Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa
File:                     c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa (raw, json)
Hash identifier:          j4VxtgG+VtLEWclHZOMoqQzT1UIIU1gPrTSFkaIyGtg=
Subject key identifier:   D4:15:32:B1:A8:06:D8:D7:72:1C:8A:01:A8:32:60:24:7B:3A:24:AF
Certificate issuer:       /CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
Certificate serial:       010D0C9F4328584A82AB4C8398DA70C9474FDDE0
Authority key identifier: 83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa
Signing time:             Mon 14 Jul 2025 01:00:50 +0000
ROA not before:           Mon 14 Jul 2025 01:00:50 +0000
ROA not after:            Sun 12 Oct 2025 01:00:50 +0000
asID:                     30346
IP address blocks:        216.83.92.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:82:ab:4c:83:98:da:70:c9:47:4f:dd:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6cb8f884-845d-445b-8a8b-1c50ef7b1a80
        Validity
            Not Before: Jul 14 01:00:50 2025 GMT
            Not After : Oct 12 01:00:50 2025 GMT
        Subject: CN=4acdc36f-c7f9-4738-af29-f0e45785f258
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:b6:d0:a2:c0:20:a0:5d:f7:69:80:85:f2:ab:
                    b6:64:73:c1:21:e4:39:a2:fa:a1:7e:52:93:59:63:
                    5f:2b:8e:24:a4:dc:e3:55:3e:1f:e3:58:be:72:bb:
                    00:d2:67:5b:a5:e8:cc:12:1a:fe:4b:b4:4b:27:29:
                    39:2b:4b:f0:d2:b7:11:56:5f:4b:11:09:9b:61:a6:
                    61:ca:4f:0a:3b:5c:00:08:ec:b9:11:ec:37:8f:46:
                    17:96:a1:ed:81:af:10:10:ef:3f:03:10:0b:30:69:
                    c6:5c:b1:df:9f:d9:89:a4:54:8f:b1:e5:05:04:e3:
                    e0:49:f9:6f:22:51:9f:a1:8a:17:92:3d:dd:97:81:
                    f2:f1:4e:16:7a:06:28:8e:40:9b:b9:76:dc:2b:bc:
                    dd:75:8e:16:c2:05:ea:05:cb:36:7d:36:90:ab:39:
                    de:bd:3e:52:dd:23:00:79:a8:05:7a:ee:ce:d4:f0:
                    0f:9a:30:fd:a9:3e:f1:ca:75:a1:b8:d9:44:70:21:
                    64:5c:6b:e2:76:c4:a5:2c:c7:8f:56:20:d3:97:27:
                    c2:30:21:b4:04:85:7d:3e:3c:82:d3:06:8a:3b:e8:
                    b8:5b:38:22:1a:72:5c:c0:45:21:28:d1:77:50:1d:
                    23:4d:8b:45:98:2d:11:c6:85:fe:df:6a:18:29:76:
                    6f:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:15:32:B1:A8:06:D8:D7:72:1C:8A:01:A8:32:60:24:7B:3A:24:AF
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/c5ec9f19-c746-31e9-a00c-e8eff3c30baf.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.crl

            X509v3 Authority Key Identifier:
                keyid:83:65:76:84:C8:9F:79:9B:7E:D8:2C:0E:31:27:09:C2:7B:92:FF:70

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/6cb8f884-845d-445b-8a8b-1c50ef7b1a80.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.83.92.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         78:5d:79:3b:9c:c8:73:d7:14:ef:9a:18:c7:c0:93:d8:22:a0:
         0b:5d:49:44:fe:22:75:87:19:82:d1:4f:bb:d0:91:ab:8b:2b:
         74:04:59:e3:c3:cc:0c:82:08:23:a5:a9:02:12:e1:e3:9f:1b:
         4e:76:3f:a7:92:90:31:7f:5a:96:da:96:91:fa:6e:7a:81:57:
         94:f8:a8:66:f0:59:6a:e9:b0:b3:e0:ae:b6:da:5c:ba:1d:09:
         dd:11:80:69:1b:b8:bf:81:a4:4c:8f:a7:6f:c6:10:88:57:7c:
         3d:17:aa:c0:fa:9a:29:d2:18:00:33:0d:8e:45:45:64:3a:6c:
         1c:29:6d:b4:94:03:e1:18:4f:6e:4e:52:45:fa:0d:84:0d:4b:
         5f:96:f1:49:ed:99:e3:fd:80:a3:ad:d8:6d:9b:70:1a:30:70:
         a4:f0:fb:e1:a3:32:32:c5:13:77:8f:cd:08:f0:fc:0e:84:9d:
         b4:9a:a5:40:9f:7e:2e:94:18:b8:af:56:74:cc:51:a2:57:3f:
         47:51:9e:6f:e3:01:0e:8b:c1:89:1f:7c:c9:9a:2e:d5:d0:c3:
         3d:66:e0:e3:ec:6f:39:b7:f6:45:c7:e2:f9:58:84:0b:c1:a4:
         86:e8:4e:26:75:c3:92:07:fa:10:ad:42:32:65:5c:bd:7b:7a:
         3e:3d:f9:d2
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEqCq0yDmNpwyUdP3eAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmNiOGY4ODQtODQ1ZC00NDViLThhOGItMWM1MGVmN2Ix
YTgwMB4XDTI1MDcxNDAxMDA1MFoXDTI1MTAxMjAxMDA1MFowLzEtMCsGA1UEAxMk
NGFjZGMzNmYtYzdmOS00NzM4LWFmMjktZjBlNDU3ODVmMjU4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rbQosAgoF33aYCF8qu2ZHPBIeQ5ovqhflKT
WWNfK44kpNzjVT4f41i+crsA0mdbpejMEhr+S7RLJyk5K0vw0rcRVl9LEQmbYaZh
yk8KO1wACOy5Eew3j0YXlqHtga8QEO8/AxALMGnGXLHfn9mJpFSPseUFBOPgSflv
IlGfoYoXkj3dl4Hy8U4WegYojkCbuXbcK7zddY4WwgXqBcs2fTaQqznevT5S3SMA
eagFeu7O1PAPmjD9qT7xynWhuNlEcCFkXGvidsSlLMePViDTlyfCMCG0BIV9PjyC
0waKO+i4WzgiGnJcwEUhKNF3UB0jTYtFmC0RxoX+32oYKXZvjQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNQVMrGoBtjXchyKAagyYCR7OiSvMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS82Y2I4
Zjg4NC04NDVkLTQ0NWItOGE4Yi0xYzUwZWY3YjFhODAvYzVlYzlmMTktYzc0Ni0z
MWU5LWEwMGMtZThlZmYzYzMwYmFmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvNmNiOGY4ODQtODQ1ZC00NDViLThh
OGItMWM1MGVmN2IxYTgwLzZjYjhmODg0LTg0NWQtNDQ1Yi04YThiLTFjNTBlZjdi
MWE4MC5jcmwwHwYDVR0jBBgwFoAUg2V2hMifeZt+2CwOMScJwnuS/3AwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS82Y2I4Zjg4NC04NDVkLTQ0NWItOGE4Yi0xYzUw
ZWY3YjFhODAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2FNcMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAHhdeTucyHPXFO+aGMfAk9gioAtdSUT+InWHGYLRT7vQkauLK3QEWePD
zAyCCCOlqQIS4eOfG052P6eSkDF/WpbalpH6bnqBV5T4qGbwWWrpsLPgrrbaXLod
Cd0RgGkbuL+BpEyPp2/GEIhXfD0XqsD6minSGAAzDY5FRWQ6bBwpbbSUA+EYT25O
UkX6DYQNS1+W8UntmeP9gKOt2G2bcBowcKTw++GjMjLFE3ePzQjw/A6EnbSapUCf
fi6UGLivVnTMUaJXP0dRnm/jAQ6LwYkffMmaLtXQwz1m4OPsbzm39kXH4vlYhAvB
pIboTiZ1w5IH+hCtQjJlXL17ej49+dI=
-----END CERTIFICATE-----
Generated at Sat Aug 23 22:32:27 2025 by rpki-client