Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa
File:                     18f2854e-3606-3853-ad11-93ff0870b62d.roa (raw, json)
Hash identifier:          2nkoLRXoYlWYVbZcmr2B2A0YxEsJuYvRvmNJS0KLPec=
Subject key identifier:   ED:BC:99:8A:78:4E:C5:07:7C:48:31:2D:F1:3C:77:0B:94:E2:67:AC
Certificate issuer:       /CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
Certificate serial:       010D0C9F4328584A2ABAEB7C9597B69A064B9500
Authority key identifier: 9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     14866
IP address blocks:        206.220.192.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:eb:7c:95:97:b6:9a:06:4b:95:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f7a32cdf-af4a-47d5-86dc-e9cdcf68c259
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=880bb158-d284-4a1a-bb36-653cdc39d391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:1c:b6:1c:8c:4f:ee:90:bc:e9:9b:5f:1d:4b:
                    71:00:cd:58:9a:6f:aa:dd:72:13:a3:d4:06:2d:4d:
                    86:53:34:ae:32:07:35:f3:9e:45:ee:bb:2e:20:3f:
                    fd:45:60:b8:2b:74:27:20:2d:47:bf:63:12:e9:8c:
                    a9:21:30:42:94:1e:52:ed:cb:66:af:68:49:31:fa:
                    a9:f7:76:f3:0c:ad:73:a4:ec:31:d5:e0:01:8a:7c:
                    c2:50:2d:9e:e6:f5:c2:e5:13:1e:4a:82:9e:0c:e0:
                    52:f3:7c:d0:ca:77:fa:16:7c:75:e6:a1:24:b6:25:
                    44:a6:b7:f2:48:8b:6d:df:83:62:99:16:b5:6f:54:
                    72:72:ec:ef:f6:12:9a:75:21:c8:d9:09:b3:ea:5f:
                    83:f3:8f:76:af:93:ef:51:bb:1b:8c:33:52:be:7b:
                    75:18:f7:c5:05:5d:5d:03:a0:3e:0c:ec:8c:21:15:
                    c3:eb:37:e6:5c:da:94:37:77:9b:a5:55:7c:87:ea:
                    7b:3c:fd:cc:65:50:88:55:38:1d:50:15:e2:b8:b2:
                    0e:c3:6e:82:58:58:f0:52:ef:33:06:b8:1c:16:9a:
                    a7:53:b0:3e:e2:fa:2a:96:12:b7:c2:56:c6:27:15:
                    f3:13:3f:b4:52:f9:0a:02:fd:a2:50:96:05:e3:80:
                    1a:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BC:99:8A:78:4E:C5:07:7C:48:31:2D:F1:3C:77:0B:94:E2:67:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/18f2854e-3606-3853-ad11-93ff0870b62d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.crl

            X509v3 Authority Key Identifier:
                keyid:9E:CD:96:39:7A:17:63:72:CF:A0:47:47:1E:35:13:B8:73:76:16:E2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/4ab7ae4d-bd7b-4b33-9a88-5b22d2a8337d/f7a32cdf-af4a-47d5-86dc-e9cdcf68c259.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.220.192.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         41:74:43:79:15:25:e0:05:a9:84:4f:26:f5:8d:be:4f:a3:36:
         13:b0:3c:2a:3c:41:2e:f5:fe:95:8c:ad:be:48:4b:51:a9:46:
         2c:17:60:84:d2:34:e1:40:07:81:f9:3c:e2:ef:90:ab:67:ea:
         e1:b3:53:f8:16:cd:8a:99:d9:46:33:74:b6:68:55:8c:5f:c1:
         02:50:b2:41:5e:a9:f2:45:bc:02:26:a9:f0:c7:5d:47:9e:68:
         4a:20:d3:9c:7c:b5:2e:0f:6c:7a:16:91:79:92:03:26:ac:0d:
         75:81:cf:cc:9c:c4:9f:ef:7f:3c:01:89:4a:98:c0:45:7f:8e:
         39:a8:7f:b3:52:53:49:1f:ef:8a:a5:f9:1b:4e:3c:24:e2:58:
         2a:f3:7f:5a:0a:22:73:26:1e:00:8f:03:69:cc:82:44:aa:97:
         1d:ca:52:df:90:28:b3:61:af:76:41:22:95:01:c2:47:57:13:
         b7:49:c4:c1:51:0b:44:0b:0e:b9:fd:e0:b0:4f:b4:54:f8:40:
         97:97:6d:69:a7:16:4a:58:ab:0c:d7:78:49:ef:40:49:06:b3:
         85:10:ea:04:89:0c:11:0f:2b:e1:f5:31:42:92:7a:d9:6c:53:
         91:6f:c0:1d:e5:90:a7:1e:22:7e:af:34:39:f8:4f:75:cb:cc:
         17:e9:f3:40
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquut8lZe2mgZLlQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjdhMzJjZGYtYWY0YS00N2Q1LTg2ZGMtZTljZGNmNjhj
MjU5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
ODgwYmIxNTgtZDI4NC00YTFhLWJiMzYtNjUzY2RjMzlkMzkxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjRy2HIxP7pC86ZtfHUtxAM1Ymm+q3XITo9QG
LU2GUzSuMgc1855F7rsuID/9RWC4K3QnIC1Hv2MS6YypITBClB5S7ctmr2hJMfqp
93bzDK1zpOwx1eABinzCUC2e5vXC5RMeSoKeDOBS83zQynf6Fnx15qEktiVEprfy
SItt34NimRa1b1Rycuzv9hKadSHI2Qmz6l+D8492r5PvUbsbjDNSvnt1GPfFBV1d
A6A+DOyMIRXD6zfmXNqUN3ebpVV8h+p7PP3MZVCIVTgdUBXiuLIOw26CWFjwUu8z
BrgcFpqnU7A+4voqlhK3wlbGJxXzEz+0UvkKAv2iUJYF44AarwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO28mYp4TsUHfEgxLfE8dwuU4mesMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIzMy05YTg4LTViMjJkMmE4MzM3ZC9mN2Ez
MmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNkY2Y2OGMyNTkvMThmMjg1NGUtMzYwNi0z
ODUzLWFkMTEtOTNmZjA4NzBiNjJkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy80YWI3YWU0ZC1i
ZDdiLTRiMzMtOWE4OC01YjIyZDJhODMzN2QvZjdhMzJjZGYtYWY0YS00N2Q1LTg2
ZGMtZTljZGNmNjhjMjU5L2Y3YTMyY2RmLWFmNGEtNDdkNS04NmRjLWU5Y2RjZjY4
YzI1OS5jcmwwHwYDVR0jBBgwFoAUns2WOXoXY3LPoEdHHjUTuHN2FuIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzRhYjdhZTRkLWJkN2ItNGIz
My05YTg4LTViMjJkMmE4MzM3ZC9mN2EzMmNkZi1hZjRhLTQ3ZDUtODZkYy1lOWNk
Y2Y2OGMyNTkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDztzAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEF0Q3kVJeAFqYRPJvWNvk+jNhOwPCo8QS71/pWMrb5IS1GpRiwXYITS
NOFAB4H5POLvkKtn6uGzU/gWzYqZ2UYzdLZoVYxfwQJQskFeqfJFvAImqfDHXUee
aEog05x8tS4PbHoWkXmSAyasDXWBz8ycxJ/vfzwBiUqYwEV/jjmof7NSU0kf74ql
+RtOPCTiWCrzf1oKInMmHgCPA2nMgkSqlx3KUt+QKLNhr3ZBIpUBwkdXE7dJxMFR
C0QLDrn94LBPtFT4QJeXbWmnFkpYqwzXeEnvQEkGs4UQ6gSJDBEPK+H1MUKSetls
U5FvwB3lkKceIn6vNDn4T3XLzBfp80A=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:01:58 2025 by rpki-client