Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c6db1f46-b2e0-32ce-b797-c326d97de685.roa
File:                     c6db1f46-b2e0-32ce-b797-c326d97de685.roa (raw, json)
Hash identifier:          63iX3428sLzsd3dzPellkdyBSe7NWqqzzUFWKMPoh9g=
Subject key identifier:   3A:24:18:23:5A:F7:F3:C8:15:B6:A8:85:36:2F:D3:62:0B:D4:A9:EA
Certificate issuer:       /CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
Certificate serial:       010D0C9F4328584A3FAAD77A237E57A505FFFF00
Authority key identifier: 05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c6db1f46-b2e0-32ce-b797-c326d97de685.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     22652
IP address blocks:        184.95.208.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d7:7a:23:7e:57:a5:05:ff:ff:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7eb92630-3c13-4e13-a92a-79d6feb2ff71
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=e291cdf0-5325-457b-b2a9-765ef7554ec0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:86:fc:b2:7e:0d:e2:ef:0b:33:8f:b0:bf:91:
                    51:1b:d2:5e:c9:be:0d:c4:3f:67:b4:b2:b7:80:e8:
                    57:33:fc:1c:73:73:ad:5b:ab:b3:e8:6f:be:50:c0:
                    83:f6:ac:ec:35:bc:32:4c:38:c8:fb:d3:f5:95:f7:
                    db:2d:7f:32:f2:89:63:1b:81:28:30:e6:2a:d1:ba:
                    af:52:0e:73:c6:3c:2c:db:43:5e:76:d0:2a:e1:8a:
                    aa:ed:d4:07:14:91:65:b5:5f:1c:ca:a2:ed:fc:b5:
                    3e:4c:eb:f7:3b:5f:61:df:ce:07:85:4b:92:b7:fe:
                    b5:e4:66:d2:19:f7:3a:2c:b3:97:bb:ce:0e:2b:db:
                    db:b1:a6:28:4d:89:1c:4f:06:f7:db:ed:61:b6:1b:
                    13:fb:40:b8:a8:2e:fb:95:ed:71:19:5f:5c:43:7a:
                    c2:c3:aa:b1:7d:17:94:a6:6e:c6:e5:51:25:ed:3e:
                    33:3d:17:d5:f5:70:a0:33:9e:d0:1a:5a:0e:2b:46:
                    61:dc:47:3b:f1:88:65:25:bf:f9:4c:bc:4f:4a:2b:
                    98:b3:b8:12:75:9a:07:2e:48:89:26:a3:01:ec:d8:
                    2a:ff:31:cc:80:1d:20:08:28:6d:e0:17:97:69:59:
                    5b:65:52:f4:1b:1c:48:1e:e7:d3:41:92:41:ad:26:
                    e3:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:24:18:23:5A:F7:F3:C8:15:B6:A8:85:36:2F:D3:62:0B:D4:A9:EA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/c6db1f46-b2e0-32ce-b797-c326d97de685.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71/7eb92630-3c13-4e13-a92a-79d6feb2ff71.crl

            X509v3 Authority Key Identifier:
                keyid:05:CF:5B:74:44:2F:C3:2D:4E:B8:3F:59:9F:9E:08:6E:BD:88:70:76

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/7eb92630-3c13-4e13-a92a-79d6feb2ff71.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  184.95.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         54:aa:83:29:f8:08:df:d0:35:fc:91:84:75:ab:35:35:f3:5c:
         be:4c:57:b8:a7:61:6e:c3:4f:c1:87:3d:7b:57:79:97:be:d9:
         e7:60:d4:0c:d9:9e:c4:1d:ee:e0:12:ed:3c:98:63:2a:e6:4e:
         1d:87:66:41:e1:12:54:24:29:f1:83:7c:2a:76:8b:56:4c:ea:
         d5:66:f4:6f:40:b6:e2:ba:c8:62:02:66:30:7c:9a:f4:cc:6b:
         51:e9:c1:f1:ba:1d:4f:55:fe:d3:d8:68:5e:77:86:62:56:9e:
         22:93:3c:cd:3a:8d:d6:f3:b9:4f:90:a9:22:04:1d:c1:3f:40:
         ff:fe:16:01:cc:43:00:e9:ba:63:b6:ba:85:7a:38:80:3f:85:
         d3:aa:a5:09:e9:3c:0f:46:95:fd:78:14:96:3f:b4:21:fd:78:
         ea:2e:0b:29:12:d1:d9:7d:66:75:8f:78:18:df:67:23:10:79:
         1b:31:1d:77:fa:ab:2b:96:13:30:d3:e7:bd:41:a7:fe:fa:fd:
         71:bd:c1:fa:6b:ad:2d:38:1b:b2:44:26:44:a3:8d:cf:06:c5:
         d9:64:d6:47:db:8a:51:80:ea:be:a0:9a:ca:62:ac:9d:6c:b5:
         64:9f:e9:82:51:9e:db:ca:3f:6f:c0:b6:e6:36:0d:ba:ee:d1:
         39:a3:df:cd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtd6I35XpQX//wAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2ViOTI2MzAtM2MxMy00ZTEzLWE5MmEtNzlkNmZlYjJm
ZjcxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk
ZTI5MWNkZjAtNTMyNS00NTdiLWIyYTktNzY1ZWY3NTU0ZWMwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvIb8sn4N4u8LM4+wv5FRG9Jeyb4NxD9ntLK3
gOhXM/wcc3OtW6uz6G++UMCD9qzsNbwyTDjI+9P1lffbLX8y8oljG4EoMOYq0bqv
Ug5zxjws20NedtAq4Yqq7dQHFJFltV8cyqLt/LU+TOv3O19h384HhUuSt/615GbS
Gfc6LLOXu84OK9vbsaYoTYkcTwb32+1hthsT+0C4qC77le1xGV9cQ3rCw6qxfReU
pm7G5VEl7T4zPRfV9XCgM57QGloOK0Zh3Ec78YhlJb/5TLxPSiuYs7gSdZoHLkiJ
JqMB7Ngq/zHMgB0gCCht4BeXaVlbZVL0GxxIHufTQZJBrSbj5QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDokGCNa9/PIFbaohTYv02IL1KnqMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5
MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2ZmViMmZmNzEvYzZkYjFmNDYtYjJlMC0z
MmNlLWI3OTctYzMyNmQ5N2RlNjg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvN2ViOTI2MzAtM2MxMy00ZTEzLWE5
MmEtNzlkNmZlYjJmZjcxLzdlYjkyNjMwLTNjMTMtNGUxMy1hOTJhLTc5ZDZmZWIy
ZmY3MS5jcmwwHwYDVR0jBBgwFoAUBc9bdEQvwy1OuD9Zn54Ibr2IcHYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy83ZWI5MjYzMC0zYzEzLTRlMTMtYTkyYS03OWQ2
ZmViMmZmNzEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEuF/QMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAFSqgyn4CN/QNfyRhHWrNTXzXL5MV7inYW7DT8GHPXtXeZe+2edg1AzZ
nsQd7uAS7TyYYyrmTh2HZkHhElQkKfGDfCp2i1ZM6tVm9G9AtuK6yGICZjB8mvTM
a1HpwfG6HU9V/tPYaF53hmJWniKTPM06jdbzuU+QqSIEHcE/QP/+FgHMQwDpumO2
uoV6OIA/hdOqpQnpPA9Glf14FJY/tCH9eOouCykS0dl9ZnWPeBjfZyMQeRsxHXf6
qyuWEzDT571Bp/76/XG9wfprrS04G7JEJkSjjc8Gxdlk1kfbilGA6r6gmspirJ1s
tWSf6YJRntvKP2/AtuY2Dbru0Tmj380=
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:59:43 2025 by rpki-client