Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
File:                     a4f11c39-9bea-3f49-a34f-41186754ac5f.roa (raw, json)
Hash identifier:          +S1AL7G2IwkqUtwrtOKkixXLAbECWXtgFwR9FUprIEc=
Subject key identifier:   2C:DA:19:C3:5C:1C:0E:E7:E3:EB:FF:3B:BC:5D:0D:BC:A5:41:FC:72
Certificate issuer:       /CN=4e08a47f-8ddd-473c-bb7b-011963e78626
Certificate serial:       010D0C9F4328584ADD666CFC0DEBDFEC60656A00
Authority key identifier: 5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa
Signing time:             Fri 15 Aug 2025 13:00:41 +0000
ROA not before:           Fri 15 Aug 2025 13:00:41 +0000
ROA not after:            Thu 13 Nov 2025 14:00:41 +0000
asID:                     16509
IP address blocks:        207.66.104.0/24 maxlen: 24
                          207.66.105.0/24 maxlen: 24
                          207.66.106.0/24 maxlen: 24
                          207.66.107.0/24 maxlen: 24
                          207.66.108.0/24 maxlen: 24
                          207.66.109.0/24 maxlen: 24
                          207.66.110.0/24 maxlen: 24
                          207.66.111.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:dd:66:6c:fc:0d:eb:df:ec:60:65:6a:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4e08a47f-8ddd-473c-bb7b-011963e78626
        Validity
            Not Before: Aug 15 13:00:41 2025 GMT
            Not After : Nov 13 14:00:41 2025 GMT
        Subject: CN=ebe4fcc7-1e2d-4bbd-89b3-f4952d1c8acc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:96:31:2b:0f:30:78:ab:9b:49:64:2f:3e:89:
                    9f:b2:d8:a1:f2:3a:50:99:67:88:ce:b5:7f:67:1e:
                    4b:cc:98:b0:b7:71:1c:0d:af:66:a8:b3:e5:13:e0:
                    37:2f:1c:64:1a:89:7e:1c:2b:0b:36:73:fd:8c:61:
                    18:01:92:88:cd:02:d1:0b:18:c9:e8:4d:22:09:5f:
                    d0:60:1c:1d:dc:f9:55:62:c4:64:80:c4:78:5b:ec:
                    17:9b:2b:51:13:fa:01:9d:a7:a0:51:58:bd:cb:82:
                    ea:56:94:83:a0:70:1d:d4:cf:cd:57:a5:3e:58:a1:
                    42:86:e6:bb:8b:5c:4e:57:88:4e:f2:0a:77:f1:5f:
                    52:a2:46:19:32:ca:58:24:8d:3c:12:62:25:01:ea:
                    58:50:66:a0:60:2c:b8:88:33:2f:10:81:c9:68:cf:
                    54:15:df:a9:84:86:96:04:bf:5e:a2:4e:85:68:51:
                    28:c3:89:8d:b1:65:ec:b8:05:29:4f:86:ca:ed:f2:
                    8f:52:71:c2:ee:0d:9d:dc:d9:d6:ec:ed:fd:66:11:
                    35:03:4c:7e:7d:e4:1f:03:e8:0d:2b:fb:4a:c9:95:
                    42:96:82:c8:19:0f:eb:12:3f:48:72:29:d4:70:bb:
                    ea:9b:f6:fe:09:8a:88:3e:5e:3a:06:d5:d4:52:48:
                    5e:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:DA:19:C3:5C:1C:0E:E7:E3:EB:FF:3B:BC:5D:0D:BC:A5:41:FC:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/a4f11c39-9bea-3f49-a34f-41186754ac5f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626/4e08a47f-8ddd-473c-bb7b-011963e78626.crl

            X509v3 Authority Key Identifier:
                keyid:5B:2B:92:1F:0A:91:18:93:54:79:F2:F8:EE:6A:AC:CC:EB:E6:F6:63

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/4e08a47f-8ddd-473c-bb7b-011963e78626.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.66.104.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         22:8e:cb:c5:78:58:4f:97:40:49:10:17:b6:0c:31:32:c5:9a:
         f0:a7:f3:f9:85:1f:20:a3:89:c3:08:3b:f3:40:db:45:d9:4a:
         ff:76:3c:d9:4c:3d:21:27:a4:32:bb:5f:bf:c3:5e:1e:be:73:
         a9:ae:44:e9:48:53:3b:82:90:4e:1d:19:fa:0b:6c:57:c1:83:
         3d:1b:00:f4:86:e6:83:2f:43:32:3a:37:96:3c:e0:73:fd:65:
         6f:76:b7:b0:32:34:2a:dd:d4:4e:db:5e:f7:f0:b7:63:7b:f8:
         8f:91:fd:6c:95:6a:72:a0:49:44:33:5c:d1:bf:a9:d5:e0:ca:
         3b:6a:35:37:2e:d4:95:42:2e:2f:eb:44:59:83:90:71:70:cc:
         f1:7c:d2:77:5d:6c:4a:5d:b2:d3:db:89:32:6b:61:ca:a2:ab:
         14:72:ca:42:9a:33:19:92:18:74:27:94:84:7e:aa:b3:ea:46:
         e8:0b:50:1e:de:b1:f2:da:91:ed:1d:01:42:1b:9d:ce:ed:7a:
         76:94:f1:18:42:4c:3e:ad:22:5c:46:18:74:8a:43:77:47:f3:
         1e:73:37:7c:c1:10:be:4d:ae:8a:63:8a:80:e9:39:c9:a2:0f:
         82:99:b2:3a:99:2d:6e:61:0a:6a:bd:04:07:6b:e5:55:82:6c:
         c3:50:cb:4e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErdZmz8Devf7GBlagAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNGUwOGE0N2YtOGRkZC00NzNjLWJiN2ItMDExOTYzZTc4
NjI2MB4XDTI1MDgxNTEzMDA0MVoXDTI1MTExMzE0MDA0MVowLzEtMCsGA1UEAxMk
ZWJlNGZjYzctMWUyZC00YmJkLTg5YjMtZjQ5NTJkMWM4YWNjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhZYxKw8weKubSWQvPomfstih8jpQmWeIzrV/
Zx5LzJiwt3EcDa9mqLPlE+A3LxxkGol+HCsLNnP9jGEYAZKIzQLRCxjJ6E0iCV/Q
YBwd3PlVYsRkgMR4W+wXmytRE/oBnaegUVi9y4LqVpSDoHAd1M/NV6U+WKFChua7
i1xOV4hO8gp38V9SokYZMspYJI08EmIlAepYUGagYCy4iDMvEIHJaM9UFd+phIaW
BL9eok6FaFEow4mNsWXsuAUpT4bK7fKPUnHC7g2d3NnW7O39ZhE1A0x+feQfA+gN
K/tKyZVCloLIGQ/rEj9IcinUcLvqm/b+CYqIPl46BtXUUkheGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCzaGcNcHA7n4+v/O7xdDbylQfxyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTA4
YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5NjNlNzg2MjYvYTRmMTFjMzktOWJlYS0z
ZjQ5LWEzNGYtNDExODY3NTRhYzVmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvNGUwOGE0N2YtOGRkZC00NzNjLWJi
N2ItMDExOTYzZTc4NjI2LzRlMDhhNDdmLThkZGQtNDczYy1iYjdiLTAxMTk2M2U3
ODYyNi5jcmwwHwYDVR0jBBgwFoAUWyuSHwqRGJNUefL47mqszOvm9mMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi80ZTA4YTQ3Zi04ZGRkLTQ3M2MtYmI3Yi0wMTE5
NjNlNzg2MjYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDz0JoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACKOy8V4WE+XQEkQF7YMMTLFmvCn8/mFHyCjicMIO/NA20XZSv92PNlM
PSEnpDK7X7/DXh6+c6muROlIUzuCkE4dGfoLbFfBgz0bAPSG5oMvQzI6N5Y84HP9
ZW92t7AyNCrd1E7bXvfwt2N7+I+R/WyVanKgSUQzXNG/qdXgyjtqNTcu1JVCLi/r
RFmDkHFwzPF80nddbEpdstPbiTJrYcqiqxRyykKaMxmSGHQnlIR+qrPqRugLUB7e
sfLake0dAUIbnc7tenaU8RhCTD6tIlxGGHSKQ3dH8x5zN3zBEL5NropjioDpOcmi
D4KZsjqZLW5hCmq9BAdr5VWCbMNQy04=
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:43:48 2025 by rpki-client