Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa
File:                     abb4a57c-2060-352e-9b8b-a9c38a981df7.roa (raw, json)
Hash identifier:          WCsDRKrhIjXxDfnpURrWVGRbq51v7FxyCE9ifku5fjM=
Subject key identifier:   C5:41:5E:C6:97:5C:6A:38:65:65:50:24:C0:90:D9:B5:9B:2F:E0:97
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584AECC13B8E83AA21F0B33416C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     393740
IP address blocks:        206.180.152.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:3b:8e:83:aa:21:f0:b3:34:16:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=e898ada7-0c17-4926-8775-cc1bdb61bf6a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:6c:a3:99:22:d6:ef:51:dc:4d:df:42:65:c4:
                    6b:4a:f5:e3:0c:50:89:65:cd:cf:56:cd:71:63:22:
                    8d:9a:3c:92:fd:66:3a:1a:6a:02:2b:e6:0b:f0:51:
                    6d:5c:be:30:8f:5a:d8:ef:2b:51:28:51:ee:54:34:
                    a6:59:e1:10:83:17:e2:3d:ca:26:6e:be:e8:e9:35:
                    07:fe:1d:bb:f1:c4:9d:c7:8d:29:24:b7:75:8e:29:
                    55:3c:80:de:1a:aa:bc:27:f5:11:8a:0f:1c:5c:78:
                    c5:fa:ff:33:d9:35:fa:14:a8:fc:b3:6b:79:f9:bd:
                    d0:56:18:37:db:1f:d5:02:ff:84:ac:7a:17:f1:15:
                    84:97:64:33:f3:38:85:88:ab:e6:76:09:89:93:98:
                    f5:77:65:9e:e4:b1:14:69:5f:e5:e6:f4:3c:94:26:
                    b5:39:39:07:d9:98:d8:02:88:36:f5:d9:47:95:07:
                    ea:86:06:43:9b:cd:8c:09:f4:14:d4:ff:0d:ba:3c:
                    2a:e0:e2:a2:be:1a:d3:68:05:8b:88:fc:1c:66:52:
                    69:14:c1:33:e0:74:b6:47:55:a3:a0:2f:52:99:f7:
                    24:5e:41:5c:be:6f:ab:70:fb:64:be:25:35:e4:e0:
                    d0:e3:18:4a:13:f7:21:21:69:d1:2a:54:f1:f1:b5:
                    69:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:41:5E:C6:97:5C:6A:38:65:65:50:24:C0:90:D9:B5:9B:2F:E0:97
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/abb4a57c-2060-352e-9b8b-a9c38a981df7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.152.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         17:a1:f1:82:74:67:90:8b:fd:ce:4f:59:7c:5d:07:5e:a8:7a:
         24:3c:12:68:19:44:ce:ee:0a:63:41:dc:a4:35:24:7d:ea:85:
         4f:3d:84:2f:f0:71:08:77:38:e4:dd:f9:ad:c7:d9:df:c8:b5:
         bc:71:02:d1:ab:40:51:ff:43:77:ac:1c:4b:a6:ed:0e:6d:e8:
         ee:10:cb:f0:74:61:70:0c:ad:00:12:50:bb:67:1b:5b:89:b3:
         b5:a7:98:f9:ed:87:0b:8f:99:91:27:e0:24:c7:9c:b3:f1:c3:
         e8:10:a6:65:4f:16:ed:02:e0:6d:34:68:90:4e:dc:bd:a5:87:
         26:f6:ea:48:44:c8:59:92:1d:f3:a3:45:7c:37:11:2b:dd:1f:
         b4:5e:6f:42:33:7c:2e:1d:df:98:20:d2:57:2c:4f:20:7c:a3:
         2f:ea:d7:82:32:74:e9:cf:27:ad:a9:bc:89:0e:30:6b:e5:4c:
         27:45:51:df:6a:15:84:67:54:f5:05:19:41:1a:90:f3:56:1f:
         1b:82:5d:da:14:43:26:c7:ab:51:dd:2b:ea:60:5d:ba:4b:4c:
         2f:f4:9c:94:13:79:83:07:88:a0:7e:9c:30:a9:cf:32:4d:1d:
         af:0e:4a:7b:1e:eb:dd:d0:d2:d5:48:c8:4b:5d:2e:bd:a2:46:
         ea:62:79:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErswTuOg6oh8LM0FsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZTg5OGFkYTctMGMxNy00OTI2LTg3NzUtY2MxYmRiNjFiZjZhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiGyjmSLW71HcTd9CZcRrSvXjDFCJZc3PVs1x
YyKNmjyS/WY6GmoCK+YL8FFtXL4wj1rY7ytRKFHuVDSmWeEQgxfiPcombr7o6TUH
/h278cSdx40pJLd1jilVPIDeGqq8J/URig8cXHjF+v8z2TX6FKj8s2t5+b3QVhg3
2x/VAv+ErHoX8RWEl2Qz8ziFiKvmdgmJk5j1d2We5LEUaV/l5vQ8lCa1OTkH2ZjY
Aog29dlHlQfqhgZDm82MCfQU1P8Nujwq4OKivhrTaAWLiPwcZlJpFMEz4HS2R1Wj
oC9SmfckXkFcvm+rcPtkviU15ODQ4xhKE/chIWnRKlTx8bVp8wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMVBXsaXXGo4ZWVQJMCQ2bWbL+CXMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvYWJiNGE1N2MtMjA2MC0z
NTJlLTliOGItYTljMzhhOTgxZGY3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzrSYMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABeh8YJ0Z5CL/c5PWXxdB16oeiQ8EmgZRM7uCmNB3KQ1JH3qhU89hC/w
cQh3OOTd+a3H2d/ItbxxAtGrQFH/Q3esHEum7Q5t6O4Qy/B0YXAMrQASULtnG1uJ
s7WnmPnthwuPmZEn4CTHnLPxw+gQpmVPFu0C4G00aJBO3L2lhyb26khEyFmSHfOj
RXw3ESvdH7Reb0IzfC4d35gg0lcsTyB8oy/q14IydOnPJ62pvIkOMGvlTCdFUd9q
FYRnVPUFGUEakPNWHxuCXdoUQybHq1HdK+pgXbpLTC/0nJQTeYMHiKB+nDCpzzJN
Ha8OSnse693Q0tVIyEtdLr2iRupieUI=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:44:48 2025 by rpki-client