Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/f16a7e91-30ea-39e7-b5dc-b62a760a0bf0.roa
File:                     f16a7e91-30ea-39e7-b5dc-b62a760a0bf0.roa (raw, json)
Hash identifier:          GFdE5D4Jv9+NSk6hXM6Omq6+msqXlojLTdpwR8bT/YI=
Subject key identifier:   F6:6A:5F:5E:0D:8D:9C:0E:1C:B0:9E:70:15:C0:FE:5F:6B:A5:4C:EC
Certificate issuer:       /CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
Certificate serial:       010D0C9F43285849EA8524EA8A3F407B616C9E80
Authority key identifier: 46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/f16a7e91-30ea-39e7-b5dc-b62a760a0bf0.roa
Signing time:             Tue 20 May 2025 13:01:05 +0000
ROA not before:           Tue 20 May 2025 13:01:05 +0000
ROA not after:            Mon 18 Aug 2025 13:01:05 +0000
asID:                     53616
IP address blocks:        209.209.48.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:49:ea:85:24:ea:8a:3f:40:7b:61:6c:9e:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26254462-2ddc-4c43-8ad7-6fc9c843ddf3
        Validity
            Not Before: May 20 13:01:05 2025 GMT
            Not After : Aug 18 13:01:05 2025 GMT
        Subject: CN=c961ad1c-5025-420c-ad9b-b92665e991bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:ea:38:64:41:77:15:f6:f4:dc:0f:09:fd:ff:
                    71:5c:09:fb:3a:a9:70:0f:7d:f3:6b:3d:14:cd:28:
                    df:6a:d2:e7:2a:4a:b8:53:a4:7d:ef:9a:36:c0:67:
                    31:cc:39:35:5f:e0:13:c5:b1:87:20:59:9d:36:eb:
                    16:8f:ed:28:ef:7d:3d:02:1b:33:eb:56:ef:7f:2e:
                    ee:09:0a:03:fb:fa:d2:f7:fb:95:a5:db:7a:e6:7e:
                    6f:69:33:61:6c:f6:09:81:c7:88:75:0c:05:a0:37:
                    de:a6:ba:44:c1:4d:59:33:2a:42:60:4e:86:01:19:
                    c3:11:73:67:14:a1:81:5b:ba:8c:74:4c:f0:e4:b8:
                    62:15:2e:a3:48:ce:51:91:b1:57:46:12:4b:4d:4f:
                    91:fc:7e:9d:22:f3:ce:83:dc:aa:4d:58:3e:73:59:
                    43:37:42:74:06:ce:d8:15:09:9b:d6:d7:88:bd:9a:
                    00:48:77:d8:2f:aa:20:83:46:48:74:99:ce:c4:e3:
                    9e:c6:2c:21:7f:75:13:14:38:8c:2e:eb:15:f9:62:
                    76:6c:44:a4:4b:44:38:9b:6f:38:b3:49:77:02:55:
                    39:b1:96:64:f5:bc:53:40:9d:d5:f0:82:5e:1a:6a:
                    b2:22:a7:be:4d:f9:dc:9b:c8:c9:13:f0:5a:75:2b:
                    c8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:6A:5F:5E:0D:8D:9C:0E:1C:B0:9E:70:15:C0:FE:5F:6B:A5:4C:EC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/f16a7e91-30ea-39e7-b5dc-b62a760a0bf0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.crl

            X509v3 Authority Key Identifier:
                keyid:46:21:E9:FF:9D:C3:9C:BF:3E:42:07:DB:FC:31:C2:FF:88:3B:63:52

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/26254462-2ddc-4c43-8ad7-6fc9c843ddf3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.209.48.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:ec:5d:d7:0f:fb:cf:a1:2c:ed:8b:53:85:24:18:77:84:a5:
         a7:e5:b9:b6:81:bb:f9:75:ba:00:78:11:e6:92:c0:cd:54:6f:
         5b:ea:66:06:bf:05:4e:fe:8e:70:85:49:7a:2a:74:ed:23:07:
         17:00:06:75:59:3e:94:c2:04:18:4d:70:6c:f3:33:26:43:d7:
         86:a6:53:e2:b2:38:9e:71:1b:68:21:0f:17:d4:f0:c7:2d:61:
         24:31:75:17:39:2d:50:71:e3:9f:fc:cc:56:ae:43:94:86:c3:
         d3:69:a1:99:7f:42:77:10:a4:1b:2d:e4:48:ff:4d:cd:91:cd:
         f8:50:3a:66:b1:18:00:26:ed:7b:15:c8:f9:95:97:fa:55:52:
         ac:73:fe:cf:20:b0:a3:fa:c5:8b:05:41:c5:92:ab:12:c1:57:
         5a:9a:35:5f:63:f0:bf:e4:b2:3c:ed:85:22:70:46:20:86:2e:
         c0:fc:c4:c3:8c:23:1d:98:69:09:bd:da:00:8d:ea:31:49:1d:
         2e:be:19:67:62:30:5a:ef:6f:e2:24:ca:c2:38:e7:38:76:5a:
         d7:51:1c:84:fc:01:82:5a:b0:ff:49:55:40:3f:34:b2:f8:d5:
         92:99:ad:78:dd:70:55:95:f9:17:58:9a:31:71:b2:0d:bd:45:
         8a:6f:22:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEnqhSTqij9Ae2FsnoAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjYyNTQ0NjItMmRkYy00YzQzLThhZDctNmZjOWM4NDNk
ZGYzMB4XDTI1MDUyMDEzMDEwNVoXDTI1MDgxODEzMDEwNVowLzEtMCsGA1UEAxMk
Yzk2MWFkMWMtNTAyNS00MjBjLWFkOWItYjkyNjY1ZTk5MWJkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkuo4ZEF3Ffb03A8J/f9xXAn7OqlwD33zaz0U
zSjfatLnKkq4U6R975o2wGcxzDk1X+ATxbGHIFmdNusWj+0o7309Ahsz61bvfy7u
CQoD+/rS9/uVpdt65n5vaTNhbPYJgceIdQwFoDfeprpEwU1ZMypCYE6GARnDEXNn
FKGBW7qMdEzw5LhiFS6jSM5RkbFXRhJLTU+R/H6dIvPOg9yqTVg+c1lDN0J0Bs7Y
FQmb1teIvZoASHfYL6ogg0ZIdJnOxOOexiwhf3UTFDiMLusV+WJ2bESkS0Q4m284
s0l3AlU5sZZk9bxTQJ3V8IJeGmqyIqe+Tfncm8jJE/BadSvIrQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPZqX14NjZwOHLCecBXA/l9rpUzsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS8yNjI1
NDQ2Mi0yZGRjLTRjNDMtOGFkNy02ZmM5Yzg0M2RkZjMvZjE2YTdlOTEtMzBlYS0z
OWU3LWI1ZGMtYjYyYTc2MGEwYmYwLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvMjYyNTQ0NjItMmRkYy00YzQzLThh
ZDctNmZjOWM4NDNkZGYzLzI2MjU0NDYyLTJkZGMtNGM0My04YWQ3LTZmYzljODQz
ZGRmMy5jcmwwHwYDVR0jBBgwFoAURiHp/53DnL8+Qgfb/DHC/4g7Y1IwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS8yNjI1NDQ2Mi0yZGRjLTRjNDMtOGFkNy02ZmM5
Yzg0M2RkZjMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0dEwMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABDsXdcP+8+hLO2LU4UkGHeEpaflubaBu/l1ugB4EeaSwM1Ub1vqZga/
BU7+jnCFSXoqdO0jBxcABnVZPpTCBBhNcGzzMyZD14amU+KyOJ5xG2ghDxfU8Mct
YSQxdRc5LVBx45/8zFauQ5SGw9NpoZl/QncQpBst5Ej/Tc2RzfhQOmaxGAAm7XsV
yPmVl/pVUqxz/s8gsKP6xYsFQcWSqxLBV1qaNV9j8L/ksjzthSJwRiCGLsD8xMOM
Ix2YaQm92gCN6jFJHS6+GWdiMFrvb+IkysI45zh2WtdRHIT8AYJasP9JVUA/NLL4
1ZKZrXjdcFWV+RdYmjFxsg29RYpvIpA=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:32:23 2025 by rpki-client