Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa
File:                     d7c63332-3eef-31f9-965b-5da1881f7e18.roa (raw, json)
Hash identifier:          x1pmczcdF2Dz99UZ9ETnI6PnwsYiWI0zRwwciDOkEe4=
Subject key identifier:   C1:8C:EA:2D:A5:00:8A:D9:D1:A5:21:89:C2:B9:66:93:4B:58:24:ED
Certificate issuer:       /CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
Certificate serial:       010D0C9F4328584A43DAFE811E944F4582B9A100
Authority key identifier: 8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa
Signing time:             Sat 21 Jun 2025 13:01:03 +0000
ROA not before:           Sat 21 Jun 2025 13:01:03 +0000
ROA not after:            Fri 19 Sep 2025 13:01:03 +0000
asID:                     26057
IP address blocks:        168.238.4.0/24 maxlen: 24
                          168.238.5.0/24 maxlen: 24
                          168.238.6.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 06:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:43:da:fe:81:1e:94:4f:45:82:b9:a1:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e7ade0d6-df84-4816-a5cf-cf568498fce9
        Validity
            Not Before: Jun 21 13:01:03 2025 GMT
            Not After : Sep 19 13:01:03 2025 GMT
        Subject: CN=d8072632-be09-4e5b-a669-d77efb99a5de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f5:cd:21:fa:ea:f7:3f:8f:75:65:58:1d:bb:
                    0f:e4:5d:25:bc:d5:ee:8a:32:44:52:8f:0b:39:8b:
                    33:4c:90:9b:33:a4:d6:c0:ac:d6:12:e0:6d:39:28:
                    33:94:d5:ec:15:07:aa:eb:48:0a:03:49:22:54:8f:
                    e6:1a:5d:b9:64:54:cb:3b:6d:33:b2:23:71:1c:c0:
                    7e:f5:79:6e:8f:e9:60:a2:55:42:86:6a:3c:b9:c0:
                    57:2b:7e:c6:b1:d1:53:d1:aa:b7:af:b1:ed:d8:06:
                    3d:2d:32:83:68:5b:3b:a6:36:80:a2:c1:2d:fe:8c:
                    2d:ee:b1:57:2d:69:5a:77:9e:85:db:ee:ca:70:18:
                    84:80:1f:fb:95:35:6f:20:e6:95:31:e8:d7:23:84:
                    cc:57:bd:be:52:36:97:81:03:77:5b:f7:04:8e:60:
                    25:26:f4:8f:c8:89:a5:86:aa:a5:cf:22:8a:4b:8d:
                    29:d8:79:07:75:86:13:0c:28:70:65:0e:57:ae:0a:
                    17:36:6a:b9:ea:ef:69:d3:1a:fe:ce:da:f5:4f:cd:
                    69:6b:09:3c:21:66:02:63:b2:b4:4e:f5:5c:95:6f:
                    5a:fa:69:e0:1e:29:98:18:02:0e:ee:55:e2:75:d5:
                    90:e4:25:d6:37:2b:d3:a7:97:41:82:f1:10:0d:99:
                    fe:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:8C:EA:2D:A5:00:8A:D9:D1:A5:21:89:C2:B9:66:93:4B:58:24:ED
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/d7c63332-3eef-31f9-965b-5da1881f7e18.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9/e7ade0d6-df84-4816-a5cf-cf568498fce9.crl

            X509v3 Authority Key Identifier:
                keyid:8A:A8:CE:31:8E:6C:68:6F:13:B2:21:E5:F7:8D:49:0F:E7:6E:89:AF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e7ade0d6-df84-4816-a5cf-cf568498fce9.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.238.4.0-168.238.6.255

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         82:52:9a:c0:f3:e2:b4:c6:bd:9e:51:ad:99:67:85:c4:e1:bc:
         9e:23:41:9a:30:18:35:f9:5e:d4:c7:ba:dc:f6:d2:a6:10:17:
         b9:2a:de:fa:6b:b2:c8:2b:bf:32:0e:01:4a:76:ec:2e:2c:55:
         96:76:e4:6e:3a:76:47:fb:24:c8:5c:44:89:b0:4c:a5:43:d0:
         0b:0a:13:ad:2b:c8:f3:b9:64:78:89:46:41:63:0c:ae:0c:6f:
         8c:59:05:0a:dd:29:5e:02:6a:67:a4:d6:9e:45:cd:71:eb:86:
         32:71:54:40:ec:e5:a7:fd:63:21:e3:a1:74:ba:f9:17:19:37:
         08:72:33:3a:62:bb:56:c0:ff:1f:36:ef:d3:61:48:1e:2c:96:
         b9:61:e4:9f:47:13:7a:b0:44:2e:08:5c:1e:5b:b8:0a:fb:94:
         ef:ce:59:e2:d1:1a:15:e5:c4:ab:c6:67:9d:e9:13:c1:c2:21:
         28:77:6e:26:ac:fa:68:ff:32:db:d3:70:cc:60:16:c2:6d:fd:
         0f:08:6e:1c:1f:0f:af:71:aa:b8:40:56:33:4a:b9:32:4b:4c:
         3b:cb:ca:66:a7:62:2d:bf:37:eb:3b:8e:86:75:2d:dc:9c:6e:
         b6:33:51:74:b7:10:e6:42:67:2c:62:98:36:88:22:0d:2e:c6:
         2d:85:22:8a
-----BEGIN CERTIFICATE-----
MIIGSzCCBTOgAwIBAgIUAQ0Mn0MoWEpD2v6BHpRPRYK5oQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTdhZGUwZDYtZGY4NC00ODE2LWE1Y2YtY2Y1Njg0OThm
Y2U5MB4XDTI1MDYyMTEzMDEwM1oXDTI1MDkxOTEzMDEwM1owLzEtMCsGA1UEAxMk
ZDgwNzI2MzItYmUwOS00ZTViLWE2NjktZDc3ZWZiOTlhNWRlMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApvXNIfrq9z+PdWVYHbsP5F0lvNXuijJEUo8L
OYszTJCbM6TWwKzWEuBtOSgzlNXsFQeq60gKA0kiVI/mGl25ZFTLO20zsiNxHMB+
9Xluj+lgolVChmo8ucBXK37GsdFT0aq3r7Ht2AY9LTKDaFs7pjaAosEt/owt7rFX
LWlad56F2+7KcBiEgB/7lTVvIOaVMejXI4TMV72+UjaXgQN3W/cEjmAlJvSPyIml
hqqlzyKKS40p2HkHdYYTDChwZQ5XrgoXNmq56u9p0xr+ztr1T81pawk8IWYCY7K0
TvVclW9a+mngHimYGAIO7lXiddWQ5CXWNyvTp5dBgvEQDZn+uQIDAQABo4IDXTCC
A1kwHQYDVR0OBBYEFMGM6i2lAIrZ0aUhicK5ZpNLWCTtMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lN2Fk
ZTBkNi1kZjg0LTQ4MTYtYTVjZi1jZjU2ODQ5OGZjZTkvZDdjNjMzMzItM2VlZi0z
MWY5LTk2NWItNWRhMTg4MWY3ZTE4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTdhZGUwZDYtZGY4NC00ODE2LWE1
Y2YtY2Y1Njg0OThmY2U5L2U3YWRlMGQ2LWRmODQtNDgxNi1hNWNmLWNmNTY4NDk4
ZmNlOS5jcmwwHwYDVR0jBBgwFoAUiqjOMY5saG8TsiHl941JD+duia8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lN2FkZTBkNi1kZjg0LTQ4MTYtYTVjZi1jZjU2
ODQ5OGZjZTkuY2VyMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAKo7gQD
BACo7gYwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgGCCsGAQUFBwIBFixo
dHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9jcHMuaHRtbDANBgkq
hkiG9w0BAQsFAAOCAQEAglKawPPitMa9nlGtmWeFxOG8niNBmjAYNfle1Me63PbS
phAXuSre+muyyCu/Mg4BSnbsLixVlnbkbjp2R/skyFxEibBMpUPQCwoTrSvI87lk
eIlGQWMMrgxvjFkFCt0pXgJqZ6TWnkXNceuGMnFUQOzlp/1jIeOhdLr5Fxk3CHIz
OmK7VsD/Hzbv02FIHiyWuWHkn0cTerBELghcHlu4CvuU785Z4tEaFeXEq8ZnnekT
wcIhKHduJqz6aP8y29NwzGAWwm39DwhuHB8Pr3GquEBWM0q5MktMO8vKZqdiLb83
6zuOhnUt3JxutjNRdLcQ5kJnLGKYNogiDS7GLYUiig==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:29:59 2025 by rpki-client