Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1539ab9d-8b6d-3811-8932-6e217fdba5de.roa
File:                     1539ab9d-8b6d-3811-8932-6e217fdba5de.roa (raw, json)
Hash identifier:          r5dJuk7eIAAXuDILnYAOtM1bYvffxb1GlA15zXZEW0c=
Subject key identifier:   70:31:04:72:E5:3D:86:CC:65:8B:FC:7A:C8:9E:4A:F4:DF:C3:E2:78
Certificate issuer:       /CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
Certificate serial:       010D0C9F4328584A119AB17BFEB133E0C9099DC0
Authority key identifier: CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1539ab9d-8b6d-3811-8932-6e217fdba5de.roa
Signing time:             Tue 03 Jun 2025 13:01:03 +0000
ROA not before:           Tue 03 Jun 2025 13:01:03 +0000
ROA not after:            Mon 01 Sep 2025 13:01:03 +0000
asID:                     13213
IP address blocks:        67.213.208.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 03 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:11:9a:b1:7b:fe:b1:33:e0:c9:09:9d:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51407cd8-c830-49e6-9db4-7ddac75eb03f
        Validity
            Not Before: Jun  3 13:01:03 2025 GMT
            Not After : Sep  1 13:01:03 2025 GMT
        Subject: CN=0d2efb1a-1616-4556-a010-63a296a0a3c3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:ae:f9:b7:69:d2:a6:e6:7c:55:ee:dc:4f:17:
                    06:f6:8a:ba:94:ba:dc:ee:b0:3c:05:1e:ac:e6:52:
                    96:5c:cb:1f:04:7c:a1:9f:8d:3a:e3:c8:85:92:da:
                    73:c4:7d:94:08:b3:29:f5:4c:d4:c4:1d:1c:d6:a1:
                    01:eb:5f:a4:ec:87:78:ae:a0:14:3e:19:54:fe:b7:
                    21:4e:03:4c:82:21:48:4d:83:6f:65:54:50:7a:5f:
                    bf:bc:0b:c5:61:39:7e:d6:a8:f3:97:48:f8:fc:db:
                    6a:54:a8:6d:42:ff:69:9a:a9:a4:2a:15:28:cc:00:
                    95:b6:be:94:61:42:43:49:a8:85:00:83:1e:8f:43:
                    e2:de:b2:71:d9:0d:a8:e3:a5:5a:1e:f2:ec:65:bc:
                    54:b3:33:43:8b:73:66:1d:be:13:9a:9b:ae:cc:c1:
                    ff:ef:cd:a1:f8:8b:a8:ba:53:83:c4:f4:1f:75:5b:
                    ed:ed:fe:65:8d:a4:79:0a:30:9f:ca:9e:c5:73:cf:
                    0c:f1:f0:cf:c0:21:c9:4c:97:df:2c:5a:31:b6:ed:
                    09:d6:91:f4:40:e9:5e:db:57:9f:70:7b:b2:10:3e:
                    8f:f4:24:48:ca:6f:a7:1d:ef:a9:99:bb:b2:5a:1e:
                    9b:a2:a0:13:c4:e9:88:a5:a1:aa:68:d1:b2:94:87:
                    20:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:31:04:72:E5:3D:86:CC:65:8B:FC:7A:C8:9E:4A:F4:DF:C3:E2:78
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/1539ab9d-8b6d-3811-8932-6e217fdba5de.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f/51407cd8-c830-49e6-9db4-7ddac75eb03f.crl

            X509v3 Authority Key Identifier:
                keyid:CB:B5:D5:82:48:AA:4D:D8:D6:8A:85:42:03:C4:A9:BB:89:C6:56:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/51407cd8-c830-49e6-9db4-7ddac75eb03f.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.213.208.0/20

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         18:53:08:15:74:26:d5:11:4f:d3:f4:3e:9e:90:16:20:0f:2e:
         ae:a1:0d:f5:ac:06:4b:89:ba:4b:29:32:f5:be:62:be:3e:6a:
         0b:55:7e:b3:bf:09:b5:4f:d6:35:9e:36:a3:93:cc:22:c0:a3:
         f1:fd:4c:cb:70:31:58:a0:dc:4b:c5:17:ab:94:f0:bf:fb:3c:
         cd:4f:c0:5d:c4:5f:3e:21:10:97:33:f1:41:01:70:12:e0:97:
         d2:42:80:72:39:3e:1e:c6:93:e2:47:47:e1:20:17:d1:53:99:
         a7:85:42:2f:77:51:e3:aa:0b:2d:9a:b5:42:d3:5c:50:0a:95:
         1b:43:6f:ad:50:1e:6e:62:68:80:b0:ae:7a:3b:30:6f:5b:15:
         76:73:75:da:3d:52:41:42:c9:a5:c6:b4:1a:44:e4:9c:ee:39:
         b4:e0:db:84:b9:b5:1d:98:33:b3:91:18:53:4a:24:58:e8:84:
         ee:0b:be:d8:2f:2b:43:10:d3:56:e6:26:d6:a6:9e:fb:fb:90:
         14:8b:dd:d6:3c:fb:fd:6e:33:ce:89:20:b6:9f:4f:1e:99:5c:
         ef:5b:dc:8c:71:ff:5b:83:20:d9:ea:47:5f:45:e2:fa:c9:32:
         6e:21:6d:e4:5d:69:0b:ee:fd:18:04:43:b5:54:f1:bc:f2:94:
         28:05:6f:d4
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoRmrF7/rEz4MkJncAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkNTE0MDdjZDgtYzgzMC00OWU2LTlkYjQtN2RkYWM3NWVi
MDNmMB4XDTI1MDYwMzEzMDEwM1oXDTI1MDkwMTEzMDEwM1owLzEtMCsGA1UEAxMk
MGQyZWZiMWEtMTYxNi00NTU2LWEwMTAtNjNhMjk2YTBhM2MzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAja75t2nSpuZ8Ve7cTxcG9oq6lLrc7rA8BR6s
5lKWXMsfBHyhn40648iFktpzxH2UCLMp9UzUxB0c1qEB61+k7Id4rqAUPhlU/rch
TgNMgiFITYNvZVRQel+/vAvFYTl+1qjzl0j4/NtqVKhtQv9pmqmkKhUozACVtr6U
YUJDSaiFAIMej0Pi3rJx2Q2o46VaHvLsZbxUszNDi3NmHb4TmpuuzMH/782h+Iuo
ulODxPQfdVvt7f5ljaR5CjCfyp7Fc88M8fDPwCHJTJffLFoxtu0J1pH0QOle21ef
cHuyED6P9CRIym+nHe+pmbuyWh6boqATxOmIpaGqaNGylIcgPQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFHAxBHLlPYbMZYv8esieSvTfw+J4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC81MTQw
N2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRhYzc1ZWIwM2YvMTUzOWFiOWQtOGI2ZC0z
ODExLTg5MzItNmUyMTdmZGJhNWRlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvNTE0MDdjZDgtYzgzMC00OWU2LTlk
YjQtN2RkYWM3NWViMDNmLzUxNDA3Y2Q4LWM4MzAtNDllNi05ZGI0LTdkZGFjNzVl
YjAzZi5jcmwwHwYDVR0jBBgwFoAUy7XVgkiqTdjWioVCA8Spu4nGVq4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC81MTQwN2NkOC1jODMwLTQ5ZTYtOWRiNC03ZGRh
Yzc1ZWIwM2YuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQEQ9XQMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBABhTCBV0JtURT9P0Pp6QFiAPLq6hDfWsBkuJukspMvW+Yr4+agtVfrO/
CbVP1jWeNqOTzCLAo/H9TMtwMVig3EvFF6uU8L/7PM1PwF3EXz4hEJcz8UEBcBLg
l9JCgHI5Ph7Gk+JHR+EgF9FTmaeFQi93UeOqCy2atULTXFAKlRtDb61QHm5iaICw
rno7MG9bFXZzddo9UkFCyaXGtBpE5JzuObTg24S5tR2YM7ORGFNKJFjohO4Lvtgv
K0MQ01bmJtamnvv7kBSL3dY8+/1uM86JILafTx6ZXO9b3Ixx/1uDINnqR19F4vrJ
Mm4hbeRdaQvu/RgEQ7VU8bzylCgFb9Q=
-----END CERTIFICATE-----
Generated at Tue Jul 1 04:06:50 2025 by rpki-client