Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
File:                     d28faf09-4fd1-3fda-ac12-cd817516eb65.roa (raw, json)
Hash identifier:          L8/8Kv6bbq8jn3vI6PTCZYw6pRETkh+9K017M7foncU=
Subject key identifier:   65:1D:C7:5E:DF:B6:0E:90:B7:33:3F:F0:61:67:39:BA:E2:AE:8F:7C
Certificate issuer:       /CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
Certificate serial:       010D0C9F4328584A0C05766F4E9E308FAF24D3C0
Authority key identifier: 0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa
Signing time:             Sun 01 Jun 2025 13:01:03 +0000
ROA not before:           Sun 01 Jun 2025 13:01:03 +0000
ROA not after:            Sat 30 Aug 2025 13:01:03 +0000
asID:                     393740
IP address blocks:        206.180.146.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 13:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:0c:05:76:6f:4e:9e:30:8f:af:24:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c
        Validity
            Not Before: Jun  1 13:01:03 2025 GMT
            Not After : Aug 30 13:01:03 2025 GMT
        Subject: CN=b257bf05-c470-48dc-bdf9-c46e9347b051
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:7a:ac:12:16:aa:bf:1b:0b:f9:75:2b:0d:6d:
                    ee:15:07:b7:39:fd:0c:ac:b5:85:42:34:df:3f:83:
                    8b:dd:ed:cd:63:fb:9d:82:6b:fa:1c:4f:9b:23:ac:
                    6f:59:59:44:c3:61:3f:ff:b9:37:77:3f:4a:a5:a4:
                    1c:e4:cb:a8:d8:23:8f:d9:17:be:3d:96:6e:f7:5f:
                    c3:54:e3:78:21:5a:a2:c4:24:7c:63:bb:99:a9:a1:
                    e8:88:d9:f8:3d:01:f5:24:21:91:6e:4f:e9:77:6e:
                    1d:8e:fb:45:10:7f:9d:38:2a:3f:fa:fb:2a:42:f5:
                    87:e9:e6:43:ed:05:91:9d:95:cd:ed:e9:35:78:fd:
                    80:79:6e:09:81:6f:00:b2:21:bc:60:f8:d4:f1:c3:
                    6f:4a:59:29:b1:7f:2b:2a:02:3b:a5:03:83:34:14:
                    52:f1:05:a2:37:29:96:d1:d4:a2:d4:34:f4:dc:33:
                    bf:73:54:f8:49:04:6a:e2:93:b6:ad:a9:b9:57:03:
                    7d:2b:25:da:ff:9c:33:e8:72:96:03:eb:5a:c7:3f:
                    cf:ad:cb:e0:ee:93:07:bb:fd:f5:2d:76:41:40:b9:
                    80:7b:5a:02:0e:f1:b7:14:60:9d:36:e5:72:3f:9c:
                    d3:f6:d2:06:43:e2:d4:12:d5:62:a3:7d:c3:ba:41:
                    ba:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:1D:C7:5E:DF:B6:0E:90:B7:33:3F:F0:61:67:39:BA:E2:AE:8F:7C
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/d28faf09-4fd1-3fda-ac12-cd817516eb65.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.crl

            X509v3 Authority Key Identifier:
                keyid:0B:4A:D6:9F:55:AB:3E:31:33:B3:45:15:70:D2:1C:32:AF:A1:2C:03

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/ab9fe92a-4905-4cb3-afdc-0b5ce5713f8c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.180.146.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         06:79:ad:a2:53:13:4c:48:74:b8:04:19:f4:1f:25:2a:05:db:
         a3:b0:aa:d3:ad:75:00:3d:4d:9f:a2:31:a4:ad:83:25:71:ba:
         8b:0c:05:f4:c3:1c:62:c6:b0:47:c4:ef:47:db:b5:d8:b9:66:
         ae:7c:ff:62:32:91:a4:8c:26:1a:1d:ac:7b:99:fb:b9:49:58:
         f0:bc:06:f8:bf:5e:af:49:4a:94:cc:5d:93:63:02:c3:18:eb:
         84:79:26:13:b7:5c:57:b6:67:6f:4d:4b:ae:72:41:72:94:d6:
         4d:9c:65:20:94:59:db:bd:2b:fe:86:bb:36:90:7f:6a:3c:d4:
         57:c2:01:f4:98:06:18:29:6a:71:63:d0:f5:74:5e:3a:b2:60:
         25:c4:27:cc:ce:e2:aa:99:bf:cf:0f:55:00:2e:ea:41:51:1e:
         e5:6a:27:9d:16:7a:48:ce:15:bd:5f:c0:c1:de:d4:2a:5e:ae:
         04:57:a5:e7:9a:01:df:22:f6:c1:aa:9c:41:fe:4c:30:ee:4e:
         69:7b:31:12:05:fb:4a:59:ec:6c:0b:1c:3f:9d:c8:65:3e:a2:
         12:aa:5b:f3:ae:8a:47:ca:9d:1c:2f:44:fe:7c:9e:fa:02:27:
         79:74:6b:e8:6a:e8:b9:83:f5:2a:9d:f1:e3:56:05:3f:e2:69:
         30:5c:70:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoMBXZvTp4wj68k08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYWI5ZmU5MmEtNDkwNS00Y2IzLWFmZGMtMGI1Y2U1NzEz
ZjhjMB4XDTI1MDYwMTEzMDEwM1oXDTI1MDgzMDEzMDEwM1owLzEtMCsGA1UEAxMk
YjI1N2JmMDUtYzQ3MC00OGRjLWJkZjktYzQ2ZTkzNDdiMDUxMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqnqsEhaqvxsL+XUrDW3uFQe3Of0MrLWFQjTf
P4OL3e3NY/udgmv6HE+bI6xvWVlEw2E//7k3dz9KpaQc5Muo2COP2Re+PZZu91/D
VON4IVqixCR8Y7uZqaHoiNn4PQH1JCGRbk/pd24djvtFEH+dOCo/+vsqQvWH6eZD
7QWRnZXN7ek1eP2AeW4JgW8AsiG8YPjU8cNvSlkpsX8rKgI7pQODNBRS8QWiNymW
0dSi1DT03DO/c1T4SQRq4pO2ram5VwN9KyXa/5wz6HKWA+taxz/Prcvg7pMHu/31
LXZBQLmAe1oCDvG3FGCdNuVyP5zT9tIGQ+LUEtVio33DukG6ZwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFGUdx17ftg6QtzM/8GFnObriro98MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlm
ZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVjZTU3MTNmOGMvZDI4ZmFmMDktNGZkMS0z
ZmRhLWFjMTItY2Q4MTc1MTZlYjY1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYWI5ZmU5MmEtNDkwNS00Y2IzLWFm
ZGMtMGI1Y2U1NzEzZjhjL2FiOWZlOTJhLTQ5MDUtNGNiMy1hZmRjLTBiNWNlNTcx
M2Y4Yy5jcmwwHwYDVR0jBBgwFoAUC0rWn1WrPjEzs0UVcNIcMq+hLAMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9hYjlmZTkyYS00OTA1LTRjYjMtYWZkYy0wYjVj
ZTU3MTNmOGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzrSSMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAZ5raJTE0xIdLgEGfQfJSoF26OwqtOtdQA9TZ+iMaStgyVxuosMBfTD
HGLGsEfE70fbtdi5Zq58/2IykaSMJhodrHuZ+7lJWPC8Bvi/Xq9JSpTMXZNjAsMY
64R5JhO3XFe2Z29NS65yQXKU1k2cZSCUWdu9K/6GuzaQf2o81FfCAfSYBhgpanFj
0PV0XjqyYCXEJ8zO4qqZv88PVQAu6kFRHuVqJ50WekjOFb1fwMHe1CpergRXpeea
Ad8i9sGqnEH+TDDuTml7MRIF+0pZ7GwLHD+dyGU+ohKqW/OuikfKnRwvRP58nvoC
J3l0a+hq6LmD9Sqd8eNWBT/iaTBccDE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:49:01 2025 by rpki-client