Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
File:                     ba13bec1-c34c-3863-b274-69146af12c2e.roa (raw, json)
Hash identifier:          WQKmwsv/4gcfK1AZYxEUfRjm7gjKTdeZYLAx2JP0pwg=
Subject key identifier:   97:3E:48:63:A4:49:D1:C6:5F:3E:07:0B:70:5C:0E:29:1A:0C:8F:B8
Certificate issuer:       /CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
Certificate serial:       010D0C9F4328584AC87659E0510FF379CAC6DA00
Authority key identifier: 79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     14618
IP address blocks:        208.66.42.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/746e0111-fafb-430f-b778-d204cfcd99a8.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:59:e0:51:0f:f3:79:ca:c6:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=e94e7fc3-2169-4676-93fb-fe1a55b9a2b0
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=1adb657c-d75d-4ef1-9d9b-26fcd001ea2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:60:e4:37:fb:9a:62:e1:0c:3f:4a:7d:e5:66:
                    38:d8:a4:84:88:4a:e9:88:5c:aa:4b:57:7c:bb:54:
                    2c:ae:fd:32:8f:5f:57:de:9f:d9:84:f4:59:ab:a1:
                    61:c2:1f:f0:e1:6a:0f:84:2f:d8:89:17:79:3f:0b:
                    89:b2:5d:01:43:29:b7:47:cd:86:5b:87:e7:81:bf:
                    61:32:51:7d:1a:83:ff:23:bb:36:32:47:ab:65:da:
                    eb:c7:50:ad:44:eb:7c:8d:88:70:77:e5:8d:fd:1c:
                    61:46:cd:f9:2b:54:30:41:72:11:52:0c:e7:0d:26:
                    1b:cd:0e:df:eb:8f:17:8f:ad:69:95:08:fd:e3:d3:
                    bd:ff:c9:dd:2d:e6:75:77:59:1e:36:bb:c7:e8:21:
                    32:e7:24:97:04:58:c0:e0:c9:e0:dc:dc:fa:bc:c3:
                    70:53:ea:e9:91:22:1c:d1:cd:ac:da:58:77:da:54:
                    ac:86:fd:55:fb:0e:de:53:78:d1:be:37:62:06:a5:
                    3b:b1:71:b9:4a:51:8d:3f:e1:99:be:8d:9a:8e:2d:
                    0b:08:82:16:8d:1d:a2:12:70:93:7f:29:d7:cb:fd:
                    5e:9f:43:18:fd:15:c5:4f:86:c3:86:94:80:02:9c:
                    2b:b7:9a:f8:7b:0d:5f:29:68:c4:54:b2:86:7c:fd:
                    8d:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3E:48:63:A4:49:D1:C6:5F:3E:07:0B:70:5C:0E:29:1A:0C:8F:B8
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/ba13bec1-c34c-3863-b274-69146af12c2e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.crl

            X509v3 Authority Key Identifier:
                keyid:79:2C:DA:17:2D:29:20:E5:A0:9A:8B:12:C8:AD:5F:57:15:5C:9B:FF

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/746e0111-fafb-430f-b778-d204cfcd99a8/e94e7fc3-2169-4676-93fb-fe1a55b9a2b0.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.66.42.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:82:29:d9:7f:43:4c:87:3b:e1:af:b1:32:b2:d0:91:78:91:
         62:a1:d7:2e:c3:d0:05:02:ab:99:9c:a9:b9:b1:cc:2e:37:32:
         1d:ff:ef:01:e0:2b:d1:49:d9:58:16:61:87:29:08:59:87:d6:
         8e:34:fc:b0:60:0d:c7:2a:aa:f7:ab:d9:e7:4b:0c:eb:b8:db:
         21:a1:3c:55:f3:d5:07:b5:b1:66:f7:bd:01:da:20:aa:48:77:
         5c:58:61:f0:89:be:7c:0b:c9:8f:0f:40:39:fa:13:73:df:30:
         68:14:2c:33:34:7d:d5:e5:2a:91:36:95:15:0c:30:7a:51:a7:
         5e:9e:11:a7:0a:5f:27:80:f2:17:6d:ca:6b:6c:7e:a3:69:6d:
         cd:cb:13:01:2d:5a:5a:39:ab:d7:66:89:c3:a5:ae:5e:e3:66:
         5e:f5:cb:e3:cc:a8:b1:10:b7:c9:30:cc:9b:1e:0b:45:86:63:
         d7:cc:94:37:fd:26:f4:14:ea:f8:fa:21:74:75:e7:7a:1b:ee:
         0c:d1:9a:9c:f7:0c:09:7f:f1:eb:39:83:dc:86:c3:52:61:d4:
         4f:87:b0:7e:e3:06:bf:16:06:96:4c:fa:dc:7d:7e:85:19:2c:
         ad:fd:ce:27:b5:06:94:0b:2b:96:9e:71:33:1d:6c:83:6f:77:
         1b:3c:1b:09
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErIdlngUQ/zecrG2gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZTk0ZTdmYzMtMjE2OS00Njc2LTkzZmItZmUxYTU1Yjlh
MmIwMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
MWFkYjY1N2MtZDc1ZC00ZWYxLTlkOWItMjZmY2QwMDFlYTJmMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA72DkN/uaYuEMP0p95WY42KSEiErpiFyqS1d8
u1Qsrv0yj19X3p/ZhPRZq6Fhwh/w4WoPhC/YiRd5PwuJsl0BQym3R82GW4fngb9h
MlF9GoP/I7s2MkerZdrrx1CtROt8jYhwd+WN/RxhRs35K1QwQXIRUgznDSYbzQ7f
648Xj61plQj949O9/8ndLeZ1d1keNrvH6CEy5ySXBFjA4Mng3Nz6vMNwU+rpkSIc
0c2s2lh32lSshv1V+w7eU3jRvjdiBqU7sXG5SlGNP+GZvo2aji0LCIIWjR2iEnCT
fynXy/1en0MY/RXFT4bDhpSAApwrt5r4ew1fKWjEVLKGfP2NRwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFJc+SGOkSdHGXz4HC3BcDikaDI+4MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc0NmUwMTExLWZhZmItNDMwZi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRl
N2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFhNTViOWEyYjAvYmExM2JlYzEtYzM0Yy0z
ODYzLWIyNzQtNjkxNDZhZjEyYzJlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NDZlMDExMS1m
YWZiLTQzMGYtYjc3OC1kMjA0Y2ZjZDk5YTgvZTk0ZTdmYzMtMjE2OS00Njc2LTkz
ZmItZmUxYTU1YjlhMmIwL2U5NGU3ZmMzLTIxNjktNDY3Ni05M2ZiLWZlMWE1NWI5
YTJiMC5jcmwwHwYDVR0jBBgwFoAUeSzaFy0pIOWgmosSyK1fVxVcm/8wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc0NmUwMTExLWZhZmItNDMw
Zi1iNzc4LWQyMDRjZmNkOTlhOC9lOTRlN2ZjMy0yMTY5LTQ2NzYtOTNmYi1mZTFh
NTViOWEyYjAuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA0EIqMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACaCKdl/Q0yHO+GvsTKy0JF4kWKh1y7D0AUCq5mcqbmxzC43Mh3/7wHg
K9FJ2VgWYYcpCFmH1o40/LBgDccqqver2edLDOu42yGhPFXz1Qe1sWb3vQHaIKpI
d1xYYfCJvnwLyY8PQDn6E3PfMGgULDM0fdXlKpE2lRUMMHpRp16eEacKXyeA8hdt
ymtsfqNpbc3LEwEtWlo5q9dmicOlrl7jZl71y+PMqLEQt8kwzJseC0WGY9fMlDf9
JvQU6vj6IXR153ob7gzRmpz3DAl/8es5g9yGw1Jh1E+HsH7jBr8WBpZM+tx9foUZ
LK39zie1BpQLK5aecTMdbINvdxs8Gwk=
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:11:25 2025 by rpki-client