Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa
File:                     5063a991-71e3-386f-a2ce-1837542c302c.roa (raw, json)
Hash identifier:          +lue17RhNrlZ7xb7pgBzcAvhXDqCtm6/ZiyBgvNQxKs=
Subject key identifier:   2B:3D:38:56:6A:F0:47:57:CD:5B:27:1C:29:13:2A:3D:AC:50:88:E1
Certificate issuer:       /CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
Certificate serial:       010D0C9F4328584A173005CB6F30769BCB8E5600
Authority key identifier: 22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa
Signing time:             Thu 05 Jun 2025 13:01:03 +0000
ROA not before:           Thu 05 Jun 2025 13:01:03 +0000
ROA not after:            Wed 03 Sep 2025 13:01:03 +0000
asID:                     36511
IP address blocks:        216.230.17.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:17:30:05:cb:6f:30:76:9b:cb:8e:56:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc
        Validity
            Not Before: Jun  5 13:01:03 2025 GMT
            Not After : Sep  3 13:01:03 2025 GMT
        Subject: CN=3c40143a-960c-4ef2-b1f6-bbc9ec77ee5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:87:ba:b6:b6:99:e2:44:14:5d:44:84:1f:f2:
                    42:38:e5:74:e7:1f:e0:cc:35:94:3a:51:51:0b:48:
                    49:f2:3a:2b:fa:b2:ce:7a:5f:21:2c:f4:7b:71:77:
                    ee:60:4b:ff:35:74:de:ae:7e:16:20:5a:0b:19:f4:
                    c7:5b:29:76:7b:15:a9:33:29:91:f5:3d:75:41:1d:
                    f7:a7:d6:08:fb:15:6f:47:aa:1e:b1:43:1f:e2:df:
                    c4:c8:a1:dc:d8:f4:7e:71:6e:6f:1b:44:24:fa:6a:
                    39:85:fb:4e:e3:66:5b:ef:c7:56:53:bf:22:85:58:
                    d0:01:d6:9c:c4:55:91:bc:f0:53:45:f4:76:b6:ce:
                    2c:48:89:46:c2:7d:94:57:b5:9d:16:d8:2f:d8:11:
                    3d:19:b7:13:92:11:f6:e1:c1:b1:5c:08:03:a6:4c:
                    25:10:15:16:68:b1:dc:dc:30:77:27:81:a9:86:68:
                    18:45:60:71:1f:5d:ae:3a:38:3b:fb:53:d4:0e:ec:
                    69:fa:50:bd:76:24:f1:5c:8e:3b:5e:cf:c1:3c:81:
                    d5:7b:6a:7b:5f:c3:07:2f:a1:77:c6:af:90:71:22:
                    6b:ea:e7:85:cf:87:68:fb:a2:cb:18:c5:81:9c:1b:
                    82:97:2d:e8:99:e3:01:79:b2:2a:49:cd:0c:e1:8a:
                    a6:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:3D:38:56:6A:F0:47:57:CD:5B:27:1C:29:13:2A:3D:AC:50:88:E1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/5063a991-71e3-386f-a2ce-1837542c302c.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.crl

            X509v3 Authority Key Identifier:
                keyid:22:28:05:62:81:92:FB:34:B3:82:52:D5:88:48:17:80:BB:CF:35:48

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/ba0eefdb-ef0d-408c-8e35-31e5f29d9cfc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.230.17.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:c0:3e:25:c0:15:fb:88:77:75:a7:d5:fa:de:9f:a7:1d:
         a6:cf:d3:77:4f:9d:ad:94:ab:23:f0:60:94:65:eb:05:8b:72:
         a0:72:b9:b8:63:64:cc:78:78:73:00:e6:98:26:29:38:ba:e4:
         39:94:0c:32:b0:2b:85:c3:27:fb:ce:42:7b:5e:fd:90:64:bc:
         41:97:99:ef:f4:9c:dc:d8:c5:87:c6:5c:5e:38:56:a7:7a:78:
         86:60:8c:83:59:d6:67:1d:8b:aa:6c:b1:51:58:56:a2:8c:3a:
         06:85:70:04:13:0e:81:8d:82:ce:92:91:33:84:d4:63:d0:5a:
         06:d3:fb:ff:cc:eb:e9:19:f2:52:31:54:dd:0c:2b:8a:64:a4:
         87:69:7d:3c:08:e9:05:34:e3:be:df:a1:ee:82:28:43:1e:c2:
         1c:8f:b8:d2:1d:a9:b7:7e:f4:25:ab:0e:93:fa:eb:0f:03:76:
         cc:06:76:06:41:ae:ab:b6:35:45:2d:fb:5f:aa:29:e0:d1:3c:
         8a:39:9d:19:fd:f1:8f:32:e2:f4:ff:02:77:b9:8b:80:0f:8f:
         cd:82:8d:8a:ca:e5:53:aa:d6:35:a6:bf:53:ea:67:3a:cb:e0:
         32:5e:ee:dc:fd:41:60:b1:14:b2:0e:1a:5f:4b:ed:56:4d:67:
         5f:4a:60:78
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoXMAXLbzB2m8uOVgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYmEwZWVmZGItZWYwZC00MDhjLThlMzUtMzFlNWYyOWQ5
Y2ZjMB4XDTI1MDYwNTEzMDEwM1oXDTI1MDkwMzEzMDEwM1owLzEtMCsGA1UEAxMk
M2M0MDE0M2EtOTYwYy00ZWYyLWIxZjYtYmJjOWVjNzdlZTVkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoYe6traZ4kQUXUSEH/JCOOV05x/gzDWUOlFR
C0hJ8jor+rLOel8hLPR7cXfuYEv/NXTern4WIFoLGfTHWyl2exWpMymR9T11QR33
p9YI+xVvR6oesUMf4t/EyKHc2PR+cW5vG0Qk+mo5hftO42Zb78dWU78ihVjQAdac
xFWRvPBTRfR2ts4sSIlGwn2UV7WdFtgv2BE9GbcTkhH24cGxXAgDpkwlEBUWaLHc
3DB3J4GphmgYRWBxH12uOjg7+1PUDuxp+lC9diTxXI47Xs/BPIHVe2p7X8MHL6F3
xq+QcSJr6ueFz4do+6LLGMWBnBuCly3omeMBebIqSc0M4YqmLQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFCs9OFZq8EdXzVsnHCkTKj2sUIjhMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9iYTBl
ZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1ZjI5ZDljZmMvNTA2M2E5OTEtNzFlMy0z
ODZmLWEyY2UtMTgzNzU0MmMzMDJjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvYmEwZWVmZGItZWYwZC00MDhjLThl
MzUtMzFlNWYyOWQ5Y2ZjL2JhMGVlZmRiLWVmMGQtNDA4Yy04ZTM1LTMxZTVmMjlk
OWNmYy5jcmwwHwYDVR0jBBgwFoAUIigFYoGS+zSzglLViEgXgLvPNUgwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9iYTBlZWZkYi1lZjBkLTQwOGMtOGUzNS0zMWU1
ZjI5ZDljZmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OYRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAJG5wD4lwBX7iHd1p9X63p+nHabP03dPna2UqyPwYJRl6wWLcqByubhj
ZMx4eHMA5pgmKTi65DmUDDKwK4XDJ/vOQnte/ZBkvEGXme/0nNzYxYfGXF44Vqd6
eIZgjINZ1mcdi6pssVFYVqKMOgaFcAQTDoGNgs6SkTOE1GPQWgbT+//M6+kZ8lIx
VN0MK4pkpIdpfTwI6QU0477foe6CKEMewhyPuNIdqbd+9CWrDpP66w8DdswGdgZB
rqu2NUUt+1+qKeDRPIo5nRn98Y8y4vT/Ane5i4APj82CjYrK5VOq1jWmv1PqZzrL
4DJe7tz9QWCxFLIOGl9L7VZNZ19KYHg=
-----END CERTIFICATE-----
Generated at Mon Jun 30 01:06:34 2025 by rpki-client