Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa
File:                     363970c4-35aa-3380-88dd-203981f8b04a.roa (raw, json)
Hash identifier:          L90YWSWFATlkwf4uy6C+93qppAZ5dsNmkNGfCHcr04g=
Subject key identifier:   B1:52:B1:D9:8A:58:02:02:15:84:81:23:8E:AD:51:68:44:28:95:72
Certificate issuer:       /CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
Certificate serial:       010D0C9F43285849FE0FE3C8D2A399C197426F00
Authority key identifier: 91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa
Signing time:             Tue 27 May 2025 13:01:05 +0000
ROA not before:           Tue 27 May 2025 13:01:05 +0000
ROA not after:            Mon 25 Aug 2025 13:01:05 +0000
asID:                     139267
IP address blocks:        208.80.40.0/22 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 00:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fe:0f:e3:c8:d2:a3:99:c1:97:42:6f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ef3ec938-7b45-4c47-91d2-9f7d18411519
        Validity
            Not Before: May 27 13:01:05 2025 GMT
            Not After : Aug 25 13:01:05 2025 GMT
        Subject: CN=a6d2a633-0f19-483d-ba04-bbc8b8054ad5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:f2:51:cb:2d:a7:8e:26:7f:4f:ef:c1:29:20:
                    4f:8e:f5:fb:af:37:dc:7f:ee:ee:68:2a:89:5b:ae:
                    56:52:6b:38:50:02:92:8f:a4:5a:63:e6:e5:8b:27:
                    5c:eb:d0:ea:7f:f9:2b:de:2b:fe:e8:fd:bd:7b:d1:
                    6b:90:ae:9f:b4:0b:d1:d2:0a:46:01:c0:46:11:b6:
                    da:14:c3:54:e3:3c:e0:c1:8a:6e:89:b4:ea:6b:18:
                    32:70:6c:23:95:5c:08:f1:4e:82:d4:06:93:09:be:
                    c1:3a:be:90:bd:60:6b:dd:10:2d:1e:c4:57:10:63:
                    eb:5b:c5:2d:f4:b2:2d:c0:fb:37:d3:7c:b8:87:f0:
                    9c:29:80:41:b2:74:f1:12:52:71:7e:c5:7e:90:3d:
                    a9:3e:28:7e:33:d8:d8:27:18:d7:07:48:14:82:98:
                    05:99:d7:22:f0:56:38:51:d2:ff:0d:95:22:62:f6:
                    f1:20:76:a3:d8:1e:d1:13:aa:83:55:97:35:d1:33:
                    46:25:b5:af:1b:a2:5d:9c:44:d0:ca:25:3d:de:38:
                    88:16:eb:92:ac:a9:ea:32:c5:2a:ac:89:ce:ad:e5:
                    3f:a1:d6:bd:bb:95:ad:13:87:70:50:bf:6c:6f:89:
                    ad:df:29:58:c4:08:27:a6:c9:7b:f9:de:f8:63:10:
                    44:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:52:B1:D9:8A:58:02:02:15:84:81:23:8E:AD:51:68:44:28:95:72
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/363970c4-35aa-3380-88dd-203981f8b04a.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519/ef3ec938-7b45-4c47-91d2-9f7d18411519.crl

            X509v3 Authority Key Identifier:
                keyid:91:A9:F2:C4:6E:E5:E6:BC:06:B5:D1:B8:62:AD:50:4D:F3:E8:A7:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/ef3ec938-7b45-4c47-91d2-9f7d18411519.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.80.40.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         6b:ff:b6:2f:33:0a:fe:e0:b8:58:ab:06:04:c9:0b:9b:c6:db:
         4f:77:1c:ec:04:ad:c7:2d:b9:27:4b:a3:b1:b2:f3:ec:cf:9d:
         a8:9c:fd:ac:a0:86:4d:8a:f1:e4:61:b1:e0:9b:87:3c:98:1c:
         c9:c7:50:c4:3d:76:29:47:40:e7:c7:34:ce:c3:45:22:d9:15:
         80:69:cc:13:7e:96:36:b4:40:00:92:cd:42:54:cf:23:6d:11:
         a4:11:8e:77:02:fd:29:c4:da:42:4a:00:19:bf:a7:01:5c:49:
         f9:0c:5b:a5:dc:db:ae:15:88:24:39:6f:f3:8d:39:49:d4:a2:
         07:65:c2:a2:fa:0b:08:af:c2:ca:e9:2c:e3:ed:4b:b4:18:bc:
         3b:b2:ba:8a:de:4c:9f:56:0b:9e:eb:74:25:a5:4d:78:90:8d:
         82:97:d3:73:c8:e7:ba:8e:ed:7a:c6:43:09:67:32:4d:f9:3d:
         da:99:6b:2f:8f:d2:88:1a:4a:cf:bb:3f:bc:79:dd:df:32:8a:
         4a:5b:78:dc:b0:42:e3:75:a9:9b:d3:b0:0e:6e:4a:d2:d7:88:
         e7:6d:2b:53:3e:9a:0c:0c:fe:82:67:35:99:0f:7c:0d:94:58:
         31:b5:4b:33:85:06:6d:c8:58:fe:65:36:e2:c1:07:82:e1:ef:
         42:a0:5b:20
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn+D+PI0qOZwZdCbwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZWYzZWM5MzgtN2I0NS00YzQ3LTkxZDItOWY3ZDE4NDEx
NTE5MB4XDTI1MDUyNzEzMDEwNVoXDTI1MDgyNTEzMDEwNVowLzEtMCsGA1UEAxMk
YTZkMmE2MzMtMGYxOS00ODNkLWJhMDQtYmJjOGI4MDU0YWQ1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPJRyy2njiZ/T+/BKSBPjvX7rzfcf+7uaCqJ
W65WUms4UAKSj6RaY+bliydc69Dqf/kr3iv+6P29e9FrkK6ftAvR0gpGAcBGEbba
FMNU4zzgwYpuibTqaxgycGwjlVwI8U6C1AaTCb7BOr6QvWBr3RAtHsRXEGPrW8Ut
9LItwPs303y4h/CcKYBBsnTxElJxfsV+kD2pPih+M9jYJxjXB0gUgpgFmdci8FY4
UdL/DZUiYvbxIHaj2B7RE6qDVZc10TNGJbWvG6JdnETQyiU93jiIFuuSrKnqMsUq
rInOreU/oda9u5WtE4dwUL9sb4mt3ylYxAgnpsl7+d74YxBErQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLFSsdmKWAICFYSBI46tUWhEKJVyMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNl
YzkzOC03YjQ1LTRjNDctOTFkMi05ZjdkMTg0MTE1MTkvMzYzOTcwYzQtMzVhYS0z
MzgwLTg4ZGQtMjAzOTgxZjhiMDRhLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy8yYTI0Njk0Ny0y
ZDYyLTRhNmMtYmEwNS04NzE4N2YwMDk5YjIvZWYzZWM5MzgtN2I0NS00YzQ3LTkx
ZDItOWY3ZDE4NDExNTE5L2VmM2VjOTM4LTdiNDUtNGM0Ny05MWQyLTlmN2QxODQx
MTUxOS5jcmwwHwYDVR0jBBgwFoAUkanyxG7l5rwGtdG4Yq1QTfPopywwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzJhMjQ2OTQ3LTJkNjItNGE2
Yy1iYTA1LTg3MTg3ZjAwOTliMi9lZjNlYzkzOC03YjQ1LTRjNDctOTFkMi05Zjdk
MTg0MTE1MTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC0FAoMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGv/ti8zCv7guFirBgTJC5vG2093HOwErcctuSdLo7Gy8+zPnaic/ayg
hk2K8eRhseCbhzyYHMnHUMQ9dilHQOfHNM7DRSLZFYBpzBN+lja0QACSzUJUzyNt
EaQRjncC/SnE2kJKABm/pwFcSfkMW6Xc264ViCQ5b/ONOUnUogdlwqL6Cwivwsrp
LOPtS7QYvDuyuoreTJ9WC57rdCWlTXiQjYKX03PI57qO7XrGQwlnMk35PdqZay+P
0ogaSs+7P7x53d8yikpbeNywQuN1qZvTsA5uStLXiOdtK1M+mgwM/oJnNZkPfA2U
WDG1SzOFBm3IWP5lNuLBB4Lh70KgWyA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:56:37 2025 by rpki-client