Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa
File:                     16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa (raw, json)
Hash identifier:          z50SEY7oPwyV92GNblwtq+BH1wmAs6bX9Gsa2QhisMY=
Subject key identifier:   74:E2:EF:D8:DF:F4:D1:A2:27:7F:E1:F0:0A:F7:46:C1:89:B8:8D:95
Certificate issuer:       /CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
Certificate serial:       010D0C9F4328584A363FFF9508F9CFA46DF29E00
Authority key identifier: C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa
Signing time:             Mon 16 Jun 2025 16:03:22 +0000
ROA not before:           Mon 16 Jun 2025 16:03:22 +0000
ROA not after:            Sun 14 Sep 2025 16:03:22 +0000
asID:                     36850
IP address blocks:        198.85.230.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/69fd0156-bb1f-48b6-bf32-c9492286f195.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 01:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:36:3f:ff:95:08:f9:cf:a4:6d:f2:9e:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f952aa88-d37b-47ee-bc94-8f7b9f93aa6a
        Validity
            Not Before: Jun 16 16:03:22 2025 GMT
            Not After : Sep 14 16:03:22 2025 GMT
        Subject: CN=cd932bf1-f47a-4561-86f9-054669868825
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:86:fb:ae:64:93:ad:a1:c9:fb:e7:49:db:96:
                    ef:4e:a4:2b:d7:11:04:1a:a3:48:43:2d:38:74:e1:
                    48:f2:ed:82:bf:f4:18:d5:c6:6f:bb:bf:aa:25:75:
                    08:62:2c:dd:62:3a:b3:32:c2:2a:bd:26:c9:e4:0e:
                    03:07:74:88:f2:b2:f9:58:51:d4:08:87:9f:83:1c:
                    f3:44:25:fe:a5:57:52:07:d8:52:84:de:8d:6b:fe:
                    61:7f:44:e0:58:65:74:a7:e3:2f:d4:7b:bc:da:c5:
                    97:f8:01:1a:1a:1c:0e:13:99:c5:34:c6:ad:04:5c:
                    14:42:9f:ab:59:8b:ad:9e:ed:18:98:b9:94:36:44:
                    c9:c2:8e:10:44:85:8e:a1:63:c0:3f:fa:53:7a:5d:
                    77:03:34:33:0e:05:63:ed:9f:57:3c:a6:6a:56:4c:
                    3f:dd:e5:db:88:b2:65:e8:88:75:17:08:3b:2e:d1:
                    71:c4:a9:4d:ca:db:ab:71:e4:91:56:53:13:f4:56:
                    b6:cd:fa:28:da:52:ee:db:21:4b:be:f4:f8:58:f2:
                    2b:6c:02:e2:8f:7e:cd:d3:f6:b2:ec:d5:fb:48:64:
                    c2:b4:8c:d3:32:8a:af:04:92:6f:64:24:ff:43:d8:
                    f2:a9:de:52:76:af:e3:55:57:fc:b9:9a:4c:e9:2a:
                    eb:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E2:EF:D8:DF:F4:D1:A2:27:7F:E1:F0:0A:F7:46:C1:89:B8:8D:95
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/16306f15-e3d6-3d5d-88f0-4dd0e0444acd.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.crl

            X509v3 Authority Key Identifier:
                keyid:C0:6E:9A:AC:67:54:6E:8A:CA:9E:27:90:88:75:9F:A8:87:B4:FA:37

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/69fd0156-bb1f-48b6-bf32-c9492286f195/f952aa88-d37b-47ee-bc94-8f7b9f93aa6a.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.85.230.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         09:68:fa:12:dd:39:eb:46:b5:e7:b8:2f:1d:71:b9:2a:f7:8c:
         32:4e:e8:6e:c3:70:32:13:71:e8:e8:47:d5:7d:5e:85:cb:ac:
         42:ef:f1:4e:8e:0a:cd:69:1f:3f:49:ba:21:78:0e:85:9c:da:
         9f:78:0c:2a:2c:7e:f0:4a:8a:b7:00:fd:82:8a:58:04:37:2e:
         5d:d5:a0:04:7f:2c:0c:3f:82:b9:93:ed:6f:04:cf:05:43:c3:
         4b:af:a1:c8:be:37:3f:c1:89:99:e5:29:3c:6c:3c:68:03:2d:
         6d:46:2f:c9:2e:06:aa:9f:1c:b0:08:95:75:1c:f6:7c:80:86:
         77:5d:a1:01:73:1f:a3:f4:54:fd:31:ef:5f:31:04:51:d7:0c:
         39:1e:db:44:ed:bc:ef:52:6e:1f:32:de:cc:4f:55:6c:1c:f4:
         8f:47:1c:8f:2f:eb:d6:08:c1:0f:a6:77:30:67:22:da:7d:81:
         fc:f4:83:a3:49:4d:8a:e7:06:cb:e7:c5:29:ec:cc:af:23:62:
         8d:dd:35:a2:5d:5d:ce:93:a1:69:ab:9a:5c:78:3c:03:0f:97:
         cc:45:6d:cf:09:59:f5:24:ef:26:0b:f6:a0:16:e7:75:e9:bf:
         7a:56:a1:c7:75:88:22:be:c0:ba:30:c2:8e:04:75:7f:11:ad:
         4f:67:05:3f
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo2P/+VCPnPpG3yngAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjk1MmFhODgtZDM3Yi00N2VlLWJjOTQtOGY3YjlmOTNh
YTZhMB4XDTI1MDYxNjE2MDMyMloXDTI1MDkxNDE2MDMyMlowLzEtMCsGA1UEAxMk
Y2Q5MzJiZjEtZjQ3YS00NTYxLTg2ZjktMDU0NjY5ODY4ODI1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYb7rmSTraHJ++dJ25bvTqQr1xEEGqNIQy04
dOFI8u2Cv/QY1cZvu7+qJXUIYizdYjqzMsIqvSbJ5A4DB3SI8rL5WFHUCIefgxzz
RCX+pVdSB9hShN6Na/5hf0TgWGV0p+Mv1Hu82sWX+AEaGhwOE5nFNMatBFwUQp+r
WYutnu0YmLmUNkTJwo4QRIWOoWPAP/pTel13AzQzDgVj7Z9XPKZqVkw/3eXbiLJl
6Ih1Fwg7LtFxxKlNyturceSRVlMT9Fa2zfoo2lLu2yFLvvT4WPIrbALij37N0/ay
7NX7SGTCtIzTMoqvBJJvZCT/Q9jyqd5Sdq/jVVf8uZpM6SrrTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHTi79jf9NGiJ3/h8Ar3RsGJuI2VMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhiNi1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUy
YWE4OC1kMzdiLTQ3ZWUtYmM5NC04ZjdiOWY5M2FhNmEvMTYzMDZmMTUtZTNkNi0z
ZDVkLTg4ZjAtNGRkMGUwNDQ0YWNkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82OWZkMDE1Ni1i
YjFmLTQ4YjYtYmYzMi1jOTQ5MjI4NmYxOTUvZjk1MmFhODgtZDM3Yi00N2VlLWJj
OTQtOGY3YjlmOTNhYTZhL2Y5NTJhYTg4LWQzN2ItNDdlZS1iYzk0LThmN2I5Zjkz
YWE2YS5jcmwwHwYDVR0jBBgwFoAUwG6arGdUborKnieQiHWfqIe0+jcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzY5ZmQwMTU2LWJiMWYtNDhi
Ni1iZjMyLWM5NDkyMjg2ZjE5NS9mOTUyYWE4OC1kMzdiLTQ3ZWUtYmM5NC04Zjdi
OWY5M2FhNmEuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBxlXmMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAlo+hLdOetGtee4Lx1xuSr3jDJO6G7DcDITcejoR9V9XoXLrELv8U6O
Cs1pHz9JuiF4DoWc2p94DCosfvBKircA/YKKWAQ3Ll3VoAR/LAw/grmT7W8EzwVD
w0uvoci+Nz/BiZnlKTxsPGgDLW1GL8kuBqqfHLAIlXUc9nyAhnddoQFzH6P0VP0x
718xBFHXDDke20TtvO9Sbh8y3sxPVWwc9I9HHI8v69YIwQ+mdzBnItp9gfz0g6NJ
TYrnBsvnxSnszK8jYo3dNaJdXc6ToWmrmlx4PAMPl8xFbc8JWfUk7yYL9qAW53Xp
v3pWocd1iCK+wLowwo4EdX8RrU9nBT8=
-----END CERTIFICATE-----
Generated at Mon Jun 30 19:01:19 2025 by rpki-client