Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
File:                     275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa (raw, json)
Hash identifier:          +aZTyeIflMaxzRkX++IUYuFMuSavdjJXsfegL6ugm2I=
Subject key identifier:   BE:D2:3B:CC:5A:80:C9:8E:BD:85:FD:82:94:DB:A5:01:6B:67:6C:A3
Certificate issuer:       /CN=9df142df-6de2-47dc-be4f-bf09bdec0551
Certificate serial:       010D0C9F4328584A3FAAD52A291F6918C48BAB00
Authority key identifier: F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa
Signing time:             Fri 20 Jun 2025 01:00:51 +0000
ROA not before:           Fri 20 Jun 2025 01:00:51 +0000
ROA not after:            Thu 18 Sep 2025 01:00:51 +0000
asID:                     19229
IP address blocks:        216.157.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3f:aa:d5:2a:29:1f:69:18:c4:8b:ab:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9df142df-6de2-47dc-be4f-bf09bdec0551
        Validity
            Not Before: Jun 20 01:00:51 2025 GMT
            Not After : Sep 18 01:00:51 2025 GMT
        Subject: CN=70aa4001-ba59-4605-9392-3986208c571f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:d9:43:0b:15:1c:88:c2:a2:76:20:83:f4:90:
                    9d:df:d6:18:cf:1d:ef:ac:3b:bd:36:33:60:27:d0:
                    71:06:70:e5:b1:53:19:84:19:6f:08:23:82:04:03:
                    32:a1:5e:e5:9f:a1:79:a6:9f:47:e9:aa:fc:38:32:
                    27:49:9d:c4:13:d1:2d:87:9a:21:d6:4f:b6:91:70:
                    c0:44:0c:a4:56:fc:15:29:50:da:2a:28:0d:23:18:
                    59:bb:06:17:7b:58:30:88:16:71:f2:41:71:0b:82:
                    fa:14:11:28:c0:a3:2b:f2:d9:23:94:4a:2e:dd:10:
                    7c:d5:64:c1:d3:7a:de:66:7b:a4:85:66:03:3f:f0:
                    57:b6:8d:2e:37:0a:6d:e0:85:dc:60:c3:73:39:35:
                    09:ff:b9:08:8d:df:e9:9d:1c:94:8c:3d:04:f3:f0:
                    f6:c1:8b:5c:6c:9e:16:8a:db:81:15:ab:ec:7a:b1:
                    0d:a0:a1:de:d9:fc:a2:b9:b3:04:3b:95:2c:11:02:
                    ad:22:a7:95:2c:ae:b7:55:00:9c:38:d4:33:eb:0b:
                    6f:31:ab:45:5e:3a:ec:2a:f6:19:3f:5c:e1:17:50:
                    62:87:bb:4f:c1:b8:32:09:1d:72:27:61:36:ea:0b:
                    bc:ce:3c:e7:a6:e2:aa:26:3c:f6:8e:63:73:d5:2c:
                    01:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:D2:3B:CC:5A:80:C9:8E:BD:85:FD:82:94:DB:A5:01:6B:67:6C:A3
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/275430b0-67d5-3f84-ac22-2d5e3f4b701e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551/9df142df-6de2-47dc-be4f-bf09bdec0551.crl

            X509v3 Authority Key Identifier:
                keyid:F6:9D:59:3D:DA:56:6A:99:BD:86:A9:15:67:C6:BE:60:D7:D9:BC:87

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/9df142df-6de2-47dc-be4f-bf09bdec0551.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.157.224.0/19

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         ab:6e:d2:9e:38:50:df:1e:01:b1:d9:0d:1b:65:ea:0d:05:9c:
         5d:47:ec:9e:0c:f6:e2:0e:6e:8a:2c:65:2f:8f:e6:68:5f:73:
         44:60:fc:d3:27:04:86:0b:b4:78:b4:b1:ef:e7:27:42:4f:e4:
         3d:0f:3d:fc:1b:97:ff:64:77:37:7c:b5:2c:53:21:15:d8:5c:
         d3:dc:28:11:ac:03:8c:e3:5c:21:65:52:34:91:dc:e8:73:7b:
         2e:c5:cb:90:4d:52:e7:81:54:cf:5a:5c:ae:e7:c1:01:9b:48:
         11:f3:53:92:1b:67:78:a9:4e:29:23:b2:23:f1:a9:8b:2a:45:
         f1:71:1f:dc:3c:b9:3c:23:71:85:40:9e:20:3d:8b:a2:71:58:
         d5:b1:12:f6:d8:0c:20:db:cd:55:17:e9:68:f8:20:8a:a6:2e:
         c4:bb:ef:19:61:af:bd:a0:30:1a:97:1d:63:9f:1d:de:07:0d:
         e1:9f:e2:4a:06:b6:c1:41:30:4b:8c:35:07:22:09:42:f4:9f:
         df:9e:d3:91:13:4b:e6:cc:a6:c3:92:db:2d:2c:d1:d1:b1:80:
         75:56:12:d2:72:17:5b:25:48:f9:92:fb:8e:dc:a0:53:08:6f:
         c5:2b:e4:08:3c:44:70:64:0a:7d:fd:43:a2:d1:92:c7:bf:cd:
         c2:e1:29:8c
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo/qtUqKR9pGMSLqwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOWRmMTQyZGYtNmRlMi00N2RjLWJlNGYtYmYwOWJkZWMw
NTUxMB4XDTI1MDYyMDAxMDA1MVoXDTI1MDkxODAxMDA1MVowLzEtMCsGA1UEAxMk
NzBhYTQwMDEtYmE1OS00NjA1LTkzOTItMzk4NjIwOGM1NzFmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9lDCxUciMKidiCD9JCd39YYzx3vrDu9NjNg
J9BxBnDlsVMZhBlvCCOCBAMyoV7ln6F5pp9H6ar8ODInSZ3EE9Eth5oh1k+2kXDA
RAykVvwVKVDaKigNIxhZuwYXe1gwiBZx8kFxC4L6FBEowKMr8tkjlEou3RB81WTB
03reZnukhWYDP/BXto0uNwpt4IXcYMNzOTUJ/7kIjd/pnRyUjD0E8/D2wYtcbJ4W
ituBFavserENoKHe2fyiubMEO5UsEQKtIqeVLK63VQCcONQz6wtvMatFXjrsKvYZ
P1zhF1Bih7tPwbgyCR1yJ2E26gu8zjznpuKqJjz2jmNz1SwBcQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL7SO8xagMmOvYX9gpTbpQFrZ2yjMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYx
NDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5YmRlYzA1NTEvMjc1NDMwYjAtNjdkNS0z
Zjg0LWFjMjItMmQ1ZTNmNGI3MDFlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvOWRmMTQyZGYtNmRlMi00N2RjLWJl
NGYtYmYwOWJkZWMwNTUxLzlkZjE0MmRmLTZkZTItNDdkYy1iZTRmLWJmMDliZGVj
MDU1MS5jcmwwHwYDVR0jBBgwFoAU9p1ZPdpWapm9hqkVZ8a+YNfZvIcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi85ZGYxNDJkZi02ZGUyLTQ3ZGMtYmU0Zi1iZjA5
YmRlYzA1NTEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQF2J3gMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKtu0p44UN8eAbHZDRtl6g0FnF1H7J4M9uIOboosZS+P5mhfc0Rg/NMn
BIYLtHi0se/nJ0JP5D0PPfwbl/9kdzd8tSxTIRXYXNPcKBGsA4zjXCFlUjSR3Ohz
ey7Fy5BNUueBVM9aXK7nwQGbSBHzU5IbZ3ipTikjsiPxqYsqRfFxH9w8uTwjcYVA
niA9i6JxWNWxEvbYDCDbzVUX6Wj4IIqmLsS77xlhr72gMBqXHWOfHd4HDeGf4koG
tsFBMEuMNQciCUL0n9+e05ETS+bMpsOS2y0s0dGxgHVWEtJyF1slSPmS+47coFMI
b8Ur5Ag8RHBkCn39Q6LRkse/zcLhKYw=
-----END CERTIFICATE-----
Generated at Sun Jun 29 19:39:56 2025 by rpki-client