Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa
File:                     1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa (raw, json)
Hash identifier:          MWEvxpOoKXdgW/8EBIUwSnN/AXBA6fFZv0D+4lBG/c8=
Subject key identifier:   19:68:BC:F8:05:8A:26:99:D9:18:FC:17:BC:EA:4A:53:E9:57:57:D1
Certificate issuer:       /CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
Certificate serial:       010D0C9F4328584A3B7B042EDDC68FBAB1EC93C0
Authority key identifier: 4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa
Signing time:             Wed 18 Jun 2025 13:01:06 +0000
ROA not before:           Wed 18 Jun 2025 13:01:06 +0000
ROA not after:            Tue 16 Sep 2025 13:01:06 +0000
asID:                     16509
IP address blocks:        204.79.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3b:7b:04:2e:dd:c6:8f:ba:b1:ec:93:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4
        Validity
            Not Before: Jun 18 13:01:06 2025 GMT
            Not After : Sep 16 13:01:06 2025 GMT
        Subject: CN=4fa683ee-b83d-4a60-863a-668b54de0ccc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:a8:95:42:9f:16:48:63:23:d3:af:2c:ac:59:
                    12:71:17:6c:55:fb:94:b0:e8:eb:63:9b:04:6c:07:
                    50:93:80:ba:fe:83:51:d3:35:bb:90:dd:bb:4a:19:
                    33:c0:8b:3e:ec:3d:27:b9:81:35:b9:af:1e:20:3b:
                    c5:c6:29:0b:45:e7:1d:fa:ce:29:c5:de:f2:2a:5e:
                    ed:08:be:3e:d1:c7:42:56:a6:67:55:ae:04:22:c3:
                    29:19:11:23:20:43:de:6d:82:ec:46:bb:76:d2:55:
                    a5:5c:b9:f0:a2:01:6a:75:ef:98:46:bd:42:e0:87:
                    3b:ea:49:2e:f2:97:72:06:2b:64:77:97:e0:5b:36:
                    a3:e3:48:2d:0d:c1:09:8b:ff:4b:f7:4c:4e:51:84:
                    68:6d:c2:a2:44:fe:6b:52:e1:b0:9b:ea:68:03:d6:
                    c7:03:4a:bc:a9:80:f7:ce:19:e2:40:4a:10:12:4d:
                    0c:ee:c2:66:29:3b:43:e4:db:cb:52:c7:53:84:ca:
                    d5:e9:61:79:9d:9c:ec:5d:87:64:27:bf:70:02:32:
                    79:26:9c:50:b7:e7:48:45:25:24:cd:d9:f9:5e:be:
                    d2:f7:78:59:03:db:eb:43:39:a9:ee:bc:18:40:46:
                    ad:ac:76:dd:22:48:be:6b:09:a4:07:e0:77:d0:71:
                    1c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:68:BC:F8:05:8A:26:99:D9:18:FC:17:BC:EA:4A:53:E9:57:57:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/1473b1c5-0f99-36ee-83fc-c9517c2433ee.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.crl

            X509v3 Authority Key Identifier:
                keyid:4F:4B:38:8D:5F:5D:84:E7:D1:91:04:8E:D4:47:EB:05:74:B3:3E:13

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/8f14f8d7-540b-4a4a-b5ae-0af147f7c1e4.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.79.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:4e:c2:44:22:a0:32:b6:95:3d:8e:b6:31:23:8e:6d:ec:1f:
         86:e4:5a:63:61:2f:0b:da:0a:b3:00:e0:9c:6d:69:4e:1b:4c:
         e0:6c:53:96:aa:b7:75:2b:80:b3:1a:6f:aa:19:f1:db:b3:d1:
         8f:13:9f:dc:b8:72:f2:3a:9b:56:9a:51:dc:c2:1b:ee:42:87:
         f9:11:17:fd:29:71:0a:9c:da:22:40:ef:a1:2f:59:d5:88:e8:
         b5:80:5e:79:73:22:b6:bf:1b:b1:8d:48:7a:9f:42:3e:f0:af:
         ac:c9:71:6f:bb:d0:1c:c6:52:43:15:5f:59:10:08:17:e2:3c:
         16:84:ce:b3:14:2a:ac:61:65:dc:a6:6b:10:dd:70:cc:1b:e7:
         27:f9:5d:f8:9a:38:c5:16:7b:94:1c:48:a0:87:00:b9:9e:17:
         5d:c2:f4:47:8e:7b:44:aa:76:e2:dd:6f:30:ce:8c:74:00:a0:
         ed:85:ee:22:85:b1:06:6b:8a:46:b6:2f:99:b4:9d:90:eb:37:
         5e:f8:19:21:3b:e2:8b:07:4a:9a:aa:95:75:82:94:ba:b1:6d:
         00:6b:83:b9:65:ce:f1:e7:4c:cb:4a:a4:00:72:ff:2e:3a:83:
         31:94:bb:3a:f7:ec:d4:c9:2b:a5:fb:3e:a7:47:d4:41:8b:0f:
         e4:70:95:1e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo7ewQu3caPurHsk8AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkOGYxNGY4ZDctNTQwYi00YTRhLWI1YWUtMGFmMTQ3Zjdj
MWU0MB4XDTI1MDYxODEzMDEwNloXDTI1MDkxNjEzMDEwNlowLzEtMCsGA1UEAxMk
NGZhNjgzZWUtYjgzZC00YTYwLTg2M2EtNjY4YjU0ZGUwY2NjMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6iVQp8WSGMj068srFkScRdsVfuUsOjrY5sE
bAdQk4C6/oNR0zW7kN27ShkzwIs+7D0nuYE1ua8eIDvFxikLRecd+s4pxd7yKl7t
CL4+0cdCVqZnVa4EIsMpGREjIEPebYLsRrt20lWlXLnwogFqde+YRr1C4Ic76kku
8pdyBitkd5fgWzaj40gtDcEJi/9L90xOUYRobcKiRP5rUuGwm+poA9bHA0q8qYD3
zhniQEoQEk0M7sJmKTtD5NvLUsdThMrV6WF5nZzsXYdkJ79wAjJ5JpxQt+dIRSUk
zdn5Xr7S93hZA9vrQzmp7rwYQEatrHbdIki+awmkB+B30HEcQwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFBlovPgFiiaZ2Rj8F7zqSlPpV1fRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0
ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYxNDdmN2MxZTQvMTQ3M2IxYzUtMGY5OS0z
NmVlLTgzZmMtYzk1MTdjMjQzM2VlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvOGYxNGY4ZDctNTQwYi00YTRhLWI1
YWUtMGFmMTQ3ZjdjMWU0LzhmMTRmOGQ3LTU0MGItNGE0YS1iNWFlLTBhZjE0N2Y3
YzFlNC5jcmwwHwYDVR0jBBgwFoAUT0s4jV9dhOfRkQSO1EfrBXSzPhMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS84ZjE0ZjhkNy01NDBiLTRhNGEtYjVhZS0wYWYx
NDdmN2MxZTQuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAzE+MMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZOwkQioDK2lT2OtjEjjm3sH4bkWmNhLwvaCrMA4JxtaU4bTOBsU5aq
t3UrgLMab6oZ8duz0Y8Tn9y4cvI6m1aaUdzCG+5Ch/kRF/0pcQqc2iJA76EvWdWI
6LWAXnlzIra/G7GNSHqfQj7wr6zJcW+70BzGUkMVX1kQCBfiPBaEzrMUKqxhZdym
axDdcMwb5yf5XfiaOMUWe5QcSKCHALmeF13C9EeOe0SqduLdbzDOjHQAoO2F7iKF
sQZrika2L5m0nZDrN174GSE74osHSpqqlXWClLqxbQBrg7llzvHnTMtKpABy/y46
gzGUuzr37NTJK6X7PqdH1EGLD+RwlR4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:05:56 2025 by rpki-client