Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
File:                     86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa (raw, json)
Hash identifier:          WX6RDKmWZt58o9MX9gU3W5fOqLAL9xE0k6TVt5ZNOBw=
Subject key identifier:   ED:E8:B9:DC:1E:C5:EA:E8:9D:A6:91:75:8F:89:CE:27:40:AB:6E:22
Certificate issuer:       /CN=60f3bf9e-9df6-4935-a73a-d336655a686b
Certificate serial:       010D0C9F43285849FCAA7AE780B4B77D5BDAD2C0
Authority key identifier: 55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa
Signing time:             Tue 27 May 2025 01:00:50 +0000
ROA not before:           Tue 27 May 2025 01:00:50 +0000
ROA not after:            Mon 25 Aug 2025 01:00:50 +0000
asID:                     19107
IP address blocks:        216.234.78.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 07 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:fc:aa:7a:e7:80:b4:b7:7d:5b:da:d2:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60f3bf9e-9df6-4935-a73a-d336655a686b
        Validity
            Not Before: May 27 01:00:50 2025 GMT
            Not After : Aug 25 01:00:50 2025 GMT
        Subject: CN=8ef72d16-dcaa-4989-97a2-99c135b846fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:6b:96:01:a3:d3:4c:77:09:ff:7a:2a:68:26:
                    b0:e9:bf:c0:26:a9:c5:14:c0:56:25:39:fb:45:55:
                    de:4d:81:9d:ec:ff:ef:e3:29:2b:5f:fa:d2:4e:50:
                    98:f6:87:47:5f:6c:f1:aa:66:f7:fe:a4:d3:48:cf:
                    2c:5f:25:76:9a:30:81:94:db:41:e0:fd:1d:cd:da:
                    8a:b9:c1:4e:22:d3:98:7e:55:32:ba:77:22:0c:2d:
                    b7:a4:cf:5f:e1:eb:ef:d6:de:a0:4f:98:79:b7:79:
                    23:84:88:f7:7b:54:dd:8c:f9:fc:2a:cd:bc:45:20:
                    c6:7c:82:c9:54:25:42:41:df:f5:46:21:92:d9:6f:
                    ab:b7:37:30:b0:38:51:be:fb:3f:dc:86:57:8d:16:
                    70:2a:26:ec:c5:60:01:bb:58:23:88:5a:62:c8:ab:
                    17:6a:73:61:e0:50:52:e1:67:3a:e3:72:a5:9b:e5:
                    32:89:8c:0c:ac:41:38:df:58:4d:1b:33:fa:02:9b:
                    51:3d:da:32:05:0e:ce:ab:38:6a:03:89:6e:59:23:
                    f5:cc:de:9e:f3:0e:de:bb:86:bc:20:7a:49:b2:9b:
                    d1:c7:a7:50:11:b0:45:14:ce:40:60:db:15:3f:3e:
                    e4:e0:04:d1:fd:ad:c0:39:c5:b3:37:99:00:6f:fd:
                    ac:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E8:B9:DC:1E:C5:EA:E8:9D:A6:91:75:8F:89:CE:27:40:AB:6E:22
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/86f1eabc-ab18-3751-abf8-3d8feceef5b6.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b/60f3bf9e-9df6-4935-a73a-d336655a686b.crl

            X509v3 Authority Key Identifier:
                keyid:55:F1:CA:90:E0:7C:D6:55:46:D7:9D:A0:D3:06:9A:17:F6:A3:38:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/60f3bf9e-9df6-4935-a73a-d336655a686b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.234.78.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         87:8a:4b:28:ec:ac:7f:36:1c:f8:b5:11:9c:a8:13:71:7a:f1:
         17:dc:69:36:53:01:d6:3a:50:6a:5a:94:4d:d4:59:36:18:ab:
         fa:63:dc:7c:eb:75:eb:77:b9:94:e2:28:25:1c:39:60:dd:98:
         cb:ef:32:c8:a5:0b:8a:88:fd:5b:51:df:96:d7:7d:8a:97:85:
         e5:4a:0b:12:aa:0f:cb:19:a6:de:1a:54:87:01:fa:8f:ef:c5:
         32:b8:72:ad:ba:e5:c6:ed:e2:bc:21:53:46:5d:63:d4:c2:c3:
         2f:59:b4:4d:83:be:9b:c7:c4:df:f2:06:3b:bd:12:39:03:23:
         b2:d8:c0:f3:b2:79:b4:7f:10:0a:8c:14:1f:87:ab:f6:d1:3f:
         27:dc:73:1e:b3:7c:d2:d6:5b:82:39:f6:28:35:76:f4:dc:01:
         c7:0c:99:5e:89:a4:67:c5:6d:58:89:28:b1:04:99:75:ad:61:
         dd:78:49:1f:b8:c0:47:36:e7:f7:42:d5:ee:16:b9:97:a6:7b:
         5d:1e:73:3b:84:80:b7:b6:1f:b3:82:86:36:3e:8b:99:68:4e:
         a0:60:37:95:a7:2a:ba:ca:e5:33:63:28:2e:00:aa:c8:eb:7e:
         8f:55:14:68:0f:96:80:14:cb:5c:a1:27:2e:a0:c9:ec:1b:c6:
         4d:1e:ad:fd
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEn8qnrngLS3fVva0sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNjBmM2JmOWUtOWRmNi00OTM1LWE3M2EtZDMzNjY1NWE2
ODZiMB4XDTI1MDUyNzAxMDA1MFoXDTI1MDgyNTAxMDA1MFowLzEtMCsGA1UEAxMk
OGVmNzJkMTYtZGNhYS00OTg5LTk3YTItOTljMTM1Yjg0NmZiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwmuWAaPTTHcJ/3oqaCaw6b/AJqnFFMBWJTn7
RVXeTYGd7P/v4ykrX/rSTlCY9odHX2zxqmb3/qTTSM8sXyV2mjCBlNtB4P0dzdqK
ucFOItOYflUyunciDC23pM9f4evv1t6gT5h5t3kjhIj3e1TdjPn8Ks28RSDGfILJ
VCVCQd/1RiGS2W+rtzcwsDhRvvs/3IZXjRZwKibsxWABu1gjiFpiyKsXanNh4FBS
4Wc643Klm+UyiYwMrEE431hNGzP6AptRPdoyBQ7OqzhqA4luWSP1zN6e8w7eu4a8
IHpJspvRx6dQEbBFFM5AYNsVPz7k4ATR/a3AOcWzN5kAb/2sGwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFO3oudwexeronaaRdY+JzidAq24iMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82MGYz
YmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2NjU1YTY4NmIvODZmMWVhYmMtYWIxOC0z
NzUxLWFiZjgtM2Q4ZmVjZWVmNWI2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNjBmM2JmOWUtOWRmNi00OTM1LWE3
M2EtZDMzNjY1NWE2ODZiLzYwZjNiZjllLTlkZjYtNDkzNS1hNzNhLWQzMzY2NTVh
Njg2Yi5jcmwwHwYDVR0jBBgwFoAUVfHKkOB81lVG152g0waaF/ajOFIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82MGYzYmY5ZS05ZGY2LTQ5MzUtYTczYS1kMzM2
NjU1YTY4NmIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OpOMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAIeKSyjsrH82HPi1EZyoE3F68RfcaTZTAdY6UGpalE3UWTYYq/pj3Hzr
det3uZTiKCUcOWDdmMvvMsilC4qI/VtR35bXfYqXheVKCxKqD8sZpt4aVIcB+o/v
xTK4cq265cbt4rwhU0ZdY9TCwy9ZtE2DvpvHxN/yBju9EjkDI7LYwPOyebR/EAqM
FB+Hq/bRPyfccx6zfNLWW4I59ig1dvTcAccMmV6JpGfFbViJKLEEmXWtYd14SR+4
wEc25/dC1e4WuZeme10eczuEgLe2H7OChjY+i5loTqBgN5WnKrrK5TNjKC4Aqsjr
fo9VFGgPloAUy1yhJy6gyewbxk0erf0=
-----END CERTIFICATE-----
Generated at Sat Jul 5 05:04:56 2025 by rpki-client