Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa
File:                     4176f384-feb0-327c-acd4-b0bff9c6eafc.roa (raw, json)
Hash identifier:          UZ5xaRoQCH1t7ZiCyI99YBZiDQ+rTBIrCc2H2uYq7rY=
Subject key identifier:   F0:E8:F7:1D:F7:31:A3:2F:DC:D0:95:34:46:05:E3:1B:7E:00:03:64
Certificate issuer:       /CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
Certificate serial:       010D0C9F4328584A2ABAFC0807A840AD5103D3C0
Authority key identifier: 58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa
Signing time:             Thu 12 Jun 2025 13:01:03 +0000
ROA not before:           Thu 12 Jun 2025 13:01:03 +0000
ROA not after:            Wed 10 Sep 2025 13:01:03 +0000
asID:                     11404
IP address blocks:        162.248.200.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 30 Jun 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:2a:ba:fc:08:07:a8:40:ad:51:03:d3:c0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=d70d8b7e-aada-4cdc-920d-dda617bdd989
        Validity
            Not Before: Jun 12 13:01:03 2025 GMT
            Not After : Sep 10 13:01:03 2025 GMT
        Subject: CN=c14f8af9-95db-4924-808b-8a2fd43d0e32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7c:48:c0:09:23:56:8d:87:3a:fd:ac:77:59:
                    88:8a:72:0c:7d:9e:72:8f:68:30:4d:73:4e:38:78:
                    f2:27:a9:1a:51:68:74:8a:88:86:e4:c6:01:94:6a:
                    30:2f:86:c8:81:3d:b5:9b:e2:0b:e1:21:39:28:52:
                    18:d3:61:89:5b:f6:e5:f4:bd:f6:82:4d:21:f4:37:
                    48:ae:d9:69:7d:c5:66:ed:1d:d2:f3:e9:e8:2b:e6:
                    4f:a7:76:dc:c6:29:86:e8:30:af:86:37:d0:2c:c9:
                    cc:c9:56:16:f3:1e:9f:5e:0c:63:24:f1:c7:8e:ea:
                    6a:ef:a2:5f:3d:63:c2:84:c8:8a:02:46:63:88:a8:
                    bd:4c:2c:eb:4f:10:ae:ce:67:5a:a0:f0:61:f9:c5:
                    3d:8d:e0:a9:99:59:19:db:23:5a:d8:0f:43:e7:fd:
                    b6:29:6b:0c:5d:3c:4c:ab:df:30:9c:31:a0:01:cf:
                    16:00:fa:b4:82:65:39:b0:e4:c0:7d:87:2f:a3:48:
                    d6:f5:1a:32:f1:86:c4:8f:1d:02:1a:e5:c5:26:3d:
                    fc:0c:59:d9:fb:3c:3b:0c:fe:b0:ee:77:6b:2a:d3:
                    22:ea:ac:6b:2c:b9:6f:ef:03:05:98:98:40:e2:21:
                    f4:54:42:f0:8c:cd:36:27:58:35:be:69:d5:99:8a:
                    65:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:E8:F7:1D:F7:31:A3:2F:DC:D0:95:34:46:05:E3:1B:7E:00:03:64
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/4176f384-feb0-327c-acd4-b0bff9c6eafc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989/d70d8b7e-aada-4cdc-920d-dda617bdd989.crl

            X509v3 Authority Key Identifier:
                keyid:58:DB:AF:0D:4D:D8:DF:2D:A3:20:AF:A4:9C:C0:12:34:EA:BE:FC:F6

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/d70d8b7e-aada-4cdc-920d-dda617bdd989.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  162.248.200.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         5d:ca:8c:8d:ec:7f:c9:52:21:dd:5a:8d:5a:2f:e1:8b:60:81:
         88:07:62:04:13:4a:54:73:be:a7:02:81:35:88:0e:aa:6b:c8:
         23:09:7d:8c:95:80:99:99:6d:c4:05:46:7b:e0:78:c4:08:a0:
         bf:af:2d:83:ad:bc:d7:e0:fc:c3:f6:63:fb:60:55:cf:62:f0:
         8c:e9:f8:5c:c1:7b:50:0f:1b:9f:5b:49:ed:0d:de:c4:8d:28:
         0d:0b:fb:a6:0c:c5:fd:77:a6:a5:83:35:ef:48:42:77:2b:4b:
         54:48:a5:ec:ca:c6:73:5d:b2:ae:6c:77:dc:64:da:2c:db:6c:
         04:be:41:6e:83:15:0c:e6:f9:4d:d5:ab:08:b2:36:cd:14:88:
         da:04:f5:36:df:ab:9d:76:c2:8c:dd:ec:fe:37:bf:ac:25:28:
         d8:e8:ef:b5:26:f2:8e:1e:2c:98:3c:44:aa:2c:4b:3f:35:83:
         5b:a7:df:aa:3b:33:ac:a3:ef:f8:81:fc:02:ba:07:b2:23:c3:
         01:3e:02:13:a3:fd:7d:35:fd:4f:e7:e6:bd:b8:6d:a6:36:6d:
         5c:83:4f:93:57:b9:5b:e5:84:0f:45:88:fa:40:f3:a3:56:bd:
         d7:b9:45:81:8b:fe:48:91:99:3b:81:ec:ad:8b:49:5c:4a:c7:
         38:5f:1e:7e
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEoquvwIB6hArVED08AwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZDcwZDhiN2UtYWFkYS00Y2RjLTkyMGQtZGRhNjE3YmRk
OTg5MB4XDTI1MDYxMjEzMDEwM1oXDTI1MDkxMDEzMDEwM1owLzEtMCsGA1UEAxMk
YzE0ZjhhZjktOTVkYi00OTI0LTgwOGItOGEyZmQ0M2QwZTMyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhXxIwAkjVo2HOv2sd1mIinIMfZ5yj2gwTXNO
OHjyJ6kaUWh0ioiG5MYBlGowL4bIgT21m+IL4SE5KFIY02GJW/bl9L32gk0h9DdI
rtlpfcVm7R3S8+noK+ZPp3bcximG6DCvhjfQLMnMyVYW8x6fXgxjJPHHjupq76Jf
PWPChMiKAkZjiKi9TCzrTxCuzmdaoPBh+cU9jeCpmVkZ2yNa2A9D5/22KWsMXTxM
q98wnDGgAc8WAPq0gmU5sOTAfYcvo0jW9Roy8YbEjx0CGuXFJj38DFnZ+zw7DP6w
7ndrKtMi6qxrLLlv7wMFmJhA4iH0VELwjM02J1g1vmnVmYpl4wIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFPDo9x33MaMv3NCVNEYF4xt+AANkMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBk
OGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2MTdiZGQ5ODkvNDE3NmYzODQtZmViMC0z
MjdjLWFjZDQtYjBiZmY5YzZlYWZjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZDcwZDhiN2UtYWFkYS00Y2RjLTky
MGQtZGRhNjE3YmRkOTg5L2Q3MGQ4YjdlLWFhZGEtNGNkYy05MjBkLWRkYTYxN2Jk
ZDk4OS5jcmwwHwYDVR0jBBgwFoAUWNuvDU3Y3y2jIK+knMASNOq+/PYwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9kNzBkOGI3ZS1hYWRhLTRjZGMtOTIwZC1kZGE2
MTdiZGQ5ODkuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDovjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAF3KjI3sf8lSId1ajVov4YtggYgHYgQTSlRzvqcCgTWIDqpryCMJfYyV
gJmZbcQFRnvgeMQIoL+vLYOtvNfg/MP2Y/tgVc9i8Izp+FzBe1APG59bSe0N3sSN
KA0L+6YMxf13pqWDNe9IQncrS1RIpezKxnNdsq5sd9xk2izbbAS+QW6DFQzm+U3V
qwiyNs0UiNoE9Tbfq512wozd7P43v6wlKNjo77Um8o4eLJg8RKosSz81g1un36o7
M6yj7/iB/AK6B7IjwwE+AhOj/X01/U/n5r24baY2bVyDT5NXuVvlhA9FiPpA86NW
vde5RYGL/kiRmTuB7K2LSVxKxzhfHn4=
-----END CERTIFICATE-----
Generated at Sun Jun 29 10:40:38 2025 by rpki-client