Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa
File:                     e7deed66-6dc9-31bb-a963-2abeb2d52569.roa (raw, json)
Hash identifier:          /zuj4QZ788xmUBMqqVzJFxVsSdH8yhkz4pVhEWEFduM=
Subject key identifier:   A4:C1:5A:F0:13:E8:E1:60:7E:47:2C:1C:B3:26:93:61:C6:B0:ED:2D
Certificate issuer:       /CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
Certificate serial:       010D0C9F4328584A4AD592ABB2A8D9302D2941B0
Authority key identifier: 3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa
Signing time:             Tue 24 Jun 2025 01:00:50 +0000
ROA not before:           Tue 24 Jun 2025 01:00:50 +0000
ROA not after:            Mon 22 Sep 2025 01:00:50 +0000
asID:                     14618
IP address blocks:        216.157.43.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4a:d5:92:ab:b2:a8:d9:30:2d:29:41:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89c5dcdd-8b9f-4d2d-9395-701d956547a1
        Validity
            Not Before: Jun 24 01:00:50 2025 GMT
            Not After : Sep 22 01:00:50 2025 GMT
        Subject: CN=a9767c69-b478-487e-b09b-13d6bfdef80d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ff:9c:3e:e5:3e:ae:ba:71:c7:4a:49:f1:e7:
                    93:0e:55:29:e1:ae:85:5c:e6:fb:2f:3a:b6:96:83:
                    c9:08:86:60:44:6f:22:e5:ae:17:ea:27:75:c1:26:
                    b6:f0:dd:c6:59:b4:8e:f8:a0:a5:d4:83:b3:cd:75:
                    b7:f1:1e:f5:4c:bd:40:12:e6:ba:1e:91:b5:3e:39:
                    50:ff:e6:11:1c:a4:00:85:a0:95:37:42:31:c6:4a:
                    95:04:52:f0:bb:bb:11:1c:c9:c5:ab:e3:07:9f:86:
                    5a:db:7b:ec:fc:8c:be:51:0e:d1:ba:ea:1e:ba:49:
                    d7:63:bf:aa:b6:d3:1d:e7:28:c0:95:48:b1:85:79:
                    56:78:46:7b:15:75:fc:34:4c:c1:2c:a1:92:09:9b:
                    f5:0d:41:11:c7:e2:11:f2:7e:ec:ea:b7:f5:aa:52:
                    ec:53:8e:fa:73:e8:ff:d4:4b:47:de:bf:7c:a5:25:
                    af:5c:a6:cc:09:df:36:af:32:14:5d:5c:f9:52:4e:
                    a7:8b:a6:9c:b5:7c:1e:1c:7c:8e:77:d7:3d:91:6a:
                    a8:e5:b0:04:68:4d:6a:c5:30:46:f6:16:ce:0f:b0:
                    9b:3b:1c:d6:b2:b8:76:b8:0b:12:fb:a5:04:36:cd:
                    0e:9c:16:80:17:79:ce:67:f2:06:ae:a5:fc:d5:92:
                    08:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:C1:5A:F0:13:E8:E1:60:7E:47:2C:1C:B3:26:93:61:C6:B0:ED:2D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/e7deed66-6dc9-31bb-a963-2abeb2d52569.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1/89c5dcdd-8b9f-4d2d-9395-701d956547a1.crl

            X509v3 Authority Key Identifier:
                keyid:3F:AA:40:18:6F:96:95:5B:F8:11:6E:AA:67:12:95:CE:3B:3E:00:3F

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/89c5dcdd-8b9f-4d2d-9395-701d956547a1.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.43.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0a:35:a7:b5:24:23:54:b4:f5:bc:e2:24:a0:1f:c6:6e:b4:e0:
         5d:37:4f:69:71:56:5c:a8:68:2e:b3:3f:be:f7:0f:6e:67:d2:
         ad:48:16:3d:29:4b:c3:d6:67:74:a5:82:f0:63:b2:6c:98:dd:
         33:06:63:b6:e5:5c:f3:0e:c4:56:c6:69:2c:a4:ad:81:df:15:
         27:70:a2:8c:26:20:22:6c:46:9a:91:d4:8c:84:b3:80:09:6c:
         03:ad:b2:ca:86:3f:28:cc:4e:9b:85:82:dc:2c:e1:6a:ee:14:
         ca:9d:f9:bb:64:79:05:88:9f:05:db:3c:8c:5b:a8:f8:bb:71:
         18:f1:84:7c:c0:e3:37:32:62:0e:3b:c0:fd:8c:a4:53:a8:3e:
         a7:5e:cc:b5:e6:15:70:9d:49:4a:29:d1:de:8f:42:86:83:bf:
         31:fc:a1:c9:ef:9e:a6:4c:7f:ee:c0:c3:0e:7b:d4:d1:fa:e4:
         83:e8:bf:07:2b:e7:c5:3c:60:fe:11:b8:6a:e3:e9:a1:03:cf:
         3a:96:18:37:85:ff:3b:2e:74:76:76:c9:7f:37:56:6a:cc:8e:
         59:e7:18:0e:c7:40:84:62:d8:1d:aa:ba:81:f8:bf:63:9a:c8:
         a1:1c:d0:5f:06:5e:75:60:0e:16:a2:f5:e7:db:ec:16:36:66:
         5b:51:c7:be
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpK1ZKrsqjZMC0pQbAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkODljNWRjZGQtOGI5Zi00ZDJkLTkzOTUtNzAxZDk1NjU0
N2ExMB4XDTI1MDYyNDAxMDA1MFoXDTI1MDkyMjAxMDA1MFowLzEtMCsGA1UEAxMk
YTk3NjdjNjktYjQ3OC00ODdlLWIwOWItMTNkNmJmZGVmODBkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmP+cPuU+rrpxx0pJ8eeTDlUp4a6FXOb7Lzq2
loPJCIZgRG8i5a4X6id1wSa28N3GWbSO+KCl1IOzzXW38R71TL1AEua6HpG1PjlQ
/+YRHKQAhaCVN0IxxkqVBFLwu7sRHMnFq+MHn4Za23vs/Iy+UQ7RuuoeuknXY7+q
ttMd5yjAlUixhXlWeEZ7FXX8NEzBLKGSCZv1DUERx+IR8n7s6rf1qlLsU476c+j/
1EtH3r98pSWvXKbMCd82rzIUXVz5Uk6ni6actXweHHyOd9c9kWqo5bAEaE1qxTBG
9hbOD7CbOxzWsrh2uAsS+6UENs0OnBaAF3nOZ/IGrqX81ZII8QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKTBWvAT6OFgfkcsHLMmk2HGsO0tMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1
ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFkOTU2NTQ3YTEvZTdkZWVkNjYtNmRjOS0z
MWJiLWE5NjMtMmFiZWIyZDUyNTY5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvODljNWRjZGQtOGI5Zi00ZDJkLTkz
OTUtNzAxZDk1NjU0N2ExLzg5YzVkY2RkLThiOWYtNGQyZC05Mzk1LTcwMWQ5NTY1
NDdhMS5jcmwwHwYDVR0jBBgwFoAUP6pAGG+WlVv4EW6qZxKVzjs+AD8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi84OWM1ZGNkZC04YjlmLTRkMmQtOTM5NS03MDFk
OTU2NTQ3YTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2J0rMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAo1p7UkI1S09bziJKAfxm604F03T2lxVlyoaC6zP773D25n0q1IFj0p
S8PWZ3SlgvBjsmyY3TMGY7blXPMOxFbGaSykrYHfFSdwoowmICJsRpqR1IyEs4AJ
bAOtssqGPyjMTpuFgtws4WruFMqd+btkeQWInwXbPIxbqPi7cRjxhHzA4zcyYg47
wP2MpFOoPqdezLXmFXCdSUop0d6PQoaDvzH8ocnvnqZMf+7Aww571NH65IPovwcr
58U8YP4RuGrj6aEDzzqWGDeF/zsudHZ2yX83VmrMjlnnGA7HQIRi2B2quoH4v2Oa
yKEc0F8GXnVgDhai9efb7BY2ZltRx74=
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:49:39 2025 by rpki-client