Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
File:                     b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa (raw, json)
Hash identifier:          wjDYwkrE72w2yQ3WEbi6WGhjdXhLU7gdOp1AlPYlFxg=
Subject key identifier:   AB:93:51:0A:D1:C5:33:75:9D:6F:05:CA:4B:55:C0:DD:8C:6C:07:CC
Certificate issuer:       /CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
Certificate serial:       010D0C9F4328584ADECBC092060A6FDC9E004D00
Authority key identifier: 71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa
Signing time:             Sat 16 Aug 2025 01:00:33 +0000
ROA not before:           Sat 16 Aug 2025 01:00:33 +0000
ROA not after:            Fri 14 Nov 2025 02:00:33 +0000
asID:                     55159
IP address blocks:        69.17.207.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:de:cb:c0:92:06:0a:6f:dc:9e:00:4d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=b8624cbb-ba19-47a6-b5ac-d0747149714c
        Validity
            Not Before: Aug 16 01:00:33 2025 GMT
            Not After : Nov 14 02:00:33 2025 GMT
        Subject: CN=68d0b514-9742-42ff-bd19-f7b6a45cd3b5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:73:ad:4f:77:c6:5b:c1:f4:2e:5d:17:60:6d:
                    8c:0e:38:70:63:39:ce:17:4c:03:de:8a:20:7d:25:
                    f9:88:24:3c:6f:d8:e4:c8:be:f0:18:70:65:42:5e:
                    5d:ba:c2:28:83:e0:c1:9d:4f:59:06:7f:5f:79:b4:
                    bb:ac:b5:a0:e6:74:b3:ae:d7:89:f1:8d:ca:db:24:
                    6f:05:36:63:4d:e4:0e:59:58:ad:28:f3:a3:c8:11:
                    a1:41:e6:22:54:e3:81:12:38:bd:e4:c7:b8:09:5f:
                    5c:e1:d2:08:ec:06:08:b2:0e:b3:36:d5:61:ab:0b:
                    52:5f:97:14:2f:2b:f2:57:28:20:89:4e:5c:69:c4:
                    2a:f8:05:50:00:d3:bb:d2:fd:51:82:90:75:6c:cb:
                    ea:5a:e7:27:2e:07:6a:e8:e7:5b:3e:fd:9d:17:73:
                    5b:96:bd:f5:d2:7a:52:b1:96:c1:f0:7e:80:a7:54:
                    f0:fc:22:5a:33:da:63:dd:c8:4f:6a:58:d0:b5:49:
                    19:e3:fb:f9:39:f9:64:f3:45:c6:72:c7:26:02:f1:
                    01:f9:c0:45:73:9f:64:1c:01:47:9a:b5:01:5a:a2:
                    79:7f:43:f0:52:c0:43:eb:70:b7:45:87:9f:bb:61:
                    fd:1c:07:02:2c:50:01:6c:58:12:d8:46:e5:40:2c:
                    89:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:93:51:0A:D1:C5:33:75:9D:6F:05:CA:4B:55:C0:DD:8C:6C:07:CC
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b892dc1b-885d-3051-aa76-c1ce652ce9a4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c/b8624cbb-ba19-47a6-b5ac-d0747149714c.crl

            X509v3 Authority Key Identifier:
                keyid:71:6A:5A:21:EE:66:2B:9C:10:67:F0:E2:38:07:78:CB:12:8C:8C:A7

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/b8624cbb-ba19-47a6-b5ac-d0747149714c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.17.207.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         26:2d:d8:e5:5e:77:8d:6b:a0:0c:a2:09:b3:77:7b:6a:54:17:
         21:75:4e:0b:32:51:ea:de:8f:a4:d1:8f:b5:b4:2a:b0:be:d4:
         e6:94:b9:41:c9:92:45:5f:21:5f:a6:70:32:06:8e:cd:a1:16:
         d2:bb:10:24:f3:08:6e:9d:93:23:65:27:f4:c4:74:c2:72:4d:
         a7:05:09:20:b5:44:89:b6:ae:e9:98:de:30:50:e5:cc:f0:3d:
         53:8b:fe:fe:18:0d:fb:ef:63:ff:61:ab:20:13:10:f9:5f:fb:
         97:97:ac:16:79:66:c8:4a:d1:6e:d2:df:fa:0b:8d:e9:9e:9c:
         b3:64:ee:44:87:1e:92:3a:ca:65:56:82:90:b2:cc:51:ae:9d:
         3d:6b:4d:6b:8a:46:1d:b3:95:ea:e4:3b:a5:ca:3c:a8:7c:36:
         de:31:ae:11:13:15:2f:e5:e6:25:6c:4c:87:e6:29:e7:07:3b:
         40:78:bf:47:f2:4f:fe:98:b4:dd:6e:9a:89:86:93:c6:66:9a:
         17:b6:9d:2e:ba:55:c4:8c:f7:a5:c7:dd:13:31:f7:fd:cd:15:
         94:6b:0e:59:65:34:32:31:74:f2:80:4b:f8:62:13:6c:eb:36:
         d4:33:e9:d7:29:cc:1c:b6:f7:86:84:33:bd:c2:17:eb:9f:75:
         7e:41:db:42
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErey8CSBgpv3J4ATQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkYjg2MjRjYmItYmExOS00N2E2LWI1YWMtZDA3NDcxNDk3
MTRjMB4XDTI1MDgxNjAxMDAzM1oXDTI1MTExNDAyMDAzM1owLzEtMCsGA1UEAxMk
NjhkMGI1MTQtOTc0Mi00MmZmLWJkMTktZjdiNmE0NWNkM2I1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo3OtT3fGW8H0Ll0XYG2MDjhwYznOF0wD3oog
fSX5iCQ8b9jkyL7wGHBlQl5dusIog+DBnU9ZBn9febS7rLWg5nSzrteJ8Y3K2yRv
BTZjTeQOWVitKPOjyBGhQeYiVOOBEji95Me4CV9c4dII7AYIsg6zNtVhqwtSX5cU
LyvyVyggiU5cacQq+AVQANO70v1RgpB1bMvqWucnLgdq6OdbPv2dF3Nblr310npS
sZbB8H6Ap1Tw/CJaM9pj3chPaljQtUkZ4/v5Oflk80XGcscmAvEB+cBFc59kHAFH
mrUBWqJ5f0PwUsBD63C3RYefu2H9HAcCLFABbFgS2EblQCyJWwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFKuTUQrRxTN1nW8FyktVwN2MbAfMMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYy
NGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0NzE0OTcxNGMvYjg5MmRjMWItODg1ZC0z
MDUxLWFhNzYtYzFjZTY1MmNlOWE0LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvYjg2MjRjYmItYmExOS00N2E2LWI1
YWMtZDA3NDcxNDk3MTRjL2I4NjI0Y2JiLWJhMTktNDdhNi1iNWFjLWQwNzQ3MTQ5
NzE0Yy5jcmwwHwYDVR0jBBgwFoAUcWpaIe5mK5wQZ/DiOAd4yxKMjKcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9iODYyNGNiYi1iYTE5LTQ3YTYtYjVhYy1kMDc0
NzE0OTcxNGMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQARRHPMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBACYt2OVed41roAyiCbN3e2pUFyF1TgsyUerej6TRj7W0KrC+1OaUuUHJ
kkVfIV+mcDIGjs2hFtK7ECTzCG6dkyNlJ/TEdMJyTacFCSC1RIm2rumY3jBQ5czw
PVOL/v4YDfvvY/9hqyATEPlf+5eXrBZ5ZshK0W7S3/oLjemenLNk7kSHHpI6ymVW
gpCyzFGunT1rTWuKRh2zlerkO6XKPKh8Nt4xrhETFS/l5iVsTIfmKecHO0B4v0fy
T/6YtN1umomGk8Zmmhe2nS66VcSM96XH3RMx9/3NFZRrDlllNDIxdPKAS/hiE2zr
NtQz6dcpzBy294aEM73CF+ufdX5B20I=
-----END CERTIFICATE-----
Generated at Sun Aug 24 00:29:37 2025 by rpki-client