Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
File:                     3401e74f-a936-383a-95be-c5719615d9b9.roa (raw, json)
Hash identifier:          2bLKyZF1k0TvqOqQ8jRSP9vrjLB8Jd4/9H6Xca3qOA4=
Subject key identifier:   48:08:49:0C:17:1E:B6:79:EE:AC:74:73:C8:57:1F:39:A1:47:99:D2
Certificate issuer:       /CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
Certificate serial:       010D0C9F4328584AE891221127FB0B8508C17FA0
Authority key identifier: 5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa
Signing time:             Tue 19 Aug 2025 13:00:40 +0000
ROA not before:           Tue 19 Aug 2025 13:00:40 +0000
ROA not after:            Mon 17 Nov 2025 14:00:40 +0000
asID:                     13959
IP address blocks:        216.150.32.0/24 maxlen: 24
                          216.150.33.0/24 maxlen: 24
                          216.150.34.0/24 maxlen: 24
                          216.150.35.0/24 maxlen: 24
                          216.150.36.0/24 maxlen: 24
                          216.150.37.0/24 maxlen: 24
                          216.150.38.0/24 maxlen: 24
                          216.150.39.0/24 maxlen: 24
                          216.150.40.0/24 maxlen: 24
                          216.150.41.0/24 maxlen: 24
                          216.150.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/521eb33f-9672-4cd9-acce-137227e971ac.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e8:91:22:11:27:fb:0b:85:08:c1:7f:a0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad
        Validity
            Not Before: Aug 19 13:00:40 2025 GMT
            Not After : Nov 17 14:00:40 2025 GMT
        Subject: CN=65d10630-9181-408d-81eb-f07b7fc7aa7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:91:cb:65:f7:cc:89:9d:7f:e7:92:c7:ad:ac:
                    7d:dd:39:96:13:0a:f5:df:8b:c5:77:88:f1:8b:6f:
                    26:b4:25:45:50:68:26:74:9d:84:3a:82:3d:19:0f:
                    80:77:7f:a1:9d:97:75:a1:95:74:e3:7a:3c:3b:0c:
                    45:a1:56:f1:0b:89:21:f3:40:b0:cc:1c:31:08:62:
                    a8:34:92:96:19:e5:7e:87:db:05:d3:0b:60:15:b7:
                    6f:1d:ce:9c:23:20:d0:c7:0a:f6:22:75:2f:a0:bc:
                    cd:93:a2:f5:02:24:ff:9c:c6:82:92:a7:01:6b:20:
                    56:42:11:f6:a4:5d:e2:c2:6e:8e:9b:d3:d1:23:75:
                    e5:ae:bf:4d:24:8f:88:d0:e4:30:f4:b2:36:9e:e6:
                    c4:54:51:a4:ee:6f:0b:8f:c8:b5:de:42:56:68:00:
                    83:36:72:7c:a6:32:7b:3a:96:39:46:fd:6b:27:d1:
                    c2:01:da:33:08:bd:46:43:52:89:44:a6:de:43:c3:
                    94:24:f9:31:6a:14:40:44:b4:42:bd:3f:73:c6:a0:
                    56:d5:4a:ac:4e:27:0f:03:09:d0:4e:df:11:75:a9:
                    f3:69:64:f5:56:73:33:74:fe:58:f1:ec:f5:51:0c:
                    3b:bb:23:1f:e8:be:28:66:7a:e5:ba:9f:fa:72:2f:
                    86:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:08:49:0C:17:1E:B6:79:EE:AC:74:73:C8:57:1F:39:A1:47:99:D2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/3401e74f-a936-383a-95be-c5719615d9b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.crl

            X509v3 Authority Key Identifier:
                keyid:5F:DB:CB:09:04:AC:23:A8:C0:4A:B0:F2:9C:5A:29:54:03:FF:89:19

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/521eb33f-9672-4cd9-acce-137227e971ac/afe8a942-5ac2-41e8-aa89-7ddcfd0bb6ad.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.150.32.0-216.150.42.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0c:f5:5a:75:3d:e8:09:cb:52:9a:7c:ec:f9:05:7d:cd:f0:5a:
         f8:53:52:f3:a1:b7:54:54:85:30:d4:73:ab:26:25:6c:37:94:
         c2:ed:55:07:a7:20:7a:52:9a:37:42:5d:3a:0b:22:f8:1e:3c:
         57:10:fc:81:fc:32:a1:e1:45:0e:4e:c4:f2:f9:83:cb:6f:e8:
         7c:e4:c1:f8:df:2a:88:34:32:37:9b:f9:ce:40:82:60:3c:f6:
         52:da:25:8f:78:cd:c1:9c:b1:75:0c:18:6f:3f:98:8f:63:d2:
         64:8a:ea:ca:90:97:e1:46:57:89:fe:26:63:3b:32:58:66:f7:
         06:31:2b:3f:b0:d5:05:d7:4d:45:02:9a:f3:05:50:c2:50:99:
         35:9e:f5:ac:f0:3a:06:5b:0f:71:50:c0:bd:68:67:e4:8d:a7:
         c8:8a:fc:a4:b9:93:ac:af:90:4a:f2:32:a7:4c:da:8a:d3:27:
         d2:75:22:e7:7e:ec:74:ef:ed:1d:68:9b:d5:98:72:c7:98:00:
         17:3a:0a:c6:6a:be:5a:96:3f:30:ce:51:da:19:a1:cc:82:b8:
         60:d2:64:31:eb:73:4c:1d:ad:87:a2:9c:8a:5f:59:54:25:4a:
         08:b0:51:5e:45:69:38:c5:5f:b4:92:2c:5f:0e:a3:c0:3e:8e:
         8b:cb:ed:f2
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWErokSIRJ/sLhQjBf6AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWZlOGE5NDItNWFjMi00MWU4LWFhODktN2RkY2ZkMGJi
NmFkMB4XDTI1MDgxOTEzMDA0MFoXDTI1MTExNzE0MDA0MFowLzEtMCsGA1UEAxMk
NjVkMTA2MzAtOTE4MS00MDhkLTgxZWItZjA3YjdmYzdhYTdmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAgJHLZffMiZ1/55LHrax93TmWEwr134vFd4jx
i28mtCVFUGgmdJ2EOoI9GQ+Ad3+hnZd1oZV043o8OwxFoVbxC4kh80CwzBwxCGKo
NJKWGeV+h9sF0wtgFbdvHc6cIyDQxwr2InUvoLzNk6L1AiT/nMaCkqcBayBWQhH2
pF3iwm6Om9PRI3Xlrr9NJI+I0OQw9LI2nubEVFGk7m8Lj8i13kJWaACDNnJ8pjJ7
OpY5Rv1rJ9HCAdozCL1GQ1KJRKbeQ8OUJPkxahRARLRCvT9zxqBW1UqsTicPAwnQ
Tt8RdanzaWT1VnMzdP5Y8ez1UQw7uyMf6L4oZnrlup/6ci+G0QIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFEgISQwXHrZ57qx0c8hXHzmhR5nSMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzUyMWViMzNmLTk2NzItNGNkOS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4
YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRjZmQwYmI2YWQvMzQwMWU3NGYtYTkzNi0z
ODNhLTk1YmUtYzU3MTk2MTVkOWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81MjFlYjMzZi05
NjcyLTRjZDktYWNjZS0xMzcyMjdlOTcxYWMvYWZlOGE5NDItNWFjMi00MWU4LWFh
ODktN2RkY2ZkMGJiNmFkL2FmZThhOTQyLTVhYzItNDFlOC1hYTg5LTdkZGNmZDBi
YjZhZC5jcmwwHwYDVR0jBBgwFoAUX9vLCQSsI6jASrDynFopVAP/iRkwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzUyMWViMzNmLTk2NzItNGNk
OS1hY2NlLTEzNzIyN2U5NzFhYy9hZmU4YTk0Mi01YWMyLTQxZTgtYWE4OS03ZGRj
ZmQwYmI2YWQuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAXYliAD
BADYliowVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEADPVadT3oCctSmnzs+QV9zfBa+FNS86G3VFSFMNRzqyYl
bDeUwu1VB6cgelKaN0JdOgsi+B48VxD8gfwyoeFFDk7E8vmDy2/ofOTB+N8qiDQy
N5v5zkCCYDz2Utolj3jNwZyxdQwYbz+Yj2PSZIrqypCX4UZXif4mYzsyWGb3BjEr
P7DVBddNRQKa8wVQwlCZNZ71rPA6BlsPcVDAvWhn5I2nyIr8pLmTrK+QSvIyp0za
itMn0nUi537sdO/tHWib1Zhyx5gAFzoKxmq+WpY/MM5R2hmhzIK4YNJkMetzTB2t
h6Kcil9ZVCVKCLBRXkVpOMVftJIsXw6jwD6Oi8vt8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:02:50 2025 by rpki-client