Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa
File:                     2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa (raw, json)
Hash identifier:          J7zUGmFn2I5sioFujzAlGs0yw8CfnXHL9f4MWBxVxFc=
Subject key identifier:   D2:6B:1C:5E:AF:85:BD:58:7C:B8:98:88:01:9E:3E:CF:C5:0F:AC:62
Certificate issuer:       /CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
Certificate serial:       010D0C9F4328584A480AE0D4B4B916594AAFFEC0
Authority key identifier: A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa
Signing time:             Mon 23 Jun 2025 01:00:49 +0000
ROA not before:           Mon 23 Jun 2025 01:00:49 +0000
ROA not after:            Sun 21 Sep 2025 01:00:49 +0000
asID:                     0
IP address blocks:        206.82.110.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:48:0a:e0:d4:b4:b9:16:59:4a:af:fe:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ccaa9c27-6b68-45a8-b777-4c7b00482ab8
        Validity
            Not Before: Jun 23 01:00:49 2025 GMT
            Not After : Sep 21 01:00:49 2025 GMT
        Subject: CN=f8172195-3de1-41ca-9b12-ecad9b93c2f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b1:8d:09:62:f2:8a:b5:f0:f6:6d:12:03:e0:
                    1d:93:38:43:a3:73:69:88:2b:21:69:a9:44:ea:9c:
                    e0:76:08:c1:56:f6:fd:8d:60:a3:93:d9:ff:c8:dd:
                    f8:45:79:57:2c:47:ed:34:09:87:e2:57:4b:ed:c1:
                    b7:ce:ec:1c:e4:f2:61:d2:c0:44:34:47:b6:aa:f1:
                    ef:e5:86:0f:e9:ce:4b:90:62:d5:41:8c:bc:cc:17:
                    3d:4c:1b:9c:0a:c6:ef:62:7c:b4:e6:4a:71:7c:79:
                    8a:05:b8:bb:7a:a8:dc:77:1c:e7:a8:3f:ba:3b:a4:
                    45:3b:e3:5b:00:6d:c5:c7:e4:21:eb:1b:30:8a:7a:
                    ff:e0:cb:20:14:b7:0f:ae:6e:a2:d9:5e:06:e3:7e:
                    be:fa:4c:91:6e:f5:e1:cb:ff:dd:cd:19:2f:36:e7:
                    c9:6a:67:05:5f:10:d4:c9:e2:41:ae:41:24:44:8f:
                    b4:48:9a:37:4d:6c:df:83:95:70:b2:a9:23:29:6a:
                    77:87:31:61:a2:47:46:6f:6e:8f:63:93:c1:64:48:
                    a5:60:45:21:27:23:90:16:dd:9e:f7:a5:ab:35:50:
                    33:e8:ec:ce:da:fb:6d:9a:19:c6:2c:72:0a:f0:16:
                    b6:bd:55:76:c5:87:ac:e1:f7:11:c7:d0:1d:1a:cd:
                    20:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:6B:1C:5E:AF:85:BD:58:7C:B8:98:88:01:9E:3E:CF:C5:0F:AC:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/2ed8c46e-bbd7-306c-bd51-09e1938178a9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.crl

            X509v3 Authority Key Identifier:
                keyid:A2:41:EF:5B:9A:6A:4B:E6:91:56:9C:87:8A:A8:6E:DC:54:B2:7F:86

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/ccaa9c27-6b68-45a8-b777-4c7b00482ab8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.82.110.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         9a:b7:7c:36:05:2b:e9:1f:3f:df:f1:52:bf:5e:c7:54:5f:ff:
         ea:40:db:97:7d:d8:df:b9:dc:55:f8:83:40:d8:c2:51:6c:17:
         b2:9a:30:40:6a:e6:3a:fc:17:1a:7c:6a:c4:74:c4:05:0b:ed:
         11:af:ad:09:0f:ab:23:85:9d:ab:fa:90:f1:26:bf:2c:17:f7:
         3a:59:b8:df:08:03:3c:0d:2d:c8:00:7e:3a:c3:e1:c9:34:6e:
         88:77:73:1e:78:d5:a8:62:0b:1d:62:4b:af:2f:ed:e2:a0:28:
         29:68:8f:d5:2e:e2:d4:25:38:a6:39:e1:62:64:e1:0d:57:78:
         3d:64:4a:45:cf:06:57:7c:b8:1a:25:ac:a9:62:a8:59:59:d3:
         ec:10:32:bd:36:20:36:34:6d:e4:fd:bd:4b:22:05:c3:a3:8f:
         1e:80:3b:3b:15:ac:5e:2b:17:0d:bc:30:4c:1b:ef:e0:cb:ac:
         65:bd:0e:38:51:f8:9e:17:14:85:9f:0d:b0:18:98:fc:63:d8:
         0a:f0:39:1d:0d:f5:47:4d:65:62:18:0c:8e:d6:27:06:cb:c9:
         8a:3d:1b:62:b0:c9:0f:ac:44:d3:72:33:10:e6:d8:c8:c9:d3:
         8e:10:9f:44:3d:1e:87:e6:47:03:47:58:9e:79:f9:0d:3b:1c:
         e9:72:05:e0
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpICuDUtLkWWUqv/sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkY2NhYTljMjctNmI2OC00NWE4LWI3NzctNGM3YjAwNDgy
YWI4MB4XDTI1MDYyMzAxMDA0OVoXDTI1MDkyMTAxMDA0OVowLzEtMCsGA1UEAxMk
ZjgxNzIxOTUtM2RlMS00MWNhLTliMTItZWNhZDliOTNjMmYwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA07GNCWLyirXw9m0SA+AdkzhDo3NpiCshaalE
6pzgdgjBVvb9jWCjk9n/yN34RXlXLEftNAmH4ldL7cG3zuwc5PJh0sBENEe2qvHv
5YYP6c5LkGLVQYy8zBc9TBucCsbvYny05kpxfHmKBbi7eqjcdxznqD+6O6RFO+Nb
AG3Fx+Qh6xswinr/4MsgFLcPrm6i2V4G436++kyRbvXhy//dzRkvNufJamcFXxDU
yeJBrkEkRI+0SJo3TWzfg5VwsqkjKWp3hzFhokdGb26PY5PBZEilYEUhJyOQFt2e
96WrNVAz6OzO2vttmhnGLHIK8Ba2vVV2xYes4fcRx9AdGs0giwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFNJrHF6vhb1YfLiYiAGePs/FD6xiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9jY2Fh
OWMyNy02YjY4LTQ1YTgtYjc3Ny00YzdiMDA0ODJhYjgvMmVkOGM0NmUtYmJkNy0z
MDZjLWJkNTEtMDllMTkzODE3OGE5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvY2NhYTljMjctNmI2OC00NWE4LWI3
NzctNGM3YjAwNDgyYWI4L2NjYWE5YzI3LTZiNjgtNDVhOC1iNzc3LTRjN2IwMDQ4
MmFiOC5jcmwwHwYDVR0jBBgwFoAUokHvW5pqS+aRVpyHiqhu3FSyf4YwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9jY2FhOWMyNy02YjY4LTQ1YTgtYjc3Ny00Yzdi
MDA0ODJhYjguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzlJuMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJq3fDYFK+kfP9/xUr9ex1Rf/+pA25d92N+53FX4g0DYwlFsF7KaMEBq
5jr8Fxp8asR0xAUL7RGvrQkPqyOFnav6kPEmvywX9zpZuN8IAzwNLcgAfjrD4ck0
boh3cx541ahiCx1iS68v7eKgKCloj9Uu4tQlOKY54WJk4Q1XeD1kSkXPBld8uBol
rKliqFlZ0+wQMr02IDY0beT9vUsiBcOjjx6AOzsVrF4rFw28MEwb7+DLrGW9DjhR
+J4XFIWfDbAYmPxj2ArwOR0N9UdNZWIYDI7WJwbLyYo9G2KwyQ+sRNNyMxDm2MjJ
044Qn0Q9HofmRwNHWJ55+Q07HOlyBeA=
-----END CERTIFICATE-----
Generated at Sun Jun 29 20:19:14 2025 by rpki-client