Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa
File:                     d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa (raw, json)
Hash identifier:          L+aCuLcaOpUYqt+l74OdT/VWap/7umMpbrk0hSftVqY=
Subject key identifier:   B5:97:6C:2E:73:02:E7:8D:12:29:64:26:1D:A1:E6:80:B4:F6:98:90
Certificate issuer:       /CN=b366c6bd-92d1-4a02-8969-83018f1caca6
Certificate serial:       010D0C9F4328584AECC13630D5A72A8BA10F8000
Authority key identifier: 93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa
Signing time:             Thu 21 Aug 2025 01:00:33 +0000
ROA not before:           Thu 21 Aug 2025 01:00:33 +0000
ROA not after:            Wed 19 Nov 2025 02:00:33 +0000
asID:                     29749
IP address blocks:        208.99.40.0/22 maxlen: 24
                          2604:2f40::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 12:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:ec:c1:36:30:d5:a7:2a:8b:a1:0f:80:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b366c6bd-92d1-4a02-8969-83018f1caca6
        Validity
            Not Before: Aug 21 01:00:33 2025 GMT
            Not After : Nov 19 02:00:33 2025 GMT
        Subject: CN=ec301bc9-3be7-4802-a132-e75c6093b43d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:0b:81:56:fd:f4:86:3e:ee:19:1e:bd:81:
                    22:ec:0a:dc:51:32:22:7c:82:dc:e8:a8:7b:ea:49:
                    de:66:4c:60:e0:7e:d4:0b:d2:15:89:3e:1d:d8:f0:
                    c2:bb:c6:63:7f:a7:50:f7:1b:ae:5e:b7:69:1d:c5:
                    f6:c3:e8:1b:01:cb:35:09:85:0e:1f:48:cd:ff:77:
                    dd:a2:d7:e0:70:e8:dc:10:f8:93:15:74:f2:52:14:
                    5c:a6:c8:37:53:9e:59:ca:4f:39:ed:5b:5a:ff:ba:
                    79:e9:f5:0b:7b:44:d3:79:91:3f:ff:10:61:4e:0b:
                    18:2e:4b:d9:ca:d6:f0:b1:e8:47:69:5c:d1:e0:af:
                    19:08:e0:21:28:87:c9:7a:a6:b9:1f:af:37:61:ea:
                    1b:8e:45:6a:0a:af:18:97:78:48:3e:a6:0a:86:03:
                    df:81:b7:c3:ad:a6:e6:91:42:72:54:cd:f6:fb:67:
                    58:00:2a:dc:77:b4:d5:c7:c1:28:95:b3:5e:73:f3:
                    fd:02:1b:ea:dd:e6:cc:bb:f6:67:13:11:17:c6:16:
                    8f:17:ef:36:86:1d:63:f1:61:3b:64:57:c5:3b:05:
                    8a:58:ef:d5:63:14:0f:07:da:19:07:86:6f:b6:5c:
                    24:00:47:8a:ef:fe:d3:bf:26:c0:2f:e9:98:42:9b:
                    b0:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:97:6C:2E:73:02:E7:8D:12:29:64:26:1D:A1:E6:80:B4:F6:98:90
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/d315dc11-8c39-3cfa-a375-f75c9baa6a96.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6/b366c6bd-92d1-4a02-8969-83018f1caca6.crl

            X509v3 Authority Key Identifier:
                keyid:93:F5:98:8D:EF:29:05:D1:03:71:DA:F4:25:9A:62:04:AB:5E:BA:8B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/b366c6bd-92d1-4a02-8969-83018f1caca6.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.99.40.0/22
                IPv6:
                  2604:2f40::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:68:58:b9:de:45:61:54:7b:75:fe:9a:a8:b4:af:eb:b0:34:
         7f:47:10:ad:8b:2f:c1:bf:df:61:f5:fb:17:e8:a0:36:e5:0f:
         2b:2a:a5:83:90:bf:22:b3:5b:ca:cd:dc:d6:1c:fc:f9:c7:e2:
         91:04:ad:ef:5f:a2:3b:ac:1c:93:d0:ad:1e:83:b7:cd:8a:9b:
         00:c8:c3:04:1c:6a:a1:d9:2c:df:6a:cd:28:8f:dc:80:31:e9:
         d1:12:12:e2:ce:3d:ba:8c:6d:1e:f6:8c:67:4c:45:07:c5:40:
         ca:98:eb:fe:25:75:82:41:54:28:3b:fb:f3:c2:81:33:06:d0:
         43:d0:ac:a0:aa:ce:42:5b:32:00:22:eb:97:bc:0d:58:9c:a8:
         f8:a1:a9:88:42:32:bc:f0:ed:d0:c5:d9:e3:47:df:32:e1:85:
         d7:78:c5:b9:70:9a:c3:e4:aa:05:2e:85:ba:ce:43:09:4d:80:
         fd:c0:99:6c:37:5f:f6:e4:7b:88:75:1c:e0:33:4b:f3:31:88:
         7e:be:08:1f:77:e7:47:c1:44:7f:67:e7:fa:f7:1e:ee:74:ca:
         0b:5d:73:9c:8d:b2:15:76:f2:9b:57:6b:9c:0a:e8:a3:4b:78:
         db:59:9a:24:d0:74:b8:d3:c9:3f:1d:dd:b9:19:10:a3:4a:0a:
         7f:ff:64:e1
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWErswTYw1acqi6EPgAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjM2NmM2YmQtOTJkMS00YTAyLTg5NjktODMwMThmMWNh
Y2E2MB4XDTI1MDgyMTAxMDAzM1oXDTI1MTExOTAyMDAzM1owLzEtMCsGA1UEAxMk
ZWMzMDFiYzktM2JlNy00ODAyLWExMzItZTc1YzYwOTNiNDNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKwLgVb99IY+7hkevYEi7ArcUTIifILc6Kh7
6kneZkxg4H7UC9IViT4d2PDCu8Zjf6dQ9xuuXrdpHcX2w+gbAcs1CYUOH0jN/3fd
otfgcOjcEPiTFXTyUhRcpsg3U55Zyk857Vta/7p56fULe0TTeZE//xBhTgsYLkvZ
ytbwsehHaVzR4K8ZCOAhKIfJeqa5H683YeobjkVqCq8Yl3hIPqYKhgPfgbfDrabm
kUJyVM32+2dYACrcd7TVx8EolbNec/P9Ahvq3ebMu/ZnExEXxhaPF+82hh1j8WE7
ZFfFOwWKWO/VYxQPB9oZB4ZvtlwkAEeK7/7TvybAL+mYQpuwRwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLWXbC5zAueNEilkJh2h5oC09piQMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9iMzY2
YzZiZC05MmQxLTRhMDItODk2OS04MzAxOGYxY2FjYTYvZDMxNWRjMTEtOGMzOS0z
Y2ZhLWEzNzUtZjc1YzliYWE2YTk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvYjM2NmM2YmQtOTJkMS00YTAyLTg5
NjktODMwMThmMWNhY2E2L2IzNjZjNmJkLTkyZDEtNGEwMi04OTY5LTgzMDE4ZjFj
YWNhNi5jcmwwHwYDVR0jBBgwFoAUk/WYje8pBdEDcdr0JZpiBKteuoswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9iMzY2YzZiZC05MmQxLTRhMDItODk2OS04MzAx
OGYxY2FjYTYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC0GMoMA0E
AgACMAcDBQAmBC9AMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAHhoWLneRWFUe3X+mqi0r+uwNH9HEK2LL8G/
32H1+xfooDblDysqpYOQvyKzW8rN3NYc/PnH4pEEre9fojusHJPQrR6Dt82KmwDI
wwQcaqHZLN9qzSiP3IAx6dESEuLOPbqMbR72jGdMRQfFQMqY6/4ldYJBVCg7+/PC
gTMG0EPQrKCqzkJbMgAi65e8DVicqPihqYhCMrzw7dDF2eNH3zLhhdd4xblwmsPk
qgUuhbrOQwlNgP3AmWw3X/bke4h1HOAzS/MxiH6+CB9350fBRH9n5/r3Hu50ygtd
c5yNshV28ptXa5wK6KNLeNtZmiTQdLjTyT8d3bkZEKNKCn//ZOE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 08:41:59 2025 by rpki-client