Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa
File:                     e65e9656-246e-34d6-a363-6319cd2ae985.roa (raw, json)
Hash identifier:          GS5ek3nJTiVOb5yE18wOGOQmu6CyAll40z6/vOk+3+I=
Subject key identifier:   3F:EC:B7:1A:85:F8:56:62:CF:1C:75:CA:9F:6B:D7:E8:AC:C3:07:37
Certificate issuer:       /CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
Certificate serial:       010D0C9F4328584ACB411D05E6F095B2B6B6DA00
Authority key identifier: A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa
Signing time:             Sat 09 Aug 2025 01:00:33 +0000
ROA not before:           Sat 09 Aug 2025 01:00:33 +0000
ROA not after:            Fri 07 Nov 2025 02:00:33 +0000
asID:                     24440
IP address blocks:        206.168.200.0/24 maxlen: 24
                          206.168.201.0/24 maxlen: 24
                          206.168.202.0/24 maxlen: 24
                          206.168.203.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Mon 25 Aug 2025 15:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:cb:41:1d:05:e6:f0:95:b2:b6:b6:da:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=22b1996e-371f-42c0-b515-e2f8763ed7c5
        Validity
            Not Before: Aug  9 01:00:33 2025 GMT
            Not After : Nov  7 02:00:33 2025 GMT
        Subject: CN=f19cf087-dc1e-4e6b-96c4-33f3baf0020a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ce:68:91:84:32:a4:93:82:cb:7f:3d:84:fe:
                    35:a0:db:63:d1:d2:64:c1:0e:4f:35:81:d5:1b:3e:
                    96:0b:64:38:a8:5a:58:b9:d8:70:53:37:ce:e3:14:
                    f2:56:56:7a:03:28:89:14:cb:fc:48:4a:f3:e5:a6:
                    86:85:39:97:b7:0d:d5:4d:0a:c5:ba:a1:94:3b:fe:
                    af:a5:ec:13:cd:de:e1:4b:59:15:2f:dc:a6:bf:8a:
                    b8:db:59:15:22:7e:78:1f:2f:55:9d:04:68:b3:01:
                    d8:98:7f:75:dc:93:67:b5:94:71:df:2e:fd:a5:7a:
                    6b:67:cc:d8:ee:4b:4c:fa:ea:83:e1:28:7f:40:d3:
                    d7:87:b3:7f:c7:f4:94:b5:dc:93:64:a3:93:7e:a7:
                    e0:5a:0b:8f:5b:db:f2:df:cc:c6:aa:12:3f:c6:3a:
                    cb:f3:46:4d:51:d6:ae:67:dd:7d:b8:05:f8:36:ca:
                    61:10:6d:b6:53:ff:0c:87:aa:b1:5a:32:4d:c4:91:
                    dd:36:99:28:81:9e:56:6f:f9:a2:cd:3a:42:e1:22:
                    0e:d6:83:99:27:3b:0f:5c:ad:0f:74:fd:58:ef:a5:
                    fe:88:15:ee:a7:ca:83:52:65:fb:4c:6d:08:7b:21:
                    f6:7b:03:af:62:d7:7f:b1:9f:4a:a7:10:42:78:37:
                    df:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:EC:B7:1A:85:F8:56:62:CF:1C:75:CA:9F:6B:D7:E8:AC:C3:07:37
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/e65e9656-246e-34d6-a363-6319cd2ae985.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5/22b1996e-371f-42c0-b515-e2f8763ed7c5.crl

            X509v3 Authority Key Identifier:
                keyid:A3:7E:3C:90:27:87:6C:DF:A2:A6:6F:B5:1A:66:80:0B:4E:8C:D1:AD

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/22b1996e-371f-42c0-b515-e2f8763ed7c5.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  206.168.200.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         0b:f1:76:84:35:e0:a4:c2:01:23:da:a9:ac:24:33:c4:e6:0a:
         80:72:0c:83:a7:49:42:c3:4c:be:5c:86:6e:19:8a:b9:a7:84:
         49:e5:83:87:8b:89:72:39:05:a8:1d:9f:c6:86:37:b7:4e:ec:
         7d:f0:ff:48:72:4a:76:c1:a5:fb:e8:cc:af:20:c4:5c:3f:83:
         5f:09:7c:c0:23:e4:b9:61:ed:a2:59:f9:fe:c4:72:51:6c:8b:
         71:78:ab:7d:6a:b5:a3:0b:00:f5:4b:2e:a9:8c:cb:42:78:18:
         b9:5b:7b:56:97:6c:0e:35:33:ff:c7:5a:3c:4d:43:46:a9:d2:
         8f:2f:5f:8a:a3:c9:18:4e:b4:89:c2:b2:04:3b:d8:a9:ae:77:
         ef:7a:54:3a:76:3b:10:97:93:6b:4c:66:36:a7:19:10:a0:33:
         ef:01:23:bd:91:53:73:a1:7c:5a:aa:c4:1e:ac:f6:50:b7:14:
         4b:72:e0:6a:d8:75:1f:f8:2d:48:0a:be:d2:3e:85:c4:54:3d:
         c1:aa:ca:27:01:15:6a:32:c3:6c:34:48:fa:d0:bd:02:a9:e6:
         75:22:f1:8c:ca:21:9c:cc:e6:f3:fe:5f:89:80:67:89:c4:c9:
         aa:e1:f7:21:7b:e8:de:28:53:71:c8:fd:aa:54:08:0f:c2:ff:
         f2:c8:5c:90
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWErLQR0F5vCVsra22gAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjJiMTk5NmUtMzcxZi00MmMwLWI1MTUtZTJmODc2M2Vk
N2M1MB4XDTI1MDgwOTAxMDAzM1oXDTI1MTEwNzAyMDAzM1owLzEtMCsGA1UEAxMk
ZjE5Y2YwODctZGMxZS00ZTZiLTk2YzQtMzNmM2JhZjAwMjBhMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu85okYQypJOCy389hP41oNtj0dJkwQ5PNYHV
Gz6WC2Q4qFpYudhwUzfO4xTyVlZ6AyiJFMv8SErz5aaGhTmXtw3VTQrFuqGUO/6v
pewTzd7hS1kVL9ymv4q421kVIn54Hy9VnQRoswHYmH913JNntZRx3y79pXprZ8zY
7ktM+uqD4Sh/QNPXh7N/x/SUtdyTZKOTfqfgWguPW9vy38zGqhI/xjrL80ZNUdau
Z919uAX4NsphEG22U/8Mh6qxWjJNxJHdNpkogZ5Wb/mizTpC4SIO1oOZJzsPXK0P
dP1Y76X+iBXup8qDUmX7TG0IeyH2ewOvYtd/sZ9KpxBCeDfffwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFD/stxqF+FZizxx1yp9r1+iswwc3MIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIwMy1iZGE3LTFiZTIwNDkzM2FlNS8yMmIx
OTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4NzYzZWQ3YzUvZTY1ZTk2NTYtMjQ2ZS0z
NGQ2LWEzNjMtNjMxOWNkMmFlOTg1LnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9hNzM0MjBjYi1i
M2NjLTRiMDMtYmRhNy0xYmUyMDQ5MzNhZTUvMjJiMTk5NmUtMzcxZi00MmMwLWI1
MTUtZTJmODc2M2VkN2M1LzIyYjE5OTZlLTM3MWYtNDJjMC1iNTE1LWUyZjg3NjNl
ZDdjNS5jcmwwHwYDVR0jBBgwFoAUo348kCeHbN+ipm+1GmaAC06M0a0wDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2E3MzQyMGNiLWIzY2MtNGIw
My1iZGE3LTFiZTIwNDkzM2FlNS8yMmIxOTk2ZS0zNzFmLTQyYzAtYjUxNS1lMmY4
NzYzZWQ3YzUuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCzqjIMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAAvxdoQ14KTCASPaqawkM8TmCoByDIOnSULDTL5chm4ZirmnhEnlg4eL
iXI5Bagdn8aGN7dO7H3w/0hySnbBpfvozK8gxFw/g18JfMAj5Llh7aJZ+f7EclFs
i3F4q31qtaMLAPVLLqmMy0J4GLlbe1aXbA41M//HWjxNQ0ap0o8vX4qjyRhOtInC
sgQ72Kmud+96VDp2OxCXk2tMZjanGRCgM+8BI72RU3OhfFqqxB6s9lC3FEty4GrY
dR/4LUgKvtI+hcRUPcGqyicBFWoyw2w0SPrQvQKp5nUi8YzKIZzM5vP+X4mAZ4nE
yarh9yF76N4oU3HI/apUCA/C//LIXJA=
-----END CERTIFICATE-----
Generated at Sun Aug 24 05:41:08 2025 by rpki-client