                    5b:a7:c3:da:23:b0:22:f5:4b:c2:0f:38:88:94:3b:
                    ba:ea:1a:96:ec:11:d7:1b:ad:83:18:4f:b2:ae:43:
                    52:0f:2d:7f:2f:10:bc:aa:2b:99:29:44:d7:64:a7:
                    06:b3:89:6b:14:a1:11:a7:57:84:a7:d4:a7:16:4c:
                    62:3c:6b:8b:b1:be:3d:e0:10:54:cc:7e:95:49:09:
                    dc:bd:2f:15:21:38:8e:92:1d:f8:8d:45:db:04:6a:
                    32:c9:f0:e5:c1:c4:56:a0:37:ac:8c:60:9a:c3:f0:
                    d0:06:d0:38:8d:eb:63:be:52:80:9a:1d:97:df:c5:
                    17:c3:1b:3c:a2:4f:43:70:fa:dc:bc:4a:99:a0:46:
                    5e:aa:cc:a5:cc:24:d5:6f:ac:9f:72:49:ce:b6:5e:
                    6e:0a:d9:03:cb:17:ca:eb:45:34:89:64:27:dd:67:
                    d9:af:01:fa:96:a1:5a:b3:d8:39:d3:cd:f4:61:9b:
                    8c:92:da:1c:d9:55:c4:b1:dd:f9:da:01:43:78:c6:
                    0b:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:5B:7E:02:C9:4F:D0:D1:74:16:0B:E8:68:24:4F:7D:43:62:DF:B6
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/1b78ac29-d85c-3f7e-aec2-b3537f31c1b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21/2ff5ac87-7814-4f58-a2b6-2075afc56f21.crl

            X509v3 Authority Key Identifier:
                keyid:AB:2B:9D:64:9F:90:C1:18:3F:2B:2E:38:1F:79:BF:7D:93:6A:47:9D

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2ff5ac87-7814-4f58-a2b6-2075afc56f21.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.220.48.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:85:78:41:24:fd:39:a4:cc:ca:8e:72:cd:8d:ac:4b:72:
         ab:f7:95:73:52:d7:c7:b6:fc:a8:a3:78:88:f4:55:6a:bc:d3:
         78:6d:82:7d:45:29:98:83:ba:55:fc:08:65:bf:92:7b:b4:3c:
         88:64:af:d7:53:c0:a2:ba:54:1b:a3:49:49:bc:bd:10:91:31:
         ff:7c:a9:b1:06:36:7f:6a:48:a9:67:c8:20:4d:6a:87:4e:29:
         ae:63:0f:dc:84:1a:5b:06:58:e9:f3:5b:19:85:96:7f:8d:4f:
         98:fa:02:05:ce:1b:68:a0:f3:83:2d:f5:9b:00:de:06:36:8d:
         bc:ab:49:09:11:2e:c4:94:c3:7a:c6:34:cb:0d:4e:a4:ee:0b:
         11:ec:17:1e:61:9a:ac:c2:a0:7e:7b:aa:8b:06:e2:f0:46:0a:
         dd:fe:ec:87:c1:4f:2c:7c:ef:b4:1d:cf:7a:56:fe:e6:66:da:
         91:59:db:9b:69:33:c4:b3:e3:ab:d1:ed:c3:19:4e:6f:e7:9f:
         18:64:cd:7f:6d:cf:0a:8e:fe:a0:ce:27:f3:53:c5:37:f2:6d:
         de:cd:16:fb:a2:61:87:7f:f4:0b:6b:8e:ff:b1:a4:25:4d:00:
         18:51:03:7a:de:1d:1d:88:82:4e:c5:05:bf:92:c7:ae:90:c7:
         fe:3b:e5:4a
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RaaIZbG3MjEwg8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmZmNWFjODctNzgxNC00ZjU4LWEyYjYtMjA3NWFmYzU2
ZjIxMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
Yzg2MDgzY2QtMjI3ZS00NDBkLWExZWYtZjU1YWI4NDQ1OGQ3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7DOB8McPZ2bSFiO1/xChhUGQT/ijknV/wzh
sqsRnywPvelmtIj2frF1bfScdeV3+6+qgoWFXJAZ015bp8PaI7Ai9UvCDziIlDu6
6hqW7BHXG62DGE+yrkNSDy1/LxC8qiuZKUTXZKcGs4lrFKERp1eEp9SnFkxiPGuL
sb494BBUzH6VSQncvS8VITiOkh34jUXbBGoyyfDlwcRWoDesjGCaw/DQBtA4jetj
vlKAmh2X38UXwxs8ok9DcPrcvEqZoEZeqsylzCTVb6yfcknOtl5uCtkDyxfK60U0
iWQn3WfZrwH6lqFas9g50830YZuMktoc2VXEsd352gFDeMYLxwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMtbfgLJT9DRdBYL6GgkT31DYt+2MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1
YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1YWZjNTZmMjEvMWI3OGFjMjktZDg1Yy0z
ZjdlLWFlYzItYjM1MzdmMzFjMWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvMmZmNWFjODctNzgxNC00ZjU4LWEy
YjYtMjA3NWFmYzU2ZjIxLzJmZjVhYzg3LTc4MTQtNGY1OC1hMmI2LTIwNzVhZmM1
NmYyMS5jcmwwHwYDVR0jBBgwFoAUqyudZJ+QwRg/Ky44H3m/fZNqR50wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8yZmY1YWM4Ny03ODE0LTRmNTgtYTJiNi0yMDc1
YWZjNTZmMjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9wwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHL9hXhBJP05pMzKjnLNjaxLcqv3lXNS18e2/KijeIj0VWq803htgn1F
KZiDulX8CGW/knu0PIhkr9dTwKK6VBujSUm8vRCRMf98qbEGNn9qSKlnyCBNaodO
Ka5jD9yEGlsGWOnzWxmFln+NT5j6AgXOG2ig84Mt9ZsA3gY2jbyrSQkRLsSUw3rG
NMsNTqTuCxHsFx5hmqzCoH57qosG4vBGCt3+7IfBTyx877Qdz3pW/uZm2pFZ25tp
M8Sz46vR7cMZTm/nnxhkzX9tzwqO/qDOJ/NTxTfybd7NFvuiYYd/9Atrjv+xpCVN
ABhRA3reHR2Igk7FBb+Sx66Qx/475Uo=
-----END CERTIFICATE-----
Generated at Fri Jul 4 09:53:10 2025 by rpki-client