Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa
File:                     269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa (raw, json)
Hash identifier:          TgDyebBnAofUBWvtK/JP768e9s4h58QEkDIgeyr1L/c=
Subject key identifier:   C6:8F:15:B9:70:5D:92:40:3C:2A:83:38:E9:07:97:14:74:21:48:8D
Certificate issuer:       /CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
Certificate serial:       010D0C9F4328584A4C3B1B04AD378A9E88470980
Authority key identifier: 58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa
Signing time:             Tue 24 Jun 2025 13:01:03 +0000
ROA not before:           Tue 24 Jun 2025 13:01:03 +0000
ROA not after:            Mon 22 Sep 2025 13:01:03 +0000
asID:                     15296
IP address blocks:        204.209.60.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4c:3b:1b:04:ad:37:8a:9e:88:47:09:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f2bc6b7a-b8f5-4109-b7af-8975e2444d75
        Validity
            Not Before: Jun 24 13:01:03 2025 GMT
            Not After : Sep 22 13:01:03 2025 GMT
        Subject: CN=d12e8255-92fe-4064-a66a-f1e2d1cf50db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:71:8c:f7:40:0c:4d:68:1a:77:e6:31:8f:09:
                    e2:89:6f:f1:1d:3a:51:93:c4:e3:41:b8:1c:23:9b:
                    07:c3:35:07:69:5f:d4:9f:0b:49:40:8b:e9:31:85:
                    ce:dc:fd:db:a2:53:0f:92:5e:49:15:3c:f9:40:61:
                    30:db:8b:5a:8f:b7:28:98:d1:b0:64:09:bd:c6:07:
                    9d:22:75:0d:33:73:33:2d:fe:48:f9:eb:6b:cd:07:
                    e3:0b:63:43:6d:b2:1c:3c:ea:c6:6b:c9:b3:b7:1f:
                    ab:8b:9f:c1:dc:69:f1:c4:94:a9:c1:e2:f2:a9:7e:
                    5b:9d:85:6c:ab:bd:73:be:a2:0d:77:e8:ae:a2:ea:
                    93:f8:33:ba:a2:72:e8:1a:b0:ec:29:1b:c1:99:2f:
                    5a:d3:74:e3:0e:b5:42:dc:06:7f:ca:3d:c7:ad:24:
                    19:4b:b7:54:47:97:4c:d0:e4:dc:cc:4b:51:1a:e4:
                    fa:4a:22:08:7e:f0:5b:0c:8d:cb:80:41:4b:dc:3d:
                    9e:dc:a7:d4:05:5d:3c:40:a0:2d:18:9a:ab:12:51:
                    32:fe:55:1d:3d:dd:e9:fe:98:d3:c1:97:49:9e:c9:
                    3d:06:3e:31:58:77:2f:23:10:aa:76:25:fc:6c:49:
                    05:3e:44:e5:1b:1a:1c:e3:dc:8e:1b:6f:01:34:da:
                    f6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:8F:15:B9:70:5D:92:40:3C:2A:83:38:E9:07:97:14:74:21:48:8D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/269265c9-b9fb-3d7a-add3-0109b6d1e5c7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.crl

            X509v3 Authority Key Identifier:
                keyid:58:74:A0:D7:3F:5C:F6:7C:EA:E0:36:90:47:16:07:B8:01:5B:F8:A5

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5b7fb122-dfdf-4c0c-b90d-3bc7a5feb82b/f2bc6b7a-b8f5-4109-b7af-8975e2444d75.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.209.60.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4c:ba:55:98:8d:e4:f4:9b:6f:fd:40:c4:4d:9f:93:65:39:b4:
         ee:c2:83:9e:92:82:31:61:b0:a4:ba:9b:6b:d1:23:ce:39:b0:
         c0:7a:5d:d4:35:40:56:54:ef:a3:3b:3c:fb:75:c3:33:06:b9:
         31:30:ca:b7:83:f1:ee:26:23:57:81:e8:1f:6f:1d:92:bd:18:
         26:d2:0c:92:0e:8f:7b:e9:3b:8e:b3:fb:d8:df:9a:df:42:d9:
         29:38:a9:b5:17:66:ec:50:11:b7:ee:eb:40:cc:7a:69:20:ce:
         08:3b:2c:ed:02:af:22:c7:55:82:78:50:9c:ce:8e:e2:80:1d:
         20:79:5d:9d:ca:9a:5f:54:41:2a:2f:dc:3e:15:8f:87:dc:55:
         e8:0c:74:eb:46:4c:8d:df:fe:69:08:9e:30:93:81:70:77:15:
         f3:be:fc:a4:31:19:e8:c8:9c:17:2d:8d:32:f4:f6:62:55:59:
         94:c4:82:ea:59:d3:88:e4:e6:a1:f6:7d:5c:f5:6e:d5:5f:b1:
         3b:17:11:eb:3f:17:fb:9c:85:34:3c:88:b1:21:80:08:67:0f:
         91:cb:72:ad:23:cf:0c:d2:e5:7c:48:24:87:c1:5e:da:bb:51:
         03:dc:10:c3:cb:11:fc:2f:9d:a1:38:20:05:47:20:b3:a3:57:
         64:a7:5a:c7
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpMOxsErTeKnohHCYAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjJiYzZiN2EtYjhmNS00MTA5LWI3YWYtODk3NWUyNDQ0
ZDc1MB4XDTI1MDYyNDEzMDEwM1oXDTI1MDkyMjEzMDEwM1owLzEtMCsGA1UEAxMk
ZDEyZTgyNTUtOTJmZS00MDY0LWE2NmEtZjFlMmQxY2Y1MGRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXGM90AMTWgad+YxjwniiW/xHTpRk8TjQbgc
I5sHwzUHaV/UnwtJQIvpMYXO3P3bolMPkl5JFTz5QGEw24taj7comNGwZAm9xged
InUNM3MzLf5I+etrzQfjC2NDbbIcPOrGa8mztx+ri5/B3GnxxJSpweLyqX5bnYVs
q71zvqINd+iuouqT+DO6onLoGrDsKRvBmS9a03TjDrVC3AZ/yj3HrSQZS7dUR5dM
0OTczEtRGuT6SiIIfvBbDI3LgEFL3D2e3KfUBV08QKAtGJqrElEy/lUdPd3p/pjT
wZdJnsk9Bj4xWHcvIxCqdiX8bEkFPkTlGxoc49yOG28BNNr2iQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFMaPFblwXZJAPCqDOOkHlxR0IUiNMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMwYy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJj
NmI3YS1iOGY1LTQxMDktYjdhZi04OTc1ZTI0NDRkNzUvMjY5MjY1YzktYjlmYi0z
ZDdhLWFkZDMtMDEwOWI2ZDFlNWM3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy81YjdmYjEyMi1k
ZmRmLTRjMGMtYjkwZC0zYmM3YTVmZWI4MmIvZjJiYzZiN2EtYjhmNS00MTA5LWI3
YWYtODk3NWUyNDQ0ZDc1L2YyYmM2YjdhLWI4ZjUtNDEwOS1iN2FmLTg5NzVlMjQ0
NGQ3NS5jcmwwHwYDVR0jBBgwFoAUWHSg1z9c9nzq4DaQRxYHuAFb+KUwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzViN2ZiMTIyLWRmZGYtNGMw
Yy1iOTBkLTNiYzdhNWZlYjgyYi9mMmJjNmI3YS1iOGY1LTQxMDktYjdhZi04OTc1
ZTI0NDRkNzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzNE8MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAEy6VZiN5PSbb/1AxE2fk2U5tO7Cg56SgjFhsKS6m2vRI845sMB6XdQ1
QFZU76M7PPt1wzMGuTEwyreD8e4mI1eB6B9vHZK9GCbSDJIOj3vpO46z+9jfmt9C
2Sk4qbUXZuxQEbfu60DMemkgzgg7LO0CryLHVYJ4UJzOjuKAHSB5XZ3Kml9UQSov
3D4Vj4fcVegMdOtGTI3f/mkInjCTgXB3FfO+/KQxGejInBctjTL09mJVWZTEgupZ
04jk5qH2fVz1btVfsTsXEes/F/uchTQ8iLEhgAhnD5HLcq0jzwzS5XxIJIfBXtq7
UQPcEMPLEfwvnaE4IAVHILOjV2SnWsc=
-----END CERTIFICATE-----
Generated at Mon Jun 30 00:32:37 2025 by rpki-client