Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a6bdb2a5-3e11-3700-895c-56ae8d3aa54b.roa
File:                     a6bdb2a5-3e11-3700-895c-56ae8d3aa54b.roa (raw, json)
Hash identifier:          ZZ8ByXZvTmOxVk1BHJXsiR1J8e4tSQK/JtoeCCuyyU8=
Subject key identifier:   38:47:65:A2:85:EB:44:3E:77:5D:3F:A5:DD:A8:E3:13:99:A1:00:D1
Certificate issuer:       /CN=fba63dff-a873-460d-a7e8-ce4e073bce67
Certificate serial:       010D0C9F4328584AC8765B591389D9F20465E840
Authority key identifier: 1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a6bdb2a5-3e11-3700-895c-56ae8d3aa54b.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14661
IP address blocks:        142.51.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/6ead073c-b9f0-4523-b39e-a3c7dab97c25.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 16:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:5b:59:13:89:d9:f2:04:65:e8:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=fba63dff-a873-460d-a7e8-ce4e073bce67
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=61d3e756-075d-47bf-8ac8-e53293077b52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:03:5e:4c:53:cd:37:b9:90:48:62:01:b2:c2:
                    97:82:72:e7:3a:83:7a:ad:44:1f:1a:9a:87:a6:bf:
                    cd:c4:7d:98:bf:34:6c:90:48:f5:1f:e9:aa:17:fe:
                    62:5e:fa:1c:4a:a1:57:36:7a:f2:e4:9a:b9:e6:37:
                    8b:59:ba:b1:ae:4f:9a:0c:f0:3d:1d:84:61:b5:48:
                    71:15:78:eb:2c:3d:ad:80:49:00:48:c5:07:15:db:
                    8b:fd:fd:cd:c7:a9:79:db:0f:5c:ab:ca:43:64:25:
                    dd:52:c6:bd:f1:69:35:a2:78:fd:46:ca:4f:4e:48:
                    55:c1:0b:a9:c9:e2:df:03:08:3c:34:5c:b8:1d:44:
                    ea:be:61:af:8b:8f:2f:1e:c9:3a:eb:ca:9b:ca:92:
                    34:9c:18:44:73:9f:0d:ca:51:20:24:2d:94:57:b1:
                    e6:0c:5b:21:f1:0e:7a:3c:56:1a:9e:74:d1:a1:c6:
                    b8:83:d6:a7:0f:d9:7a:5c:84:ed:9b:7f:06:8e:a0:
                    24:34:ce:91:53:f2:dd:5d:35:74:78:83:89:58:9e:
                    27:b7:9f:d7:76:03:8f:5e:a6:64:43:c8:cd:34:d5:
                    df:2f:28:ca:12:a9:19:1b:9d:ec:75:11:51:7b:43:
                    74:d0:87:a2:ed:43:37:c4:7b:d0:4c:34:fe:32:97:
                    03:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:47:65:A2:85:EB:44:3E:77:5D:3F:A5:DD:A8:E3:13:99:A1:00:D1
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/a6bdb2a5-3e11-3700-895c-56ae8d3aa54b.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67/fba63dff-a873-460d-a7e8-ce4e073bce67.crl

            X509v3 Authority Key Identifier:
                keyid:1C:30:22:EA:B7:E6:90:27:FA:70:4A:2C:AB:10:BD:7E:3E:D3:01:CF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/6ead073c-b9f0-4523-b39e-a3c7dab97c25/fba63dff-a873-460d-a7e8-ce4e073bce67.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  142.51.64.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         66:5c:d6:20:cf:e3:b9:18:1f:a7:c2:a5:03:3e:57:b9:ce:56:
         e7:2f:c4:b5:a3:82:59:13:43:6f:c4:44:39:6f:a7:30:58:9b:
         29:08:c5:be:3a:ec:14:31:ef:06:56:3a:27:35:d1:47:fe:26:
         5e:fb:1b:4e:8b:96:78:66:04:45:96:13:be:20:d2:bc:f8:77:
         f7:40:2d:99:c5:a5:72:e7:02:76:c0:ed:f2:95:68:10:b5:70:
         52:94:f6:c1:fc:db:54:fa:76:3f:59:d3:ff:11:e5:0b:6e:b8:
         6c:bc:e3:30:04:21:00:05:cd:e4:4c:fd:68:b3:d5:90:67:6c:
         87:ac:3c:50:f5:73:33:cd:00:de:a3:e0:dd:6b:eb:6d:8d:ae:
         04:8a:5d:a6:43:89:2d:eb:03:9f:69:cb:70:29:4c:01:ac:be:
         64:66:7f:23:80:a6:8b:66:be:30:0b:36:13:c3:92:82:cb:00:
         ac:0e:d3:04:4a:22:d2:59:54:7d:13:18:d3:df:cb:53:c4:6b:
         b8:a4:94:93:aa:9f:7c:62:c2:b6:4a:eb:21:1b:d7:20:e4:e1:
         6a:2b:d5:d1:fc:2e:d3:40:69:76:bd:f5:35:22:3a:ae:67:ca:
         a1:4b:71:96:a2:9a:d5:6d:b0:3e:6e:1c:d6:5a:d8:55:92:7a:
         eb:f2:00:58
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdltZE4nZ8gRl6EAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZmJhNjNkZmYtYTg3My00NjBkLWE3ZTgtY2U0ZTA3M2Jj
ZTY3MB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NjFkM2U3NTYtMDc1ZC00N2JmLThhYzgtZTUzMjkzMDc3YjUyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wNeTFPNN7mQSGIBssKXgnLnOoN6rUQfGpqH
pr/NxH2YvzRskEj1H+mqF/5iXvocSqFXNnry5Jq55jeLWbqxrk+aDPA9HYRhtUhx
FXjrLD2tgEkASMUHFduL/f3Nx6l52w9cq8pDZCXdUsa98Wk1onj9RspPTkhVwQup
yeLfAwg8NFy4HUTqvmGvi48vHsk668qbypI0nBhEc58NylEgJC2UV7HmDFsh8Q56
PFYannTRoca4g9anD9l6XITtm38GjqAkNM6RU/LdXTV0eIOJWJ4nt5/XdgOPXqZk
Q8jNNNXfLyjKEqkZG53sdRFRe0N00Iei7UM3xHvQTDT+MpcDWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFDhHZaKF60Q+d10/pd2o4xOZoQDRMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUyMy1iMzllLWEzYzdkYWI5N2MyNS9mYmE2
M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRlMDczYmNlNjcvYTZiZGIyYTUtM2UxMS0z
NzAwLTg5NWMtNTZhZThkM2FhNTRiLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy82ZWFkMDczYy1i
OWYwLTQ1MjMtYjM5ZS1hM2M3ZGFiOTdjMjUvZmJhNjNkZmYtYTg3My00NjBkLWE3
ZTgtY2U0ZTA3M2JjZTY3L2ZiYTYzZGZmLWE4NzMtNDYwZC1hN2U4LWNlNGUwNzNi
Y2U2Ny5jcmwwHwYDVR0jBBgwFoAUHDAi6rfmkCf6cEosqxC9fj7TAc8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzZlYWQwNzNjLWI5ZjAtNDUy
My1iMzllLWEzYzdkYWI5N2MyNS9mYmE2M2RmZi1hODczLTQ2MGQtYTdlOC1jZTRl
MDczYmNlNjcuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQGjjNAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAGZc1iDP47kYH6fCpQM+V7nOVucvxLWjglkTQ2/ERDlvpzBYmykIxb46
7BQx7wZWOic10Uf+Jl77G06LlnhmBEWWE74g0rz4d/dALZnFpXLnAnbA7fKVaBC1
cFKU9sH821T6dj9Z0/8R5QtuuGy84zAEIQAFzeRM/Wiz1ZBnbIesPFD1czPNAN6j
4N1r622NrgSKXaZDiS3rA59py3ApTAGsvmRmfyOApotmvjALNhPDkoLLAKwO0wRK
ItJZVH0TGNPfy1PEa7iklJOqn3xiwrZK6yEb1yDk4Wor1dH8LtNAaXa99TUiOq5n
yqFLcZaimtVtsD5uHNZa2FWSeuvyAFg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 20:56:59 2025 by rpki-client