Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
File:                     0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa (raw, json)
Hash identifier:          38USWDuEJ2L08MSMF+nngL6mV7aajw+PkdTLVv05Ark=
Subject key identifier:   41:ED:FD:A5:3A:74:40:8A:31:1B:1B:40:78:4B:E7:D8:6A:A3:94:62
Certificate issuer:       /CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
Certificate serial:       010D0C9F4328584A3E45B0B7EE844BB5CAB87F00
Authority key identifier: 63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa
Signing time:             Thu 19 Jun 2025 13:01:02 +0000
ROA not before:           Thu 19 Jun 2025 13:01:02 +0000
ROA not after:            Wed 17 Sep 2025 13:01:02 +0000
asID:                     400562
IP address blocks:        204.152.22.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3e:45:b0:b7:ee:84:4b:b5:ca:b8:7f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6dce3b9c-be94-46ec-85aa-d93ddfdd08e2
        Validity
            Not Before: Jun 19 13:01:02 2025 GMT
            Not After : Sep 17 13:01:02 2025 GMT
        Subject: CN=a38f9c38-d1c0-42ff-b6bb-33229512e8a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:6b:32:04:6f:46:3e:9d:db:cd:e7:21:80:66:
                    89:73:8e:5e:3b:20:06:61:21:77:72:eb:c0:68:8e:
                    98:85:20:9b:8e:e9:b1:f7:03:67:5d:9c:7a:c6:54:
                    47:4d:1d:8b:bc:d2:4a:28:ad:5d:bf:2a:ee:d5:32:
                    a3:ae:4b:2b:b4:05:38:3a:f0:84:09:c8:87:56:e4:
                    15:fe:29:95:35:f7:3b:ba:5e:52:6f:81:c3:52:2a:
                    0d:03:e1:8b:66:a1:d6:70:ba:03:11:67:1d:d5:2e:
                    7d:55:5b:8d:af:06:4e:38:ed:18:be:e8:0c:c0:b4:
                    50:a4:62:ed:34:06:e0:d3:59:0a:18:5c:51:6c:13:
                    38:1f:47:16:ff:90:5d:12:e6:3d:28:30:b7:86:70:
                    a1:b2:0a:39:f9:c7:97:fb:b7:a1:9c:07:c8:9d:1e:
                    3e:29:e6:03:f6:9f:41:d2:e2:55:99:36:e2:85:a1:
                    af:c6:33:7e:f4:f6:87:04:ae:2b:47:1c:ea:7b:aa:
                    9b:76:bb:82:a3:84:1c:c9:62:87:5a:ff:cc:1e:67:
                    7e:0b:c2:74:15:b5:95:43:e7:af:9e:60:21:7c:79:
                    b7:01:a0:36:fd:8b:27:09:6e:07:ed:12:25:70:be:
                    ae:ee:4f:c0:f1:35:4c:1c:1f:a3:fd:d1:c2:1c:12:
                    87:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:ED:FD:A5:3A:74:40:8A:31:1B:1B:40:78:4B:E7:D8:6A:A3:94:62
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/0ea395a5-638e-36f0-8e6a-b2df9577ce01.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.crl

            X509v3 Authority Key Identifier:
                keyid:63:5E:74:0C:23:77:26:88:CB:B0:C3:FA:E2:01:3C:AD:7C:BA:E7:14

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6dce3b9c-be94-46ec-85aa-d93ddfdd08e2.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  204.152.22.0/23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         10:2f:d5:04:77:ae:4b:2b:b4:26:ea:be:cb:07:fd:04:2e:eb:
         ef:c0:51:05:12:89:83:73:39:1f:8a:c8:82:4c:aa:83:19:58:
         4b:75:c6:7d:ee:76:09:af:14:63:00:e7:d2:f9:24:b6:0d:8a:
         f1:3b:ad:c2:58:f8:69:0e:0b:be:e9:2f:63:c3:1d:f4:01:26:
         01:ef:1e:15:40:88:7e:19:bb:44:e1:de:05:7d:62:ad:48:9d:
         43:5e:46:7e:97:66:e8:42:f0:56:d0:aa:9d:6d:03:22:ec:67:
         cc:64:54:44:ba:f2:a2:c6:61:ad:ea:56:37:6b:74:31:96:83:
         95:05:6b:94:cf:54:21:93:86:01:19:46:58:85:1d:c2:2a:ba:
         83:7f:b7:5b:2f:d7:27:9c:0d:53:32:5f:d6:cf:33:48:a9:ad:
         75:05:2a:96:b5:72:cf:6b:3c:04:f7:32:46:c8:82:db:1e:90:
         d5:de:e0:e8:f2:b8:0e:c4:a9:27:8d:69:c4:30:47:01:e7:df:
         b4:1e:e0:3a:81:4b:b1:31:9e:fb:af:b5:9d:0d:52:3a:26:48:
         de:2c:67:68:cb:9f:53:60:e9:67:07:de:54:2d:ec:f6:1f:8e:
         7b:d0:ba:53:39:0a:2c:42:e3:0b:0e:56:82:54:41:de:2a:c6:
         2a:ee:56:31
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEo+RbC37oRLtcq4fwAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNmRjZTNiOWMtYmU5NC00NmVjLTg1YWEtZDkzZGRmZGQw
OGUyMB4XDTI1MDYxOTEzMDEwMloXDTI1MDkxNzEzMDEwMlowLzEtMCsGA1UEAxMk
YTM4ZjljMzgtZDFjMC00MmZmLWI2YmItMzMyMjk1MTJlOGEwMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjWsyBG9GPp3bzechgGaJc45eOyAGYSF3cuvA
aI6YhSCbjumx9wNnXZx6xlRHTR2LvNJKKK1dvyru1TKjrksrtAU4OvCECciHVuQV
/imVNfc7ul5Sb4HDUioNA+GLZqHWcLoDEWcd1S59VVuNrwZOOO0YvugMwLRQpGLt
NAbg01kKGFxRbBM4H0cW/5BdEuY9KDC3hnChsgo5+ceX+7ehnAfInR4+KeYD9p9B
0uJVmTbihaGvxjN+9PaHBK4rRxzqe6qbdruCo4QcyWKHWv/MHmd+C8J0FbWVQ+ev
nmAhfHm3AaA2/YsnCW4H7RIlcL6u7k/A8TVMHB+j/dHCHBKH7QIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFEHt/aU6dECKMRsbQHhL59hqo5RiMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS82ZGNl
M2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNkZGZkZDA4ZTIvMGVhMzk1YTUtNjM4ZS0z
NmYwLThlNmEtYjJkZjk1NzdjZTAxLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvNmRjZTNiOWMtYmU5NC00NmVjLTg1
YWEtZDkzZGRmZGQwOGUyLzZkY2UzYjljLWJlOTQtNDZlYy04NWFhLWQ5M2RkZmRk
MDhlMi5jcmwwHwYDVR0jBBgwFoAUY150DCN3JojLsMP64gE8rXy65xQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS82ZGNlM2I5Yy1iZTk0LTQ2ZWMtODVhYS1kOTNk
ZGZkZDA4ZTIuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBzJgWMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABAv1QR3rksrtCbqvssH/QQu6+/AUQUSiYNzOR+KyIJMqoMZWEt1xn3u
dgmvFGMA59L5JLYNivE7rcJY+GkOC77pL2PDHfQBJgHvHhVAiH4Zu0Th3gV9Yq1I
nUNeRn6XZuhC8FbQqp1tAyLsZ8xkVES68qLGYa3qVjdrdDGWg5UFa5TPVCGThgEZ
RliFHcIquoN/t1sv1yecDVMyX9bPM0iprXUFKpa1cs9rPAT3MkbIgtsekNXe4Ojy
uA7EqSeNacQwRwHn37Qe4DqBS7ExnvuvtZ0NUjomSN4sZ2jLn1Ng6WcH3lQt7PYf
jnvQulM5CixC4wsOVoJUQd4qxiruVjE=
-----END CERTIFICATE-----
Generated at Mon Jun 30 05:34:12 2025 by rpki-client