Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa
File:                     9f949324-ba14-3119-9cbb-e8baba338f7e.roa (raw, json)
Hash identifier:          GQoTJX1U0k66HvdQMIBa6NXcjkt21I1qWZFD0RWlHJQ=
Subject key identifier:   0D:45:09:97:4E:8A:44:26:DF:D7:0F:DD:D7:61:40:E8:10:79:39:3D
Certificate issuer:       /CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
Certificate serial:       010D0C9F4328584A1296A0B2F47FE2C9C7968840
Authority key identifier: E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa
Signing time:             Tue 03 Jun 2025 21:28:49 +0000
ROA not before:           Tue 03 Jun 2025 21:28:49 +0000
ROA not after:            Mon 01 Sep 2025 21:28:49 +0000
asID:                     393689
IP address blocks:        165.112.6.0/23 maxlen: 24
                          165.112.8.0/22 maxlen: 24
                          165.112.34.0/23 maxlen: 24
                          165.112.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/871da40f-793a-4a45-a0a9-978148321a07.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Wed 02 Jul 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:12:96:a0:b2:f4:7f:e2:c9:c7:96:88:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7
        Validity
            Not Before: Jun  3 21:28:49 2025 GMT
            Not After : Sep  1 21:28:49 2025 GMT
        Subject: CN=e20bee44-bba8-404e-a175-4ca6f468a5b4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:7f:e1:56:a5:d3:e6:14:58:3c:29:21:60:01:
                    ce:3e:f1:a6:a1:c7:e6:4b:45:82:94:ee:89:48:05:
                    ca:1b:7b:4c:fa:10:a7:92:4b:dd:e2:a4:3d:33:7b:
                    65:32:33:99:ff:e9:5f:f8:4a:b6:57:61:93:4c:a6:
                    6e:05:ed:bc:14:eb:ef:30:ef:f1:22:22:36:1b:71:
                    27:2c:4d:b5:cc:7b:64:a8:d6:48:11:dd:c7:fe:3b:
                    fc:15:c6:66:1e:56:b1:b7:af:9d:81:f9:e1:75:14:
                    33:9d:be:d0:fd:ed:e8:29:5f:91:83:cb:04:cd:07:
                    02:1f:3f:30:61:77:48:09:4f:45:b3:72:03:55:3a:
                    43:92:4a:91:1e:d9:79:48:88:13:85:3c:be:c5:33:
                    e5:6b:e5:cc:86:08:a8:6b:87:70:c6:39:2a:8c:11:
                    18:c9:a9:35:33:c9:fa:f0:9c:a8:d5:e9:15:f9:84:
                    9d:23:2f:6a:71:55:05:7f:e6:74:da:91:91:44:68:
                    81:94:80:ee:48:fb:ff:68:b1:8f:07:c8:73:7a:75:
                    60:aa:ed:f6:32:8d:d1:e5:21:d1:1f:02:ae:ab:75:
                    9e:eb:cb:6b:fb:16:f2:6e:b7:71:91:99:a6:12:b5:
                    62:fe:52:c4:3c:97:f2:85:e1:87:85:cc:79:7b:4c:
                    6c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:45:09:97:4E:8A:44:26:DF:D7:0F:DD:D7:61:40:E8:10:79:39:3D
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/9f949324-ba14-3119-9cbb-e8baba338f7e.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.crl

            X509v3 Authority Key Identifier:
                keyid:E9:AF:89:0A:16:AB:F1:B0:DD:B2:78:75:6C:3A:92:E3:DF:74:08:BD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/871da40f-793a-4a45-a0a9-978148321a07/df6f14b8-3c7e-4d68-ac36-d5999b3c4ea7.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  165.112.6.0-165.112.11.255
                  165.112.34.0/23
                  165.112.140.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         8d:ee:df:e5:6e:d4:d8:d0:fb:a5:36:60:08:68:ea:ef:57:85:
         ad:71:3f:e4:b0:d0:67:11:a6:c2:5b:61:c1:b0:37:4d:0f:ca:
         d2:28:cc:c4:9c:0e:5d:c8:8b:73:ff:a2:8e:1c:de:43:bb:27:
         a4:40:c6:9b:f4:8a:d5:9c:17:2b:87:8f:9f:18:f0:e5:1a:d0:
         bd:dd:6e:40:8f:ce:c2:f8:1d:ef:ca:95:ac:83:db:a3:f9:7e:
         25:7a:8e:0e:7b:ec:0d:99:dc:be:2f:fb:42:8b:06:9e:fd:42:
         2a:63:38:c0:a5:2b:3f:55:60:07:70:21:f6:dd:26:c5:2f:3a:
         56:0a:50:d9:59:26:ce:7b:82:75:96:6b:7c:5b:3d:c2:10:da:
         0a:2f:8b:79:e0:27:85:0d:9f:ab:db:b3:f5:5e:2e:0a:26:74:
         4a:40:ce:8a:74:21:ca:d0:aa:26:e1:c4:43:17:8e:78:69:c0:
         08:39:06:6f:60:4b:ea:f0:af:97:e2:cc:99:77:f0:8d:8f:d0:
         9d:f4:05:c3:fe:6f:49:99:ff:e9:12:9d:8a:5e:f5:b5:40:d6:
         ae:57:53:f9:4b:e3:5e:e8:db:51:b2:7c:87:eb:8b:e2:81:9a:
         e5:b8:3c:e0:92:dd:6c:4f:61:d4:12:85:27:95:de:c3:a2:88:
         39:3a:2c:c6
-----BEGIN CERTIFICATE-----
MIIGVzCCBT+gAwIBAgIUAQ0Mn0MoWEoSlqCy9H/iyceWiEAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkZGY2ZjE0YjgtM2M3ZS00ZDY4LWFjMzYtZDU5OTliM2M0
ZWE3MB4XDTI1MDYwMzIxMjg0OVoXDTI1MDkwMTIxMjg0OVowLzEtMCsGA1UEAxMk
ZTIwYmVlNDQtYmJhOC00MDRlLWExNzUtNGNhNmY0NjhhNWI0MIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhX/hVqXT5hRYPCkhYAHOPvGmocfmS0WClO6J
SAXKG3tM+hCnkkvd4qQ9M3tlMjOZ/+lf+Eq2V2GTTKZuBe28FOvvMO/xIiI2G3En
LE21zHtkqNZIEd3H/jv8FcZmHlaxt6+dgfnhdRQznb7Q/e3oKV+Rg8sEzQcCHz8w
YXdICU9Fs3IDVTpDkkqRHtl5SIgThTy+xTPla+XMhgioa4dwxjkqjBEYyak1M8n6
8Jyo1ekV+YSdIy9qcVUFf+Z02pGRRGiBlIDuSPv/aLGPB8hzenVgqu32Mo3R5SHR
HwKuq3We68tr+xbybrdxkZmmErVi/lLEPJfyheGHhcx5e0xsBQIDAQABo4IDaTCC
A2UwHQYDVR0OBBYEFA1FCZdOikQm39cP3ddhQOgQeTk9MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZm
MTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5OWIzYzRlYTcvOWY5NDkzMjQtYmExNC0z
MTE5LTljYmItZThiYWJhMzM4ZjdlLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy84NzFkYTQwZi03
OTNhLTRhNDUtYTBhOS05NzgxNDgzMjFhMDcvZGY2ZjE0YjgtM2M3ZS00ZDY4LWFj
MzYtZDU5OTliM2M0ZWE3L2RmNmYxNGI4LTNjN2UtNGQ2OC1hYzM2LWQ1OTk5YjNj
NGVhNy5jcmwwHwYDVR0jBBgwFoAU6a+JChar8bDdsnh1bDqS4990CL0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzLzg3MWRhNDBmLTc5M2EtNGE0
NS1hMGE5LTk3ODE0ODMyMWEwNy9kZjZmMTRiOC0zYzdlLTRkNjgtYWMzNi1kNTk5
OWIzYzRlYTcuY2VyMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAGlcAYD
BAKlcAgDBAGlcCIDBAClcIwwVAYDVR0gAQH/BEowSDBGBggrBgEFBQcOAjA6MDgG
CCsGAQUFBwIBFixodHRwczovL3d3dy5hcmluLm5ldC9yZXNvdXJjZXMvcnBraS9j
cHMuaHRtbDANBgkqhkiG9w0BAQsFAAOCAQEAje7f5W7U2ND7pTZgCGjq71eFrXE/
5LDQZxGmwlthwbA3TQ/K0ijMxJwOXciLc/+ijhzeQ7snpEDGm/SK1ZwXK4ePnxjw
5RrQvd1uQI/Owvgd78qVrIPbo/l+JXqODnvsDZncvi/7QosGnv1CKmM4wKUrP1Vg
B3Ah9t0mxS86VgpQ2VkmznuCdZZrfFs9whDaCi+LeeAnhQ2fq9uz9V4uCiZ0SkDO
inQhytCqJuHEQxeOeGnACDkGb2BL6vCvl+LMmXfwjY/QnfQFw/5vSZn/6RKdil71
tUDWrldT+UvjXujbUbJ8h+uL4oGa5bg84JLdbE9h1BKFJ5Xew6KIOTosxg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 13:06:05 2025 by rpki-client