Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
File:                     81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa (raw, json)
Hash identifier:          Jr+NV/3L1hK/NfZuIh6PepAhFKM3RUSSFWxm49Hy0U8=
Subject key identifier:   1E:3D:DA:83:43:04:74:BA:63:17:BF:A6:FE:50:E9:D0:67:35:55:C9
Certificate issuer:       /CN=f4ef9ae2-f027-4028-a705-db1e3463a382
Certificate serial:       010D0C9F4328584AE19674CFC263FBB1AB3D1200
Authority key identifier: 78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa
Signing time:             Sun 17 Aug 2025 01:00:32 +0000
ROA not before:           Sun 17 Aug 2025 01:00:32 +0000
ROA not after:            Sat 15 Nov 2025 02:00:32 +0000
asID:                     40339
IP address blocks:        206.71.154.0/23 maxlen: 24
                          208.78.208.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/76fe11d4-d352-4994-8f6c-d6c91b0b8415.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 20:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e1:96:74:cf:c2:63:fb:b1:ab:3d:12:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f4ef9ae2-f027-4028-a705-db1e3463a382
        Validity
            Not Before: Aug 17 01:00:32 2025 GMT
            Not After : Nov 15 02:00:32 2025 GMT
        Subject: CN=98c020fd-64e7-4614-8b0b-2f1498320157
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:99:c8:dc:82:ca:15:50:e8:77:13:57:8c:93:
                    e9:5c:4a:11:82:c3:81:6a:6f:e3:32:24:40:82:1e:
                    b2:20:c2:f8:7d:73:a0:81:2b:fb:0d:db:c9:43:97:
                    f2:df:50:a5:85:72:74:01:d2:1d:37:77:22:d9:eb:
                    df:50:68:aa:c1:8d:77:7b:9e:68:70:8d:07:97:1a:
                    8e:fc:34:7d:57:c6:4d:38:39:eb:41:51:c2:68:35:
                    89:60:af:15:0a:89:ed:4a:f9:cb:4f:b1:30:ef:51:
                    56:3a:90:d6:7f:7d:fe:12:b3:8c:0f:39:c7:30:f7:
                    68:05:d3:cf:d4:9f:8f:f9:15:02:67:ea:fb:1f:61:
                    bc:07:7c:b2:77:27:80:82:75:95:43:00:75:b3:f2:
                    97:a6:cc:7b:5e:21:0b:1f:8a:42:36:87:84:eb:53:
                    ce:fd:ae:06:a3:81:4e:41:52:c4:7c:cf:0d:04:50:
                    be:c5:47:23:0a:cf:f1:1f:51:3b:7d:ad:db:15:aa:
                    40:5e:59:78:c8:aa:58:be:b9:86:91:d3:a6:9d:fe:
                    8e:97:64:b7:54:89:cd:4f:ba:81:fe:ec:ae:6a:39:
                    dc:bc:d1:ff:4c:6e:1a:32:9e:19:8f:e9:d4:d7:27:
                    f4:e7:ff:c1:72:83:d3:03:54:db:9e:01:e1:0d:02:
                    01:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3D:DA:83:43:04:74:BA:63:17:BF:A6:FE:50:E9:D0:67:35:55:C9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/81b1dcc6-24e4-3a6f-80f3-6e9bcd7fab62.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382/f4ef9ae2-f027-4028-a705-db1e3463a382.crl

            X509v3 Authority Key Identifier:
                keyid:78:43:63:5F:35:F7:A5:B6:6E:39:7B:D3:62:1B:21:CC:A2:E5:92:3B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/76fe11d4-d352-4994-8f6c-d6c91b0b8415/f4ef9ae2-f027-4028-a705-db1e3463a382.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.71.154.0/23
                  208.78.208.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         58:f8:b9:5b:40:7d:66:ec:71:07:71:51:ee:2b:d3:c3:fe:3b:
         68:16:e5:0c:8b:fb:e4:16:dc:e9:d6:60:b0:00:3e:9b:b1:e8:
         3c:cf:47:ac:3c:9a:9a:49:29:59:b0:64:da:33:55:ea:60:44:
         9f:6c:09:91:93:40:35:67:ad:d6:46:e9:7b:f3:0a:42:b7:8b:
         30:50:54:62:db:e3:78:d2:fa:6f:3e:52:3e:c2:7a:c2:c7:de:
         d2:37:ef:fb:76:fe:57:5a:e0:01:49:51:d3:56:26:cf:c3:61:
         b1:8c:36:27:09:43:f2:e1:9e:6c:76:f9:e4:8a:b4:41:e4:71:
         77:80:2f:18:4c:0e:57:e3:6d:c3:b4:82:9b:7b:19:b6:b3:46:
         a7:d5:a1:9b:90:54:30:00:ea:9c:f2:f5:fc:e8:4e:2c:de:fb:
         3c:cd:04:24:55:c7:46:b5:91:fd:51:72:de:19:8d:7e:f6:31:
         c2:d1:fa:a3:e9:61:72:bb:46:6d:26:de:1b:9d:0b:2c:2a:c2:
         99:b8:4a:b7:26:8a:b9:c8:fd:d9:2d:f5:06:d7:35:da:34:72:
         7c:87:6e:52:0f:3c:c9:1a:08:87:da:8b:17:9b:4b:31:c5:53:
         ff:d3:dd:b4:94:a9:e0:1f:e3:37:b2:45:0f:1c:a3:dc:36:20:
         83:94:f5:5b
-----BEGIN CERTIFICATE-----
MIIGSTCCBTGgAwIBAgIUAQ0Mn0MoWErhlnTPwmP7sas9EgAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZjRlZjlhZTItZjAyNy00MDI4LWE3MDUtZGIxZTM0NjNh
MzgyMB4XDTI1MDgxNzAxMDAzMloXDTI1MTExNTAyMDAzMlowLzEtMCsGA1UEAxMk
OThjMDIwZmQtNjRlNy00NjE0LThiMGItMmYxNDk4MzIwMTU3MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4pnI3ILKFVDodxNXjJPpXEoRgsOBam/jMiRA
gh6yIML4fXOggSv7DdvJQ5fy31ClhXJ0AdIdN3ci2evfUGiqwY13e55ocI0HlxqO
/DR9V8ZNODnrQVHCaDWJYK8VContSvnLT7Ew71FWOpDWf33+ErOMDznHMPdoBdPP
1J+P+RUCZ+r7H2G8B3yydyeAgnWVQwB1s/KXpsx7XiELH4pCNoeE61PO/a4Go4FO
QVLEfM8NBFC+xUcjCs/xH1E7fa3bFapAXll4yKpYvrmGkdOmnf6Ol2S3VInNT7qB
/uyuajncvNH/TG4aMp4Zj+nU1yf05//BcoPTA1TbngHhDQIB6wIDAQABo4IDWzCC
A1cwHQYDVR0OBBYEFB492oNDBHS6Yxe/pv5Q6dBnNVXJMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVm
OWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFlMzQ2M2EzODIvODFiMWRjYzYtMjRlNC0z
YTZmLTgwZjMtNmU5YmNkN2ZhYjYyLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy83NmZlMTFkNC1k
MzUyLTQ5OTQtOGY2Yy1kNmM5MWIwYjg0MTUvZjRlZjlhZTItZjAyNy00MDI4LWE3
MDUtZGIxZTM0NjNhMzgyL2Y0ZWY5YWUyLWYwMjctNDAyOC1hNzA1LWRiMWUzNDYz
YTM4Mi5jcmwwHwYDVR0jBBgwFoAUeENjXzX3pbZuOXvTYhshzKLlkjswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzc2ZmUxMWQ0LWQzNTItNDk5
NC04ZjZjLWQ2YzkxYjBiODQxNS9mNGVmOWFlMi1mMDI3LTQwMjgtYTcwNS1kYjFl
MzQ2M2EzODIuY2VyMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBzkeaAwQD
0E7QMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0
cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZI
hvcNAQELBQADggEBAFj4uVtAfWbscQdxUe4r08P+O2gW5QyL++QW3OnWYLAAPpux
6DzPR6w8mppJKVmwZNozVepgRJ9sCZGTQDVnrdZG6XvzCkK3izBQVGLb43jS+m8+
Uj7CesLH3tI37/t2/lda4AFJUdNWJs/DYbGMNicJQ/Lhnmx2+eSKtEHkcXeALxhM
DlfjbcO0gpt7GbazRqfVoZuQVDAA6pzy9fzoTize+zzNBCRVx0a1kf1Rct4ZjX72
McLR+qPpYXK7Rm0m3hudCywqwpm4SrcmirnI/dkt9QbXNdo0cnyHblIPPMkaCIfa
ixebSzHFU//T3bSUqeAf4zeyRQ8co9w2IIOU9Vs=
-----END CERTIFICATE-----
Generated at Sun Aug 24 03:47:54 2025 by rpki-client