Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa
File:                     30080fb1-8249-3050-a148-3950aec84e9f.roa (raw, json)
Hash identifier:          MRMUXy4jOH1yArQjLqd/ae2cLaTnZw26k8rBfo0Rb00=
Subject key identifier:   3E:D8:19:EB:1A:32:A7:07:F1:D7:4D:81:92:97:7A:8C:65:88:DA:7F
Certificate issuer:       /CN=e201ba8b-eda4-4920-948d-160d561b0e16
Certificate serial:       010D0C9F4328584A53359A5B23CD10808CCBAAC0
Authority key identifier: 65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa
Signing time:             Fri 27 Jun 2025 01:00:50 +0000
ROA not before:           Fri 27 Jun 2025 01:00:50 +0000
ROA not after:            Thu 25 Sep 2025 01:00:50 +0000
asID:                     979
IP address blocks:        67.203.11.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 19:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:53:35:9a:5b:23:cd:10:80:8c:cb:aa:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e201ba8b-eda4-4920-948d-160d561b0e16
        Validity
            Not Before: Jun 27 01:00:50 2025 GMT
            Not After : Sep 25 01:00:50 2025 GMT
        Subject: CN=4192ec8e-67f2-4bcd-88a3-5de1fdc7e9a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:f8:7e:90:72:15:81:a9:66:3a:32:d6:b0:57:
                    16:a8:4a:f5:ad:da:dd:c6:47:96:89:f1:85:b6:fd:
                    e3:67:1a:e2:67:aa:ab:45:ed:cc:5e:24:31:7f:59:
                    e3:c5:c2:46:68:6f:13:51:0a:3c:fa:55:c6:b5:0c:
                    8e:9b:bc:9c:f3:5b:91:ca:5f:11:2e:22:11:91:b1:
                    db:70:70:bd:6f:b9:ba:9e:cf:0c:c9:dc:cf:5f:db:
                    c9:7c:7a:06:f6:85:82:13:fa:5a:54:38:3c:c7:8b:
                    1b:92:94:43:88:c9:cf:71:50:32:bf:57:c0:80:48:
                    66:c0:c0:19:90:f8:f6:9e:e7:05:77:fd:49:ba:ff:
                    ca:27:b3:90:65:45:91:d4:ad:39:03:63:c2:fd:ba:
                    32:24:8a:ef:9b:86:2b:cb:ec:4a:d5:48:6f:43:e5:
                    57:82:64:c8:d4:2c:f0:39:b9:3d:73:ea:21:b8:0c:
                    11:95:fb:b1:99:03:db:62:28:43:6f:26:0e:d5:fc:
                    91:3c:b4:af:d5:a9:2e:ad:24:55:10:74:49:b3:a1:
                    00:3b:88:46:28:1a:82:33:5d:9a:23:6b:05:48:07:
                    67:9a:b6:0f:8a:35:28:b8:fe:b3:e6:41:f8:de:f9:
                    75:74:8c:99:82:69:f6:2b:bf:21:cd:20:7e:e8:a7:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D8:19:EB:1A:32:A7:07:F1:D7:4D:81:92:97:7A:8C:65:88:DA:7F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/30080fb1-8249-3050-a148-3950aec84e9f.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16/e201ba8b-eda4-4920-948d-160d561b0e16.crl

            X509v3 Authority Key Identifier:
                keyid:65:5C:A0:CC:A8:91:02:3F:C5:0B:C6:8B:1C:3F:67:D8:50:01:70:84

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e201ba8b-eda4-4920-948d-160d561b0e16.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  67.203.11.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         a9:bd:83:a6:73:d2:79:d1:27:5a:c5:84:81:70:e6:10:83:83:
         3a:4c:6d:e0:f7:9e:21:6e:10:5c:89:78:15:93:78:13:e4:8e:
         fe:47:db:c4:58:3b:a4:3d:53:45:c6:ec:e8:23:06:75:e0:d0:
         00:46:80:4d:01:03:2d:75:7a:0a:36:69:2b:20:80:92:3b:5a:
         b8:a6:49:f0:72:4f:0a:66:82:b3:a7:1e:e2:f8:f9:26:71:39:
         d7:a5:ef:12:32:c6:4c:45:bf:72:c9:3e:37:e0:da:c0:6e:a3:
         dc:c0:2b:13:97:c4:88:bc:2d:fc:c6:d0:66:64:e7:8e:52:30:
         0e:2f:b8:3e:0a:21:8f:05:1f:2b:1f:2b:1b:b5:ff:26:21:5c:
         97:4e:2a:48:29:c1:d6:ef:97:47:4b:24:07:9b:2c:54:78:54:
         6f:4a:cb:0b:65:2c:cb:f7:fa:71:b3:33:b5:de:a2:ed:cd:c4:
         87:79:ae:52:41:57:9f:53:07:59:96:a5:9f:01:05:cc:de:e7:
         3e:8a:cb:84:56:bf:7f:ec:c6:0e:59:ac:e8:b1:12:c8:cd:43:
         a6:5e:b1:c4:9f:62:52:c0:97:b7:e9:86:89:11:43:ab:56:da:
         1b:e1:9d:96:6a:59:54:78:10:bc:0f:70:6b:9c:54:0e:5f:06:
         30:c8:d8:85
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpTNZpbI80QgIzLqsAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTIwMWJhOGItZWRhNC00OTIwLTk0OGQtMTYwZDU2MWIw
ZTE2MB4XDTI1MDYyNzAxMDA1MFoXDTI1MDkyNTAxMDA1MFowLzEtMCsGA1UEAxMk
NDE5MmVjOGUtNjdmMi00YmNkLTg4YTMtNWRlMWZkYzdlOWEzMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlfh+kHIVgalmOjLWsFcWqEr1rdrdxkeWifGF
tv3jZxriZ6qrRe3MXiQxf1njxcJGaG8TUQo8+lXGtQyOm7yc81uRyl8RLiIRkbHb
cHC9b7m6ns8MydzPX9vJfHoG9oWCE/paVDg8x4sbkpRDiMnPcVAyv1fAgEhmwMAZ
kPj2nucFd/1Juv/KJ7OQZUWR1K05A2PC/boyJIrvm4Yry+xK1UhvQ+VXgmTI1Czw
Obk9c+ohuAwRlfuxmQPbYihDbyYO1fyRPLSv1akurSRVEHRJs6EAO4hGKBqCM12a
I2sFSAdnmrYPijUouP6z5kH43vl1dIyZgmn2K78hzSB+6KcnbwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD7YGesaMqcH8ddNgZKXeoxliNp/MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAx
YmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBkNTYxYjBlMTYvMzAwODBmYjEtODI0OS0z
MDUwLWExNDgtMzk1MGFlYzg0ZTlmLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTIwMWJhOGItZWRhNC00OTIwLTk0
OGQtMTYwZDU2MWIwZTE2L2UyMDFiYThiLWVkYTQtNDkyMC05NDhkLTE2MGQ1NjFi
MGUxNi5jcmwwHwYDVR0jBBgwFoAUZVygzKiRAj/FC8aLHD9n2FABcIQwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lMjAxYmE4Yi1lZGE0LTQ5MjAtOTQ4ZC0xNjBk
NTYxYjBlMTYuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQ8sLMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAKm9g6Zz0nnRJ1rFhIFw5hCDgzpMbeD3niFuEFyJeBWTeBPkjv5H28RY
O6Q9U0XG7OgjBnXg0ABGgE0BAy11ego2aSsggJI7WrimSfByTwpmgrOnHuL4+SZx
Odel7xIyxkxFv3LJPjfg2sBuo9zAKxOXxIi8LfzG0GZk545SMA4vuD4KIY8FHysf
Kxu1/yYhXJdOKkgpwdbvl0dLJAebLFR4VG9KywtlLMv3+nGzM7Xeou3NxId5rlJB
V59TB1mWpZ8BBcze5z6Ky4RWv3/sxg5ZrOixEsjNQ6ZescSfYlLAl7fphokRQ6tW
2hvhnZZqWVR4ELwPcGucVA5fBjDI2IU=
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:27:46 2025 by rpki-client