Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/6d5b6518-e930-3f2b-8ee0-6130cfdcef7c.roa
File:                     6d5b6518-e930-3f2b-8ee0-6130cfdcef7c.roa (raw, json)
Hash identifier:          Dl1YtT95q4IVHHM3o3Tc0iPH9nMeB9dGsEBdU7HFwe8=
Subject key identifier:   9E:89:94:35:ED:6B:A2:E9:BD:43:D9:0B:50:0E:E9:0F:53:A6:88:7C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C0574EA18D3111A5A1D8800
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/6d5b6518-e930-3f2b-8ee0-6130cfdcef7c.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     26744
IP address blocks:        206.180.128.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:74:ea:18:d3:11:1a:5a:1d:88:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=74a78de6-39c1-43a2-95f9-4a24cad57bad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:03:17:4b:c5:c1:7d:be:f9:d7:69:76:65:c6:
                    12:cf:e8:bd:9b:26:10:23:66:9e:51:f4:ac:82:54:
                    69:18:14:e9:34:78:ba:7c:18:5f:ea:28:69:67:67:
                    4d:72:49:64:a0:f5:f7:63:c2:ce:03:92:14:2d:a5:
                    6a:5a:78:76:f1:98:a8:d4:70:90:18:cb:db:fa:9b:
                    63:a4:f3:1b:6d:c6:79:11:91:3d:f5:80:ad:a3:b3:
                    c1:90:3e:1d:3b:85:c6:d7:5c:4d:06:26:6c:39:69:
                    fd:10:19:a0:11:cc:76:ce:cc:b2:76:61:79:6f:0a:
                    30:2b:05:af:0a:69:59:25:07:cd:02:c5:7a:52:6f:
                    70:fb:9b:05:98:45:35:37:ff:73:38:36:29:48:bd:
                    0b:4e:d7:34:3b:71:6e:8f:b1:6c:57:3a:27:47:51:
                    5a:a6:84:fa:e4:b6:2b:b2:88:bd:98:28:d2:71:f9:
                    28:62:d3:49:9d:8b:69:db:de:39:f6:cc:bd:22:d5:
                    19:f5:e1:4b:6b:06:86:cc:6d:c8:88:5e:4d:fb:d9:
                    90:85:a4:b7:30:95:4e:af:2e:6e:63:65:b2:9c:36:
                    57:3f:78:fa:b3:86:0c:9d:74:da:00:e2:9e:d6:02:
                    42:13:17:25:f3:62:b9:1f:df:5f:a6:ec:7d:26:74:
                    4e:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:89:94:35:ED:6B:A2:E9:BD:43:D9:0B:50:0E:E9:0F:53:A6:88:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/6d5b6518-e930-3f2b-8ee0-6130cfdcef7c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.128.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4e:d3:56:6f:6b:b7:bb:e1:24:4e:58:3c:bb:bd:3b:8b:2c:69:
         f0:03:d8:0f:42:87:a9:dd:55:9a:08:a4:6d:76:33:e5:a7:d6:
         0f:1d:30:38:94:2d:7b:86:fa:9f:56:a8:6d:56:8d:20:cb:39:
         7f:7b:f6:3f:48:25:c1:1d:56:8e:a8:43:46:ae:a5:93:69:b0:
         56:60:a5:58:8a:6b:ce:8c:58:3b:6a:77:a4:c3:65:88:67:6b:
         46:62:df:dd:08:ef:a3:2f:50:9a:a8:99:ff:fa:8f:f3:dc:d0:
         98:b4:0f:eb:0c:ac:25:49:73:87:51:ca:de:6d:17:e1:d5:2a:
         fb:8a:74:dd:2d:b4:cb:29:ca:e8:34:e1:50:fe:c4:8d:cb:b7:
         e0:02:37:5f:52:95:14:b2:85:42:3f:10:0a:1f:25:e6:42:9f:
         90:a6:95:f2:7a:12:48:3b:f4:f9:3b:2a:2c:18:ed:38:52:3d:
         11:b3:de:af:57:ca:6d:ce:e6:22:2e:9d:d2:97:66:dd:39:d1:
         bd:84:15:57:b0:ea:c6:dd:e6:55:cb:6a:78:e3:53:73:c8:ab:
         8e:18:3d:e5:ba:ed:d8:be:26:82:e7:63:41:27:61:d2:0a:d1:
         c4:86:59:d7:3c:9b:6c:d9:0a:fa:30:f9:ce:4a:e6:b1:e2:5f:
         c2:c0:10:af
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXTqGNMRGlodiAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
NzRhNzhkZTYtMzljMS00M2EyLTk1ZjktNGEyNGNhZDU3YmFkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3gMXS8XBfb7512l2ZcYSz+i9myYQI2aeUfSs
glRpGBTpNHi6fBhf6ihpZ2dNcklkoPX3Y8LOA5IULaVqWnh28Zio1HCQGMvb+ptj
pPMbbcZ5EZE99YCto7PBkD4dO4XG11xNBiZsOWn9EBmgEcx2zsyydmF5bwowKwWv
CmlZJQfNAsV6Um9w+5sFmEU1N/9zODYpSL0LTtc0O3Fuj7FsVzonR1FapoT65LYr
soi9mCjScfkoYtNJnYtp29459sy9ItUZ9eFLawaGzG3IiF5N+9mQhaS3MJVOry5u
Y2WynDZXP3j6s4YMnXTaAOKe1gJCExcl82K5H99fpux9JnRO3wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJ6JlDXta6LpvUPZC1AO6Q9Tpoh8MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvNmQ1YjY1MTgtZTkzMC0z
ZjJiLThlZTAtNjEzMGNmZGNlZjdjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzrSAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE7TVm9rt7vhJE5YPLu9O4ssafAD2A9Ch6ndVZoIpG12M+Wn1g8dMDiU
LXuG+p9WqG1WjSDLOX979j9IJcEdVo6oQ0aupZNpsFZgpViKa86MWDtqd6TDZYhn
a0Zi390I76MvUJqomf/6j/Pc0Ji0D+sMrCVJc4dRyt5tF+HVKvuKdN0ttMspyug0
4VD+xI3Lt+ACN19SlRSyhUI/EAofJeZCn5CmlfJ6Ekg79Pk7KiwY7ThSPRGz3q9X
ym3O5iIundKXZt050b2EFVew6sbd5lXLanjjU3PIq44YPeW67di+JoLnY0EnYdIK
0cSGWdc8m2zZCvow+c5K5rHiX8LAEK8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:00:51 2025 by rpki-client