Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
File:                     c4f8707e-8024-3449-9a43-a9af164495b9.roa (raw, json)
Hash identifier:          e7OpVBr+YwvoTfkHEV+/KWnWUbDDHRQCFIM7/5m7UPg=
Subject key identifier:   71:69:34:E3:77:52:4B:84:AF:64:29:78:7F:D4:AE:C5:F7:DC:83:41
Certificate issuer:       /CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
Certificate serial:       010D0C9F4328584AE46121DE247E586BA688A900
Authority key identifier: D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa
Signing time:             Mon 18 Aug 2025 01:00:33 +0000
ROA not before:           Mon 18 Aug 2025 01:00:33 +0000
ROA not after:            Sun 16 Nov 2025 02:00:33 +0000
asID:                     57043
IP address blocks:        208.67.106.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 26 Aug 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e4:61:21:de:24:7e:58:6b:a6:88:a9:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455a97ae-df4e-49bc-9f76-ff025a5c25e8
        Validity
            Not Before: Aug 18 01:00:33 2025 GMT
            Not After : Nov 16 02:00:33 2025 GMT
        Subject: CN=7b6d5f9e-90c9-48c1-9ac9-f492d502bc94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:59:83:fc:9f:17:54:d7:52:f2:40:3d:ab:ce:
                    dc:4a:75:0f:e9:9a:c2:5c:76:29:16:26:da:5a:44:
                    54:52:60:3d:8b:c2:90:3e:88:0c:3c:10:cc:70:af:
                    83:04:77:d5:24:ab:07:d0:b6:d2:98:48:77:2f:fe:
                    36:30:4d:d9:ae:88:24:92:0b:90:3d:41:3c:36:f7:
                    98:53:4f:c1:c5:35:8c:f1:4a:eb:b1:f5:11:0b:e9:
                    85:70:f0:f5:3d:80:55:f6:01:d1:4a:95:f0:6b:96:
                    3a:37:09:14:75:30:24:85:92:59:c5:9f:de:96:de:
                    8e:c8:d6:8d:a9:7c:a5:81:5e:db:82:9e:ea:d6:fb:
                    c7:56:fd:f8:54:55:7b:bf:df:84:e6:4a:65:28:fc:
                    b7:5b:15:00:02:67:02:f2:6d:1a:22:05:c3:54:4c:
                    89:cb:66:ec:d6:b9:d2:74:d5:03:06:c5:8b:1a:c7:
                    77:3e:f4:36:77:24:8e:5b:45:66:ab:cb:fa:a6:95:
                    30:41:5f:3f:a7:b9:1a:7d:ec:08:87:87:20:01:15:
                    b5:07:2c:c8:df:32:6d:39:ea:04:29:64:e7:2c:9a:
                    5b:2e:59:16:9c:e1:6d:0c:e0:0a:61:4a:4a:0a:d6:
                    e9:94:1d:5b:90:62:74:cd:c1:8a:eb:e4:10:a2:08:
                    42:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:69:34:E3:77:52:4B:84:AF:64:29:78:7F:D4:AE:C5:F7:DC:83:41
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/c4f8707e-8024-3449-9a43-a9af164495b9.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.crl

            X509v3 Authority Key Identifier:
                keyid:D6:AE:8D:6E:B8:CE:58:71:FF:93:91:94:4E:95:35:C4:27:93:B9:4E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/455a97ae-df4e-49bc-9f76-ff025a5c25e8.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.67.106.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2b:7f:2e:f8:f9:12:a1:34:66:26:38:8e:08:f3:35:89:07:26:
         32:06:21:ff:93:a8:e2:dd:78:59:c5:35:f8:60:d8:f9:ee:cc:
         1f:92:36:7e:d0:47:2b:b6:68:9c:b9:25:ee:7f:a2:e8:4d:3c:
         22:e0:a5:32:8b:5e:c3:54:17:67:06:2d:42:2c:46:9c:a5:1f:
         5d:db:f8:69:4e:36:0e:70:39:54:17:d2:76:f3:3a:06:0a:be:
         ca:79:62:0e:da:a3:7b:02:b1:06:89:1c:18:e9:73:2f:62:d7:
         95:b1:f6:45:f8:a7:d7:8c:75:a0:d4:01:2d:e2:53:21:82:48:
         a5:17:09:88:22:fb:79:ca:4f:4d:89:86:d1:b4:67:c9:6f:4f:
         7c:00:cb:38:ac:17:ee:b2:a5:8a:6f:76:03:14:2e:d6:8b:19:
         bd:9f:67:a3:54:13:71:f3:ce:d8:52:4e:57:ae:47:25:36:f8:
         f3:ee:d3:b5:1e:09:3b:8b:7e:40:fd:ce:e2:fc:9e:d8:d3:ce:
         31:66:3e:e2:09:fb:93:75:a6:18:73:3f:d9:d3:84:17:37:57:
         1b:21:4a:d2:b8:eb:dc:00:61:32:4a:23:64:d2:c9:88:18:5d:
         c5:b3:37:82:f8:a3:4e:49:c6:72:7e:71:4a:78:ae:af:0d:1f:
         71:76:8e:91
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErkYSHeJH5Ya6aIqQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNDU1YTk3YWUtZGY0ZS00OWJjLTlmNzYtZmYwMjVhNWMy
NWU4MB4XDTI1MDgxODAxMDAzM1oXDTI1MTExNjAyMDAzM1owLzEtMCsGA1UEAxMk
N2I2ZDVmOWUtOTBjOS00OGMxLTlhYzktZjQ5MmQ1MDJiYzk0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiFmD/J8XVNdS8kA9q87cSnUP6ZrCXHYpFiba
WkRUUmA9i8KQPogMPBDMcK+DBHfVJKsH0LbSmEh3L/42ME3ZrogkkguQPUE8NveY
U0/BxTWM8UrrsfURC+mFcPD1PYBV9gHRSpXwa5Y6NwkUdTAkhZJZxZ/elt6OyNaN
qXylgV7bgp7q1vvHVv34VFV7v9+E5kplKPy3WxUAAmcC8m0aIgXDVEyJy2bs1rnS
dNUDBsWLGsd3PvQ2dySOW0Vmq8v6ppUwQV8/p7kafewIh4cgARW1ByzI3zJtOeoE
KWTnLJpbLlkWnOFtDOAKYUpKCtbplB1bkGJ0zcGK6+QQoghCTwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHFpNON3UkuEr2QpeH/UrsX33INBMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC80NTVh
OTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAyNWE1YzI1ZTgvYzRmODcwN2UtODAyNC0z
NDQ5LTlhNDMtYTlhZjE2NDQ5NWI5LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNDU1YTk3YWUtZGY0ZS00OWJjLTlm
NzYtZmYwMjVhNWMyNWU4LzQ1NWE5N2FlLWRmNGUtNDliYy05Zjc2LWZmMDI1YTVj
MjVlOC5jcmwwHwYDVR0jBBgwFoAU1q6NbrjOWHH/k5GUTpU1xCeTuU4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC80NTVhOTdhZS1kZjRlLTQ5YmMtOWY3Ni1mZjAy
NWE1YzI1ZTguY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0ENqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACt/Lvj5EqE0ZiY4jgjzNYkHJjIGIf+TqOLdeFnFNfhg2PnuzB+SNn7Q
Ryu2aJy5Je5/ouhNPCLgpTKLXsNUF2cGLUIsRpylH13b+GlONg5wOVQX0nbzOgYK
vsp5Yg7ao3sCsQaJHBjpcy9i15Wx9kX4p9eMdaDUAS3iUyGCSKUXCYgi+3nKT02J
htG0Z8lvT3wAyzisF+6ypYpvdgMULtaLGb2fZ6NUE3HzzthSTleuRyU2+PPu07Ue
CTuLfkD9zuL8ntjTzjFmPuIJ+5N1phhzP9nThBc3VxshStK469wAYTJKI2TSyYgY
XcWzN4L4o05JxnJ+cUp4rq8NH3F2jpE=
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:59:13 2025 by rpki-client