Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
File:                     923e8850-cfe0-3825-bfad-bd433a1c0778.roa (raw, json)
Hash identifier:          vmmUEkSQYQSHh/A8gOV1ILTQSIkW50Za/XNSgUed0gw=
Subject key identifier:   B2:C1:65:CE:E4:16:4A:97:A0:7A:AE:78:6C:7A:E7:71:14:FC:B5:DA
Certificate issuer:       /CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
Certificate serial:       010D0C9F4328584A3CE02D2224036EE44F4AB630
Authority key identifier: A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa
Signing time:             Thu 19 Jun 2025 01:00:50 +0000
ROA not before:           Thu 19 Jun 2025 01:00:50 +0000
ROA not after:            Wed 17 Sep 2025 01:00:50 +0000
asID:                     400164
IP address blocks:        65.75.212.0/22 maxlen: 24
                          2606:8ac0::/32 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 23:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:3c:e0:2d:22:24:03:6e:e4:4f:4a:b6:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15a1c5cd-d60b-4670-ad8d-21856855ee46
        Validity
            Not Before: Jun 19 01:00:50 2025 GMT
            Not After : Sep 17 01:00:50 2025 GMT
        Subject: CN=1805574e-3694-45ee-b725-468239d99505
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:4b:23:0b:02:4e:31:7d:d9:b2:40:1e:4b:9e:
                    52:7a:c5:77:db:a6:49:ae:96:fa:b7:5e:fb:95:c1:
                    8b:22:0e:48:d6:2e:e8:96:5b:3f:59:eb:67:43:11:
                    79:68:62:a7:57:b3:79:1f:f5:b3:f2:90:6e:c3:af:
                    e8:8d:0c:7b:35:0a:e0:df:45:09:5c:8e:a3:b5:80:
                    5e:fb:1c:14:7d:f4:b2:cc:ee:2f:ac:a0:0c:28:ba:
                    45:d0:d5:04:79:8b:09:4d:58:d7:d8:6b:a8:6d:40:
                    9a:57:c1:e6:a0:ba:35:c6:0c:07:ee:a3:65:19:03:
                    a4:4d:5e:c1:4c:19:04:82:0f:8c:f8:db:91:d5:25:
                    37:65:8a:37:40:34:41:c9:91:d4:d6:66:09:be:e0:
                    ac:90:e2:d1:b0:5b:3b:e9:31:74:9b:79:ba:56:0a:
                    c0:10:16:97:90:61:63:fa:76:98:db:77:f3:9f:ff:
                    84:7e:23:db:48:39:08:15:4b:20:4f:bc:91:c8:c4:
                    2d:af:15:1e:cb:63:21:cc:61:ac:a8:5e:a2:66:60:
                    16:75:94:46:17:96:33:25:b5:78:92:1e:d9:7c:c7:
                    fe:a6:67:3d:48:af:f1:53:98:48:a0:47:17:ba:e5:
                    24:98:41:a7:03:ed:a8:d2:55:f9:69:b1:88:38:f0:
                    f0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C1:65:CE:E4:16:4A:97:A0:7A:AE:78:6C:7A:E7:71:14:FC:B5:DA
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/923e8850-cfe0-3825-bfad-bd433a1c0778.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46/15a1c5cd-d60b-4670-ad8d-21856855ee46.crl

            X509v3 Authority Key Identifier:
                keyid:A0:09:A6:B2:B2:82:AE:6A:B6:40:79:2F:94:99:80:AC:9D:61:89:F3

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/15a1c5cd-d60b-4670-ad8d-21856855ee46.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  65.75.212.0/22
                IPv6:
                  2606:8ac0::/32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8c:c1:ef:27:e9:4f:46:c0:94:f0:c6:29:ae:fb:c3:2b:73:d3:
         a6:6b:5c:d5:bc:29:bf:f7:56:5f:02:ae:b4:10:b8:f2:bd:b9:
         8c:64:35:a6:b0:79:65:c4:ab:9a:97:9a:3b:1c:f9:ba:ba:e1:
         76:8b:dc:e0:18:93:8c:52:e5:6a:63:ac:51:02:cf:be:89:fd:
         ef:53:4b:f2:6f:ae:f2:d5:9d:d5:61:2d:58:b8:29:1d:a5:83:
         bc:a4:60:6f:ce:18:ba:68:49:77:7d:76:4f:e6:e3:c9:c0:e2:
         f7:fb:36:3f:ce:f7:e4:9c:f1:10:b5:9e:10:c5:05:f5:52:12:
         7e:22:78:e1:19:64:90:7e:4c:40:21:02:22:dd:24:1e:87:a6:
         6c:59:07:70:e9:fd:fa:87:e2:ae:f9:57:a2:14:63:af:81:1a:
         e3:2c:87:19:24:14:68:bc:68:e6:a2:8c:96:a4:77:9d:15:b2:
         66:19:22:5e:24:c8:3d:ef:b3:e8:8b:5b:9e:a5:1b:2a:f8:66:
         1e:df:ed:2d:4f:f5:9b:c2:54:87:d6:75:10:64:8f:17:92:fc:
         d4:84:87:d9:f9:f4:73:86:95:50:11:f4:84:c6:6f:84:ba:ce:
         ce:83:70:a4:7b:a7:44:10:10:8e:19:ea:6a:28:97:5d:89:7d:
         0b:90:a0:70
-----BEGIN CERTIFICATE-----
MIIGUjCCBTqgAwIBAgIUAQ0Mn0MoWEo84C0iJANu5E9KtjAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMTVhMWM1Y2QtZDYwYi00NjcwLWFkOGQtMjE4NTY4NTVl
ZTQ2MB4XDTI1MDYxOTAxMDA1MFoXDTI1MDkxNzAxMDA1MFowLzEtMCsGA1UEAxMk
MTgwNTU3NGUtMzY5NC00NWVlLWI3MjUtNDY4MjM5ZDk5NTA1MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2UsjCwJOMX3ZskAeS55SesV326ZJrpb6t177
lcGLIg5I1i7olls/WetnQxF5aGKnV7N5H/Wz8pBuw6/ojQx7NQrg30UJXI6jtYBe
+xwUffSyzO4vrKAMKLpF0NUEeYsJTVjX2GuobUCaV8HmoLo1xgwH7qNlGQOkTV7B
TBkEgg+M+NuR1SU3ZYo3QDRByZHU1mYJvuCskOLRsFs76TF0m3m6VgrAEBaXkGFj
+naY23fzn/+EfiPbSDkIFUsgT7yRyMQtrxUey2MhzGGsqF6iZmAWdZRGF5YzJbV4
kh7ZfMf+pmc9SK/xU5hIoEcXuuUkmEGnA+2o0lX5abGIOPDwnwIDAQABo4IDZDCC
A2AwHQYDVR0OBBYEFLLBZc7kFkqXoHqueGx653EU/LXaMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWEx
YzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1Njg1NWVlNDYvOTIzZTg4NTAtY2ZlMC0z
ODI1LWJmYWQtYmQ0MzNhMWMwNzc4LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMTVhMWM1Y2QtZDYwYi00NjcwLWFk
OGQtMjE4NTY4NTVlZTQ2LzE1YTFjNWNkLWQ2MGItNDY3MC1hZDhkLTIxODU2ODU1
ZWU0Ni5jcmwwHwYDVR0jBBgwFoAUoAmmsrKCrmq2QHkvlJmArJ1hifMwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xNWExYzVjZC1kNjBiLTQ2NzAtYWQ4ZC0yMTg1
Njg1NWVlNDYuY2VyMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCQUvUMA0E
AgACMAcDBQAmBorAMFQGA1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEF
BQcCARYsaHR0cHM6Ly93d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0
bWwwDQYJKoZIhvcNAQELBQADggEBAIzB7yfpT0bAlPDGKa77wytz06ZrXNW8Kb/3
Vl8CrrQQuPK9uYxkNaaweWXEq5qXmjsc+bq64XaL3OAYk4xS5WpjrFECz76J/e9T
S/JvrvLVndVhLVi4KR2lg7ykYG/OGLpoSXd9dk/m48nA4vf7Nj/O9+Sc8RC1nhDF
BfVSEn4ieOEZZJB+TEAhAiLdJB6HpmxZB3Dp/fqH4q75V6IUY6+BGuMshxkkFGi8
aOaijJakd50VsmYZIl4kyD3vs+iLW56lGyr4Zh7f7S1P9ZvCVIfWdRBkjxeS/NSE
h9n59HOGlVAR9ITGb4S6zs6DcKR7p0QQEI4Z6mool12JfQuQoHA=
-----END CERTIFICATE-----
Generated at Tue Jul 1 21:31:34 2025 by rpki-client