Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
File:                     e0c36319-b634-372f-9da0-aa28685ea81d.roa (raw, json)
Hash identifier:          CanmxWBpubkL8FkQTmO6I2FmxqDPAQopohI0HC67FMQ=
Subject key identifier:   CD:02:52:02:E3:73:B8:9F:24:BC:29:5F:B3:E2:43:E5:5A:3C:53:1D
Certificate issuer:       /CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
Certificate serial:       010D0C9F4328584A4F05CE4059285BEA33134900
Authority key identifier: EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa
Signing time:             Wed 25 Jun 2025 13:01:04 +0000
ROA not before:           Wed 25 Jun 2025 13:01:04 +0000
ROA not after:            Tue 23 Sep 2025 13:01:04 +0000
asID:                     16462
IP address blocks:        206.12.96.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 01 Jul 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:4f:05:ce:40:59:28:5b:ea:33:13:49:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09a2ffdd-f1b7-4369-9a4b-cf9c149b696c
        Validity
            Not Before: Jun 25 13:01:04 2025 GMT
            Not After : Sep 23 13:01:04 2025 GMT
        Subject: CN=b0412b5d-40af-4ae0-9a3b-8a436c6c62db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:9b:d1:14:89:19:a8:b8:7a:d5:12:4b:6a:9d:
                    e3:71:23:bf:29:18:a8:eb:54:c8:56:eb:e6:28:45:
                    c1:83:9e:6a:39:6c:22:4f:43:b9:04:cf:df:ca:2a:
                    74:c3:6d:8a:1e:b0:cc:3a:78:b6:b8:c3:e2:a2:96:
                    85:46:74:b3:db:b5:97:48:b8:df:6c:6c:e2:57:da:
                    3f:d4:f2:76:8e:89:ba:2e:f2:26:20:1d:45:4c:12:
                    19:84:3f:50:a3:c5:c1:31:d3:43:93:06:90:51:3d:
                    9a:2e:b3:4e:72:74:e9:05:95:54:49:0d:9a:cf:07:
                    fc:d2:59:8b:0d:f6:43:9c:4a:35:4e:be:2c:cf:72:
                    01:67:db:bf:88:df:f1:6d:95:d4:b3:ba:f1:0d:ea:
                    b7:fe:57:db:c1:2d:be:a5:c6:7e:7c:b5:aa:34:90:
                    a2:cb:26:7e:48:f0:1c:b3:45:26:a6:d8:80:6f:c7:
                    a4:f3:69:9f:c2:b7:4e:2f:90:ad:73:05:39:ec:b3:
                    e9:14:f0:61:32:04:51:4c:de:f8:37:22:7f:6d:ef:
                    79:4f:d6:bc:7e:c5:f3:a1:60:9c:36:ed:91:47:34:
                    b7:48:7d:f4:83:23:0a:74:70:2b:dd:b3:87:ff:7b:
                    86:c6:9c:f2:40:92:e5:90:52:c0:e1:7e:2e:8e:43:
                    53:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:02:52:02:E3:73:B8:9F:24:BC:29:5F:B3:E2:43:E5:5A:3C:53:1D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/e0c36319-b634-372f-9da0-aa28685ea81d.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.crl

            X509v3 Authority Key Identifier:
                keyid:EF:03:F5:93:C3:3F:1D:67:10:06:FE:66:A6:30:27:D3:02:22:F1:8E

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/09a2ffdd-f1b7-4369-9a4b-cf9c149b696c.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.12.96.0/21

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         4f:2e:ee:6e:16:14:8a:86:af:3f:4b:48:77:5f:4f:4b:57:58:
         79:63:75:12:ce:8d:eb:e6:e9:f9:84:1a:bd:e1:0e:1f:7c:70:
         05:93:e4:65:35:a5:2d:7d:c6:31:d8:7d:75:ae:73:ae:c2:da:
         39:4d:be:0f:f5:c8:26:ff:25:cb:09:da:24:5b:5a:7c:6c:0f:
         a9:03:8f:ce:fe:cc:8f:ea:13:d5:72:f4:4b:7d:34:66:fc:04:
         7d:5c:8b:32:51:c6:43:0c:42:79:9c:c2:61:04:79:09:69:f1:
         0f:cd:28:95:3a:a5:76:1f:8e:a8:81:f2:fa:bf:00:36:56:d5:
         b9:cd:f3:9d:4b:b3:ae:77:53:04:56:22:18:87:34:67:cb:fc:
         b3:7b:b6:49:4c:a9:16:c0:a9:61:c9:5e:85:18:a9:d9:f0:94:
         40:8e:92:58:d3:8b:88:69:ac:82:97:53:ba:7c:75:a7:e7:21:
         1c:36:60:1d:ad:fa:53:ae:75:74:db:a5:3f:a2:8d:50:d6:1e:
         f8:4d:bb:40:63:8f:de:b5:74:34:88:fd:7e:73:a9:04:c5:b4:
         bd:03:24:71:a6:a5:27:46:08:e4:3f:68:75:cd:1f:37:ed:b5:
         b7:fe:f8:d5:c9:ba:d4:44:da:3f:a7:63:d5:38:23:69:02:ef:
         bf:24:ad:b8
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEpPBc5AWShb6jMTSQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMDlhMmZmZGQtZjFiNy00MzY5LTlhNGItY2Y5YzE0OWI2
OTZjMB4XDTI1MDYyNTEzMDEwNFoXDTI1MDkyMzEzMDEwNFowLzEtMCsGA1UEAxMk
YjA0MTJiNWQtNDBhZi00YWUwLTlhM2ItOGE0MzZjNmM2MmRiMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqJvRFIkZqLh61RJLap3jcSO/KRio61TIVuvm
KEXBg55qOWwiT0O5BM/fyip0w22KHrDMOni2uMPiopaFRnSz27WXSLjfbGziV9o/
1PJ2jom6LvImIB1FTBIZhD9Qo8XBMdNDkwaQUT2aLrNOcnTpBZVUSQ2azwf80lmL
DfZDnEo1Tr4sz3IBZ9u/iN/xbZXUs7rxDeq3/lfbwS2+pcZ+fLWqNJCiyyZ+SPAc
s0UmptiAb8ek82mfwrdOL5CtcwU57LPpFPBhMgRRTN74NyJ/be95T9a8fsXzoWCc
Nu2RRzS3SH30gyMKdHAr3bOH/3uGxpzyQJLlkFLA4X4ujkNTEQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFM0CUgLjc7ifJLwpX7PiQ+VaPFMdMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEy
ZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjljMTQ5YjY5NmMvZTBjMzYzMTktYjYzNC0z
NzJmLTlkYTAtYWEyODY4NWVhODFkLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMDlhMmZmZGQtZjFiNy00MzY5LTlh
NGItY2Y5YzE0OWI2OTZjLzA5YTJmZmRkLWYxYjctNDM2OS05YTRiLWNmOWMxNDli
Njk2Yy5jcmwwHwYDVR0jBBgwFoAU7wP1k8M/HWcQBv5mpjAn0wIi8Y4wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8wOWEyZmZkZC1mMWI3LTQzNjktOWE0Yi1jZjlj
MTQ5YjY5NmMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDzgxgMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAE8u7m4WFIqGrz9LSHdfT0tXWHljdRLOjevm6fmEGr3hDh98cAWT5GU1
pS19xjHYfXWuc67C2jlNvg/1yCb/JcsJ2iRbWnxsD6kDj87+zI/qE9Vy9Et9NGb8
BH1cizJRxkMMQnmcwmEEeQlp8Q/NKJU6pXYfjqiB8vq/ADZW1bnN851Ls653UwRW
IhiHNGfL/LN7tklMqRbAqWHJXoUYqdnwlECOkljTi4hprIKXU7p8dafnIRw2YB2t
+lOudXTbpT+ijVDWHvhNu0Bjj961dDSI/X5zqQTFtL0DJHGmpSdGCOQ/aHXNHzft
tbf++NXJutRE2j+nY9U4I2kC778krbg=
-----END CERTIFICATE-----
Generated at Sun Jun 29 22:19:22 2025 by rpki-client