Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa
File:                     dc913485-8767-3b25-8568-4c55b066f3b7.roa (raw, json)
Hash identifier:          pBaEtSgUWjTi9M4NofO4pUwuBry/PGjLuOdgk9wNwJA=
Subject key identifier:   FF:1B:00:53:BD:4C:1A:57:F0:4A:82:7A:17:E5:2E:9D:B2:9E:20:AC
Certificate issuer:       /CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
Certificate serial:       010D0C9F4328584AC87635728E10B7548AE79400
Authority key identifier: C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa
Signing time:             Fri 08 Aug 2025 01:00:33 +0000
ROA not before:           Fri 08 Aug 2025 01:00:33 +0000
ROA not after:            Thu 06 Nov 2025 02:00:33 +0000
asID:                     0
IP address blocks:        206.53.203.0/24 maxlen: 24
                          2606:a980:0:8::/64 maxlen: 64
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c8:76:35:72:8e:10:b7:54:8a:e7:94:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2bdaa217-f00f-46c5-a102-e5ff2acb105b
        Validity
            Not Before: Aug  8 01:00:33 2025 GMT
            Not After : Nov  6 02:00:33 2025 GMT
        Subject: CN=53561dae-f78c-4b56-a012-264d40b5e1cd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:e4:93:98:22:12:b0:b4:7f:61:37:a3:36:c2:
                    fb:ce:b1:ff:2d:39:a8:be:ca:11:54:dd:ae:9a:de:
                    4e:52:7d:92:2f:7e:4a:a8:89:a9:a9:a0:4a:e0:a6:
                    6b:91:e9:f1:50:06:b4:c1:a9:24:f1:fc:c6:9a:b8:
                    46:38:16:6b:e1:ad:8f:d0:e8:a0:de:9f:ac:7f:56:
                    3f:46:55:cf:0d:6e:01:a8:2e:7a:57:b3:26:fd:53:
                    1f:1b:f2:39:77:1f:97:0d:59:7a:e8:79:d4:2d:97:
                    c6:a7:7c:b6:75:fc:b7:59:70:7f:90:76:61:f4:2f:
                    50:84:11:3b:21:ea:8e:45:73:54:12:4a:36:05:d8:
                    72:1b:af:94:d0:e2:75:55:92:a3:6c:a7:d8:24:87:
                    d7:eb:ca:6e:2a:ab:03:dc:2e:1d:2b:1d:9d:58:21:
                    0a:99:c8:38:54:c5:a3:86:77:26:2a:31:53:64:3f:
                    12:c3:12:32:cb:71:51:64:be:ea:c5:20:fa:0a:71:
                    27:93:ac:01:e4:cb:c2:ff:ff:4f:9e:67:93:77:af:
                    06:31:5f:72:f4:44:33:f3:e4:50:d1:21:89:c7:d3:
                    6a:8b:88:b3:3e:ff:aa:b3:79:84:82:5c:f7:f4:42:
                    b1:8e:2f:93:a2:21:72:82:9c:3f:7b:c8:09:c8:08:
                    fe:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:1B:00:53:BD:4C:1A:57:F0:4A:82:7A:17:E5:2E:9D:B2:9E:20:AC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/dc913485-8767-3b25-8568-4c55b066f3b7.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b/2bdaa217-f00f-46c5-a102-e5ff2acb105b.crl

            X509v3 Authority Key Identifier:
                keyid:C0:88:D3:59:8E:C0:4C:E4:97:77:88:B7:37:9D:8F:BB:3D:E9:1E:A3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/2bdaa217-f00f-46c5-a102-e5ff2acb105b.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.53.203.0/24
                IPv6:
                  2606:a980:0:8::/64

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         1f:fc:3f:d2:0b:6b:42:27:07:70:3d:c5:d2:2e:53:fc:00:f9:
         f2:0e:98:ec:23:d7:05:6d:d7:4f:eb:ec:2c:35:8c:b6:3a:97:
         09:00:1a:ec:75:52:f7:71:7d:bb:b3:b7:ec:c6:b2:b2:23:39:
         02:1d:6f:4b:15:a5:7c:97:97:e8:e4:ec:18:e8:bf:ae:0b:5e:
         b6:a6:2e:e5:d1:cc:8a:9f:9e:d4:b2:c8:42:12:c2:1d:63:aa:
         d5:f3:47:2b:01:a5:24:c5:61:ec:c7:1a:2f:38:61:57:21:ea:
         1a:ad:da:f0:20:29:f8:e7:9c:e6:a5:d7:c8:f9:a5:cb:20:94:
         b6:42:0d:db:21:6a:c9:3a:08:2b:56:7a:7d:a1:96:6c:14:68:
         c2:cc:77:dd:27:23:51:77:73:55:f3:44:82:c1:fe:0c:33:6f:
         e6:e0:4e:be:ed:f2:5e:ce:43:a7:eb:9d:7e:e9:de:30:e3:a5:
         3d:00:8b:89:54:e0:b5:ea:46:c7:4d:6e:61:98:2f:28:bd:5a:
         0c:ef:30:94:2b:01:da:56:d8:1e:2a:6a:b1:a4:17:34:ab:3c:
         c6:00:c0:9d:73:c2:57:83:0d:c9:79:a5:dc:67:70:4f:93:9c:
         a9:13:6c:ac:22:f4:c0:94:5f:d2:ae:32:f8:35:b7:11:c2:30:
         23:ed:80:33
-----BEGIN CERTIFICATE-----
MIIGVjCCBT6gAwIBAgIUAQ0Mn0MoWErIdjVyjhC3VIrnlAAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMmJkYWEyMTctZjAwZi00NmM1LWExMDItZTVmZjJhY2Ix
MDViMB4XDTI1MDgwODAxMDAzM1oXDTI1MTEwNjAyMDAzM1owLzEtMCsGA1UEAxMk
NTM1NjFkYWUtZjc4Yy00YjU2LWEwMTItMjY0ZDQwYjVlMWNkMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6OSTmCISsLR/YTejNsL7zrH/LTmovsoRVN2u
mt5OUn2SL35KqImpqaBK4KZrkenxUAa0wakk8fzGmrhGOBZr4a2P0Oig3p+sf1Y/
RlXPDW4BqC56V7Mm/VMfG/I5dx+XDVl66HnULZfGp3y2dfy3WXB/kHZh9C9QhBE7
IeqORXNUEko2BdhyG6+U0OJ1VZKjbKfYJIfX68puKqsD3C4dKx2dWCEKmcg4VMWj
hncmKjFTZD8SwxIyy3FRZL7qxSD6CnEnk6wB5MvC//9PnmeTd68GMV9y9EQz8+RQ
0SGJx9Nqi4izPv+qs3mEglz39EKxji+ToiFygpw/e8gJyAj+KQIDAQABo4IDaDCC
A2QwHQYDVR0OBBYEFP8bAFO9TBpX8EqCehflLp2yniCsMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRh
YTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZmMmFjYjEwNWIvZGM5MTM0ODUtODc2Ny0z
YjI1LTg1NjgtNGM1NWIwNjZmM2I3LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMmJkYWEyMTctZjAwZi00NmM1LWEx
MDItZTVmZjJhY2IxMDViLzJiZGFhMjE3LWYwMGYtNDZjNS1hMTAyLWU1ZmYyYWNi
MTA1Yi5jcmwwHwYDVR0jBBgwFoAUwIjTWY7ATOSXd4i3N52Puz3pHqMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8yYmRhYTIxNy1mMDBmLTQ2YzUtYTEwMi1lNWZm
MmFjYjEwNWIuY2VyMDIGCCsGAQUFBwEHAQH/BCMwITAMBAIAATAGAwQAzjXLMBEE
AgACMAsDCQAmBqmAAAAACDBUBgNVHSABAf8ESjBIMEYGCCsGAQUFBw4CMDowOAYI
KwYBBQUHAgEWLGh0dHBzOi8vd3d3LmFyaW4ubmV0L3Jlc291cmNlcy9ycGtpL2Nw
cy5odG1sMA0GCSqGSIb3DQEBCwUAA4IBAQAf/D/SC2tCJwdwPcXSLlP8APnyDpjs
I9cFbddP6+wsNYy2OpcJABrsdVL3cX27s7fsxrKyIzkCHW9LFaV8l5fo5OwY6L+u
C162pi7l0cyKn57UsshCEsIdY6rV80crAaUkxWHsxxovOGFXIeoardrwICn455zm
pdfI+aXLIJS2Qg3bIWrJOggrVnp9oZZsFGjCzHfdJyNRd3NV80SCwf4MM2/m4E6+
7fJezkOn651+6d4w46U9AIuJVOC16kbHTW5hmC8ovVoM7zCUKwHaVtgeKmqxpBc0
qzzGAMCdc8JXgw3JeaXcZ3BPk5ypE2ysIvTAlF/SrjL4NbcRwjAj7YAz
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:14:41 2025 by rpki-client