Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa
File:                     f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa (raw, json)
Hash identifier:          ve2fG1HyksaHTUcnvayA39mIi4mvjI3KA2ss70xjHJM=
Subject key identifier:   BF:6F:1F:36:37:FD:5D:41:41:A1:B1:86:D7:EB:74:C0:1F:38:21:03
Certificate issuer:       /CN=7a2be303-4525-4433-b220-b1c6b5052945
Certificate serial:       010D0C9F4328584AD3A0F6E94AB381929AEA623C
Authority key identifier: 70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa
Signing time:             Tue 12 Aug 2025 01:00:32 +0000
ROA not before:           Tue 12 Aug 2025 01:00:32 +0000
ROA not after:            Mon 10 Nov 2025 02:00:32 +0000
asID:                     14618
IP address blocks:        208.56.0.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d3:a0:f6:e9:4a:b3:81:92:9a:ea:62:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7a2be303-4525-4433-b220-b1c6b5052945
        Validity
            Not Before: Aug 12 01:00:32 2025 GMT
            Not After : Nov 10 02:00:32 2025 GMT
        Subject: CN=b81302b7-9988-41b5-81e4-004840f8c608
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:65:cc:e3:d3:5f:a2:71:31:41:78:a4:8a:
                    a4:fb:94:d4:c7:7d:ad:e9:f4:0d:36:3f:9a:67:35:
                    ed:d5:4b:78:0d:85:3c:71:9d:7b:a1:0d:10:f4:a6:
                    e1:89:98:cf:b1:dc:48:c0:90:d9:03:0a:10:44:98:
                    68:f5:10:b5:e0:c9:64:39:e7:9b:ba:9d:cb:46:07:
                    87:b1:22:62:8e:01:3e:62:4f:89:7f:9b:01:7d:d0:
                    72:a3:3f:0a:1a:c0:63:15:a8:37:0f:0f:37:b2:1c:
                    0b:df:98:09:20:79:f5:c1:de:b4:d5:38:83:dd:68:
                    a5:49:07:8b:8c:51:a3:f4:e4:10:07:cc:75:4d:76:
                    db:f7:60:c3:8f:0e:39:22:b2:34:5a:38:b7:e6:7f:
                    e3:d6:52:61:9a:2c:32:48:8b:67:21:d0:cf:d2:a4:
                    81:60:7d:a1:31:7a:d1:41:56:91:f7:fd:f0:5a:4b:
                    5a:83:8c:67:e1:cc:bb:6e:f0:bb:e1:28:93:8b:f8:
                    6b:95:7f:6a:83:74:c4:80:bb:23:6b:49:dd:84:03:
                    ec:61:a5:32:f5:67:a8:1d:b1:7c:c3:4c:c7:7e:4b:
                    81:b1:7e:27:0a:44:ae:bb:15:12:d4:34:e9:35:f8:
                    cc:2e:68:b2:2b:ec:23:af:39:25:75:2b:3d:fd:98:
                    60:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:6F:1F:36:37:FD:5D:41:41:A1:B1:86:D7:EB:74:C0:1F:38:21:03
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/f0ab9e2f-db14-39d5-9498-ae5db0f96696.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945/7a2be303-4525-4433-b220-b1c6b5052945.crl

            X509v3 Authority Key Identifier:
                keyid:70:1F:EF:EE:AD:79:50:CB:C4:62:2A:33:AD:24:65:52:65:75:DE:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/7a2be303-4525-4433-b220-b1c6b5052945.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.56.0.0/18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         2f:1f:ed:35:e1:71:4a:ca:d8:4e:88:eb:59:bc:ad:f9:4c:0b:
         20:99:59:4c:20:f0:68:e2:e4:30:d3:34:e5:8a:aa:7f:a8:61:
         1b:62:69:3d:89:1e:5b:cf:46:a7:91:10:db:7b:49:39:31:b9:
         fa:47:31:15:8b:98:cb:0e:cc:55:0d:d0:74:97:da:20:93:6f:
         3b:3a:51:d6:c5:fa:10:da:ea:e3:c5:1c:c3:3f:ff:49:f3:a0:
         c9:e6:4c:09:42:29:69:87:2f:7c:38:ad:bc:59:4e:97:d9:b8:
         18:4a:12:f1:a4:92:a5:d2:09:5b:7e:b1:d6:a0:83:e8:a8:2a:
         2f:ab:4e:bb:0b:e0:21:33:35:6d:89:21:ed:58:76:9d:ba:9e:
         7e:e3:1f:3f:df:6f:ac:8a:55:db:74:73:45:24:b2:99:42:5e:
         a1:35:59:af:c8:df:ec:5d:81:9d:4d:67:1e:d6:d6:92:1e:0f:
         24:0a:3b:95:4a:e0:5e:f8:a7:3c:60:b7:cd:00:f7:b3:2d:cb:
         0f:6f:12:ff:42:20:28:c5:a9:d1:4e:6a:61:a8:b8:38:3e:4d:
         3c:1d:04:fb:71:c6:4e:09:a0:12:df:e0:77:2d:8b:06:83:50:
         b3:7e:11:8f:3d:27:91:28:16:d4:7f:ae:5f:d3:1a:1f:2b:c1:
         a5:63:b8:88
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErToPbpSrOBkprqYjwwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkN2EyYmUzMDMtNDUyNS00NDMzLWIyMjAtYjFjNmI1MDUy
OTQ1MB4XDTI1MDgxMjAxMDAzMloXDTI1MTExMDAyMDAzMlowLzEtMCsGA1UEAxMk
YjgxMzAyYjctOTk4OC00MWI1LTgxZTQtMDA0ODQwZjhjNjA4MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhIxlzOPTX6JxMUF4pIqk+5TUx32t6fQNNj+a
ZzXt1Ut4DYU8cZ17oQ0Q9KbhiZjPsdxIwJDZAwoQRJho9RC14MlkOeebup3LRgeH
sSJijgE+Yk+Jf5sBfdByoz8KGsBjFag3Dw83shwL35gJIHn1wd601TiD3WilSQeL
jFGj9OQQB8x1TXbb92DDjw45IrI0Wji35n/j1lJhmiwySItnIdDP0qSBYH2hMXrR
QVaR9/3wWktag4xn4cy7bvC74SiTi/hrlX9qg3TEgLsja0ndhAPsYaUy9WeoHbF8
w0zHfkuBsX4nCkSuuxUS1DTpNfjMLmiyK+wjrzkldSs9/ZhgXQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFL9vHzY3/V1BQaGxhtfrdMAfOCEDMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJi
ZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2YjUwNTI5NDUvZjBhYjllMmYtZGIxNC0z
OWQ1LTk0OTgtYWU1ZGIwZjk2Njk2LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvN2EyYmUzMDMtNDUyNS00NDMzLWIy
MjAtYjFjNmI1MDUyOTQ1LzdhMmJlMzAzLTQ1MjUtNDQzMy1iMjIwLWIxYzZiNTA1
Mjk0NS5jcmwwHwYDVR0jBBgwFoAUcB/v7q15UMvEYiozrSRlUmV13rIwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS83YTJiZTMwMy00NTI1LTQ0MzMtYjIyMC1iMWM2
YjUwNTI5NDUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQG0DgAMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAC8f7TXhcUrK2E6I61m8rflMCyCZWUwg8Gji5DDTNOWKqn+oYRtiaT2J
HlvPRqeRENt7STkxufpHMRWLmMsOzFUN0HSX2iCTbzs6UdbF+hDa6uPFHMM//0nz
oMnmTAlCKWmHL3w4rbxZTpfZuBhKEvGkkqXSCVt+sdagg+ioKi+rTrsL4CEzNW2J
Ie1Ydp26nn7jHz/fb6yKVdt0c0UksplCXqE1Wa/I3+xdgZ1NZx7W1pIeDyQKO5VK
4F74pzxgt80A97Mtyw9vEv9CICjFqdFOamGouDg+TTwdBPtxxk4JoBLf4HctiwaD
ULN+EY89J5EoFtR/rl/TGh8rwaVjuIg=
-----END CERTIFICATE-----
Generated at Sat Aug 23 18:37:26 2025 by rpki-client