Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa
File:                     e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa (raw, json)
Hash identifier:          z9cdBqHTi+cxwGRaoFt4/agbIwFVm1tB1AINL2tmKew=
Subject key identifier:   9C:10:30:E9:C9:1B:30:B5:06:85:BE:DE:6D:91:35:9A:94:A3:72:C2
Certificate issuer:       /CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
Certificate serial:       010D0C9F4328584AC7111E2F6E9A736D99A0DAC0
Authority key identifier: AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa
Signing time:             Thu 07 Aug 2025 13:00:40 +0000
ROA not before:           Thu 07 Aug 2025 13:00:40 +0000
ROA not after:            Wed 05 Nov 2025 14:00:40 +0000
asID:                     20055
IP address blocks:        65.38.48.0/20 maxlen: 20
                          72.35.192.0/20 maxlen: 20
                          216.228.192.0/20 maxlen: 20
                          2607:f248::/32 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:c7:11:1e:2f:6e:9a:73:6d:99:a0:da:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31d3a050-3ee6-45bf-992f-9ac005f3ff84
        Validity
            Not Before: Aug  7 13:00:40 2025 GMT
            Not After : Nov  5 14:00:40 2025 GMT
        Subject: CN=0058446e-d8e2-411e-876a-3ff5710d7074
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:43:c3:26:7d:30:8f:ce:af:81:61:30:e8:f3:
                    44:4b:d6:39:86:bc:93:cb:dd:25:ac:bf:13:90:13:
                    a4:db:4a:07:ab:71:cc:2b:fd:9d:18:3a:d6:f1:d0:
                    67:54:e9:69:f3:08:c5:ce:15:29:42:9f:c5:e5:0b:
                    4c:1b:12:51:04:b6:d3:f8:d6:5f:40:48:eb:86:b8:
                    7d:7e:db:0a:72:ab:92:23:32:65:a4:f1:2b:1b:91:
                    19:67:d3:5c:be:f6:a6:76:bb:03:d8:17:d4:d7:2f:
                    ac:1f:78:46:e1:41:08:3a:78:21:52:ac:ba:45:8f:
                    2f:81:2a:19:1c:46:96:b4:da:34:5d:02:c4:7b:2b:
                    a4:f6:9d:95:b3:be:e0:96:67:e9:37:86:5d:60:ad:
                    45:d8:4b:7a:aa:27:07:81:66:4a:cc:28:85:d3:2d:
                    02:7f:64:57:65:20:d6:59:bc:9e:6d:fb:ed:a5:ad:
                    57:ee:bb:f3:10:0f:8a:7d:ce:28:e4:05:af:b5:ff:
                    a8:9b:03:33:7b:bd:6d:f6:e3:10:2b:4a:67:be:b2:
                    6e:e3:59:4d:41:fa:db:9a:75:ac:6c:80:f8:f0:2d:
                    79:e0:6f:6e:ee:79:5b:86:ed:5f:5c:b7:c1:be:b1:
                    f5:aa:0a:98:74:55:20:2f:7c:f4:89:7e:1b:40:59:
                    be:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:10:30:E9:C9:1B:30:B5:06:85:BE:DE:6D:91:35:9A:94:A3:72:C2
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/e2d0c2f1-83d2-33a4-9bbe-c2858e1936d8.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84/31d3a050-3ee6-45bf-992f-9ac005f3ff84.crl

            X509v3 Authority Key Identifier:
                keyid:AB:00:D1:33:68:0F:2D:4C:58:E5:6F:8B:5D:DC:58:89:20:FE:92:EB

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/31d3a050-3ee6-45bf-992f-9ac005f3ff84.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.38.48.0/20
                  72.35.192.0/20
                  216.228.192.0/20
                IPv6:
                  2607:f248::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0d:88:6d:ce:45:3a:6d:89:cb:d2:a8:43:4d:2d:60:2e:ec:56:
         72:97:69:d3:c2:74:03:85:b7:97:fd:24:ea:ad:67:64:dd:d0:
         e4:dc:56:d2:30:4d:d3:27:fe:7b:f4:c2:42:1d:93:74:85:fe:
         b8:af:4c:e1:43:52:72:6b:23:c6:6b:1d:c3:79:97:05:dc:45:
         5a:57:87:0d:f1:65:a0:e5:69:a9:8b:20:23:53:6b:88:f7:d3:
         02:e7:3f:fb:c7:1a:2e:a8:a4:22:2c:3f:08:44:fe:22:0b:c2:
         f7:c5:d1:a6:2c:4b:e0:48:18:9b:79:d5:14:40:0f:8a:6b:12:
         12:bc:66:d5:26:31:12:70:c5:00:8e:01:6a:0a:48:bf:28:f8:
         4a:89:ad:ae:22:b2:42:c5:72:54:b2:60:cc:5a:88:e0:75:7e:
         0d:6e:02:ac:dc:3d:d2:0c:c8:a6:9a:83:57:91:73:e7:9d:4f:
         69:d1:e3:48:12:46:ee:20:a2:92:4b:95:7e:1a:45:61:e6:28:
         b6:84:e8:f6:85:f4:7a:0f:66:58:dd:dc:d2:b2:de:dc:fb:7c:
         0d:d6:07:f9:80:44:6b:ae:e0:96:f9:04:63:c6:1d:a2:d7:37:
         17:f2:9a:85:b5:e4:cc:3a:e2:68:1a:1a:f5:0a:f2:66:8d:a2:
         f4:a5:a1:88
-----BEGIN CERTIFICATE-----
MIIGXjCCBUagAwIBAgIUAQ0Mn0MoWErHER4vbppzbZmg2sAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMzFkM2EwNTAtM2VlNi00NWJmLTk5MmYtOWFjMDA1ZjNm
Zjg0MB4XDTI1MDgwNzEzMDA0MFoXDTI1MTEwNTE0MDA0MFowLzEtMCsGA1UEAxMk
MDA1ODQ0NmUtZDhlMi00MTFlLTg3NmEtM2ZmNTcxMGQ3MDc0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUPDJn0wj86vgWEw6PNES9Y5hryTy90lrL8T
kBOk20oHq3HMK/2dGDrW8dBnVOlp8wjFzhUpQp/F5QtMGxJRBLbT+NZfQEjrhrh9
ftsKcquSIzJlpPErG5EZZ9NcvvamdrsD2BfU1y+sH3hG4UEIOnghUqy6RY8vgSoZ
HEaWtNo0XQLEeyuk9p2Vs77glmfpN4ZdYK1F2Et6qicHgWZKzCiF0y0Cf2RXZSDW
Wbyebfvtpa1X7rvzEA+Kfc4o5AWvtf+omwMze71t9uMQK0pnvrJu41lNQfrbmnWs
bID48C154G9u7nlbhu1fXLfBvrH1qgqYdFUgL3z0iX4bQFm+uwIDAQABo4IDcDCC
A2wwHQYDVR0OBBYEFJwQMOnJGzC1BoW+3m2RNZqUo3LCMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQz
YTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMwMDVmM2ZmODQvZTJkMGMyZjEtODNkMi0z
M2E0LTliYmUtYzI4NThlMTkzNmQ4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvMzFkM2EwNTAtM2VlNi00NWJmLTk5
MmYtOWFjMDA1ZjNmZjg0LzMxZDNhMDUwLTNlZTYtNDViZi05OTJmLTlhYzAwNWYz
ZmY4NC5jcmwwHwYDVR0jBBgwFoAUqwDRM2gPLUxY5W+LXdxYiSD+kuswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS8zMWQzYTA1MC0zZWU2LTQ1YmYtOTkyZi05YWMw
MDVmM2ZmODQuY2VyMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQEQSYwAwQE
SCPAAwQE2OTAMA0EAgACMAcDBQAmB/JIMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUH
DgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2Vz
L3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQELBQADggEBAA2Ibc5FOm2Jy9KoQ00t
YC7sVnKXadPCdAOFt5f9JOqtZ2Td0OTcVtIwTdMn/nv0wkIdk3SF/rivTOFDUnJr
I8ZrHcN5lwXcRVpXhw3xZaDlaamLICNTa4j30wLnP/vHGi6opCIsPwhE/iILwvfF
0aYsS+BIGJt51RRAD4prEhK8ZtUmMRJwxQCOAWoKSL8o+EqJra4iskLFclSyYMxa
iOB1fg1uAqzcPdIMyKaag1eRc+edT2nR40gSRu4gopJLlX4aRWHmKLaE6PaF9HoP
Zljd3NKy3tz7fA3WB/mARGuu4Jb5BGPGHaLXNxfymoW15Mw64mgaGvUK8maNovSl
oYg=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:50:57 2025 by rpki-client