Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa
File:                     6e0df5b1-d691-3061-8105-608fc4c30dc3.roa (raw, json)
Hash identifier:          Y3//ovQUenjKkklKQbOkM79Z6mfcbds7X+Js9m+Mi3c=
Subject key identifier:   F9:3E:16:B8:FB:25:8C:66:73:38:88:32:8B:DD:60:8C:26:30:26:8F
Certificate issuer:       /CN=3df29669-3733-4127-bbde-a71cc4b5a661
Certificate serial:       010D0C9F43285849C0A4E0CDA875F548743B1400
Authority key identifier: 95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa
Signing time:             Mon 05 May 2025 13:01:00 +0000
ROA not before:           Mon 05 May 2025 13:01:00 +0000
ROA not after:            Sun 03 Aug 2025 13:01:00 +0000
asID:                     55247
IP address blocks:        208.82.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 16 May 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:c0:a4:e0:cd:a8:75:f5:48:74:3b:14:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3df29669-3733-4127-bbde-a71cc4b5a661
        Validity
            Not Before: May  5 13:01:00 2025 GMT
            Not After : Aug  3 13:01:00 2025 GMT
        Subject: CN=c91d5e65-8b13-40d0-a2d2-0f5aa844a0a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:0a:0d:8d:ce:9f:ed:c8:21:4a:21:7e:ce:79:
                    f2:ab:5e:da:67:0d:78:4c:eb:b5:6d:3b:1a:f8:c6:
                    b8:9f:12:df:54:bf:af:e2:90:dc:85:73:31:3a:b6:
                    be:08:32:eb:db:36:9b:e0:08:95:41:a5:8f:ea:a4:
                    91:84:e0:25:81:8b:a8:86:6c:22:6c:92:cd:9f:44:
                    58:92:7d:3f:12:5c:91:33:37:7d:f5:a7:c3:86:91:
                    2b:37:06:0a:6f:9e:ef:7d:01:56:14:df:c5:8c:fd:
                    de:36:9f:21:08:d7:5f:de:ab:ac:d8:3a:45:c4:16:
                    9a:54:f4:40:6d:2d:cd:50:d3:5c:90:63:74:51:47:
                    8d:bf:fc:3f:ca:8a:97:07:ad:b0:55:ae:7b:a0:cd:
                    ae:83:b8:04:61:fa:25:31:75:bc:9c:91:a9:30:8e:
                    06:41:3e:60:15:1c:f4:1c:79:46:46:d8:1a:26:1d:
                    ab:89:1a:91:91:38:26:d5:01:fe:af:62:c4:23:52:
                    ea:a2:f1:1b:1b:67:3e:d0:7c:dd:93:00:66:dc:d7:
                    b4:e0:6f:8c:1b:05:17:72:93:12:4e:26:76:63:05:
                    fe:ad:87:32:51:ca:3a:03:a4:13:52:c8:32:eb:5e:
                    a8:38:7b:ad:47:45:d3:f6:51:c6:5c:03:aa:02:dc:
                    0b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:3E:16:B8:FB:25:8C:66:73:38:88:32:8B:DD:60:8C:26:30:26:8F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/6e0df5b1-d691-3061-8105-608fc4c30dc3.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661/3df29669-3733-4127-bbde-a71cc4b5a661.crl

            X509v3 Authority Key Identifier:
                keyid:95:AD:24:54:D0:1F:09:B5:B4:E4:A5:D2:66:AE:73:F2:D4:9B:55:DC

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/3df29669-3733-4127-bbde-a71cc4b5a661.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.82.168.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         aa:1f:4e:20:ea:66:3b:47:99:13:19:d8:0a:7a:b0:61:9a:80:
         e1:8a:e0:06:85:2b:67:a7:46:f6:49:88:b9:7a:42:89:eb:7d:
         ed:8c:e2:9c:fd:94:91:10:ea:5a:78:ed:2d:8b:a6:b3:a0:17:
         74:7a:76:97:26:d0:75:b3:c0:7c:1e:a6:92:38:eb:c1:26:4d:
         ef:94:e8:cc:d1:39:a6:a7:d7:70:a5:98:d7:8a:56:cc:00:09:
         20:59:55:4f:47:ae:96:cf:e1:25:d6:b3:5c:a5:10:7a:48:1d:
         1b:01:ae:07:2e:ca:bd:fe:bd:b1:95:67:ab:d3:41:33:5e:81:
         f9:e4:23:55:fc:4a:dd:f1:64:cc:88:07:0b:59:84:9b:de:0f:
         94:c4:58:82:71:7a:72:83:d6:c9:4e:0a:1d:1c:f1:0a:d5:f5:
         f5:10:15:6b:fd:e8:60:d7:a5:27:1e:dd:e1:64:be:0f:08:a5:
         00:fb:1d:64:8b:54:a5:c0:11:f5:59:1f:92:07:ec:59:8b:54:
         56:9a:b3:43:12:80:55:dd:99:35:1d:32:d7:d8:0e:d5:3b:b2:
         9f:e2:f5:9f:68:27:12:52:46:c3:43:a4:08:a6:90:c3:c4:20:
         ca:64:92:66:70:e0:1c:d4:62:86:73:c6:50:a1:84:43:78:05:
         86:6d:4a:e2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnApODNqHX1SHQ7FAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkM2RmMjk2NjktMzczMy00MTI3LWJiZGUtYTcxY2M0YjVh
NjYxMB4XDTI1MDUwNTEzMDEwMFoXDTI1MDgwMzEzMDEwMFowLzEtMCsGA1UEAxMk
YzkxZDVlNjUtOGIxMy00MGQwLWEyZDItMGY1YWE4NDRhMGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhwoNjc6f7cghSiF+znnyq17aZw14TOu1bTsa
+Ma4nxLfVL+v4pDchXMxOra+CDLr2zab4AiVQaWP6qSRhOAlgYuohmwibJLNn0RY
kn0/ElyRMzd99afDhpErNwYKb57vfQFWFN/FjP3eNp8hCNdf3qus2DpFxBaaVPRA
bS3NUNNckGN0UUeNv/w/yoqXB62wVa57oM2ug7gEYfolMXW8nJGpMI4GQT5gFRz0
HHlGRtgaJh2riRqRkTgm1QH+r2LEI1LqovEbG2c+0HzdkwBm3Ne04G+MGwUXcpMS
TiZ2YwX+rYcyUco6A6QTUsgy616oOHutR0XT9lHGXAOqAtwLvwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPk+Frj7JYxmcziIMovdYIwmMCaPMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYy
OTY2OS0zNzMzLTQxMjctYmJkZS1hNzFjYzRiNWE2NjEvNmUwZGY1YjEtZDY5MS0z
MDYxLTgxMDUtNjA4ZmM0YzMwZGMzLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvM2RmMjk2NjktMzczMy00MTI3LWJi
ZGUtYTcxY2M0YjVhNjYxLzNkZjI5NjY5LTM3MzMtNDEyNy1iYmRlLWE3MWNjNGI1
YTY2MS5jcmwwHwYDVR0jBBgwFoAUla0kVNAfCbW05KXSZq5z8tSbVdwwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi8zZGYyOTY2OS0zNzMzLTQxMjctYmJkZS1hNzFj
YzRiNWE2NjEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0FKoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKofTiDqZjtHmRMZ2Ap6sGGagOGK4AaFK2enRvZJiLl6Qonrfe2M4pz9
lJEQ6lp47S2LprOgF3R6dpcm0HWzwHweppI468EmTe+U6MzROaan13ClmNeKVswA
CSBZVU9HrpbP4SXWs1ylEHpIHRsBrgcuyr3+vbGVZ6vTQTNegfnkI1X8St3xZMyI
BwtZhJveD5TEWIJxenKD1slOCh0c8QrV9fUQFWv96GDXpSce3eFkvg8IpQD7HWSL
VKXAEfVZH5IH7FmLVFaas0MSgFXdmTUdMtfYDtU7sp/i9Z9oJxJSRsNDpAimkMPE
IMpkkmZw4BzUYoZzxlChhEN4BYZtSuI=
-----END CERTIFICATE-----
Generated at Wed May 14 10:37:36 2025 by rpki-client