Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa
File:                     1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa (raw, json)
Hash identifier:          bIwxwVsifQGqYB1idKKP7HAOwu2ZCtCFgtMfuj8j7tQ=
Subject key identifier:   B8:1D:B9:5A:3D:F8:E9:CB:CD:A5:96:EA:A5:F7:76:0F:37:24:6F:56
Certificate issuer:       /CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
Certificate serial:       010D0C9F4328584AE0311426E0B3C7F00E2DA080
Authority key identifier: E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa
Signing time:             Sat 16 Aug 2025 13:00:42 +0000
ROA not before:           Sat 16 Aug 2025 13:00:42 +0000
ROA not after:            Fri 14 Nov 2025 14:00:42 +0000
asID:                     400238
IP address blocks:        216.87.59.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:e0:31:14:26:e0:b3:c7:f0:0e:2d:a0:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec
        Validity
            Not Before: Aug 16 13:00:42 2025 GMT
            Not After : Nov 14 14:00:42 2025 GMT
        Subject: CN=e670def7-4cc4-4dfb-8f98-f9a117e0b272
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:cf:36:59:1a:52:d8:66:74:eb:32:b8:7b:b6:
                    77:4e:2f:13:82:44:96:e2:6e:8e:24:7f:b9:21:f1:
                    96:bb:e3:42:68:8b:fa:ac:a9:64:80:33:75:95:eb:
                    3a:a7:e0:3f:99:bb:24:13:c4:29:1c:f5:d7:59:55:
                    ae:8e:c9:16:f1:f2:10:42:14:0a:7f:58:1e:ff:52:
                    f7:75:db:6c:b5:fb:67:bb:3e:02:ee:e0:fa:fa:09:
                    28:13:19:c8:46:9c:24:76:f0:49:3c:6b:3a:55:91:
                    ff:0d:ec:65:7b:82:79:90:97:bf:ff:37:82:1b:93:
                    33:b1:da:73:95:9c:59:91:05:e8:c1:f8:9c:f5:45:
                    79:b9:4a:43:30:f3:0a:d5:5c:3b:ca:11:6d:62:ee:
                    9b:fd:87:47:b9:0b:4a:af:38:64:6e:4b:f3:b7:83:
                    cb:da:d9:fa:17:5f:ba:c7:6d:a2:7f:c9:de:b5:9c:
                    80:b2:6b:06:82:5d:c5:ec:ef:de:32:91:e9:c5:e0:
                    fe:86:bb:b9:a2:4f:22:13:fe:1d:03:50:df:99:44:
                    8b:2c:61:f5:60:21:a9:82:92:0d:56:a7:c3:4a:47:
                    ed:f4:21:e9:b6:e2:a7:ba:3d:62:32:3a:62:ab:16:
                    24:68:9c:8a:6f:1e:1e:04:17:72:93:f2:7b:10:d2:
                    af:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:1D:B9:5A:3D:F8:E9:CB:CD:A5:96:EA:A5:F7:76:0F:37:24:6F:56
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1d3322a0-0965-37a7-b538-8d4d4ecf9073.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.crl

            X509v3 Authority Key Identifier:
                keyid:E1:C2:A2:5D:D1:A4:70:14:D7:89:FE:29:90:E5:B9:2B:B6:BB:77:17

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/1f6a6c8e-aa73-4d82-a2b1-e619eb3f2aec.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.87.59.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         34:3c:af:97:ea:e3:d7:49:cd:15:d3:02:fe:fc:d6:89:dd:ec:
         c7:c9:98:27:a7:ab:86:6b:38:9e:59:75:d9:03:3e:cf:dd:d8:
         2a:1b:95:8e:17:0b:99:dc:36:64:f0:11:6c:0b:fb:96:e2:b6:
         c7:74:b2:bd:a5:3b:6a:36:3e:e7:27:a0:c6:5b:fb:ec:4c:6f:
         8a:95:1c:f0:a1:73:3c:f4:2a:25:9c:3a:e8:0f:c3:df:72:35:
         62:dd:8c:6c:d9:d2:69:61:f0:54:35:a6:74:26:d3:85:a2:c9:
         dd:ea:b1:bd:fd:f9:79:cb:ca:15:3b:d0:56:36:48:a3:37:8c:
         c2:6b:e5:3b:51:d6:32:69:09:bb:ed:ac:73:3d:7e:d9:ad:de:
         62:c4:60:28:72:25:74:93:2b:1c:cb:39:f1:12:96:8c:01:f8:
         ce:d0:49:44:16:4c:5e:54:16:c2:19:ba:6a:50:18:aa:e9:16:
         c4:f7:d5:77:e1:f6:8f:9c:a1:32:87:ca:ce:0d:29:2d:63:97:
         50:7b:73:1c:82:c1:4a:72:ab:a5:5e:df:91:3d:83:57:15:64:
         e9:a1:ab:fc:88:6e:0b:55:ef:33:2a:24:b5:80:45:b8:51:4e:
         8d:d0:e8:f2:a9:ef:6a:ce:c2:95:4d:0d:36:f0:a9:06:f7:3d:
         93:60:10:71
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErgMRQm4LPH8A4toIAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMWY2YTZjOGUtYWE3My00ZDgyLWEyYjEtZTYxOWViM2Yy
YWVjMB4XDTI1MDgxNjEzMDA0MloXDTI1MTExNDE0MDA0MlowLzEtMCsGA1UEAxMk
ZTY3MGRlZjctNGNjNC00ZGZiLThmOTgtZjlhMTE3ZTBiMjcyMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhc82WRpS2GZ06zK4e7Z3Ti8TgkSW4m6OJH+5
IfGWu+NCaIv6rKlkgDN1les6p+A/mbskE8QpHPXXWVWujskW8fIQQhQKf1ge/1L3
ddtstftnuz4C7uD6+gkoExnIRpwkdvBJPGs6VZH/Dexle4J5kJe//zeCG5Mzsdpz
lZxZkQXowfic9UV5uUpDMPMK1Vw7yhFtYu6b/YdHuQtKrzhkbkvzt4PL2tn6F1+6
x22if8netZyAsmsGgl3F7O/eMpHpxeD+hru5ok8iE/4dA1DfmUSLLGH1YCGpgpIN
VqfDSkft9CHptuKnuj1iMjpiqxYkaJyKbx4eBBdyk/J7ENKvTQIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFLgduVo9+OnLzaWW6qX3dg83JG9WMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZh
NmM4ZS1hYTczLTRkODItYTJiMS1lNjE5ZWIzZjJhZWMvMWQzMzIyYTAtMDk2NS0z
N2E3LWI1MzgtOGQ0ZDRlY2Y5MDczLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvMWY2YTZjOGUtYWE3My00ZDgyLWEy
YjEtZTYxOWViM2YyYWVjLzFmNmE2YzhlLWFhNzMtNGQ4Mi1hMmIxLWU2MTllYjNm
MmFlYy5jcmwwHwYDVR0jBBgwFoAU4cKiXdGkcBTXif4pkOW5K7a7dxcwDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy8xZjZhNmM4ZS1hYTczLTRkODItYTJiMS1lNjE5
ZWIzZjJhZWMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2Fc7MFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBADQ8r5fq49dJzRXTAv781ond7MfJmCenq4ZrOJ5ZddkDPs/d2CoblY4X
C5ncNmTwEWwL+5bitsd0sr2lO2o2PucnoMZb++xMb4qVHPChczz0KiWcOugPw99y
NWLdjGzZ0mlh8FQ1pnQm04Wiyd3qsb39+XnLyhU70FY2SKM3jMJr5TtR1jJpCbvt
rHM9ftmt3mLEYChyJXSTKxzLOfESlowB+M7QSUQWTF5UFsIZumpQGKrpFsT31Xfh
9o+coTKHys4NKS1jl1B7cxyCwUpyq6Ve35E9g1cVZOmhq/yIbgtV7zMqJLWARbhR
To3Q6PKp72rOwpVNDTbwqQb3PZNgEHE=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:45:50 2025 by rpki-client